{"report_id":"a39b3486-207a-4b7b-913a-296f2fe44d37","version":6,"status":"done","tags":[],"date":"2026-05-29T21:34:21Z","url":{"schema":"https","addr":"resodanse-salsa.ch/","fqdn":"resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":0,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"final":{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"title":"Accueil - Résodanse Salsa","dom":{"size":157250,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26348)","md5":"235123b31d4f82331ca9b20291396951","sha1":"789b4ece2ddedae40055e6200fc914b278b6fb04","sha256":"b8e43ad10cdc30d4cb1b89131ea295c29b4449b1ec0cb83bdc1696b9fb87c73b","sha512":"fdd050f664d31652bfbfb7bbcc944b569a8d368ffd6edc930c583794673b4b3e4620871b501960fa8eef95bdc3da94e903f62d9a7d94e1a096ba562cc72fb9af","ssdeep":"1536:PyprriD4kvowBmaGFdtVMne3cMhheK2A6B1DdwnJhgzespINF:awD4kwwBmaGFV6MOB1ynJhgzespINF","tlshash":"7de3f89f6bb6327571178309f9e5b33496bcc113ea010ee2fdb5a158cbc279601b261e","dom_hash":"domhash30b99ff486c7c4ae665d1534b4ac061c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"resodanse-salsa.ch/","fqdn":"resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":0,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-03T21:34:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.resodanse-salsa.ch","ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-29T21:34:26.10464Z","last_seen":"2026-05-29T21:34:26.10464Z","alert_count":64,"request_count":32,"received_data":14609430,"sent_data":16263,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WordPress:7.0","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Divi:4.27.6","description":"Divi is a WordPress Theme and standalone WordPress plugin from Elegant themes that allows users to build websites using the visual drag-and-drop Divi page builder.","website":"https://www.elegantthemes.com/gallery/divi","common_platform_enumeration":"","icon":"Divi.svg","categories":["Page builders","WordPress themes","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Super Cache","description":"WordPress Super Cache is a static caching plugin for WordPress.","website":"https://z9.io/wp-super-cache/","common_platform_enumeration":"","icon":"wp_super_cache.png","categories":["Caching","WordPress plugins"]},{"name":"Yoast SEO:27.7","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-24T22:18:17.447529Z","alert_count":0,"request_count":8,"received_data":303957,"sent_data":4424,"comment":"","tags":null,"fingerprints":null},{"fqdn":"resodanse-salsa.ch","ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":1,"received_data":150146,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-24T22:21:07.624228Z","alert_count":0,"request_count":1,"received_data":78788,"sent_data":652,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"2f518cfc8223c53c44094f57eacc972f","sha1":"a919f586352875054a0a7f438c3e3d33cb5768b3","sha256":"1d89df5c4aeb93c45e67d479e74ca02e5a104d7e421e4f2415e4a204c9816b0b","sha512":"b0b11da06de176b1a2a32a7bd76695391b698221d21f5e22734b765244034dc2c6b90f301075f5a1aaab3ee37c846750489f8ef040d283e16e792d3a9d106175","ssdeep":"","tlshash":"7b900271681948340649100d722882d43cb4405066423c00806c64484060d824400948","size":47,"data":"","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-05-30T01:42:18.848074Z","times_seen":62246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/divi-custom-script-js-extra","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f02fbf3c8c98ae3653e0b4c47f8ac17b","sha1":"8e815e6ec65e379157d51261b2b1f697e7aeb794","sha256":"80d909d6ac80432feb36a767458aec092e070593cacda6f01bb15bade8783e10","sha512":"e97e55052c06bcad0acf15540e9d295ddeab312b8ec4d24335f8247f14a6eea83d011660d78a609532d7b3e7f4bf01b43