{"report_id":"8d94694e-b88b-435d-bfd7-77bc7847fc67","version":0,"status":"done","tags":[],"date":"2026-10-11T02:30:12Z","url":{"schema":"http","addr":"lesecuries-du-masdigau.fr/","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"final":{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"title":"ACCUEIL - Les écuries du Mas Di Gau","dom":{"size":230189,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26351)","md5":"dd09345e205531df08ddc6e97199c7e2","sha1":"b05f21aa119f931dc277322f56b56336e3700add","sha256":"a4cc83c40ee7a3ba935ab14e1eeca6a4cb482b7817ce84266ce94d9675faf1b9","sha512":"7c77893b28e11f581e8b2441c652cfa981ef7d2ca51009120deb1ca723585503e4badddc5ea2c3abb87a3fe825c6ea4c01160df70b9c6c4a479b1f0c9d9f5897","ssdeep":"3072:vl4DSsxZwX4kDiDlEL9jdDvpoY1DxG5Oubv+QpVqmC7rb7:vqDSsxo4kDd1dDvpr","tlshash":"e3240a9f877a327571034785bdd9ab2891ecc133954108d6bdbdc46c8fc26a302f62ae","dom_hash":"domhash9f57dc6a64cb1dd81baa36b5dbe4e0de","first_seen":"2026-10-11T02:30:38.799645Z","last_seen":"2026-10-11T02:30:38.799645Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"lesecuries-du-masdigau.fr/","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-15T02:30:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-10-04T22:46:21.559025Z","alert_count":0,"request_count":7,"received_data":110575,"sent_data":4075,"comment":"","tags":null,"fingerprints":null},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":6807,"first_seen":"2014-06-18T00:37:31Z","last_seen":"2026-10-05T08:53:09.926471Z","alert_count":0,"request_count":1,"received_data":31920,"sent_data":546,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"lesecuries-du-masdigau.fr","ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2018-04-06","domain_rank":0,"first_seen":"2026-10-11T02:30:22.32029Z","last_seen":"2026-10-11T02:30:22.32029Z","alert_count":126,"request_count":63,"received_data":35582903,"sent_data":34533,"comment":"","tags":null,"fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:8.4.26","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Contact Form 7:6.1.7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Yoast SEO:28.4","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"FitVids.JS:4.27.6","description":"jQuery plugin for fluid width video embeds","website":"https://fitvidsjs.com/","common_platform_enumeration":"","icon":"FitVids.JS.png","categories":["Widgets","Video players"]},{"name":"Cookie Notice:3.1.9","description":"Cookie Notice provides a simple, customizable website banner that can be used to help your website comply with certain cookie consent requirements under the EU GDPR cookie law and CCPA regulations and includes seamless integration with Cookie Compliance to help your site comply with the latest updates to existing consent laws.","website":"https://wordpress.org/plugins/cookie-notice","common_platform_enumeration":"","icon":"Cookie Notice.png","categories":["Cookie compliance","WordPress plugins"]},{"name":"jQuery Mobile:4.27.6","description":"jQuery Mobile is a HTML5-based user interface system designed to make responsive web sites and apps that are accessible on all smartphone, tablet and desktop devices.","website":"https://jquerymobile.com","common_platform_enumeration":"","icon":"jQuery Mobile.svg","categories":["Mobile frameworks"]},{"name":"WordPress Super Cache","description":"WordPress Super Cache is a static caching plugin for WordPress.","website":"https://z9.io/wp-super-cache/","common_platform_enumeration":"","icon":"wp_super_cache.png","categories":["Caching","WordPress plugins"]},{"name":"Magnific Popup:4.27.6","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-10-13T06:31:22.945644Z","times_seen":1009010,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/plugins/supreme-modules-pro-for-divi/scripts/frontend-bundle.min.js?ver=4.2.7","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"033e70a1458a0949988fb6f8a5185221","sha1":"b331d1f03a9f28d7c2806611ff09965580647d04","sha256":"04c16b21d532799a04ac9bf9e0e6338316f0080dfeb7333a60ab862ad33b90ff","sha512":"cc01316abde65ea78c7027b0674560d044764a6e0b698068a0982c8864a2e933dd2c27a2f6e804f18d7becd7d1d66a9e2a82ad69f4d2ff267d929f044d483704","ssdeep":"","tlshash":"9641985e35f5205a1a67b4f22e6fb18c22ea5a1a7cfc3482d2f1d1b69e31a0d1153e1c","size":2211,"data":"","first_seen":"2024-08-20T15:15:49.927127Z","last_seen":"2026-10-11T02:30:38.881718Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/plugins/supreme-modules-pro-for-divi/public/js/masonry.pkgd.min.js?ver=4.2.7","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"520e46df77727aaf3d5e799ef241be02","sha1":"d20252cf76c3be8af37a8415d13ad368c762b4d8","sha256":"367d6afdfc741fb48d2d9310e47c3924b693459a74c882c0fc545ec5ed7d55d2","sha512":"25195cbd26405d3f3ee5241002f9255c626ec574e8bb2abca0831a60445941ab01f120431d96946de012b095a9934514adff3d0cfdff69e7cf3eb94c475875c9","ssdeep":"384:cr7mIr/Dh5rA3rzB4rMhr/XWGHW/6rMz1xftF2OUVP4eAnbhfreD6dCBEOav7blM:iSxxGG2/71xftFqVP4eAnI0ROavPSCzo","tlshash":"46b2858f73007425428bf16696af020f7137655c7a4790acba6ad8db1cb984d2037fbd","size":24103,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-10-13T03:09:10.212061Z","times_seen":12026,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef5cf85f5319541b973cec298560e3db","sha1":"4e6b7bbc4d565b965a1db971597f340464e99577","sha256":"54354334d453444ba9c144d69eaea2b5a35d7354c511515b5d5e319404bb1a8c","sha512":"ab47f12cb8484093d5b53c17e866e3a465c669218749d05f31cb28ca3f6bbfb3281b81d9ae267a164d455a5a55221c90785a873f4f57ae2c65e25350819a06e9","ssdeep":"","tlshash":"1390047170114c34074d100d713cc3d43cf4405077433c00c07c504c0070dc34400d4c","size":42,"data":"","first_seen":"2023-03-07T01:16:43Z","last_seen":"2026-10-13T06:29:53.791197Z","times_seen":12684,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"89125ad04aa60b44b078bda9f3a1ca29","sha1":"9c277746a57e669b793154fd2a4291fbbd4b5ace","sha256":"82fdf6f7dd07c87fa7c1455e2a0029f9c18aa81ba304576d2f689d5d55480f5b","sha512":"8bc579d1bc746de32705e5ae88861ec14705bcaa47e75b6b42ac1382a6874489fbd761460770b715c16715c40ddc4b19ad343088cb4d4be90189c215994f8e99","ssdeep":"","tlshash":"96011e195e12e2dc55b2652ef13b43b879ff770730d6909da90c645d1c1ce1974226fc","size":735,"data":"","first_seen":"2023-03-07T12:56:05Z","last_seen":"2026-10-13T06:29:53.791995Z","times_seen":8723,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef2890b79d08aad302906febac3a75be","sha1":"950aeecbbecedd7621d5edb86a81c3d088ef5939","sha256":"05b831c6c587b678b3f81e2bc329f9d10d20bd01d5f354a193b7463b6881bc28","sha512":"03c96ecac4e0d3071869fc69e0c478e9c1a0e28b634dc35812828cb23627e83721e4feaf449fef19ab5356783bf6e0bd075387e0a24af44712cace55125edc4e","ssdeep":"","tlshash":"dcf0e50876dd4a7d929147c985465fd7d63821326ae4ac4cc81fa8786cf78e3a996013","size":444,"data":"","first_seen":"2026-10-11T02:30:38.907338Z","last_seen":"2026-10-11T02:30:38.907338Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"b0a0f90082ef365bac284fca725ab821","sha1":"2387a6077a77a2ef2019b5dc9da701c41cc10a0f","sha256":"294d619d431d55e1c04cde9e37718f6e79c4c0c74c8ff860be0b6c1e194e8bae","sha512":"8c98a227ba2238a61b96708b7a4b9c7d99d1b148b3762ac7f72344b0a4d64d8daab473e9c69e0c29871962ab30e2cb9736d24197f50e6653e1529e6ad815869a","ssdeep":"","tlshash":"7221332dabdd213802ba221627fff1c73e210293640c5cd99c6d9c683064d661839eec","size":1354,"data":"","first_seen":"2026-10-11T02:30:38.908421Z","last_seen":"2026-10-11T02:30:38.908421Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"61d485adcc5324b9491eddc870e49218","sha1":"7b126158aa0cc79cc420bb1679524738eff07af5","sha256":"f4944b3e9f44a82dc47c3cd21db17efc9947b4721100c8254d812ab0fd40853a","sha512":"a6703a7b0e256fa52c4d3664d253fa0efe534999c30b5c4dcec14870742582e972591a242fa824f8542daa356e1a90553f85affeeb375c9d8c0712941ac7d63d","ssdeep":"","tlshash":"2c4193de126ecefb55aea2ad493f170a54fca9c482dc0dd3e9d90c18c6d46780426d1d","size":1912,"data":"","first_seen":"2026-10-11T02:30:38.910923Z","last_seen":"2026-10-11T02:30:38.910923Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"6cb0435fb6ba10869497f9fd09d72b10","sha1":"42ef3655cbf2afe82fbce6427a2d7540dd2f7d29","sha256":"27f1693733f6e44cfeb8f73c98537a3ad33bc45c3c82f3ac352f57eb7657fd71","sha512":"a80c89849ade3a8428b5666ae9dfa76d3004418901e18b20bee9fb4ba46b9cc7ea8f8ad87a2c643646b093d1bc1b0f0aed0cf10cfd6f19b32fafa34a03251efb","ssdeep":"","tlshash":"07d0231d324cbfdd00f31814e43f5329507f673175564054514fe4542c3ed191153b80","size":208,"data":"","first_seen":"2025-12-11T13:04:04.267229Z","last_seen":"2026-10-13T06:29:53.792727Z","times_seen":5485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-10-13T06:32:02.526377Z","times_seen":76747,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"22b41126c1fe52f7bb57396e0a531ec3","sha1":"0445b0088ace6e19593eef028f6f240c06c4edb5","sha256":"4efd2bf32e05d2bd2b08cf0b99b6d3b44262173e8809ea3cc0d4f074c540f610","sha512":"b845f85d516d65c0ce82214e71a8ce9b71cd8241d4c5c446fe905da1a6bdb1a4b9038b19ff53965fcd31ae21a90305be28bf3529faf7bf9c2c7c0a0da636c1ab","ssdeep":"","tlshash":"780110846cb5aa25458291c936ae7a49b178f610c3af1c43620e054d2a916bdddf374c","size":689,"data":"","first_seen":"2026-09-29T19:43:17.337283Z","last_seen":"2026-10-13T02:55:23.166999Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"88de63708c50f68a2b4105b99b0d68aa","sha1":"b3031303a5c5d4b7a826f8a4e10343d19ba0e173","sha256":"a0570f86bdc41f5e702c34fb44495ee4ac2aa8b10573635cf02a552c3a2d293b","sha512":"987ef06de4ce17f54e04de41cb93d36854d1c4ffe19435e86947367a20c8e7355b542aca604a1401a461a695a39fbbd55522b62ebd440a1dc08466e46f78fa0c","ssdeep":"","tlshash":"95d02296e8ec1c2a14e2c168007c022ab21094138b2b1e19b20d404c2fa80b8a4501c6","size":199,"data":"","first_seen":"2026-10-11T02:30:38.913693Z","last_seen":"2026-10-11T02:30:38.913693Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"40defae7c6755904558c35e7ca242013","sha1":"bf573eb54f00a90fab37e8e54090eaa38561a213","sha256":"3fd21a52e999c593232de35790bdf967e0251b5e9d4d4a05bc298173ce37063f","sha512":"b523a4f32ca79b84d568c434d49369cd5df33150a3da8b7008a5c68f37eb5f871b996a76668009d4889e89a9c901890ab263f5a9afcf54f1e6f5409a86066464","ssdeep":"","tlshash":"f73111a69a4d1f794fb360cd3d3baf07ccb54055e2c06519fa8cc90d1388ea525b3a4c","size":1766,"data":"","first_seen":"2026-10-11T02:30:38.91609Z","last_seen":"2026-10-11T02:30:38.91609Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"620a22eee41215a89f9e60a93a4115b7","sha1":"0056ec541b6748eaeedcfd45e6e5629597c62a72","sha256":"830e8ef337790b209cb388263a368b24a6544d7bbf7f98fd83d16fa4f18d53bf","sha512":"56aa1c41ac96d468867d206a5baa35b24875bb952294d4141bc1005415f14df986a57a2dcd5fc3d43fe5db6d02d5c913142e558a7e8cd12ddcc12fa3cdcb5204","ssdeep":"","tlshash":"5fe0ab26c2bc82b6a1f2506901de2e11b5b8291bb24b0c1cf0ab4f341e857a6289f196","size":426,"data":"","first_seen":"2026-07-26T13:47:44.722924Z","last_seen":"2026-10-11T03:57:11.837333Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"eventHandler","is_inline":false,"md5":"87b659c90b81604997dd06a67e8b773e","sha1":"bc13329ca575a3e32c93e0e1cf791f47f91b0c2f","sha256":"1ac445488ebead2ed0b74a9c86ad76fa1a81f363806218afb2ae4aae5f127448","sha512":"a2f82c520753c0b9093fec4ee7b367523cb2d7156efd5587b0c15b385661beda71050b73710a80f4d4ccc38d7921d5f01a590fa7744f204468dd63411d16509d","ssdeep":"","tlshash":"db90000c0a20c0882b00af00e000c202a0c2202f0220a38ce823bce2a83c888808fea0","size":39,"data":"","first_seen":"2023-04-11T03:58:47Z","last_seen":"2026-10-13T06:29:53.919088Z","times_seen":37838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-i18n-js-after","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a866da80297d3cbf966bf4ac3aa8cb7","sha1":"b6b46cb3c6a213cc9b4bed6cfc5eab223bc3eb4b","sha256":"9dc2b35cee4c1d099cc0e283d42b33a9cd5ab66780ae1beb34d1c1f42eb94709","sha512":"8cf9b69798e242159f5a47a07eecfaa91a7122dafc2c2e32d4b97ebda319fff20e7bc773c82d7e5d763f063da92e60234428ab6ebb17a04cb9d0ee98fe48a129","ssdeep":"","tlshash":"282112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":1128,"data":"","first_seen":"2025-12-09T16:58:23.331397Z","last_seen":"2026-10-11T06:38:04.064137Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/burst/js/burst.min.js?ver=1791632426","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"02b661e9265a2196ad31685f0969d90f","sha1":"5b1cf8b4f2ca0535792dada89ac18fcc93c161de","sha256":"3a395b69b83e9126e2685a9d3510b09084e0a62eed8c527af60867b89935ea9f","sha512":"52a7dff5f63351148682856c60f25d4ebde7c34a5e28d725af1b5ea7e94372b0ca650e080fa99fe818f025ea870678bd7552c10f3d30ce6ddc6aad0c757e7934","ssdeep":"192:+/WIj+OFq1wCdHqmrBey6SB7xebKgCyENxScDkUcVlYDU:7a+OuOkBesgKgCyegEGlYo","tlshash":"5e42d7a612a1993f87ef016ab22ca3012b6a1f27644a5077761e1cb8009cf53775bf79","size":12849,"data":"","first_seen":"2026-10-11T02:30:38.842569Z","last_seen":"2026-10-11T02:30:38.842569Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2f655e068f223e5da12d436aac88d38","sha1":"003146f39636a30ac250b0f043d61bcc01117b17","sha256":"5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9","sha512":"c3fa9c3955bbe3b74e30755c4c551204aa1a034f8d48c8ab2747eca57466409ac0dfbdfc76a7a3554ea64cdbd730bf3cae3c1270382e66df24afc8b8ed48bf38","ssdeep":"96:oE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMs:Xhgws4WTBYNB1C9aNwAMPyd0R3SGaMSn","tlshash":"f6c1a8c979def056235910a594afb005e134be2870deb800aae0c4957eb44cdb1b7fba","size":5791,"data":"","first_seen":"2026-08-19T23:17:42.197722Z","last_seen":"2026-10-13T06:34:33.015943Z","times_seen":28574,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.7","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-10-13T06:31:22.975923Z","times_seen":254061,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/salvattore.js?ver=4.27.6","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf7fe805ab945e4b2c4d56da59476811","sha1":"307135fd2987f477c7bd50fcd0cc28a1cff1f568","sha256":"b6205029e1016596807b655c8f57818736a787e32ceb1407effa152ac3bb9380","sha512":"1237ac2a5bd2bd37b403f747d0ce3db65ed1e9c67b92aa4018b08c0747167470de113e36a01950f3a266b815806170f4c15068cad18ab71eb32957fef2d6ffa4","ssdeep":"192:dPmRQHMXDHcCC3fxqC0TN6ZbucRm5i5HHQpcaQGcFjAW90YgtKryaxggy6cqF4/8:dP+TXjcCC3fslQucYu0ca7cFjAW90gxr","tlshash":"1102d99db62430616b9b36bd233fa11ef573213ea4090094956dc8ec6971c4b82