a0e2e1e9719a1f059b6ba45f05b93fd","ssdeep":"","tlshash":"4d4187e1d75d5f394fa340bd3c3a6b02cc7680a6e6c06864ff8c540d1384e955573a0c","size":2211,"data":"","first_seen":"2026-05-29T21:34:32.193401Z","last_seen":"2026-05-29T21:40:02.84479Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-content/themes/Divi/core/admin/js/common.js?ver=4.27.6","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"d71b75b2327258b1d01d50590c1f67ca","sha1":"b7820e4ffb6becc133c48f66d9f683545530b959","sha256":"1ca76922f55b389b8f590ae7e3bcc3a2dccdce3aff1e5a4335af081b76a414ea","sha512":"1a1930881b4d4d4f092999d6449248aea68bf1756f6dc32a4efce5e7bf240a14633e76988321e5aa3e11144fe5e8c9a443adf0fbf09a9b57a98c4d2d3a9347a2","ssdeep":"","tlshash":"bb218b4947ac9015cd2230f6141a70f8b9be90a7cbe00d7bfeb3e618d6c04a6127de9d","size":1343,"data":"","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-05-30T01:42:18.815274Z","times_seen":60092,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-content/themes/Divi/js/scripts.min.js?ver=4.27.6","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"caa6467696abb78c17f9be6c8142c2bb","sha1":"fe964d2d4d5f371bcc35b3ed7384229babf6afd0","sha256":"e96f930f7ac6d166fb1b69e8eb0bf2d2cc54bfee9aa8946bd3cbe2b5d36a20ca","sha512":"d4baa7c6cd33aab9891cb9a97c87c7028f10200e79596eb8822b4bdf410d77100f10fe20f41661e3351593023baea2c1ab070bc9d5551167361f7c9747d3d8a8","ssdeep":"3072:NIsL0dW9z+hDJ6eJOIZurwtux3E0pyPNgaO5S0PYf1DZ/n7OK:z0dWwnectux3xmNFJ0QfpZ7","tlshash":"0844d74cb360b4f162fb65b5116f670ab1726d17a40688c0e172e0f85db8d8e6263f7e","size":274461,"data":"","first_seen":"2025-12-05T10:16:28.394971Z","last_seen":"2026-05-30T01:36:22.758729Z","times_seen":11508,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-05-30T01:58:39.063929Z","times_seen":872991,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"e53ec3d6e21be78115810135f5e956fe","sha1":"523892839b88351523e0498ba881c4431197b54e","sha256":"b15c3ea03d50c2430490e7416733a254feea4237bb60b54181bd3473ebe4149f","sha512":"84b080eaaa043928f038421ceb18bba7483afee5b6480a92ee01992317cde2361a6dd255b16ec036e51e8a1fef46b5379c6a5ff5c9ec69d682f96deaa03a8842","ssdeep":"3072:cWdIxUMz/tGzT3+XtHi2iX6JPMupdggt1YHWyFxAcDHzEJLDnWTnWNBEBysX6qMa:dwhggc1l7","tlshash":"14f31849718473b246c720ee653f1b0e7137ce69d009d060a936faf61eb8f8a512bf65","size":158005,"data":"","first_seen":"2023-03-08T14:26:25Z","last_seen":"2026-05-30T01:35:47.233769Z","times_seen":49912,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"ff682bd8e00a4c2b202a4d37f7ba3cdd","sha1":"4b92aa9fb8a9cf79c352ece5cba00b2f281de332","sha256":"d1576e7c5bb5b36cc04888b220fb672165073615b2423b76b51074334d616555","sha512":"2cd89f1602a01f5deb5c1a774e83070a052930a7ce23637798fb2f18de644e3f5f9775aa694f6efbe3b12226087daa45445271ea144f3e4242e8f7b9af86f1a5","ssdeep":"","tlshash":"fc011e195e12e2dc55b2652ef13b43b879ff770730d6909da90c645d1c1ce1974226fc","size":739,"data":"","first_seen":"2023-03-07T01:07:06Z","last_seen":"2026-05-30T01:42:18.848827Z","times_seen":45227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-05-30T01:59:03.868953Z","times_seen":159931,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/mediaelement-js-extra","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c5f55ecf364f74fd2210136d69cc8b4","sha1":"322b9d726cf6d1a8fc7e7d744897bfb717e69f81","sha256":"3d8513531a112484d38232bd2c693dc1639e7f66150db8f81fdc22e67a442ebe","sha512":"3a4ff03835b5305b9f62f9b16e93457d2862dabaa1a462db6c409ec1a85af662fa1949c92ca69124a9fb849e453fd65dca0d4879cc23a6fcda9da669ad226368","ssdeep":"","tlshash":"a501a7d8fb29031403db893d051a422d854e4fb7c1029d3faebc786a09bfd846152e21","size":708,"data":"","first_seen":"2026-05-29T21:34:32.195181Z","last_seen":"2026-05-29T21:40:02.832391Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"e950c486efbb229c7fa125fffd664e95","sha1":"9b982dae5c2d7f886268f1063a57c8cfb31a9894","sha256":"8da027af5bd5dd999d9da45dad2d8a2aecc3c0cae44b5602d3c59eff80d09674","sha512":"e3aefaaeff20725460447789ee467eb3ab15046bb9f4e0bb1c9542be59bb0276dc76376084bdc1c12bc55a39b11739331144732a82e21e13153c03b2ae8868ed","ssdeep":"","tlshash":"02d012d5172ecdb755ae6269412e135a48fca480438c0cd6aae94c1887515605553d28","size":197,"data":"","first_seen":"2024-11-05T10:18:38.91387Z","last_seen":"2026-05-29T21:40:02.843073Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c9e8e275f3d0351e58a98fdfd746e61","sha1":"e82ab8b0a790e97c6b38bf2a3e1ef8e2b8a337d6","sha256":"568cd130b23db75026b11026f92527192517fc39d94c13f65a84a1501daa6688","sha512":"8380c8c1e26ea5182b20b7aedc37c58f4578bd646fa609893de84af7bf059e3c301037eba7407daffd1e55ea0a158686fe280e61596660e9e28a5d800a709524","ssdeep":"","tlshash":"ccd0231d324cbfdd00f31814e43f5329507f673175564058514fe4542c3ed191153b80","size":210,"data":"","first_seen":"2026-04-01T04:17:29.715983Z","last_seen":"2026-05-29T23:34:03.333296Z","times_seen":254,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-05-30T01:58:39.08205Z","times_seen":805760,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-05-30T01:59:03.868953Z","times_seen":159931,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/mediaelement-core-js-before","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"66a2f8a5a089600a9e5e0da4811cd6b8","sha1":"ad04203e64af38acab661fdf1fd59f1bcb0ec2ab","sha256":"50cedcc1775444f0163fa935683aa21eb3e3e89f872bc46a74278955e909a9a4","sha512":"600faa578311390f4d600f3b4dc3dbff9a3983475bf878e0e3c8a25cac48a3c5a551e1490847f13bc72a0cb0dade59daa7b87808be8106268c2836df285771d1","ssdeep":"","tlshash":"3451bc1ac2353c7f032947f5bc694b9744fccb93e041589aeabb4d4772a7d6c5136108","size":3125,"data":"","first_seen":"2026-05-29T21:34:32.196981Z","last_seen":"2026-05-29T21:40:02.828484Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=7.0","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"51300497928562f8c86c7aaba99237cd","sha1":"e5826832b85c6afc6502b74cbb8ac5394b04c363","sha256":"6d161e98e47ae150b51211443eef37040fb6269dcf85ad2048548066dca99e6f","sha512":"04bfdf1a41712238902bc6a0e07efaf356217e98560c52fa5d175c29191617c35853382ce2f69966bdd5e1b40114b872d962a5fad26a9e0b7d4fc016a6dcb833","ssdeep":"","tlshash":"c72121daa848111a51c7246c70e7131c32bdd354d0108528b92ee9df29f5bc9647eb70","size":1191,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-05-30T01:35:47.156513Z","times_seen":50246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"introduction_type":"eventHandler","is_inline":false,"md5":"87b659c90b81604997dd06a67e8b773e","sha1":"bc13329ca575a3e32c93e0e1cf791f47f91b0c2f","sha256":"1ac445488ebead2ed0b74a9c86ad76fa1a81f363806218afb2ae4aae5f127448","sha512":"a2f82c520753c0b9093fec4ee7b367523cb2d7156efd5587b0c15b385661beda71050b73710a80f4d4ccc38d7921d5f01a590fa7744f204468dd63411d16509d","ssdeep":"","tlshash":"db90000c0a20c0882b00af00e000c202a0c2202f0220a38ce823bce2a83c888808fea0","size":39,"data":"","first_seen":"2023-04-11T03:58:47Z","last_seen":"2026-05-30T01:33:28.516516Z","times_seen":31478,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/jquery-js-after","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cff554a1e3652509fe777509e34d267","sha1":"3e2fa94cbfb9c4ceb2705213eecd6ab932be875b","sha256":"dd2329e39bc155e92ca0078fdcca0301984ef18343640d2d7b8dc2292c66acee","sha512":"946ecbdbcf80978264b072eec12ce014d0f04bc45ccc8a179ccc73afe2f7fd2fbea61ce84b5ef1a1264aa25c23f9a15bcf2a5bfc1b8f84a3a892d7c7908dca14","ssdeep":"","tlshash":"b701a75df248ab9d10b31834a42b5329607f7731f5564058914