e7edc","size":8574,"data":"","first_seen":"2023-03-07T01:26:02Z","last_seen":"2026-10-13T03:22:09.459474Z","times_seen":15150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/shiftnav-js-extra","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"6758b9089ca9f22f77cbd55cfce87692","sha1":"09a2151a37726d1e3fac5fd8e249cd119437f4c3","sha256":"1635134d922a57409540f0f2993c049848004f25cf4c6f13beb368d9f4668289","sha512":"b37f7d9af8eed440c4d8ce9dd615b9db2142ac89eb087a4b6ec66702a7b725e4a54964342d218db6a80f1db5a6adf20870867014e3a542e2c591d90e98985a73","ssdeep":"","tlshash":"c931a315c2bc41b6e1f1507905dd1d1175b4251bf14b0c1cf0ab4f341ec57a6289f156","size":1495,"data":"","first_seen":"2026-10-11T02:30:38.921628Z","last_seen":"2026-10-11T02:30:38.921628Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.mobile.js?ver=4.27.6","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"54b92140544246334b2b504d79cdbc47","sha1":"b0abbeb248e33037e8739760c7248326142c0399","sha256":"82ccdb280927be0204340a8255ea4f3450fbfc3057b4b8b98f9d0e01814cd143","sha512":"f6ce3bf75be3e949ebba0a0b053b31d1741ac03eaa484ff9d69f462b12645369eba6a793ff3c6ca6feb43c4a0e6b7b4d4f6cfaf63c9dc2020bd7ca6143b17c58","ssdeep":"192:2Kjril8AZk/MOykyo92+EejakTKam6kqFjpRl9h4nTd6gOwx6Omno12G2LAhdEVw:2Kj2lnk/MpklJEMjTll/4nTd6gOwx696","tlshash":"f622fe0a9b932475745bb23e9b1fa5053537408f5a8afd00391c9e509f1c83c5bb9bdd","size":10776,"data":"","first_seen":"2024-11-11T14:57:41.305826Z","last_seen":"2026-10-13T05:59:26.251375Z","times_seen":11504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/magnific-popup.js?ver=4.27.6","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"28af37baca9dd41ed000edd3446b00b6","sha1":"a80ea4ecec08eaae565fa5eb7491f58a9a59fa9d","sha256":"22a7ae46aefb3325e3e2761085d7b2ea2cda8dc351cf391a62918bb09784f693","sha512":"a84f65fce7e334a1da2ce2f9bf62ace58240b38f6fd3efab2793a04a7b0b50eae15b3d5cc9e7139e9e590af81bf31f47f66c9d668bfeee25de323276dd8af7be","ssdeep":"384:ZpiK+Ypwhc1sBEVEtk94tBnKIO46FbUkOK/NF0Sv/lZzZyQtdhTZF5ZFB:iEl73MoUkOKv0GMAdXF59","tlshash":"14a22aa4f1a1b37397f361b4188f382c367a9923dd0b8411ba5498946df8edc9137e2d","size":22272,"data":"","first_seen":"2024-10-16T16:54:35.046042Z","last_seen":"2026-10-13T04:17:01.243703Z","times_seen":7064,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-13T06:31:22.981978Z","times_seen":1105471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/jquery-js-after","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a962635ee77e3c4fec34ce13ac65690b","sha1":"3281937bff6a2266f51b802e552bfbc3e32aace0","sha256":"7e1e67de49b55b710cb323a62c1eb467ab1c5fa00f5f4136d96c1c2016daec74","sha512":"3701ccb4623c3c391c3edb75d8ea594970a25a68c686a607f55f634d9ccaec9e4e47a43f5955d094f86b4906c546ee224b0fdc518da10df8b621dabab5e5a884","ssdeep":"","tlshash":"2821a75df248ab9d10b31834a42b5329607f7731f5564058914ee464283ed191153a80","size":1233,"data":"","first_seen":"2026-07-03T07:58:20.740613Z","last_seen":"2026-10-11T02:30:38.923132Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"140ad332a76e011554bcab096a37f4ac","sha1":"72c9da62a624a99da82f8b53ecd2ba8d8e1bca88","sha256":"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1","sha512":"ccf2833ab9908f740779b84bfd97903f96572aedf6eb0a37f08e51a88f0634e03408bd3e87e2e0586483835a6e09736848e44907848902ef11f8114a21029eca","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiB:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2B","tlshash":"4fb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5107,"data":"","first_seen":"2026-08-19T23:17:42.247117Z","last_seen":"2026-10-13T06:33:49.570784Z","times_seen":29065,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/divi-custom-script-js-extra","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac553d170a3d0835bb05908e1e42063f","sha1":"cf4d84d7dc9d2f79231f06ed609f2bf87c3c9900","sha256":"2d3f881204da29d219c270daf2083a433d20ee39a375f708ff5c229a3ab448cf","sha512":"1d15d4d96483c60aa34f9e5b552bba558dc239a9e856bf108707d89d348dc6efea542fc0aff78e66a2d2b050d192333b592e7b7e3490d01c59ecc317ae315eeb","ssdeep":"","tlshash":"cf5100a6da4d1f798fa360fd3d2baf07cca54055e2c06519fa8cc90d1388ea525b3a4c","size":2821,"data":"","first_seen":"2026-10-11T02:30:38.924235Z","last_seen":"2026-10-11T02:30:38.924235Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/themes/Divi/js/scripts.min.js?ver=4.27.6","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"caa6467696abb78c17f9be6c8142c2bb","sha1":"fe964d2d4d5f371bcc35b3ed7384229babf6afd0","sha256":"e96f930f7ac6d166fb1b69e8eb0bf2d2cc54bfee9aa8946bd3cbe2b5d36a20ca","sha512":"d4baa7c6cd33aab9891cb9a97c87c7028f10200e79596eb8822b4bdf410d77100f10fe20f41661e3351593023baea2c1ab070bc9d5551167361f7c9747d3d8a8","ssdeep":"3072:NIsL0dW9z+hDJ6eJOIZurwtux3E0pyPNgaO5S0PYf1DZ/n7OK:z0dWwnectux3xmNFJ0QfpZ7","tlshash":"0844d74cb360b4f162fb65b5116f670ab1726d17a40688c0e172e0f85db8d8e6263f7e","size":274461,"data":"","first_seen":"2025-12-05T10:16:28.394971Z","last_seen":"2026-10-13T04:38:37.803744Z","times_seen":15061,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/themes/Divi/core/admin/js/common.js?ver=4.27.6","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d71b75b2327258b1d01d50590c1f67ca","sha1":"b7820e4ffb6becc133c48f66d9f683545530b959","sha256":"1ca76922f55b389b8f590ae7e3bcc3a2dccdce3aff1e5a4335af081b76a414ea","sha512":"1a1930881b4d4d4f092999d6449248aea68bf1756f6dc32a4efce5e7bf240a14633e76988321e5aa3e11144fe5e8c9a443adf0fbf09a9b57a98c4d2d3a9347a2","ssdeep":"","tlshash":"bb218b4947ac9015cd2230f6141a70f8b9be90a7cbe00d7bfeb3e618d6c04a6127de9d","size":1343,"data":"","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-10-13T06:29:53.776521Z","times_seen":71016,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/cookie-notice-front-js-before","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b0fcb474637af35d5504fc2ab8c6bf0","sha1":"4cbedced4c66b9f84d4a40eb717a5af4ae1b232e","sha256":"1461622182f7372f6b22123166970f75310cb09d5f76864bc62f7636e4291985","sha512":"a5a4b8718a284488004b2b529d1ebf664e373c889c118a20b29a7ef0b72e96cc86e46e8a1d84255023a0ed83d51f19b6835b1da9ae7a803b26d4585fa4c7c237","ssdeep":"","tlshash":"83f02708f29d4a6d919147f885051f96d2382032e5a0ac4cc40fa8742ce68d3a846003","size":537,"data":"","first_seen":"2026-10-11T02:30:38.92551Z","last_seen":"2026-10-11T02:30:38.92551Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/plugins/cookie-notice/js/front.min.js?ver=3.1.9","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"73f7534d35cab74662c1b51911245436","sha1":"fedfbfa833397d36251235f1b8824ff4b1a58b87","sha256":"0a65b0a2f930ac72138c36aea669a3c760c93ce1093e52fb2c542d46f8d1ec61","sha512":"9a27c144315bdcda134066bda559192bc7fc426c0a3bbddbbfa43043d3c31d0411698ef679499b9442c52e5ec4db4f0c54c4cd0aeeba25f0407bc7c04ad5ad37","ssdeep":"96:c7FZY7Qu0zRHEFjedGgfxW+06CwuEUKj4vZPT4pExVfHBgRV9Qfd/Pn0W:uYezRHIJgfY+06lj4BPkExFuRVwP","tlshash":"bf1232dc7b341b7809c781ff25cf65907a331adad89414283436ecd28bb9cd616226b6","size":9144,"data":"","first_seen":"2026-02-11T02:27:55.993129Z","last_seen":"2026-10-13T05:59:26.295312Z","times_seen":6935,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.7","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-10-13T06:31:22.947722Z","times_seen":247222,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/contact-form-7-js-translations","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"be2172f13afa5ec1c0d107ad84ad0569","sha1":"ed77633d287189d3c4b374ffbb84b06579a6a801","sha256":"4feac6dacbb77db85ce69f2dee2605239f91303aac88339d3268fb2643f875e0","sha512":"2b07bd3c02360a4601e142d2c70f78eeef1b0f9c1c5b05a2958150ca54defde9e1b727f1af08a4ee654223a59edc291d824977ba5a137fb2181d9e3bff216aeb","ssdeep":"","tlshash":"d1316084ecb9ea25848281f936ae7e49b178f610c3af1c03220e044d2a916bdddf374c","size":1725,"data":"","first_seen":"2026-10-09T20:53:26.555749Z","last_seen":"2026-10-11T02:30:38.926974Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/contact-form-7-js-before","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"54edb2d1d0794fe910c4b56ee261d53a","sha1":"1918c1d1099d45c3d647a8e0824da9164707c4b2","sha256":"e283e068742b92f30d5f7030f1961a544f39c60e9b349b8a865ecef0f1d8d57d","sha512":"d95b80b856044195403fd86d45bf0224f1860ee9bcd4ae7633828ca67e1477dfe746f20682ddf326e987ea55011a3151c19353713e62e48d65c642013de9d1e6","ssdeep":"","tlshash":"bc212296e9ec1c2a14e2c178047c022af2109417cb2b1e19b20d804c2fa80b8a4541c6","size":1243,"data":"","first_seen":"2026-10-11T02:30:38.928835Z","last_seen":"2026-10-11T02:30:38.928835Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/plugins/burst-statistics/assets/js/timeme/timeme.min.js?ver=1789463582","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"421e614656f7380a73fff0417c2c5c29","sha1":"3d78737fe7c0436160cda8678e9fdcd84525417b","sha256":"683c9b0530c613523f1b02a246d7bccaa9f68af46df061f4d9f72c178c01b874","sha512":"0e5e5ab37a621bdfa3b62575169025fc48cf7010897ab3eb23aec4c9c60d3d644d32ce209c1472ad1f4c5a86618bcdc46803e86a91fd385c1d63e63aa531d87e","ssdeep":"96:+beWvTIWfoXi8ULA+8SoCIDAF7kVhOQtrzFfQDwiA0DX35vUjsWRUm1k1rhbr7:+6WvTIWwX4E+7VIMmVhOQXQMIX3nr9r7","tlshash":"c7d1d6dae7691973cafed383b434a3e4693667601c0c109c66be1fbd7102e8561e067e","size":6448,"data":"","first_seen":"2023-03-07T13:17:05Z","last_seen":"2026-10-13T05:37:38.922534Z","times_seen":6214,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-10-13T06:32:23.233551Z","times_seen":212924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/plugins/shiftnav-responsive-mobile-menu/assets/js/shiftnav.min.js?ver=1.8.2","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4e5f305df3c0b782ca9c55a2a39d5b6","sha1":"2b22e4d6423ba3283d0dc617ff523692eda21eaf","sha256":"ddab3ad52d3da4fe903d68527e52bcc1042eb3d0081eb71f604ab509965a2efc","sha512":"eb7d0b180f2657ecb1f945a944a96d130a6d9eea7a78717516ecc0fa645edf16e57facbd16ca382b7b61e2ca68967a31efc451bc792de08130ea64e024289a90","ssdeep":"384:VbejROfhUIKRm55r6rulOx1LOQ58Y6EMezo0znd:VbMs2/x1LOQ5x6DeBB","tlshash":"4e726256b14c306271fba1acd9aeb1417039687aa5370484383b49d51d1eeb832aff3f","size":17117,"data":"","first_seen":"2025-08-26T08:47:46.114001Z","last_seen":"2026-10-12T19:52:31.619973Z","times_seen":401,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/plugins/supreme-modules-pro-for-divi/public/js/imagesloaded.pkgd.min.js?ver=4.2.7","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2c1a80b99251b7b94726b41312fb160","sha1":"6d3e11174e22668e69df236e5c4542168f7cbfec","sha256":"96abf166b3cbb5f7df525d86fdeeeccea4af3c120b19bc26b0613530a94e8b44","sha512":"4b93d9f46c4964ed7ab53f6bdd6269fd269f9f7d5ebbcb96af382531a8434f876c9a0a96a27458f60ae4de3fb7b5fb8fafd58936c7e8a0e47b1a2ec72f95b68f","ssdeep":"96:bwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:bwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"19b122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","size":5594,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-10-13T04:46:52.832482Z","times_seen":25795,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/plugins/supreme-modules-pro-for-divi/includes/modules/MasonryGallery/frontend.min.js?ver=4.2.7","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e84affc84db9679bce855ac5dd97abb","sha1":"a3177c52c32ae0e13cb313ea2135d5932dc4460b","sha256":"8eb3b7ce819c5beec701f4a22a742266aa8127260ec53a9d8a01c1ac0536f9ff","sha512":"51ea372b50ee2c77865cfa02e53c67a50ab28437d3814b6dfebc86a057aa0ab54551f1d4fcdc4e94e22d768c9283b953b20bd40778c5861de469840bdb993fd4","ssdeep":"","tlshash":"d221215ab1a732b715df6494553f28055233f8b94b8344a1b0ead0b449b8e1c143bf29","size":1161,"data":"","first_seen":"2025-09-28T01:55:09.193545Z","last_seen":"2026-10-11T02:30:38.903745Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://lesecuries-du-masdigau.fr/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.woff","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.591Z","timestamp":1791685768591,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/themes/Divi/core/admin/fonts/modules/all/modules.woff HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: font/woff\r\ncontent-length: 92084\r\nlast-modified: Tue, 10 Mar 2026 15:20:10 GMT\r\netag: \"69b036aa-167b4\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92084,"size_decoded":92335,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 92084, version 2.4","md5":"4f7c51948ce1b802a13ebbccec151d0c","sha1":"5b1d3cd0929108da4b6334c4a487db08c9520f1d","sha256":"fe67b77ac7e0ef4b482dafb86adfa403db1b89a2f337d2dc8bd1278cfe975196","sha512":"87fab156e0c1e79f4dd07075cee8905dcc8c01c7708fbf6e9f6592f1c0f62083c86d0076ec23f73fc4351b51d6e03951ff7aece0ad9305488b910a8f8fefb023","ssdeep":"1536:n2S6qLRqKELiXMjCs7VDmGWALXJ8jzxJ9OIgr26F9BEFDTs8/M/OuWhX5j63QWIh:n2S6qLRqKELiXMjCs7VDmGWAN8H79OIl","tlshash":"e593f97bc3cbcf7fe955e775087b4a252dfadb26926fc40e9a451c869504cf80d28290","first_seen":"2023-09-22T00:38:17Z","last_seen":"2026-10-13T05:52:40.644503Z","times_seen":48825,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/?wordfence_lh=1\u0026hid=D220E83A7BC20DF8CC5D3CEC05FF6C8F\u0026r=0.17943900300742766","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:29.372Z","timestamp":1791685769372,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /?wordfence_lh=1\u0026hid=D220E83A7BC20DF8CC5D3CEC05FF6C8F\u0026r=0.17943900300742766 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: burst_uid=32c525871407fd786c3bbff4a8cf81e5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"burst_uid","value":"32c525871407fd786c3bbff4a8cf81e5"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:30 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains;preload\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(*), autoplay=(*), camera=(*), encrypted-media=(*), fullscreen=(*), geolocation=(*), microphone=(*), midi=(*), payment=(*), display-capture=(*)\r\nx-frame-options: SAMEORIGIN\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ncross-origin-embedder-policy: same-origin\r\ncontent-security-policy: upgrade-insecure-requests;\r\nvary: Accept-Encoding,Cookie\r\np3p: CP=\"ALL DSP NID CURa ADMa DEVa HISa OTPa OUR NOR NAV DEM\"\r\nlink: \u003chttps://lesecuries-du-masdigau.fr/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://lesecuries-du-masdigau.fr/wp-json/wp/v2/pages/3106\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://lesecuries-du-masdigau.fr/\u003e; rel=shortlink\r\nx-robots-tag: noindex\r\nx-powered-by: PHP/8.4.26, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:8.4.26","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":1117,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T06:30:54.669451Z","times_seen":19073715,"resource_available":true,"data":null}},"time_used":1293,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/et-cache/3106/et-core-unified-3106.min.css?ver=1773156051","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.379Z","timestamp":1791685768379,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/et-cache/3106/et-core-unified-3106.min.css?ver=1773156051 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 366\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 10 Mar 2026 15:20:51 GMT\r\netag: \"317-64cad1096d56b-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":791,"size_decoded":692,"mime_type":"text/css","magic":"ASCII text, with very long lines (791), with no line terminators","md5":"de1c050c4b1af6959d9ee64cfdd616e1","sha1":"9f139fb2197bab1b16957144bbca06015d836e03","sha256":"8b9e07a848d566d3c8dec1237b8feb52b7ce5ef3719dc893990a3b7c31c21715","sha512":"c79e9bac0c415b6dddbdf30d033daa7bb9c447ccda0426175ae708ff70e03ce2f655267226e4cca2a48379f87a6b2ef1ba7c2a351e93b60003d290cd8fdaaa59","ssdeep":"","tlshash":"40016d4ae37a35d33252d718f1d1f078106ca0c35b5a4dd6ad70586985d320dcad3c6f","first_seen":"2026-10-11T02:30:38.804621Z","last_seen":"2026-10-11T02:30:38.804621Z","times_seen":1,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/themes/Divi/js/scripts.min.js?ver=4.27.6","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.397Z","timestamp":1791685768397,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/themes/Divi/js/scripts.min.js?ver=4.27.6 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 10 Mar 2026 15:20:10 GMT\r\netag: W/\"69b036aa-4301d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":274461,"size_decoded":56788,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65467)","md5":"caa6467696abb78c17f9be6c8142c2bb","sha1":"fe964d2d4d5f371bcc35b3ed7384229babf6afd0","sha256":"e96f930f7ac6d166fb1b69e8eb0bf2d2cc54bfee9aa8946bd3cbe2b5d36a20ca","sha512":"d4baa7c6cd33aab9891cb9a97c87c7028f10200e79596eb8822b4bdf410d77100f10fe20f41661e3351593023baea2c1ab070bc9d5551167361f7c9747d3d8a8","ssdeep":"3072:NIsL0dW9z+hDJ6eJOIZurwtux3E0pyPNgaO5S0PYf1DZ/n7OK:z0dWwnectux3xmNFJ0QfpZ7","tlshash":"0844d74cb360b4f162fb65b5116f670ab1726d17a40688c0e172e0f85db8d8e6263f7e","first_seen":"2025-12-05T10:16:28.394971Z","last_seen":"2026-10-13T04:38:37.803744Z","times_seen":15061,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/2018/03/P1170455.jpg","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.429Z","timestamp":1791685768429,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/P1170455.jpg HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8371712\r\nlast-modified: Sun, 03 Apr 2022 19:31:22 GMT\r\netag: \"6249f60a-7fbe00\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8371712,"size_decoded":8371967,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=13, manufacturer=Panasonic, model=DMC-GH4, orientation=upper-left, xresolution=188, yresolution=196, resolutionunit=2, software=Ver.2.2  , datetime=2018:03:28 14:58:53], baseline, precision 8, 4608x3456, components 3","md5":"370939d0ae5aa520dffd5be1605b1af6","sha1":"398cb3aa25d37e32f5cb563557e1f3ae6e97be4a","sha256":"dd9f08bd5919b2b707bf1f9702e4a5a427d87b67d3580ed4aae591b6801153e2","sha512":"9810cb9e404a146aa737c49ed2dec3bd67bd7a642031b908d7cc4c55137e7925ead1ae48cdb67172ca8f54f802c43b7cf7397c3eedea46b4a4000046496707ff","ssdeep":"24576:VP1R0HjGVeCk52v5NIzW7atAsGhdVtZYPrroSo4tSh5NpZslT:VPHVevgSzojhdVt0rVSZs","tlshash":"dd25238ba717df81c00e103ba5db046c37624e6327bc92875189b938197b3957f9a7f8","first_seen":"2026-10-11T02:30:38.806636Z","last_seen":"2026-10-11T02:30:38.806636Z","times_seen":1,"resource_available":false,"data":null}},"time_used":793,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":671,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.391Z","timestamp":1791685768391,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 10 Feb 2024 11:27:41 GMT\r\netag: W/\"65c75dad-3509\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":13577,"size_decoded":4912,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-10-13T06:31:22.945644Z","times_seen":1009010,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/themes/Divi/core/admin/js/common.js?ver=4.27.6","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.405Z","timestamp":1791685768405,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/themes/Divi/core/admin/js/common.js?ver=4.27.6 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 10 Mar 2026 15:20:10 GMT\r\netag: W/\"69b036aa-53f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1343,"size_decoded":725,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"d71b75b2327258b1d01d50590c1f67ca","sha1":"b7820e4ffb6becc133c48f66d9f683545530b959","sha256":"1ca76922f55b389b8f590ae7e3bcc3a2dccdce3aff1e5a4335af081b76a414ea","sha512":"1a1930881b4d4d4f092999d6449248aea68bf1756f6dc32a4efce5e7bf240a14633e76988321e5aa3e11144fe5e8c9a443adf0fbf09a9b57a98c4d2d3a9347a2","ssdeep":"","tlshash":"bb218b4947ac9015cd2230f6141a70f8b9be90a7cbe00d7bfeb3e618d6c04a6127de9d","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-10-13T06:29:53.776521Z","times_seen":71016,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/2020/12/LZA_8985-Copier-1536x1024.jpg","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.464Z","timestamp":1791685768464,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/uploads/2020/12/LZA_8985-Copier-1536x1024.jpg HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 284112\r\nlast-modified: Sun, 03 Apr 2022 19:29:35 GMT\r\netag: \"6249f59f-455d0\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284112,"size_decoded":284365,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, manufacturer=NIKON CORPORATION, model=NIKON D500, orientation=upper-left, xresolution=188, yresolution=196, resolutionunit=2, software=Ver.1.30 , datetime=2021:06:27 14:59:12, GPS-Data], baseline, precision 8, 1536x1024, components 3","md5":"3c86ed1c125002d3ad93d1196b1720ce","sha1":"6b0f3267c1edf6b9845e0f0072beba1df40af53b","sha256":"d596a5dbc0f98fdf2211b63c0c5a083e7b7f79f1126e039d2a6b0156c7369256","sha512":"99f6eeace946bfe42e85cf87fa38b85f17ae54ca55db4fd121576a473a2c5692f7d351daacdb1741b31274085a636e16ee2a3cd625a0e75870746e8d0a5207a7","ssdeep":"6144:VDNhmgYMNVkZ4TVLGPVIbBMexgF+49Ubb0YOOG9ZY8sW9CmVgHT/HIqa1qA:VJ3YMrhTVLGOMexB49Uv0J9G+9C1zI7","tlshash":"80541213477e9daed0417f7b8020a1e9ae06c9215397cf28fd6e75f5cf213401aa6726","first_seen":"2026-10-11T02:30:38.80949Z","last_seen":"2026-10-11T02:30:38.80949Z","times_seen":1,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1JlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.661Z","timestamp":1791685768661,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1JlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nOrigin: https://lesecuries-du-masdigau.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 10708\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:03:09 GMT\r\nexpires: Tue, 05 Oct 2027 16:03:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 469579\r\nlast-modified: Mon, 15 Sep 2025 16:36:24 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10708,"size_decoded":11521,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10708, version 1.0","md5":"dea8e165c40ab46d0311b7df75a99171","sha1":"e98e0a76b20028b38f952235f0fd77d5b07a4d05","sha256":"dd48308ee40356f9377af33136cc86d4c7d06895a3031b636bb7fbeaab7fd87f","sha512":"9060ed6dcfb0276f1fe1920414c37ebc9d02b400815ed4a632b1b1131d07073a48a950fd2d065a50e2642ce8fb8f8ea0a6bee38e20de52ca09578a4f7cf9530c","ssdeep":"192:ZvsHjukFebxY4lo1vGeeCGaYmW4fVCzhy9U0gbg9C3E2Eyfakh3fo:NKj2+MevGaYmFf4k+EGEJyCCPo","tlshash":"e222cf8d599e21088ceebc36159f6b2c65ef3d881ec43766c3f123fe806a29700d6364","first_seen":"2024-12-16T13:35:45.360975Z","last_seen":"2026-10-13T00:14:25.098273Z","times_seen":2518,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.mobile.js?ver=4.27.6","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.398Z","timestamp":1791685768398,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.mobile.js?ver=4.27.6 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 10 Mar 2026 15:20:10 GMT\r\netag: W/\"69b036aa-2a18\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":10776,"size_decoded":3145,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"54b92140544246334b2b504d79cdbc47","sha1":"b0abbeb248e33037e8739760c7248326142c0399","sha256":"82ccdb280927be0204340a8255ea4f3450fbfc3057b4b8b98f9d0e01814cd143","sha512":"f6ce3bf75be3e949ebba0a0b053b31d1741ac03eaa484ff9d69f462b12645369eba6a793ff3c6ca6feb43c4a0e6b7b4d4f6cfaf63c9dc2020bd7ca6143b17c58","ssdeep":"192:2Kjril8AZk/MOykyo92+EejakTKam6kqFjpRl9h4nTd6gOwx6Omno12G2LAhdEVw:2Kj2lnk/MpklJEMjTll/4nTd6gOwx696","tlshash":"f622fe0a9b932475745bb23e9b1fa5053537408f5a8afd00391c9e509f1c83c5bb9bdd","first_seen":"2024-11-11T14:57:41.305826Z","last_seen":"2026-10-13T05:59:26.251375Z","times_seen":11504,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/2021/05/Ecuries-masdigau-vue.jpg","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.427Z","timestamp":1791685768427,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/Ecuries-masdigau-vue.jpg HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 321254\r\nlast-modified: Sun, 03 Apr 2022 19:24:08 GMT\r\netag: \"6249f458-4e6e6\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":321254,"size_decoded":321507,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.3 (Macintosh), datetime=2021:05:04 10:00:18], baseline, precision 8, 513x529, components 3","md5":"83afa6f15d24e6f33393da2e9fe9ce13","sha1":"565903809a91ce7e22d887d3c3a63a978b7858fa","sha256":"128568a680a4a0f71afcc925fd57655f9fe4fe0299a869462cf1ebb2ff743652","sha512":"8212aa315d7f892b404ddfeb69d3d41bdfde207b5b818ddbbcbb6cac90123c2ca0d3a8f96d11cca1769fd9d0e9fcb8f8435a1d2f3960cdf4b80194d4f538c28e","ssdeep":"6144:a5G5X9R6Z1ZtnF8wRTe2+C8aeiX67qlxUKxvUT9pN:aYwZL8wJeK83qdi9pN","tlshash":"6f6423c2d55acfd8f956627e029406ecd666d7918181fb01bc8c8e247f74dc12f2ea2d","first_seen":"2026-10-11T02:30:38.811756Z","last_seen":"2026-10-11T02:30:38.811756Z","times_seen":1,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/2020/12/Ecuries-masdigau-logoPCF-1280x1265.jpg","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.467Z","timestamp":1791685768467,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/uploads/2020/12/Ecuries-masdigau-logoPCF-1280x1265.jpg HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 115656\r\nlast-modified: Sun, 03 Apr 2022 19:29:02 GMT\r\netag: \"6249f57e-1c3c8\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":115656,"size_decoded":115909,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1280x1265, components 3","md5":"d848989f47363fee58b9ed1419bd1f24","sha1":"6ae3c27b4c0823e1ef39b87bdb75ed705154327d","sha256":"f85cf6d56662b73c230eeffdbfa2a9ca194c99637a2b06b9e1daaf7f96ccc7ac","sha512":"458ef551571e5fa83220b6eff300a5067520bc0b237bb9b31b13178e8f8be4b8dbdca034118b55cc73d0b56469a2e2ba02a7c75d699a0603c3a110ce2ab1e89b","ssdeep":"1536:F5+3T5jHLyZn1x25XYsi6EwND1uKkXfRrptjdfle1ygoPIOej877777777777776:QTif2osilGuKkXfdptjn4zOejsNAFJL","tlshash":"aab301487b42ac07cfaa57bd986f13296f2ffe145d8488b790755509a0a13b33cca98d","first_seen":"2026-10-11T02:30:38.812901Z","last_seen":"2026-10-11T02:30:38.812901Z","times_seen":1,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css?ver=4.7.0","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.361Z","timestamp":1791685768361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:52:42 GMT","end":"Fri, 27 Nov 2026 07:52:32 GMT"},"fingerprint":{"sha1":"F6:58:F9:2B:5B:29:DD:D1:99:3E:40:DB:56:17:DC:42:4E:6A:E9:05","sha256":"F3:FF:92:2E:B0:B0:F9:26:38:04:80:FE:73:FB:B7:4A:8E:03:4E:26:D7:44:86:CA:E3:D0:83:59:81:32:88:A3"}}},"request":{"raw":"GET /font-awesome/4.7.0/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/css; charset=utf-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"269550530cc127b6aa5a35925a7de6ce\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:55 GMT\r\ncdn-proxyver: 1.47\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1334\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-cachedat: 03/15/2026 23:52:32\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 3559257787afc6541831a7cd02aaa998\r\ncdn-cache: HIT\r\nage: 5534011\r\ncf-cache-status: HIT\r\ncf-ray: a48a6ff458124c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":7896,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-10-13T06:28:07.375404Z","times_seen":323095,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":3,"connect":11,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/2018/04/header1.jpg","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.428Z","timestamp":1791685768428,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/uploads/2018/04/header1.jpg HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 403309\r\nlast-modified: Sun, 03 Apr 2022 19:32:34 GMT\r\netag: \"6249f652-6276d\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":403309,"size_decoded":403562,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2015.5 (Windows), datetime=2018:04:01 21:24:20], baseline, precision 8, 1440x1065, components 3","md5":"25da0e0d7e51b4e7c7bce47c067a57ea","sha1":"83dfb798e06633d73de998c61e1d51973a8f0379","sha256":"09f56bf17af9410ca0c565418954c13512aeaa214d2444be02bce17d77235b4d","sha512":"b60995e6ac7d4c1ea80d08d6b45e2b9740da9228db44422ccff3e8a5cdce8b82e772155b6a78db7b12134e25d4bfc88a87fa58e4ecb406a0b62e9bf89098824b","ssdeep":"12288:ZJ/9xgldB0t/FmHUX1h1fT1W0fzHkkbpwbB:r36qpFbz5T1WsxpaB","tlshash":"878423aa5ac0dc4ae8d810f579d1c9859331cfa9c28f26c0341fa556f74afb1598f38b","first_seen":"2026-10-11T02:30:38.814716Z","last_seen":"2026-10-11T02:30:38.814716Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/2021/01/2020-10-30-162550289.png","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.430Z","timestamp":1791685768430,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/uploads/2021/01/2020-10-30-162550289.png HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 3950522\r\nlast-modified: Sun, 03 Apr 2022 19:26:03 GMT\r\netag: \"6249f4cb-3c47ba\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":3950522,"size_decoded":3950776,"mime_type":"image/png","magic":"PNG image data, 1440 x 1080, 8-bit/color RGB, non-interlaced","md5":"6ba1c8b5e0c454a39149d73348a9958b","sha1":"9b712c5cd70c0ae8d416c455f97a27fda68c50d2","sha256":"64e62b2174d197cf894b57e85c11863a3306625040eec7159a1a162f96270bf0","sha512":"a2cf939a781c0f4e2fb82f75f735ca4b432b11f2ad28f2e9bc2a5df5030ec404e02342de4f2fc8c357f7faf8cbf9bc560912d9c0c082858e9a5f803791c2354b","ssdeep":"24576:hSmL83Gfp45UinbIMDl3lWBYyAxrF0C7o2Lt7masWBHJBWNW:ImL83YprGbIMDl3EqyAx5TzBHBWNW","tlshash":"0d2533c28277496495feeed3b272dc8cc4c95b18e96321c4c63c86e9ad076945d8fe32","first_seen":"2026-10-11T02:30:38.815888Z","last_seen":"2026-10-11T02:30:38.815888Z","times_seen":1,"resource_available":false,"data":null}},"time_used":686,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":564,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/2021/01/IMG_1919-scaled.jpg","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.436Z","timestamp":1791685768436,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/uploads/2021/01/IMG_1919-scaled.jpg HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 902326\r\nlast-modified: Sun, 03 Apr 2022 19:24:47 GMT\r\netag: \"6249f47f-dc4b6\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":902326,"size_decoded":902579,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=11, manufacturer=Canon, model=Canon EOS 600D, orientation=upper-left, xresolution=184, yresolution=192, resolutionunit=2, datetime=2021:01:16 16:42:06], baseline, precision 8, 2560x1707, components 3","md5":"94558255155d4fe5d044d014ced63e5d","sha1":"9311146edc51c9b49db0ec01b52e7068b5e6a675","sha256":"6854e56b3634e28b52cb5e59dd091a53af87595e148f154aa39e5a277b1ccc74","sha512":"4f61a19be5ed1a18b1f48a41285c216e07df524a817479d9b65cd85904010906be90790fc37938ab8432403ba2fd5b5f7b291ee7ba4b2aa38bde6628f6808d6e","ssdeep":"24576:ZVjjTnBQA5turePm5F0tKky74tdPs6GAyB7TpWy6:vXNQA5tu1FrbMNsFHB7oy6","tlshash":"6a1523a329138c89d9620b3d3e12873ef11579047d187745319e4f8abbe25d29c98efe","first_seen":"2026-10-11T02:30:38.816993Z","last_seen":"2026-10-11T02:30:38.816993Z","times_seen":1,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":333,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.588Z","timestamp":1791685768588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nOrigin: https://lesecuries-du-masdigau.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:59:41 GMT\r\nexpires: Tue, 05 Oct 2027 15:59:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 469787\r\nlast-modified: Mon, 15 Sep 2025 16:30:33 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25432,"size_decoded":26245,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25432, version 1.0","md5":"be54f77ab35610e2c8b2cdc5eacfbbe3","sha1":"a958106a7f47e5fd204be330d2bb7c02eece6c71","sha256":"f3d1673c4fe33490d9431c0c5f2cf942d9e5c292b71a56cc8457aed802af6150","sha512":"1cde572a7e4a5aedb92544cd2c574f46e16be7cbee79fb14a981b4ea939e5d435f0b04315ced08f3dfa0b14ef0405879428ab0c495e75c692c5fb1a0d24266c6","ssdeep":"768:xgn2/aM++CyPp8CSmJSWNzPJo49nGwA4xLtK6CGaRa:xgGacCy6CSpIPJo49nNA4xwNfU","tlshash":"9fb2f2339a4660cee69ce270bbd3316bc5f1bfd3ac0ab67a330930918cc1355c4595a8","first_seen":"2025-09-17T13:23:54.201948Z","last_seen":"2026-10-13T03:44:27.718224Z","times_seen":7978,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":44,"send":0,"wait":23,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0B4uaVI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.589Z","timestamp":1791685768589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0B4uaVI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nOrigin: https://lesecuries-du-masdigau.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25388\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:03:45 GMT\r\nexpires: Tue, 05 Oct 2027 16:03:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 469543\r\nlast-modified: Mon, 15 Sep 2025 16:30:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25388,"size_decoded":26201,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25388, version 1.0","md5":"bfaf4e47e7164ac6b556fbf03f0a826d","sha1":"b01eff0c926f885b51a880660ed7a22f5f649d8a","sha256":"e3e2d4cfb1e3e7fc029c754fa30cbc6e73a03c5f59fef7876989f62210c6b650","sha512":"87757030dd4ebf5618d0791637d687253c70f5f7f66029e24faedbb419f7846b356c694dd844a9adf63ac1f22e03372b9b318e4863ba3940e8270952afc17e14","ssdeep":"384:Os07JHbabGRz1LB/F+Oy5hHOd1H58RqqY8aF1bAi5jbnVCZzUnJG:OskpaCRz1LBtoVy8RHY8t8vVcUJG","tlshash":"b3b2e017e644c05ab2ba4035ecb3f6e0d054e3da35e0b651ac887a55e06dbc83e3d97b","first_seen":"2025-09-17T19:49:27.638216Z","last_seen":"2026-10-13T01:46:20.787907Z","times_seen":1621,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":26,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.7","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.163Z","timestamp":1791685768163,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.7 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 15 Sep 2026 09:13:15 GMT\r\netag: W/\"6aa90c2b-ba3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":2979,"size_decoded":1130,"mime_type":"text/css","magic":"ASCII text","md5":"b2b463a5bdb73833be2a6afbc1843ddd","sha1":"ade55e90dd7694b7974edd336b555e765967e702","sha256":"a3b9f5df6bf638a4cb583480bed6e18a84ad7141cc3d75b81094f91dd7b82f32","sha512":"431fcb88c720bc2ee3cd950772bbf03194b28f5a00c602287ea4877829ed377f0742dcff523e88e07dd4a7968ea8618fae59b883617d9112d61feee5167ae191","ssdeep":"","tlshash":"aa510264660028504bff92db6eaddb047b6e7481cd1faf97b0c21a7c57782851223e5e","first_seen":"2026-05-15T04:06:26.038056Z","last_seen":"2026-10-13T06:31:22.945063Z","times_seen":32627,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/plugins/cookie-notice/css/front.min.css?ver=3.1.9","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.164Z","timestamp":1791685768164,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/plugins/cookie-notice/css/front.min.css?ver=3.1.9 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 15 Sep 2026 09:13:21 GMT\r\netag: W/\"6aa90c31-16c6\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":5830,"size_decoded":1320,"mime_type":"text/css","magic":"ASCII text, with very long lines (5830), with no line terminators","md5":"c0164c196dbb5a3d9b210ee73f2159c6","sha1":"c9d16c3a08ac5174679084c2f630b970334362f1","sha256":"63b48438278c5dfb73dd5bb3cbf8310caccd91457201debe4cff4dec4410d96c","sha512":"9a725a44fc5cf73247333f7a20299a1c4207bbde48a87bac0c39fcb895eb38b7cd41abca3cf0defd3b516b623d76da73f27b81401467e1ff18c02cc56b901311","ssdeep":"96:HP7YUc6W/NOajfBnlCc7KDd6NtWd/k93ik8oLrWrzrsrZ0:v7JOnlCc7KZ63c","tlshash":"b9c1305ffe89031c91e7851197c84a99662ac876e0b20ccdb24ab52a8fc7fcf3758157","first_seen":"2026-02-11T02:27:55.998612Z","last_seen":"2026-10-13T05:59:26.24678Z","times_seen":7011,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/plugins/hbook/front-end/css/selectize.default.css?ver=2.2","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.166Z","timestamp":1791685768166,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/plugins/hbook/front-end/css/selectize.default.css?ver=2.2 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 15 Sep 2026 09:13:40 GMT\r\netag: W/\"6aa90c44-33ae\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":13230,"size_decoded":2666,"mime_type":"text/css","magic":"ASCII text, with very long lines (12417)","md5":"e6a7ce093914c40615f59d45ec6990e8","sha1":"8dcf958d4d8af9a9bb1d3d4c2e5969202985ba20","sha256":"561d23ccd28e6a99213cde35d7bffe044f63b68d505ea05bdeda1e4d1105b488","sha512":"fb562ac7c65f7892bfc78c540a278b6fbc5fe8297586758c1bf1fc191e713d2d205331bff47cdae91790eddffdfe977630ddb116c5c88be138f9a3268fe0b244","ssdeep":"192:+hvHbA34iByS+0+tIBUsvloJLKdBIdTs6pOfO4WjA34iBh:+hjA3fBu0+tXsOcodTm0A3fBh","tlshash":"62522f70d98c337524eec72bbde189cee02ac17dd112923ba4357959aec90a50973f1b","first_seen":"2024-08-20T13:49:12.339755Z","last_seen":"2026-10-11T02:30:38.82134Z","times_seen":211,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/plugins/supreme-modules-pro-for-divi/styles/style.min.css?ver=4.2.7","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.365Z","timestamp":1791685768365,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/plugins/supreme-modules-pro-for-divi/styles/style.min.css?ver=4.2.7 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 03 Apr 2022 19:22:22 GMT\r\netag: W/\"6249f3ee-54f20\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":347936,"size_decoded":28445,"mime_type":"text/css","magic":"ASCII text, with very long lines (35591)","md5":"b0deea86782e249733decf3fa39932e7","sha1":"a8d592c114033cf1810ac5f817c3a0a96e72c505","sha256":"78da75d5e8101f248d44c7ffbe545cec83e9e79f730bb1f88050c03ec56f8a8c","sha512":"7caa35dde23351ef1d4d923953d90101ac325020ea4f570b4e1cdd1847b8a3b4313ebdfb09d8cc419130f7e941f816a2a8b168d1e7e8d062b0f44680dbd5f16b","ssdeep":"6144:If3fXjPikiKkZawQ1OAPkWDL32ye5trKem0OT/efi5MmXjQoBN4ZjbJ7fExxOUYu:AjPikiHZawQ1OAPkWDL32ye5trKem0Or","tlshash":"397423aa8a61228550238f0587cd5ba4d73dc66375e20cefb356280fc743bad23db657","first_seen":"2025-06-26T21:39:03.927909Z","last_seen":"2026-10-11T02:30:38.836507Z","times_seen":3,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/2018/03/P1170450.jpg","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.430Z","timestamp":1791685768430,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/P1170450.jpg HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8291328\r\nlast-modified: Sun, 03 Apr 2022 19:31:36 GMT\r\netag: \"6249f618-7e8400\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8291328,"size_decoded":8291583,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=13, manufacturer=Panasonic, model=DMC-GH4, orientation=upper-left, xresolution=188, yresolution=196, resolutionunit=2, software=Ver.2.2  , datetime=2018:03:28 14:55:52], baseline, precision 8, 4608x3456, components 3","md5":"a1303b24221e4a886ac1d875aa09e5b9","sha1":"2245f0c3a54fc3b0c3b3c05e24278c9f3bff2a1c","sha256":"99e0b6a1e04b1ae0935ff74bcaf989255ec55a5e9d52026b2e5e2aba3c48320a","sha512":"fb6e0ae749827d1a2ae0b38c8b7d53e5685631519a04e5bb5f08166c3f65a284bc326cdcb2280124a021655904348184f6f1583ac1a150d8d20ffb84b354da55","ssdeep":"24576:q9Y6woDbLJ2FUHL1iFSvXUa9t4O4iRPIMs9FBvtTzXCsI3Skf5:q9T7J2FqRiFo9QiRgh9FBFXmpf5","tlshash":"76253340a2c35753e22d643f64fb9c115a606d81fb3e1690ac40be023af78ad7b747e2","first_seen":"2026-10-11T02:30:38.837942Z","last_seen":"2026-10-11T02:30:38.837942Z","times_seen":1,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":689,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1JlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.665Z","timestamp":1791685768665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1JlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nOrigin: https://lesecuries-du-masdigau.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 10992\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:03:09 GMT\r\nexpires: Tue, 05 Oct 2027 16:03:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 469579\r\nlast-modified: Mon, 15 Sep 2025 16:35:49 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10992,"size_decoded":11805,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10992, version 1.0","md5":"8b827b197d2a4d0cba7eef29b7af6ff3","sha1":"b3d12165cc3e853aeeb998651a004f476c7fe09c","sha256":"4fefcb8f21554ab8b19c950783ae4bc139fdd9df03900025635cbbc2ebd47256","sha512":"2f59c95a7eb0f24bc1c62f60206d2846a9def4c020ed691f03c8cd5225ee1447e2717945949cc4df8237514495ae9413a84a2fd7e9bdd21d4efca1d3476cf146","ssdeep":"192:w9BwKoasaSTMU5jv6uXq3GMbPM+O7XCRGqIj4FHW/uke0i6+23BXHFzafjDa1C4s:w9BjTTOMC6uXq3GMjMFLCTdYukx/VBHO","tlshash":"9732c007bfa89fe1cc49c2584988e5f68a4c2911bce40abf53774678defe8594c6050f","first_seen":"2024-12-16T13:35:45.362769Z","last_seen":"2026-10-13T00:14:25.123024Z","times_seen":1991,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLDz8Z1JlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.670Z","timestamp":1791685768670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLDz8Z1JlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nOrigin: https://lesecuries-du-masdigau.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 10760\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:16:53 GMT\r\nexpires: Tue, 05 Oct 2027 16:16:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 468755\r\nlast-modified: Mon, 15 Sep 2025 16:35:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10760,"size_decoded":11573,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10760, version 1.0","md5":"28e19b78dbbabeacc436a8fddbc11e92","sha1":"87f007e312a4687e26b8195c80148171b03aa252","sha256":"c3604ca7fa9e61eebd7c366a1e43d7528e771db62c665aac6aa106ac1f296f04","sha512":"0e18bd54e98ff5a9bd344cc9545c92e8f164d2936292248b157afcbf6b75cc4b9a3a8a3ca4f18fade5927871dffd6d8a39feccac86ab19b15813a721e218770e","ssdeep":"192:GODYKeWYyr9NkjciQVy3Wi6EtvXDEjKa3XDJ/mFdmDvJcc+J5xm0G50B0yZxqlg:nFpr9N4ciAy3e2wjKsJuFWJt52fl","tlshash":"2122c0aa7c9188ecf193c3b2042717645a560dc7dca15763b76aa2acf17c0729f09198","first_seen":"2025-01-02T09:30:16.547755Z","last_seen":"2026-10-13T00:14:25.071177Z","times_seen":806,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/plugins/burst-statistics/endpoint.php","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.992Z","timestamp":1791685768992,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"POST /wp-content/plugins/burst-statistics/endpoint.php HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nContent-Type: application/json\r\nContent-Length: 455\r\nOrigin: https://lesecuries-du-masdigau.