ee464283ed191153a80","size":664,"data":"","first_seen":"2026-05-29T21:34:32.198408Z","last_seen":"2026-05-29T21:40:02.827024Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-content/themes/Divi/js/smoothscroll.js?ver=4.27.6","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6a40b8c22e5dd0e51404ac7aa45710a","sha1":"823e4b015387a2714f826a7f386a0f6698c4b6e2","sha256":"75079f39fe739015589a0f995f41b4c1c29d4ebac85c93a792926af09f61cc83","sha512":"0efaf2570d7284e021ee0e37d3f25ec594d6dba246cc7912bfd30c796e667bfa84f10c7f2ceb2fecb45499b0ad3b29e90e3aff8cbddcc72e31da83449bc3fac5","ssdeep":"96:tnXf6Q+yx+BgZi1ZUWkEf5wZGWypDdMCBUw4XfRPLJvOIciIC0M:Fv6XyxhUkWkER8GWyjcfRPLMI0M","tlshash":"d5c1e9f83692b4a183a7a66b913fa300b17545206407e870d73cd8847c78ceaa25bf69","size":5714,"data":"","first_seen":"2023-03-07T01:35:22Z","last_seen":"2026-05-30T01:36:22.79272Z","times_seen":12886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=7.0","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a5c9689ae636c452b6808740ba04136","sha1":"8d2c85d7779d00c12aeb6b55a99443952d9a144e","sha256":"79cb399203843f65199bec32bc4abac5dfd20f141d3e4ec1424bf00c7108fa45","sha512":"a80491b5c34e4719b042d1ef0dc8cff0e2ad29343ac8926a3cab36202b02dc360000b430b3141e474fe08bffc54329eb47082d530af6b44727490c4cd0f0ed0c","ssdeep":"","tlshash":"ee11f3d43e84757909d75428a47f0b18a0fb4d76804e0db0ee54b63e7d7cd409196a4a","size":1107,"data":"","first_seen":"2023-03-29T22:52:25Z","last_seen":"2026-05-30T01:35:47.23761Z","times_seen":47277,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Oswald:200,300,regular,500,600,700|Roboto:100,100italic,300,300italic,regular,italic,500,500italic,700,700italic,900,900italic\u0026subset=cyrillic,cyrillic-ext,latin,latin-ext,vietnamese,greek,greek-ext\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css?family=Oswald:200,300,regular,500,600,700|Roboto:100,100italic,300,300italic,regular,italic,500,500italic,700,700italic,900,900italic\u0026subset=cyrillic,cyrillic-ext,latin,latin-ext,vietnamese,greek,greek-ext\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 29 May 2026 21:33:55 GMT\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78102,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"79ff079161206053e872ac7874962508","sha1":"8c36689d7452c95763639d48d971f57e09112587","sha256":"37410732e4ad3e1f0465c0830e065f93b23e4c82502ca35fb9c284dcf6b9daff","sha512":"34b23418ba5a4562c80610abe275531a038b5e20036344e1a68e56c2b63aa78b00c1b2bb7be30d454d9fe090dec772f49f6d36f02b4fbe524ca6552f4346544a","ssdeep":"768:xDdD9DADNDgBDUKD7DnDWHncXgLUahdPuOJ+gaULUIIV1ClghUULPy7bYLgXU+l5:5yDSegtxyllff","tlshash":"e5731d91041b5480ab834ce233ce7e35fe0f92517151d0b9abfc9b6baddbda2526835c","first_seen":"2026-03-04T01:57:20.465906Z","last_seen":"2026-05-29T21:40:02.773009Z","times_seen":29,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":192,"dns":0,"connect":15,"send":0,"wait":19,"receive":0,"ssl":184},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-content/uploads/2018/10/LogoRDS_Or.png","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-content/uploads/2018/10/LogoRDS_Or.png HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Thu, 26 Feb 2026 10:52:22 GMT\r\netag: \"a87a7-64bb7ea53a2db\"\r\naccept-ranges: bytes\r\ncontent-length: 690087\r\ncontent-type: image/png\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":690087,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"771a4796d081cd935dc1e1e63cc546fd","sha1":"177aacc3fe87835c03c468d7bf6affd196bd0552","sha256":"f23723a69f1149b51a56da01174b03ea1816b199244fd349af599eeecb9c8d80","sha512":"9542971827c6a9de35c105a51d4ac98a45a5bac517c07dcd6af65271de6184d3097babeb47bce8c38cd2ca540b935463991e4768104a4ccf61190e05e4e90de3","ssdeep":"12288:yx5de2aC3iU+SkkZVAmmgsSTA+0X9mq8pDVClnVzkgIiKvliKtfksYooPArCjKUI:s5deqPFZVHVTA+0d8PC5VzkgI8sYoo9I","tlshash":"83e4f182acf09981681db75ad6cd0c488ad72ed7cd24785ebfed989d4f412c80cd369b","first_seen":"2026-05-29T21:34:32.17064Z","last_seen":"2026-05-29T21:40:02.775105Z","times_seen":2,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-content/uploads/2018/10/LOGO-RDS_white-02-02.png","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-content/uploads/2018/10/LOGO-RDS_white-02-02.png HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Thu, 26 Feb 2026 10:52:21 GMT\r\netag: \"a348-64bb7ea41053e\"\r\naccept-ranges: bytes\r\ncontent-length: 41800\r\ncontent-type: image/png\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":41800,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 511 x 511, 8-bit/color RGBA, non-interlaced","md5":"5af9b841e84f5bf4a26a32310003a2a7","sha1":"3048ad25960e0de9ecaf4f1a9769546f20a31f6d","sha256":"338041a8665462ab16367eb11cd187f55b6d22be58da15cf4c4f84b8c2089bfc","sha512":"35c0c378c0c5f9095099063a2ca855f23dce0f7ad2dce87f74e42833c5cce2727051396ca30ef9102fb4e8f8445aac2560346336483a0f5009e6a14f69a58835","ssdeep":"768:2po9qfArhhlkjRFsWbNdAoQchFedwm2EJJiuqL8wqa:2O9qfAFrkjz3Q2hFelEWa","tlshash":"ed13f207b185ec70819a802fc6eb48bb67cfcd51c6e134807e94c8fb95d73956e88ad6","first_seen":"2026-05-29T21:34:32.171731Z","last_seen":"2026-05-29T21:40:02.768329Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=7.0","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=7.0 HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Wed, 10 Dec 2025 04:12:14 GMT\r\netag: \"4a7-645913bac8380-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 540\r\ncontent-type: application/javascript\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1191,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1191), with no line terminators","md5":"51300497928562f8c86c7aaba99237cd","sha1":"e5826832b85c6afc6502b74cbb8ac5394b04c363","sha256":"6d161e98e47ae150b51211443eef37040fb6269dcf85ad2048548066dca99e6f","sha512":"04bfdf1a41712238902bc6a0e07efaf356217e98560c52fa5d175c29191617c35853382ce2f69966bdd5e1b40114b872d962a5fad26a9e0b7d4fc016a6dcb833","ssdeep":"","tlshash":"c72121daa848111a51c7246c70e7131c32bdd354d0108528b92ee9df29f5bc9647eb70","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-05-30T01:35:47.156513Z","times_seen":50246,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-content/uploads/2018/10/cropped-LogoRDS_Or-192x192.png","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:56.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-content/uploads/2018/10/cropped-LogoRDS_Or-192x192.png HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:33:56 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Thu, 26 Feb 2026 10:52:20 GMT\r\netag: \"f06c-64bb7ea2dcb62\"\r\naccept-ranges: bytes\r\ncontent-length: 61548\r\ncontent-type: image/png\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":61548,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"e0b6bdfb85b34008ca633162285ee22b","sha1":"82401e578cc3690805db906fb98575011aebf8c0","sha256":"1510ec9e56679e96f2176f3085341099dab01449ee3be7785a1fab939acb3336","sha512":"ea003f974f89420b6fa5392bd689c801dc8aa8cc2be78578e029785fc131510e106c73f714ee737c2e2a7ee7c0660c1ec5ba9dc563a8510f7d06c488b18fb9e9","ssdeep":"1536:niw+imHr9qVU8sppdb2950mHFFxtZsSb6oaky52f:nqz9qJspv6950mHPxtZH6Cy5Y","tlshash":"5e53029c4020edd0332fb046f61e5aee0ed9106d3790f7ee76ce46e91c1d642e6948ba","first_seen":"2026-05-29T21:34:32.173278Z","last_seen":"2026-05-29T21:40:02.821046Z","times_seen":2,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-content/uploads/2018/10/cropped-LogoRDS_Or-32x32.png","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:56.