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: burst_uid=32c525871407fd786c3bbff4a8cf81e5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":[{"name":"burst_uid","value":"32c525871407fd786c3bbff4a8cf81e5"}],"method":"POST","post_data":{"size":455,"data":"{\"uid\":\"32c525871407fd786c3bbff4a8cf81e5\",\"fingerprint\":false,\"url\":\"https://lesecuries-du-masdigau.fr/\",\"referrer_url\":\"\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"device_resolution\":\"1280x1024\",\"time_on_page\":17,\"max_scroll\":0,\"dwell_zones\":\"{\\\"0_25\\\":17,\\\"25_50\\\":0,\\\"50_75\\\":0,\\\"75_100\\\":0}\",\"completed_goals\":[],\"page_id\":\"3106\",\"page_type\":\"page\",\"should_load_ecommerce\":false,\"search_term\":\"\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains;preload\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(*), autoplay=(*), camera=(*), encrypted-media=(*), fullscreen=(*), geolocation=(*), microphone=(*), midi=(*), payment=(*), display-capture=(*)\r\nx-frame-options: SAMEORIGIN\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ncross-origin-embedder-policy: same-origin\r\ncontent-security-policy: upgrade-insecure-requests;\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nx-powered-by: PHP/8.4.26, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.4.26","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":1913,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T06:30:54.669451Z","times_seen":19073715,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/plugins/shiftnav-responsive-mobile-menu/assets/css/shiftnav.min.css?ver=1.8.2","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.367Z","timestamp":1791685768367,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/plugins/shiftnav-responsive-mobile-menu/assets/css/shiftnav.min.css?ver=1.8.2 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 17 Nov 2025 10:15:20 GMT\r\netag: W/\"691af5b8-4014\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":16404,"size_decoded":2984,"mime_type":"text/css","magic":"ASCII text, with very long lines (16404), with no line terminators","md5":"3e2e8a62f9605974f2188077f3fd60fd","sha1":"98e35246bae31835d7c01f570ffe6d5e7b728f90","sha256":"a27eb2533a8af335589e20f295b74261b4266624b3682ba408b125e439d3b539","sha512":"74aebbd0c1464379fcee8ed8341796f57c786056699017eb8a514d6acb2fc23412e978d1f715670422b088c7b5a07e808b8ad72872c2fba02b48df29317d9d03","ssdeep":"192:+BGOlelqtC9nvFolIZf+kT1WlPKqlNd8YlX42LMkh/h6wkwEQdidBpCHamHJ4WQt:Vw+Ha6mHJXFrXoE4QS7sKR","tlshash":"6b720e53699c2128717682ecfeccf278363c952197730ddab237a9494d422bc25afe17","first_seen":"2024-10-29T21:25:09.798429Z","last_seen":"2026-10-12T19:31:47.50583Z","times_seen":372,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/favicon.ico","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:29.360Z","timestamp":1791685769360,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: burst_uid=32c525871407fd786c3bbff4a8cf81e5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"burst_uid","value":"32c525871407fd786c3bbff4a8cf81e5"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:29 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 4286\r\nlast-modified: Sun, 03 Apr 2022 19:18:51 GMT\r\netag: \"6249f31b-10be\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":4550,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"cfeec7e74ae1252e10856987596f4a76","sha1":"e2b0b1ec715f6f2bff87ef4237d3263392a2cc69","sha256":"4c76013c9bc743f7b166f16e77c795b5183797dc5204f9096aa5b2f845e4a2a5","sha512":"6476b5183cb15417682d9d0d1ac6555451b7eb30627fd31e251b56823c95a3cdd8550a985fb5802e9e5ad71fb470a5ba5bcfd87d2b4e629dd410832540c837d4","ssdeep":"48:HkhP/YbQEMbnUlAUENhL62S3d9cKER3uyHS42w6lQQlv:HKnYsbolAL62wdKKsuW1","tlshash":"a391da845e908694fa6a9f3471704e6814bf7da0fc3ef7288c89b0465b37bc684255c7","first_seen":"2026-10-11T02:30:38.840903Z","last_seen":"2026-10-11T02:30:38.840903Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/plugins/shiftnav-responsive-mobile-menu/assets/css/skins/standard-dark.css?ver=1.8.2","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.371Z","timestamp":1791685768371,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/plugins/shiftnav-responsive-mobile-menu/assets/css/skins/standard-dark.css?ver=1.8.2 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 17 Nov 2025 10:15:20 GMT\r\netag: W/\"691af5b8-bb4\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":2996,"size_decoded":793,"mime_type":"text/css","magic":"ASCII text","md5":"d22e2dc95c9e4af2d1b7fa90a2437f35","sha1":"1e0575a7f57b55aff7c1cd09e4ecdab0d4408266","sha256":"40fa5b51c7037cd2449e6fffa1a2bcb18c4d702c9413d49ade3bfd888ca720ed","sha512":"85ac12f251bb0cf0820355318f0437fa0ad2f96d2ad50e9b77e445fc4d1cad88a1b535ed523d330cb3686d077c7274e60f60a47103217285c56b298839243b28","ssdeep":"","tlshash":"b351c299918c44a8313790dceaddfb2473b83180f737ea8829376b0c5a464b569bfd03","first_seen":"2023-04-20T02:12:22Z","last_seen":"2026-10-12T22:32:48.1194Z","times_seen":575,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/burst/js/burst.min.js?ver=1791632426","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.376Z","timestamp":1791685768376,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/uploads/burst/js/burst.min.js?ver=1791632426 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 10 Oct 2026 11:40:26 GMT\r\netag: W/\"6aca242a-3231\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":12849,"size_decoded":4333,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12849), with no line terminators","md5":"02b661e9265a2196ad31685f0969d90f","sha1":"5b1cf8b4f2ca0535792dada89ac18fcc93c161de","sha256":"3a395b69b83e9126e2685a9d3510b09084e0a62eed8c527af60867b89935ea9f","sha512":"52a7dff5f63351148682856c60f25d4ebde7c34a5e28d725af1b5ea7e94372b0ca650e080fa99fe818f025ea870678bd7552c10f3d30ce6ddc6aad0c757e7934","ssdeep":"192:+/WIj+OFq1wCdHqmrBey6SB7xebKgCyENxScDkUcVlYDU:7a+OuOkBesgKgCyegEGlYo","tlshash":"5e42d7a612a1993f87ef016ab22ca3012b6a1f27644a5077761e1cb8009cf53775bf79","first_seen":"2026-10-11T02:30:38.842569Z","last_seen":"2026-10-11T02:30:38.842569Z","times_seen":1,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.390Z","timestamp":1791685768390,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 10 Feb 2024 11:27:41 GMT\r\netag: W/\"65c75dad-15601\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":87553,"size_decoded":29833,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-13T06:31:22.981978Z","times_seen":1105471,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.394Z","timestamp":1791685768394,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 15 Sep 2026 09:10:26 GMT\r\netag: W/\"6aa90b82-169f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5791,"size_decoded":2615,"mime_type":"text/javascript","magic":"data","md5":"d2f655e068f223e5da12d436aac88d38","sha1":"003146f39636a30ac250b0f043d61bcc01117b17","sha256":"5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9","sha512":"c3fa9c3955bbe3b74e30755c4c551204aa1a034f8d48c8ab2747eca57466409ac0dfbdfc76a7a3554ea64cdbd730bf3cae3c1270382e66df24afc8b8ed48bf38","ssdeep":"96:oE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMs:Xhgws4WTBYNB1C9aNwAMPyd0R3SGaMSn","tlshash":"f6c1a8c979def056235910a594afb005e134be2870deb800aae0c4957eb44cdb1b7fba","first_seen":"2026-08-19T23:17:42.197722Z","last_seen":"2026-10-13T06:34:33.015943Z","times_seen":28574,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJnecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.667Z","timestamp":1791685768667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJnecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nOrigin: https://lesecuries-du-masdigau.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 10892\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:06:43 GMT\r\nexpires: Tue, 05 Oct 2027 16:06:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 469365\r\nlast-modified: Mon, 15 Sep 2025 16:34:43 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10892,"size_decoded":11705,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10892, version 1.0","md5":"2f07ada47e980c971d7396184c42631d","sha1":"6b0769463be5042209e570ae5b2d264b6db621df","sha256":"f7833f2b9d4b3ba648c46eee21589c47c4efdf4acd04b09edcc392b457270746","sha512":"9c12fd42e5824d4476d279cc5af2125975cd06a2ca8f02dbf39bab6416920fad71d5dd6156beb7654a86e446894b3f4a08d9b8d83807e35c15e5aaef2f7f5fa1","ssdeep":"192:IqsxRXhQdngRmAUx01/uS8I7ekaf/X977P1yRdQi/slLuN1U65NuKt43X6DEOrn:w3XhQBgRmA91BKkaHmRdQi/2ijjuKtoi","tlshash":"6d22af3769b10d1baf3f1d31d25b5a3cd42ad4ccc39646ca106b6e591143f8b4b90368","first_seen":"2024-12-19T01:05:18.974193Z","last_seen":"2026-10-13T00:14:25.124152Z","times_seen":1383,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1JlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.671Z","timestamp":1791685768671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1JlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nOrigin: https://lesecuries-du-masdigau.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 10712\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:16:53 GMT\r\nexpires: Tue, 05 Oct 2027 16:16:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 468755\r\nlast-modified: Mon, 15 Sep 2025 16:35:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10712,"size_decoded":11525,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10712, version 1.0","md5":"e1a64a8e81a5d954b321bea44c556663","sha1":"9bfaf0cd5f96b2c763daabda7fa0b11badc457e2","sha256":"eb9a425e7ee0692b30b3386368a7e52dfd12f62f3d2bfc972e196d03586ca78b","sha512":"d8b465515e1e61b37d203ca1858ca0958e641ca29f4f2ae98fa6b696bab0c3bf1aa9f8b0758870255dc871367ba9bb742832997bc3723fb2c64fa230df444987","ssdeep":"192:gFvOc0OJWbZenCZcvFNM2xKhuqKRhdOKKXMxOqwnDjyDrEnKQI+Il2t/HTijTk:gIcUsGcvjrqKReKKcxOqAjkrQKb+v/H/","tlshash":"5722d08227689616f51c1a3d494d475b23c2054b4f5fe3f2dbfd44f20a251b6d84b508","first_seen":"2024-12-16T13:35:45.381594Z","last_seen":"2026-10-13T00:14:25.109394Z","times_seen":1889,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/magnific-popup.js?ver=4.27.6","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.400Z","timestamp":1791685768400,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/magnific-popup.js?ver=4.27.6 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 10 Mar 2026 15:20:10 GMT\r\netag: W/\"69b036aa-5700\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":22272,"size_decoded":8235,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20735)","md5":"28af37baca9dd41ed000edd3446b00b6","sha1":"a80ea4ecec08eaae565fa5eb7491f58a9a59fa9d","sha256":"22a7ae46aefb3325e3e2761085d7b2ea2cda8dc351cf391a62918bb09784f693","sha512":"a84f65fce7e334a1da2ce2f9bf62ace58240b38f6fd3efab2793a04a7b0b50eae15b3d5cc9e7139e9e590af81bf31f47f66c9d668bfeee25de323276dd8af7be","ssdeep":"384:ZpiK+Ypwhc1sBEVEtk94tBnKIO46FbUkOK/NF0Sv/lZzZyQtdhTZF5ZFB:iEl73MoUkOKv0GMAdXF59","tlshash":"14a22aa4f1a1b37397f361b4188f382c367a9923dd0b8411ba5498946df8edc9137e2d","first_seen":"2024-10-16T16:54:35.046042Z","last_seen":"2026-10-13T04:17:01.243703Z","times_seen":7064,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/plugins/hbook/front-end/css/hbook.css?ver=2.2","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.169Z","timestamp":1791685768169,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/plugins/hbook/front-end/css/hbook.css?ver=2.2 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 15 Sep 2026 09:13:40 GMT\r\netag: W/\"6aa90c44-31f2\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":12786,"size_decoded":2895,"mime_type":"text/css","magic":"ASCII text","md5":"ebf1c35ddafb65ca37abd347cd532bb2","sha1":"b119ea1f58da285e727f45689d0c14af40134c60","sha256":"17ed7b91580f4a3411a0037d47a523b48f58a20c5d3c8c395f5547c8c3523c28","sha512":"1c0de4f3214057ce5117303ecac1cbf739dcf4c9a4d3ec02c3264c70e2f9cae0e5e2978b4cbd91f34a68974766f6b16038cad58b86108f01678190053b7d2f5e","ssdeep":"192:GHVpAJaUDfM56f//EUfQw2L2nr6yENksTzSH76ijCHoHdkHqrNzolA8sE1lJlulf:BfX/rz1AzSb6YCH4dkHqrNzofP1zEBD","tlshash":"5242f1476c237f5c686e4cbe5dcefb9d5e2d95e06f0a0fdf24a4b4ac43494960122b82","first_seen":"2026-09-01T04:15:23.0592Z","last_seen":"2026-10-11T02:30:38.846745Z","times_seen":4,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/et-cache/3106/et-divi-dynamic-tb-3454-tb-3098-tb-3508-3106.css?ver=1773156051","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.363Z","timestamp":1791685768363,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/et-cache/3106/et-divi-dynamic-tb-3454-tb-3098-tb-3508-3106.css?ver=1773156051 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 10 Mar 2026 15:20:51 GMT\r\netag: W/\"69b036d3-608c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":24716,"size_decoded":4440,"mime_type":"text/css","magic":"ASCII text, with very long lines (6470)","md5":"03ae86d56e2dd8f6ab47a099beecbee6","sha1":"57de85ec03af34c8fb4d4d79c57180d3e8049c53","sha256":"9d036d9473682f62f9266b89dfe188bc72f8a234f89b9d1e215c94100e406050","sha512":"2aff4c92554b5a030a01d466a277d7aa76ee7063faf9f69e20e6b829a991085c79f2838ee790e9014c49ed62a29083a981942e976c7985d7ea6deb2eacd1770c","ssdeep":"192:J5JsFfk+7WI7h/IfIrkcmf1lS1NNZIORnNwaZ/X9iAD6wMk9zWhMvLZ69v5:TJK4x41xt9sL","tlshash":"74b2956f937a3276f2139339f993ab3942fa9143e5530afa7d02e554eb86042033759c","first_seen":"2025-07-01T10:26:01.246792Z","last_seen":"2026-10-11T02:30:38.847769Z","times_seen":3,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/themes/Banso%CC%84%20child/style.css?ver=4.27.6","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.373Z","timestamp":1791685768373,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/themes/Banso%CC%84%20child/style.css?ver=4.27.6 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 03 Apr 2022 19:20:58 GMT\r\netag: W/\"6249f39a-89d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2205,"size_decoded":1208,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"9208308d01dae8f588a787cad5baabdb","sha1":"439fa63a859765050650705df15178d71671bfdd","sha256":"371fade9be2d81da6722f88c3f9f8b365d1139e1f743c38d2936bdd15b1fc965","sha512":"95230739d72e9a54e09286cb97c860b8552c04942de577057ddb3e0a0d4d14fdf9db9ac077103051d1fd4741878a184efbc760e1a6616cd934f4157660672171","ssdeep":"","tlshash":"6b4123e3700027060427a8ab2d87bb2a77f48857c61e59ea2c0e896dc7b76cd18513cd","first_seen":"2026-10-11T02:30:38.848942Z","last_seen":"2026-10-11T02:30:38.848942Z","times_seen":1,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/plugins/cookie-notice/js/front.min.js?ver=3.1.9","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.377Z","timestamp":1791685768377,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/plugins/cookie-notice/js/front.min.js?ver=3.1.9 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 15 Sep 2026 09:13:21 GMT\r\netag: W/\"6aa90c31-23b8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":9144,"size_decoded":2321,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9144), with no line terminators","md5":"73f7534d35cab74662c1b51911245436","sha1":"fedfbfa833397d36251235f1b8824ff4b1a58b87","sha256":"0a65b0a2f930ac72138c36aea669a3c760c93ce1093e52fb2c542d46f8d1ec61","sha512":"9a27c144315bdcda134066bda559192bc7fc426c0a3bbddbbfa43043d3c31d0411698ef679499b9442c52e5ec4db4f0c54c4cd0aeeba25f0407bc7c04ad5ad37","ssdeep":"96:c7FZY7Qu0zRHEFjedGgfxW+06CwuEUKj4vZPT4pExVfHBgRV9Qfd/Pn0W:uYezRHIJgfY+06lj4BPkExFuRVwP","tlshash":"bf1232dc7b341b7809c781ff25cf65907a331adad89414283436ecd28bb9cd616226b6","first_seen":"2026-02-11T02:27:55.993129Z","last_seen":"2026-10-13T05:59:26.295312Z","times_seen":6935,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/et-cache/3106/et-core-unified-tb-3454-tb-3098-tb-3508-deferred-3106.min.css?ver=1773156052","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.380Z","timestamp":1791685768380,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/et-cache/3106/et-core-unified-tb-3454-tb-3098-tb-3508-deferred-3106.min.css?ver=1773156052 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 10 Mar 2026 15:20:52 GMT\r\netag: W/\"69b036d4-6d6e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":28014,"size_decoded":3228,"mime_type":"text/css","magic":"ASCII text, with very long lines (28014), with no line terminators","md5":"97ac01546cde1d6afec998a8bf1f5662","sha1":"d810936710106154e1e03a853be25a517e24942f","sha256":"2f153ceb0133517780533dac0276d9cb9807c055e11009cdb17f81ce7e0db72d","sha512":"dc410a8e233bd3e27e33069ebf6ea6b9a7e816ca7631e91618937865ceffe8172180d6a3724ade9fc92dd75a2967f639f5b70861077bb4cf3b05e45ff8f27e43","ssdeep":"192:bQlAOsI42o2nwz+qmhEj3eoEwwzX9kReK2p4U7FOwKVW/Vly0E6sWiinzXEqfzXE:bQg12o2XlKkK2PcVW/Vly0nhLj4","tlshash":"26c29bcfa7b63a36b6135219bc122f789ffd800391655961ac53cb60c7e60da24780fe","first_seen":"2026-10-11T02:30:38.851211Z","last_seen":"2026-10-11T02:30:38.851211Z","times_seen":1,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.7","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.396Z","timestamp":1791685768396,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.7 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 15 Sep 2026 09:13:15 GMT\r\netag: W/\"6aa90c2b-348c\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13452,"size_decoded":4236,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-10-13T06:31:22.975923Z","times_seen":254061,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/2021/05/Ecuries-masdigau-rando.jpg","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.426Z","timestamp":1791685768426,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/Ecuries-masdigau-rando.jpg HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 330353\r\nlast-modified: Sun, 03 Apr 2022 19:24:08 GMT\r\netag: \"6249f458-50a71\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":330353,"size_decoded":330606,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.3 (Macintosh), datetime=2021:05:04 10:01:45], baseline, precision 8, 513x529, components 3","md5":"888c0c02101c3a9c118d6dffb2d34016","sha1":"bfe349abbb20feda18ae2e44120ec65186fce2e6","sha256":"c5b98936a449bf61fe11a718887018669f1d95d7aca4f510112f9af840f6e51b","sha512":"1ff92437564371e74a8d661770c18d59363181dc9ad47c222e9b81bc36c36ab6b222c88eec91bc6e1e0236aad83476de5a8d6c89895053701b49bc7f7f64eda5","ssdeep":"6144:pd4pd4ReO70g6d5IySHqO5kylrwAslNvFr3jiqjbbx:QQRe+lF5kytwAmsQ5","tlshash":"2b6423b6363b9700fb7a4c30ca4c9bc25337a7945bd212b638be7ddc23249a476015a7","first_seen":"2026-10-11T02:30:38.852766Z","last_seen":"2026-10-11T02:30:38.852766Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/2020/12/Ecuries-masdigau-poneys3.png","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.381Z","timestamp":1791685768381,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/uploads/2020/12/Ecuries-masdigau-poneys3.png HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 546894\r\nlast-modified: Sun, 03 Apr 2022 19:30:01 GMT\r\netag: \"6249f5b9-8584e\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":546894,"size_decoded":547146,"mime_type":"image/png","magic":"PNG image data, 513 x 529, 8-bit/color RGBA, non-interlaced","md5":"d96c415be7987b231d035922642f6437","sha1":"cadb21886ba8fd20ec96c71eb3852659ff9af3a3","sha256":"d684c9b9ecbb976aa7b3bab9ffa952a25386bb3b537fcf148cc849df8e884d2c","sha512":"d235747a50376ea318ecc29291b8cbde232dfff7dddd06e34f51fb446beff50a584923a2a70b1670f56d3e24339a867d18033d61f1bb54396dd7cdb54385bf6b","ssdeep":"12288:74VgxohQvPta6LuyRiCjLe+Jp1n5LvhJhh1+:M2xohQE6LuTgLln5hJ71+","tlshash":"18c423581108c7943ae20f90e186d80bbefc13b9d51cc759e11fe5db2f5ea81daac94b","first_seen":"2026-10-11T02:30:38.85377Z","last_seen":"2026-10-11T02:30:38.85377Z","times_seen":1,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/2021/01/IMG_1780-scaled.jpg","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.435Z","timestamp":1791685768435,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/uploads/2021/01/IMG_1780-scaled.jpg HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 805095\r\nlast-modified: Sun, 03 Apr 2022 19:25:06 GMT\r\netag: \"6249f492-c48e7\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":805095,"size_decoded":805348,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=11, manufacturer=Canon, model=Canon EOS 600D, orientation=upper-left, xresolution=184, yresolution=192, resolutionunit=2, datetime=2021:01:16 16:18:20], baseline, precision 8, 2560x1707, components 3","md5":"8bc8ac81c2a8b515f40145f06a9acdd3","sha1":"4a16b7164835d9ebdbb28d5d2847b12d4e25e9a5","sha256":"c14d3e9d105068654098c36501ab51f53217587b5d1bbb4ebffb2535b9dce067","sha512":"d26d953f2ab222023bb6101cb9d963ced771fd6f39f157b57d5009f97ab383ce832180ec1315114262379f1805a3354700215e2b3b444da37d73e27d0b8e83c6","ssdeep":"24576:og3EUjvEj3AJxwQw9cOkuXBKtfGnj8IQb:og3EUjczAJxwQTuxK4j8l","tlshash":"9c05233c27050ceec05064bdd7cbe38552d6f2a52c85fe82bf1ee117b785778291a9a2","first_seen":"2026-10-11T02:30:38.854919Z","last_seen":"2026-10-11T02:30:38.854919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":309,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/2025/02/Capture-decran-2025-02-19-a-20.41.40.png","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.462Z","timestamp":1791685768462,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/uploads/2025/02/Capture-decran-2025-02-19-a-20.41.40.png HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 1427359\r\nlast-modified: Wed, 19 Feb 2025 19:42:03 GMT\r\netag: \"67b6340b-15c79f\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1427359,"size_decoded":1427613,"mime_type":"image/png","magic":"PNG image data, 868 x 1258, 8-bit/color RGBA, non-interlaced","md5":"75daf53b129531ba05646abcaf5e8f89","sha1":"14eb2501cbe227eeb8e19475aa3036402f4b3ddc","sha256":"87e907c7d418e06992a486161fae4f1a379507a9ddd3aa69111896aab8413039","sha512":"936e5a9e279e0783d41ef65983466f0ad3acfdf13d63e4f528b69fc7812e6c8f63cc75394bfdb2b92eabf2a3f5732a86e931aeac4d632c0ee26294ad0328ff9d","ssdeep":"24576:Mrcop9Bv9A9B47Koj3vHlEZWLed4QEqth3Wdzd/:MrPBlAk7/j/KZWs4QLth3Wd9","tlshash":"0d25335ca384e0b9dafe46b75bd4a0521e440bde3e361477dccbc9932dbf212999210b","first_seen":"2026-10-11T02:30:38.856054Z","last_seen":"2026-10-11T02:30:38.856054Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/2020/12/Ecuries-masdigau-view3-scaled.jpg","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.582Z","timestamp":1791685768582,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/uploads/2020/12/Ecuries-masdigau-view3-scaled.jpg HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1155448\r\nlast-modified: Sun, 03 Apr 2022 19:29:30 GMT\r\netag: \"6249f59a-11a178\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1155448,"size_decoded":1155703,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=15, height=3000, bps=0, PhotometricInterpretation=RGB, description=default, width=4000], baseline, precision 8, 2560x1920, components 3","md5":"19da066336cc892d6efae71d6febf54a","sha1":"effb916d193366158cafc945428abc6e60877dbb","sha256":"f3b7d8ffd763f14114d3f853e9b0b3612000359b992b39bd74a454ead17e93dd","sha512":"e530b5a96aafdae5a60404a1ffefea7baec4074ef0b6bed5117a8ed768ea50d6632b3537ea30ed02c1b6dea699f56122f42f8d94bb71163759856569dc09c22c","ssdeep":"24576:AiBxyPd/A/MuP3A+iF/JXdnMWH0gVVxP+1aol20bi:AiqPq/Mu1iFBXdnMgXVxP+1aolDi","tlshash":"db2533548ce3a8a3cab5a7e6dd07199c906e87b03c163710b6ec1f94776f4e009c56eb","first_seen":"2026-10-11T02:30:38.857139Z","last_seen":"2026-10-11T02:30:38.857139Z","times_seen":1,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/2020/09/Ecuries-masdigau-view25-scaled.jpg","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:29.058Z","timestamp":1791685769058,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/uploads/2020/09/Ecuries-masdigau-view25-scaled.jpg HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: burst_uid=32c525871407fd786c3bbff4a8cf81e5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"burst_uid","value":"32c525871407fd786c3bbff4a8cf81e5"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:29 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1186339\r\nlast-modified: Sun, 03 Apr 2022 19:28:22 GMT\r\netag: \"6249f556-121a23\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1186339,"size_decoded":1186594,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=15, height=3000, bps=0, PhotometricInterpretation=RGB, description=default, width=4000], baseline, precision 8, 2560x1920, components 3","md5":"012bd7f27f19e459a3eee8ef588a8497","sha1":"d9f418bd15355eb8b5e12819ab0c4bb0d1580e62","sha256":"e5adf4d49d5aebf0aca4bf9b20b083f6906abbbf47bb76f01b8773d68867f07c","sha512":"927587fdd988f092cedc022f960370181d04c89445d895fbb1ef3f8b75bce01c6f322d98cb907b756141d25bbbe2b136a0f44ebb6cf64743a6a6385958371b16","ssdeep":"24576:WOUhC3pY+LlRN7ZKCQXlhsfXUA4wMHcVmguzkgYX4zYy+Z34wI3swYriCp:WOD3BLl7ZN2eEThemgnm+Z34u","tlshash":"fb25332e47569252ceed53b59ff4cda2a082fd1fa610a907bb2dbf74730e1a410de211","first_seen":"2026-10-11T02:30:38.858421Z","last_seen":"2026-10-11T02:30:38.858421Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/salvattore.js?ver=4.27.6","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.403Z","timestamp":1791685768403,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/salvattore.js?ver=4.27.6 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 10 Mar 2026 15:20:10 GMT\r\netag: W/\"69b036aa-217e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":8574,"size_decoded":3476,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6322)","md5":"bf7fe805ab945e4b2c4d56da59476811","sha1":"307135fd2987f477c7bd50fcd0cc28a1cff1f568","sha256":"b6205029e1016596807b655c8f57818736a787e32ceb1407effa152ac3bb9380","sha512":"1237ac2a5bd2bd37b403f747d0ce3db65ed1e9c67b92aa4018b08c0747167470de113e36a01950f3a266b815806170f4c15068cad18ab71eb32957fef2d6ffa4","ssdeep":"192:dPmRQHMXDHcCC3fxqC0TN6ZbucRm5i5HHQpcaQGcFjAW90YgtKryaxggy6cqF4/8:dP+TXjcCC3fslQucYu0ca7cFjAW90gxr","tlshash":"1102d99db62430616b9b36bd233fa11ef573213ea4090094956dc8ec6971c4b82e7edc","first_seen":"2023-03-07T01:26:02Z","last_seen":"2026-10-13T03:22:09.459474Z","times_seen":15150,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/2021/01/IMG_1814-scaled.jpg","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.432Z","timestamp":1791685768432,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/uploads/2021/01/IMG_1814-scaled.jpg HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 769220\r\nlast-modified: Sun, 03 Apr 2022 19:24:49 GMT\r\netag: \"6249f481-bbcc4\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":769220,"size_decoded":769473,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=11, manufacturer=Canon, model=Canon EOS 600D, orientation=upper-left, xresolution=184, yresolution=192, resolutionunit=2, datetime=2021:01:16 16:20:34], baseline, precision 8, 2560x1707, components 3","md5":"cd1300b14721517c57b50148fa059dea","sha1":"74d50916664fd08211eae4c345e91ac5a9b02a99","sha256":"54a568e09857456ecd1beacfb4c9fe335241608140c9dace2b616abb28c053d1","sha512":"a657ecd4b48c2ed74351c28517360a3819a2ffed023162a83200cde4688a9fc5437d5551f53fe57742895c45c55a562080ccba91ed9ac87c6ba4bc31980a21ee","ssdeep":"12288:bF+HOh4ZbnOsZpOxBb43LVv49qudxCyqqUWR5iP2vxHQRthB9g8f/knSI/vS+9Fr:IOczOvcLV49PnaJ2etri8Ub/vd93owOW","tlshash":"daf4236a97d067b2dc70d770f1073da076f9c2a7e7245a05be0c8e11af933812ad94e5","first_seen":"2026-10-11T02:30:38.860658Z","last_seen":"2026-10-11T02:30:38.860658Z","times_seen":1,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":291,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/2021/01/IMG_1907-scaled.jpg","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.438Z","timestamp":1791685768438,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/uploads/2021/01/IMG_1907-scaled.jpg HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 773342\r\nlast-modified: Sun, 03 Apr 2022 19:25:28 GMT\r\netag: \"6249f4a8-bccde\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":773342,"size_decoded":773595,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=11, manufacturer=Canon, model=Canon EOS 600D, orientation=upper-left, xresolution=184, yresolution=192, resolutionunit=2, datetime=2021:01:16 16:37:05], baseline, precision 8, 2560x1707, components 