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-content/uploads/2018/10/cropped-LogoRDS_Or-32x32.png HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:33:56 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Thu, 26 Feb 2026 10:52:20 GMT\r\netag: \"cbb-64bb7ea36d3e0\"\r\naccept-ranges: bytes\r\ncontent-length: 3259\r\ncontent-type: image/png\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3259,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"7f11a684d5f4d56950302c889222fb40","sha1":"b6df80d28487bbe834e8bf9307a3739b5388d719","sha256":"e989e060efa9b95787a60fe9d2ab8c118065df7b96f1790ac36584dd54245eae","sha512":"b6111b6de9e0a5144b1c250738455d524deef9da9e7f7ce6a40bcc90e4ac8af6ec845115beea01cda16d951f134543e742a2b837047667a2235f4cde2b0ab7a0","ssdeep":"","tlshash":"bf616cf6ab0d17859c27c84b0a15120293c228c197879939deda5e2ec52cbe8f147c64","first_seen":"2026-05-29T21:34:32.174647Z","last_seen":"2026-05-29T21:40:02.783938Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-29T21:33:54.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:33:54 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Fri, 29 May 2026 21:19:55 GMT\r\netag: \"2493c-652fb67fe363b-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=3, must-revalidate\r\nexpires: Fri, 29 May 2026 21:33:57 GMT\r\nvary: Accept-Encoding,Cookie\r\ncontent-encoding: gzip\r\ncontent-length: 28016\r\ncontent-type: text/html; charset=UTF-8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress:7.0","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Divi:4.27.6","description":"Divi is a WordPress Theme and standalone WordPress plugin from Elegant themes that allows users to build websites using the visual drag-and-drop Divi page builder.","website":"https://www.elegantthemes.com/gallery/divi","common_platform_enumeration":"","icon":"Divi.svg","categories":["Page builders","WordPress themes","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Super Cache","description":"WordPress Super Cache is a static caching plugin for WordPress.","website":"https://z9.io/wp-super-cache/","common_platform_enumeration":"","icon":"wp_super_cache.png","categories":["Caching","WordPress plugins"]},{"name":"Yoast SEO:27.7","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":149820,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26348)","md5":"087ab3a41e327592af690691af90f30c","sha1":"e1457fcd2eb8a168c3a2fd2d3926723cf86cdbd5","sha256":"b620943f0ce8f7175e5e3a44f7de4d9cbfe21233bdfb2f79f765c8d077d420b0","sha512":"ff982bf6a5e5ae721ddbd4bcba1846f7a7987f644690f3a79f78e00dc3888abc92e58ff918bf8131c3cf0d495c0585506208968e4fc0f2863c805f55db4afdd1","ssdeep":"1536:Myprr2D4kvowSIantEXheKmqB1DdwnJhgzespINX:dwD4kwwSIanyB1ynJhgzespINX","tlshash":"29e3e79f6bb6327571178309f9e1b73496bcc113ea010ae6bc79d118cbc27a601b365e","first_seen":"2026-05-29T21:34:32.175495Z","last_seen":"2026-05-29T21:40:02.806458Z","times_seen":2,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":78,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-content/et-cache/7/et-divi-dynamic-7-late.css?ver=1778490240","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-content/et-cache/7/et-divi-dynamic-7-late.css?ver=1778490240 HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Mon, 11 May 2026 09:04:00 GMT\r\netag: \"4184-6518707017905-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1419\r\ncontent-type: text/css\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16772,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16772), with no line