3","md5":"5702a42fe4af2c0fb8ca6c3b2137cf9d","sha1":"8177d6f0f8ee04c1de44b62de4eb2fced74dac0a","sha256":"588a0356a9e845c123925c54e4efb1b9e69dc70e1f3a20696fba0732c0b48693","sha512":"fdd1a35f6df022d8f20207b6c007228c27bc10caf4c0bceab94dac9963b6ec00bc9d5b96bcad6ac8f059d4d42a40ae325eead07ec30341b9d99790d9a2c05718","ssdeep":"12288:8bSwnqhjbvDoeVnJibTZt5MtvRqL4mlH3TqA2NPxc2nrJomidSRwKhf/2Dy6oMTh:8fqtjVnJ8B4vRm3XOAAPjnNo2lfdvMTh","tlshash":"74f4127d9cdbb6aacb90567df80697b05b280629f3216731f29e5e3dbf020447a6c350","first_seen":"2026-10-11T02:30:38.861879Z","last_seen":"2026-10-11T02:30:38.861879Z","times_seen":1,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":293,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/2021/01/Fichier-2100.png","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.621Z","timestamp":1791685768621,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/uploads/2021/01/Fichier-2100.png HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lesecuries-du-masdigau.fr/wp-content/et-cache/3106/et-core-unified-tb-3454-tb-3098-tb-3508-deferred-3106.min.css?ver=1773156052\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.4.26\r\nstrict-transport-security: max-age=63072000; includeSubDomains;preload\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(*), autoplay=(*), camera=(*), encrypted-media=(*), fullscreen=(*), geolocation=(*), microphone=(*), midi=(*), payment=(*), display-capture=(*)\r\nx-frame-options: SAMEORIGIN\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ncross-origin-embedder-policy: same-origin\r\ncontent-security-policy: upgrade-insecure-requests;\r\nvary: Accept-Encoding,Cookie\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\np3p: CP=\"ALL DSP NID CURa ADMa DEVa HISa OTPa OUR NOR NAV DEM\"\r\nlink: \u003chttps://lesecuries-du-masdigau.fr/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Contact Form 7:6.1.7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Yoast SEO:28.4","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"FitVids.JS:4.27.6","description":"jQuery plugin for fluid width video embeds","website":"https://fitvidsjs.com/","common_platform_enumeration":"","icon":"FitVids.JS.png","categories":["Widgets","Video players"]},{"name":"PHP:8.4.26","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cookie Notice:3.1.9","description":"Cookie Notice provides a simple, customizable website banner that can be used to help your website comply with certain cookie consent requirements under the EU GDPR cookie law and CCPA regulations and includes seamless integration with Cookie Compliance to help your site comply with the latest updates to existing consent laws.","website":"https://wordpress.org/plugins/cookie-notice","common_platform_enumeration":"","icon":"Cookie Notice.png","categories":["Cookie compliance","WordPress plugins"]}],"data":{"size":177274,"size_decoded":28764,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26351)","md5":"7d99b0e712773aa7557f2a2edc57da2d","sha1":"3acbd599e8a630597cb4b4e900dd16094010c721","sha256":"35680dbf210e7262f460d9601833e794a9304206b5770cd6b473df1c8b16ee40","sha512":"3075862c1db33f395d62953fdb2864bf7669a103225fa78e6a8876673e413406e501f41df450f8c4f532925fdd0d036608ce66f3d9041a09f79813b724436d9a","ssdeep":"3072:W7ixAwX4kD8leL9jVgY1DxG5OubM+RqmCn:Wexj4kl1Vv","tlshash":"f204e85f977a3179b20387497ac5b728969dc113ea110afabdb1d468cfc226301b335e","first_seen":"2026-10-11T02:30:38.863152Z","last_seen":"2026-10-11T02:30:38.863152Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.393Z","timestamp":1791685768393,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 15 Sep 2026 09:10:26 GMT\r\netag: W/\"6aa90b82-13f3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5107,"size_decoded":1994,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"140ad332a76e011554bcab096a37f4ac","sha1":"72c9da62a624a99da82f8b53ecd2ba8d8e1bca88","sha256":"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1","sha512":"ccf2833ab9908f740779b84bfd97903f96572aedf6eb0a37f08e51a88f0634e03408bd3e87e2e0586483835a6e09736848e44907848902ef11f8114a21029eca","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiB:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2B","tlshash":"4fb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-08-19T23:17:42.247117Z","last_seen":"2026-10-13T06:33:49.570784Z","times_seen":29065,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/2021/01/IMG_2036-scaled.jpg","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.431Z","timestamp":1791685768431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/uploads/2021/01/IMG_2036-scaled.jpg HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 604365\r\nlast-modified: Sun, 03 Apr 2022 19:24:32 GMT\r\netag: \"6249f470-938cd\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":604365,"size_decoded":604618,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=11, manufacturer=Canon, model=Canon EOS 600D, orientation=upper-left, xresolution=184, yresolution=192, resolutionunit=2, datetime=2021:01:16 17:16:27], baseline, precision 8, 2560x1707, components 3","md5":"fdd2ea01fb4ebf2e72c51194c07d0127","sha1":"7f08870c403ab1a1bec481fb363907f551603977","sha256":"c2dedc21eb499e31b0e7c5261dd796198caa7b520d25ac9d1d8f6da01f29df81","sha512":"9a5b765a7c12d5f2812d02762d616390302c4b72097d495d5ee5cefdfa32482409c8d117ef4bbd8670cf5f65744a997ac717f6a2e058fbeb244babcca0ad4c0e","ssdeep":"12288:256rSQMMl1Frvib7IButl4DOSwsxnx6YsbwBF3k99gRD:256rSQBwIBubSPxxH2wb3k9+1","tlshash":"6bd423a30be338b2c05b44f164ae957728363e907297577e314c1fa5ebbb584a2d01ed","first_seen":"2026-10-11T02:30:38.86804Z","last_seen":"2026-10-11T02:30:38.86804Z","times_seen":1,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":230,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/2021/01/logo-theofficecomm.png","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.469Z","timestamp":1791685768469,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/uploads/2021/01/logo-theofficecomm.png HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 12333\r\nlast-modified: Sun, 03 Apr 2022 19:24:58 GMT\r\netag: \"6249f48a-302d\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":12333,"size_decoded":12583,"mime_type":"image/png","magic":"PNG image data, 459 x 336, 8-bit/color RGBA, non-interlaced","md5":"18af63130dbe777856ff1e98c3b07b8f","sha1":"5d9ab090b9b00243eeeed787b4c7cd1fba577ba9","sha256":"988af0754e1f5b1cbe522a511c7b29029a76b7a401d487f86189ba184a916dd5","sha512":"a3ff49554c7ab8d60e220493f20451738b7e29da72892c86c409d52f38520a8f638f9aaf6c5cd658393d8e649b3fe6ae8829ed2646af47f89d33a9052ddd5776","ssdeep":"192:xdi/MsHHHHHHHHHHHk2pI0uyDtx99kWlj31MPb9XKiPtLPFTQNvsS54gRU/x54o3:xqMepIBy79913kXKgS9Y44gk2Di","tlshash":"9f42afe92568299fd2628d64b9def82b7f3d256f10cbad03b30a71c2596644c18cb09c","first_seen":"2026-10-11T02:30:38.869201Z","last_seen":"2026-10-11T02:30:38.869201Z","times_seen":1,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/2021/01/Logo_BEA-RVB-1280x1280.jpg","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.468Z","timestamp":1791685768468,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/uploads/2021/01/Logo_BEA-RVB-1280x1280.jpg HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 106111\r\nlast-modified: Sun, 03 Apr 2022 19:26:45 GMT\r\netag: \"6249f4f5-19e7f\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106111,"size_decoded":106364,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1280x1280, components 3","md5":"af901c8a81b80329aa8b492f7ec93cec","sha1":"b9f10c74b64f15ff23e7d5653a56c230d200e69b","sha256":"8b1ac7621842218b2cf888e85f3ecb41c8ad9bd78e913465c8009aaf7a56fd1d","sha512":"d49c28ba46dfbef32aed18d70516f34031aa17fd14b60f82d64466c78638bef13d3497c137f6e23f26f7017344871de81e51634ead45285127fe67d5f8c010d1","ssdeep":"1536:Ah5jYQFh2ist6Zi49AHU4o3ZkQ84ObZpEpbrd0MjWanosvLkZFUCFJc:Ah5jdvZst6ZZvXW7tZ6u2vLORFJc","tlshash":"61a3f27b4715269feb868e3acb572021fcf5b4489b1954c3e9115b684bbc3cccc6e942","first_seen":"2026-10-11T02:30:38.870342Z","last_seen":"2026-10-11T02:30:38.870342Z","times_seen":1,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/plugins/burst-statistics/assets/js/timeme/timeme.min.js?ver=1789463582","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.375Z","timestamp":1791685768375,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/plugins/burst-statistics/assets/js/timeme/timeme.min.js?ver=1789463582 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 15 Sep 2026 09:13:02 GMT\r\netag: W/\"6aa90c1e-1930\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":6448,"size_decoded":2067,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6448), with no line terminators","md5":"421e614656f7380a73fff0417c2c5c29","sha1":"3d78737fe7c0436160cda8678e9fdcd84525417b","sha256":"683c9b0530c613523f1b02a246d7bccaa9f68af46df061f4d9f72c178c01b874","sha512":"0e5e5ab37a621bdfa3b62575169025fc48cf7010897ab3eb23aec4c9c60d3d644d32ce209c1472ad1f4c5a86618bcdc46803e86a91fd385c1d63e63aa531d87e","ssdeep":"96:+beWvTIWfoXi8ULA+8SoCIDAF7kVhOQtrzFfQDwiA0DX35vUjsWRUm1k1rhbr7:+6WvTIWwX4E+7VIMmVhOQXQMIX3nr9r7","tlshash":"c7d1d6dae7691973cafed383b434a3e4693667601c0c109c66be1fbd7102e8561e067e","first_seen":"2023-03-07T13:17:05Z","last_seen":"2026-10-13T05:37:38.922534Z","times_seen":6214,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/plugins/supreme-modules-pro-for-divi/scripts/frontend-bundle.min.js?ver=4.2.7","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.405Z","timestamp":1791685768405,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/plugins/supreme-modules-pro-for-divi/scripts/frontend-bundle.min.js?ver=4.2.7 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 03 Apr 2022 19:22:23 GMT\r\netag: W/\"6249f3ef-8a3\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2211,"size_decoded":792,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2211), with no line terminators","md5":"033e70a1458a0949988fb6f8a5185221","sha1":"b331d1f03a9f28d7c2806611ff09965580647d04","sha256":"04c16b21d532799a04ac9bf9e0e6338316f0080dfeb7333a60ab862ad33b90ff","sha512":"cc01316abde65ea78c7027b0674560d044764a6e0b698068a0982c8864a2e933dd2c27a2f6e804f18d7becd7d1d66a9e2a82ad69f4d2ff267d929f044d483704","ssdeep":"","tlshash":"9641985e35f5205a1a67b4f22e6fb18c22ea5a1a7cfc3482d2f1d1b69e31a0d1153e1c","first_seen":"2024-08-20T15:15:49.927127Z","last_seen":"2026-10-11T02:30:38.881718Z","times_seen":12,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/2021/01/Ecuries-masdigau-logo.png","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.424Z","timestamp":1791685768424,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/uploads/2021/01/Ecuries-masdigau-logo.png HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 5150\r\nlast-modified: Sun, 03 Apr 2022 19:24:48 GMT\r\netag: \"6249f480-141e\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":5150,"size_decoded":5399,"mime_type":"image/png","magic":"PNG image data, 257 x 106, 8-bit/color RGBA, non-interlaced","md5":"93a1669e9bf8fc042e77da51295b3e87","sha1":"90cdc3dd89b9f011fc748808b0ec780065da2856","sha256":"39f97404ffab3ca1483a7fcd2cd93aec26fdd493190906fa96dcf93485eec6ec","sha512":"b90112206361a0fed102871a98a47fa218f3d4c8b24c5f8bb9290c0dffd47cd1ac7501d1e7d5fdf371c3eb82cde4173ae911f774ad137ee21da78394afa3e851","ssdeep":"96:SSgHjNrQ4MNNKCCOaKHGrDUESEjpT3YY9dMgKWwiJNlr+gl1EiA:7I9MNgCCyHGrDLxNTB9dmi52","tlshash":"95b18e919111f5033a4829643adf45a7dff809cdff7c662c2a644d38fe25864f6d3600","first_seen":"2026-10-11T02:30:38.884389Z","last_seen":"2026-10-11T02:30:38.884389Z","times_seen":1,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/2024/11/Jumping-2025-400x284.jpg","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.460Z","timestamp":1791685768460,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/Jumping-2025-400x284.jpg HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18805\r\nlast-modified: Fri, 08 Nov 2024 18:11:18 GMT\r\netag: \"672e5446-4975\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":18805,"size_decoded":19056,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 400x284, components 3","md5":"44184b393dcd77471bbd0c42f54bce1f","sha1":"1c7f1b8c15839e6d8a1483ecac89e99a10c41f29","sha256":"bb7a9e0d54c87b7f54925308519f52fa347aad6c1e64041ad069e4007962377c","sha512":"8d6795f94127f3c1badf76760919fb79d3d7e1f45ec51b3af19fcb8e11b1f7c4be62ce9b4964bea68787fde0de08ee531447709a295702f300e1768f6fd32f1d","ssdeep":"384:lnzL9mYXhwNUiO6en8KToC2ZYFGX1mdzt3fDWGDod+QSnYvEn:lnsYXsUfD/yQht37We++Tnh","tlshash":"8d82e02a07c48adc5e4fae20459db12546c2050efa0ff581f8e7e708a84e0df4ae6e45","first_seen":"2026-10-11T02:30:38.885517Z","last_seen":"2026-10-11T02:30:38.885517Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/2022/02/JEF_7127.jpg","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.439Z","timestamp":1791685768439,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/uploads/2022/02/JEF_7127.jpg HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 103476\r\nlast-modified: Sun, 03 Apr 2022 19:23:48 GMT\r\netag: \"6249f444-19434\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":103476,"size_decoded":103729,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2, orientation=upper-left], baseline, precision 8, 640x427, components 3","md5":"9248df115b4f9c4c045844b13e4d3445","sha1":"66de9219af38e083c1d6eff7f4eb79aa2982c1d4","sha256":"226b15b0ac9f3874adba36a8b2dd1076c8435e5b9297c936cd4c16107771f0c2","sha512":"3a48e612ce1fbd0ed50ff979204c5757805e67615473db4f5c8a88b79f729032f319d10e66dbca262484e0d41d49e74d4f4728ca31dd84657ff5e61c9ed7b095","ssdeep":"3072:RdcwD/0POzwtUvTUlMpcw7uG/e80K60Dj4tz8BUQG5:Rd/D/0mzYJlOctxKu4BU15","tlshash":"55a312626a0bb470b342cff0c90287d9e06c9de3eb715f168d9016e636369e7e6c9125","first_seen":"2026-10-11T02:30:38.8871Z","last_seen":"2026-10-11T02:30:38.8871Z","times_seen":1,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/2020/12/Ecuries-masdigau-logCCF-1280x1251.jpg","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.465Z","timestamp":1791685768465,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/uploads/2020/12/Ecuries-masdigau-logCCF-1280x1251.jpg HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 114338\r\nlast-modified: Sun, 03 Apr 2022 19:29:51 GMT\r\netag: \"6249f5af-1bea2\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":114338,"size_decoded":114591,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1280x1251, components 3","md5":"82675726d9d86bb4985bcb8cfeb1278e","sha1":"009c31469d1fe288ea635b71f01d97445e7681d0","sha256":"1416a4f4f8b58cd7c5db6f80fa433aacaa1d4865d3750eb2da5b6653a61fc39a","sha512":"216ebf4f28ec3c0c821a9bcdf113e12148b5d1dc1328016223caa703f2f357b6bc9d9291593dc4b65411fbe875a8c66545e9bd6729fd13e924f06fb2701501e2","ssdeep":"3072:yNxuUHAZweqdcks10QdDWNqkIwRgnFDdyPZOhnBvh:Yne8s6QdDa2FDdWOj5","tlshash":"82b3f16bff57edfdccd06bf0110a0372fc298c16e9a599860935a1f132e1a573a81b52","first_seen":"2026-10-11T02:30:38.889636Z","last_seen":"2026-10-11T02:30:38.889636Z","times_seen":1,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/plugins/shiftnav-responsive-mobile-menu/assets/css/fontawesome/css/font-awesome.min.css?ver=1.8.2","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.369Z","timestamp":1791685768369,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/plugins/shiftnav-responsive-mobile-menu/assets/css/fontawesome/css/font-awesome.min.css?ver=1.8.2 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 17 Nov 2025 10:15:20 GMT\r\netag: W/\"691af5b8-7918\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":31000,"size_decoded":6871,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-10-13T06:28:07.375404Z","times_seen":323095,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/plugins/shiftnav-responsive-mobile-menu/assets/js/shiftnav.min.js?ver=1.8.2","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.407Z","timestamp":1791685768407,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/plugins/shiftnav-responsive-mobile-menu/assets/js/shiftnav.min.js?ver=1.8.2 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 17 Nov 2025 10:15:20 GMT\r\netag: W/\"691af5b8-42dd\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":17117,"size_decoded":4782,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (578)","md5":"a4e5f305df3c0b782ca9c55a2a39d5b6","sha1":"2b22e4d6423ba3283d0dc617ff523692eda21eaf","sha256":"ddab3ad52d3da4fe903d68527e52bcc1042eb3d0081eb71f604ab509965a2efc","sha512":"eb7d0b180f2657ecb1f945a944a96d130a6d9eea7a78717516ecc0fa645edf16e57facbd16ca382b7b61e2ca68967a31efc451bc792de08130ea64e024289a90","ssdeep":"384:VbejROfhUIKRm55r6rulOx1LOQ58Y6EMezo0znd:VbMs2/x1LOQ5x6DeBB","tlshash":"4e726256b14c306271fba1acd9aeb1417039687aa5370484383b49d51d1eeb832aff3f","first_seen":"2025-08-26T08:47:46.114001Z","last_seen":"2026-10-12T19:52:31.619973Z","times_seen":401,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/plugins/supreme-modules-pro-for-divi/public/js/imagesloaded.pkgd.min.js?ver=4.2.7","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.408Z","timestamp":1791685768408,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/plugins/supreme-modules-pro-for-divi/public/js/imagesloaded.pkgd.min.js?ver=4.2.7 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 03 Apr 2022 19:35:33 GMT\r\netag: W/\"6249f705-15da\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":5594,"size_decoded":1940,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5477)","md5":"e2c1a80b99251b7b94726b41312fb160","sha1":"6d3e11174e22668e69df236e5c4542168f7cbfec","sha256":"96abf166b3cbb5f7df525d86fdeeeccea4af3c120b19bc26b0613530a94e8b44","sha512":"4b93d9f46c4964ed7ab53f6bdd6269fd269f9f7d5ebbcb96af382531a8434f876c9a0a96a27458f60ae4de3fb7b5fb8fafd58936c7e8a0e47b1a2ec72f95b68f","ssdeep":"96:bwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:bwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"19b122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-10-13T04:46:52.832482Z","times_seen":25795,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-11T02:29:27.711Z","timestamp":1791685767711,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 34153\r\nstrict-transport-security: max-age=63072000; includeSubDomains;preload\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(*), autoplay=(*), camera=(*), encrypted-media=(*), fullscreen=(*), geolocation=(*), microphone=(*), midi=(*), payment=(*), display-capture=(*)\r\nx-frame-options: SAMEORIGIN\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ncross-origin-embedder-policy: same-origin\r\ncontent-security-policy: upgrade-insecure-requests;\r\nvary: Accept-Encoding,Cookie\r\ncache-control: max-age=3, must-revalidate\r\ncontent-encoding: gzip\r\nx-powered-by: PHP/8.4.26, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Yoast SEO:28.4","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery Mobile:4.27.6","description":"jQuery Mobile is a HTML5-based user interface system designed to make responsive web sites and apps that are accessible on all smartphone, tablet and desktop devices.","website":"https://jquerymobile.com","common_platform_enumeration":"","icon":"jQuery Mobile.svg","categories":["Mobile frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.4.26","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Super Cache","description":"WordPress Super Cache is a static caching plugin for WordPress.","website":"https://z9.io/wp-super-cache/","common_platform_enumeration":"","icon":"wp_super_cache.png","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Contact Form 7:6.1.7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"Magnific Popup:4.27.6","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cookie Notice:3.1.9","description":"Cookie Notice provides a simple, customizable website banner that can be used to help your website comply with certain cookie consent requirements under the EU GDPR cookie law and CCPA regulations and includes seamless integration with Cookie Compliance to help your site comply with the latest updates to existing consent laws.","website":"https://wordpress.org/plugins/cookie-notice","common_platform_enumeration":"","icon":"Cookie Notice.png","categories":["Cookie compliance","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":224324,"size_decoded":35000,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26351)","md5":"e24056683656dcd6683280dd15034ba6","sha1":"380b138127092cfe69f9b14f6502b21197da8eca","sha256":"c057189228bc5c7f718d027aff36616c176d566f1ac5fcff1f3104ad83384708","sha512":"f058658abb57c8246e7baae9bdcfb04f793f38b8f56f2cd8be512537796599cf1cbe796a6ba305109e1c95117ace04228d74b9df5159326c6826592777ff39f7","ssdeep":"3072:GB3DSsxZwX4kDO8lRL9j4AYqhY1DxG5Oubv+QpVqmC7rbp:GRDSsxo4kDt14AYqS","tlshash":"f524f99f877a327571034784bddaab2891ecc133954108d6bdbdd45c8fc26a702f62ae","first_seen":"2026-10-11T02:30:38.898103Z","last_seen":"2026-10-11T02:30:38.898103Z","times_seen":1,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":82,"connect":31,"send":0,"wait":79,"receive":31,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/plugins/supreme-modules-pro-for-divi/public/js/masonry.pkgd.min.js?ver=4.2.7","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.409Z","timestamp":1791685768409,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/plugins/supreme-modules-pro-for-divi/public/js/masonry.pkgd.min.js?ver=4.2.7 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 03 Apr 2022 19:35:32 GMT\r\netag: W/\"6249f704-5e27\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24103,"size_decoded":7303,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (23966)","md5":"520e46df77727aaf3d5e799ef241be02","sha1":"d20252cf76c3be8af37a8415d13ad368c762b4d8","sha256":"367d6afdfc741fb48d2d9310e47c3924b693459a74c882c0fc545ec5ed7d55d2","sha512":"25195cbd26405d3f3ee5241002f9255c626ec574e8bb2abca0831a60445941ab01f120431d96946de012b095a9934514adff3d0cfdff69e7cf3eb94c475875c9","ssdeep":"384:cr7mIr/Dh5rA3rzB4rMhr/XWGHW/6rMz1xftF2OUVP4eAnbhfreD6dCBEOav7blM:iSxxGG2/71xftFqVP4eAnI0ROavPSCzo","tlshash":"46b2858f73007425428bf16696af020f7137655c7a4790acba6ad8db1cb984d2037fbd","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-10-13T03:09:10.212061Z","times_seen":12026,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/2021/01/2021-01-17-12-00-55-504-2.png","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.437Z","timestamp":1791685768437,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/uploads/2021/01/2021-01-17-12-00-55-504-2.png HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 2311928\r\nlast-modified: Sun, 03 Apr 2022 19:24:51 GMT\r\netag: \"6249f483-2346f8\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2311928,"size_decoded":2312182,"mime_type":"image/png","magic":"PNG image data, 1440 x 1080, 8-bit/color RGB, non-interlaced","md5":"cfebc14852e49d9f8ac8bd128f75299a","sha1":"67c213fe9c7b9e9e539f539f6387c69a2c3a7e11","sha256":"3910e3dcda5a16595a27db7819f765ae00b739b34c9f4102b2df6e8d439cda3e","sha512":"6a4f8a0830056ee04a75539bd1e0b327adfa8cfa266c41d73275e3e15fe8d18977bd27fd8add7f9c9d05005296107c6beb94f616e5035c0aa269c3b4ab483dfd","ssdeep":"24576:Ot2TsBqHoUa7s7kA2fi5svaul84t2pVRA1G8ENRCZ7Y1Y24f6KP:Ot2YBr7sNIi2vRtr14NEfP","tlshash":"fb25333588f0eb34936d6df24c11fb3a1b82386d01605a8b53e369175e9b4f096eaf17","first_seen":"2026-10-11T02:30:38.900825Z","last_seen":"2026-10-11T02:30:38.900825Z","times_seen":1,"resource_available":false,"data":null}},"time_used":652,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":538,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/2020/09/Ecuries-masdigau-view29-scaled.jpg","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:29.057Z","timestamp":1791685769057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/uploads/2020/09/Ecuries-masdigau-view29-scaled.jpg HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: burst_uid=32c525871407fd786c3bbff4a8cf81e5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"burst_uid","value":"32c525871407fd786c3bbff4a8cf81e5"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:29 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 869810\r\nlast-modified: Sun, 03 Apr 2022 19:27:48 GMT\r\netag: \"6249f534-d45b2\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":869810,"size_decoded":870063,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=15, height=3000, bps=0, PhotometricInterpretation=RGB, description=default, width=4000], baseline, precision 8, 2560x1920, components 3","md5":"b6afc7071bad41cc2c1906d780432d6e","sha1":"a39c375a8a3fbeb1f7fc46d176ff8a826a8a9f48","sha256":"b540ca5330da02af5352614b42b8625526640a89276b4bcb495873af4daf83ae","sha512":"c7469a8fa96ded859801f4bbc504fcd4c4009903ece5b09e2b0fa0f7f2e75c678cf32ed79b1a54d10149bda75ad549ecdf9697abaf8c39a624cfe9863f0835a1","ssdeep":"24576:y3/UpB5FFS/DJ6LtazOOTi/rDox3FlrSV7V:yP05FYDJqtazbTS/433Kx","tlshash":"0c0523e1430347bd79b2dba43d096e0b9bf244a6f612421af90c4ca73b2c7d7524667e","first_seen":"2026-10-11T02:30:38.901885Z","last_seen":"2026-10-11T02:30:38.901885Z","times_seen":1,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.7","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.395Z","timestamp":1791685768395,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.7 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 15 Sep 2026 09:13:15 GMT\r\netag: W/\"6aa90c2b-30e0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":12512,"size_decoded":3597,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-10-13T06:31:22.947722Z","times_seen":247222,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/plugins/supreme-modules-pro-for-divi/includes/modules/MasonryGallery/frontend.min.js?ver=4.2.7","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.410Z","timestamp":1791685768410,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/plugins/supreme-modules-pro-for-divi/includes/modules/MasonryGallery/frontend.min.js?ver=4.2.7 HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 03 Apr 2022 19:38:03 GMT\r\netag: W/\"6249f79b-489\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1161,"size_decoded":737,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1161), with no line terminators","md5":"6e84affc84db9679bce855ac5dd97abb","sha1":"a3177c52c32ae0e13cb313ea2135d5932dc4460b","sha256":"8eb3b7ce819c5beec701f4a22a742266aa8127260ec53a9d8a01c1ac0536f9ff","sha512":"51ea372b50ee2c77865cfa02e53c67a50ab28437d3814b6dfebc86a057aa0ab54551f1d4fcdc4e94e22d768c9283b953b20bd40778c5861de469840bdb993fd4","ssdeep":"","tlshash":"d221215ab1a732b715df6494553f28055233f8b94b8344a1b0ead0b449b8e1c143bf29","first_seen":"2025-09-28T01:55:09.193545Z","last_seen":"2026-10-11T02:30:38.903745Z","times_seen":4,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lesecuries-du-masdigau.fr/wp-content/uploads/2020/12/Ecuries-masdigau-logoEFE.jpg","fqdn":"lesecuries-du-masdigau.fr","domain":"lesecuries-du-masdigau.fr","tld":"fr"},"ip":{"addr":"92.222.229.229","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://lesecuries-du-masdigau.fr/","date":"2026-10-11T02:29:28.466Z","timestamp":1791685768466,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lesecuries-du-masdigau.fr","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 21:26:03 GMT","end":"Wed, 21 Oct 2026 21:26:02 GMT"},"fingerprint":{"sha1":"65:69:D4:4C:53:79:E7:AF:DB:02:FB:65:6D:E0:49:BA:9A:E1:66:F4","sha256":"EA:67:96:F4:37:15:A6:26:4D:63:CA:86:7A:89:E0:19:15:93:C7:27:CF:DA:57:85:B0:A7:2D:13:F2:83:36:6F"}}},"request":{"raw":"GET /wp-content/uploads/2020/12/Ecuries-masdigau-logoEFE.jpg HTTP/1.1\r\nHost: lesecuries-du-masdigau.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lesecuries-du-masdigau.fr/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 02:29:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 263183\r\nlast-modified: Sun, 03 Apr 2022 19:30:58 GMT\r\netag: \"6249f5f2-4040f\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":263183,"size_decoded":263436,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS2 Macintosh, datetime=2007:10:16 12:40:07], baseline, precision 8, 591x886, components 3","md5":"f92cf0f5daa3c4ad22ff55281c5a8b29","sha1":"96489f07ef14a72ae75493c7a06d4b96e5c9309a","sha256":"1fa021089a13fc1ecb432a723ce6fa0fd8c1d62709cc41837813cf50a68678b3","sha512":"43f5f1392c011ae2979ddac3213d79256e02df93378be4121749c15014d7a2c0084fc4874482ffbbe500aac6d00324f6b983490fb238d52f04f2d5e8c251013b","ssdeep":"3072:oY88yEpMnRPALmEpMLRPAL3EpMoRPAL8EpMFRPALVEpMGRPAL5j9EX/imtMC9EXN:o7YwnHvrFYEzWHe4/yphLrBbKEfbc","tlshash":"8644df33dbea4d88d2f583700a50e04235519b496ce16656b82fb83deff2e4d289b1d7","first_seen":"2026-10-11T02:30:38.904986Z","last_seen":"2026-10-11T02:30:38.904986Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lesecuries-du-masdigau.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}