terminators","md5":"e30c1804775c1b0fc9b45cb827fba95a","sha1":"27a8fc58f91d36379d724afaed4fcdc94a5deec5","sha256":"3208b4b1e486296a399984bc45ceb0df6013f7c9103c383c39be2db7cac9a491","sha512":"f720d903fdc279fbbe27c89c7061b41ed1ebc9a395a783d00dceb0d172c399b0efacc7acfcadcd59816cb57b0966b5ab91c1d60ca0bf4dc111266d9904c1c038","ssdeep":"96:8qsrXrHDvDmWIWIuOFOaz0x8Ivx8IhkuQjlM7:LWlfOFOBx8Ivx8Ih74lM7","tlshash":"3272f7af8ac2225551234e66c7cd4e684b2dcba318611cde3751294fcb42fde72e621f","first_seen":"2023-04-10T02:23:22Z","last_seen":"2026-05-29T21:40:02.778138Z","times_seen":3312,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-content/themes/Divi/js/scripts.min.js?ver=4.27.6","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-content/themes/Divi/js/scripts.min.js?ver=4.27.6 HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Fri, 27 Feb 2026 14:10:17 GMT\r\netag: \"4301d-64bcecbfbf091-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":274461,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65467)","md5":"caa6467696abb78c17f9be6c8142c2bb","sha1":"fe964d2d4d5f371bcc35b3ed7384229babf6afd0","sha256":"e96f930f7ac6d166fb1b69e8eb0bf2d2cc54bfee9aa8946bd3cbe2b5d36a20ca","sha512":"d4baa7c6cd33aab9891cb9a97c87c7028f10200e79596eb8822b4bdf410d77100f10fe20f41661e3351593023baea2c1ab070bc9d5551167361f7c9747d3d8a8","ssdeep":"3072:NIsL0dW9z+hDJ6eJOIZurwtux3E0pyPNgaO5S0PYf1DZ/n7OK:z0dWwnectux3xmNFJ0QfpZ7","tlshash":"0844d74cb360b4f162fb65b5116f670ab1726d17a40688c0e172e0f85db8d8e6263f7e","first_seen":"2025-12-05T10:16:28.394971Z","last_seen":"2026-05-30T01:36:22.758729Z","times_seen":11508,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-content/themes/Divi/core/admin/js/common.js?ver=4.27.6","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-content/themes/Divi/core/admin/js/common.js?ver=4.27.6 HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Fri, 27 Feb 2026 14:10:17 GMT\r\netag: \"53f-64bcecbfb5451-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 566\r\ncontent-type: application/javascript\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1343,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d71b75b2327258b1d01d50590c1f67ca","sha1":"b7820e4ffb6becc133c48f66d9f683545530b959","sha256":"1ca76922f55b389b8f590ae7e3bcc3a2dccdce3aff1e5a4335af081b76a414ea","sha512":"1a1930881b4d4d4f092999d6449248aea68bf1756f6dc32a4efce5e7bf240a14633e76988321e5aa3e11144fe5e8c9a443adf0fbf09a9b57a98c4d2d3a9347a2","ssdeep":"","tlshash":"bb218b4947ac9015cd2230f6141a70f8b9be90a7cbe00d7bfeb3e618d6c04a6127de9d","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-05-30T01:42:18.815274Z","times_seen":60092,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-content/uploads/et-fonts/Oswald-Bold.ttf","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-content/uploads/et-fonts/Oswald-Bold.ttf HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/wp-content/et-cache/7/et-core-unified-deferred-7.min.css?ver=1778490240\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Thu, 26 Feb 2026 10:52:28 GMT\r\netag: \"17040-64bb7eaac80cc\"\r\naccept-ranges: bytes\r\ncontent-length: 94272\r\ncontent-type: font/ttf\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":94272,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 26 names, Macintosh, Copyright 2016 The Oswald Project Authors (https://github.com/googlefonts/OswaldFont)OswaldBold4","md5":"ad9c6c18ebcfb969eb7f9a868e1c389f","sha1":"0a35c850f2f417011be1206dc5a9878c5dcec563","sha256":"0cde70ba3b3398ab0bc19be74c7517442ef711846d33f286d7932fef9784e2d8","sha512":"dee3d01b7cf71d5bfcbd7f436713ea8c7efe3d67ae850b312ff44f2105c819f9ce34e90c2731d3fbf398ec73ffcf10a7073ae8cfb50486b15c0c7e13dbeece28","ssdeep":"1536:hnIsiPVFDbRSOCwlEFQBM5NE17kL0Ycu2O6xF9OQvvbXci0:VIsiPrZMwetL0YcFMql0","tlshash":"14932a17bb09d30aef164e3826d673e2a358fc216e0747cbd64d6e69fc970c94c46286","first_seen":"2023-06-10T03:58:16Z","last_seen":"2026-05-29T21:40:02.815005Z","times_seen":109,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-content/themes/Divi/js/smoothscroll.js?ver=4.27.6","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-content/themes/Divi/js/smoothscroll.js?ver=4.27.6 HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Fri, 27 Feb 2026 14:10:17 GMT\r\netag: \"1652-64bcecbfbe0f1-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 2557\r\ncontent-type: application/javascript\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5714,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5644)","md5":"b6a40b8c22e5dd0e51404ac7aa45710a","sha1":"823e4b015387a2714f826a7f386a0f6698c4b6e2","sha256":"75079f39fe739015589a0f995f41b4c1c29d4ebac85c93a792926af09f61cc83","sha512":"0efaf2570d7284e021ee0e37d3f25ec594d6dba246cc7912bfd30c796e667bfa84f10c7f2ceb2fecb45499b0ad3b29e90e3aff8cbddcc72e31da83449bc3fac5","ssdeep":"96:tnXf6Q+yx+BgZi1ZUWkEf5wZGWypDdMCBUw4XfRPLJvOIciIC0M:Fv6XyxhUkWkER8GWyjcfRPLMI0M","tlshash":"d5c1e9f83692b4a183a7a66b913fa300b17545206407e870d73cd8847c78ceaa25bf69","first_seen":"2023-03-07T01:35:22Z","last_seen":"2026-05-30T01:36:22.79272Z","times_seen":12886,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3iWkUHHAIjg752GT8G.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/oswald/v57/TK3iWkUHHAIjg752GT8G.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.resodanse-salsa.ch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28488\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 14:26:10 GMT\r\nexpires: Sat, 29 May 2027 14:26:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 25665\r\nlast-modified: Wed, 10 Sep 2025 16:46:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28488,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28488, version 1.0","md5":"22c3b00d2e65fb2c876a292423108958","sha1":"3c61d84659817fef687045bbfa0e1da9568e164b","sha256":"bd73278ee0c50041b91b4c03d1229e35b501637f46b6409e7da2d3a758446ea5","sha512":"33954d8a7ed3c87b3af8577bbae9439b9efba2a64445463d893681dad085bb8630d31c995ce010510a9c732926017dba9d5fd5002d0000ec1488b61889d6ddfe","ssdeep":"384:jlzdJfoB5YJ2kG1CdQegm8m00xr19KB668/BOTqE85gyqvPA34uEomcGvpMwvg84:jlzdyBzhIb0u1QB6vBOv8uvPAovJCs4","tlshash":"cfd2e0195e9673efe4552d3ea830affe91e32aad30507162c5db6c1155c438bc8e4ec4","first_seen":"2025-09-11T19:05:43.498829Z","last_seen":"2026-05-30T01:07:22.461004Z","times_seen":29332,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":130,"dns":1,"connect":44,"send":0,"wait":88,"receive":163,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3iWkUHHAIjg752GT8G.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/oswald/v57/TK3iWkUHHAIjg752GT8G.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.resodanse-salsa.ch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28488\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 14:26:10 GMT\r\nexpires: Sat, 29 May 2027 14:26:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 25665\r\nlast-modified: Wed, 10 Sep 2025 16:46:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28488,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28488, version 1.0","md5":"22c3b00d2e65fb2c876a292423108958","sha1":"3c61d84659817fef687045bbfa0e1da9568e164b","sha256":"bd73278ee0c50041b91b4c03d1229e35b501637f46b6409e7da2d3a758446ea5","sha512":"33954d8a7ed3c87b3af8577bbae9439b9efba2a64445463d893681dad085bb8630d31c995ce010510a9c732926017dba9d5fd5002d0000ec1488b61889d6ddfe","ssdeep":"384:jlzdJfoB5YJ2kG1CdQegm8m00xr19KB668/BOTqE85gyqvPA34uEomcGvpMwvg84:jlzdyBzhIb0u1QB6vBOv8uvPAovJCs4","tlshash":"cfd2e0195e9673efe4552d3ea830affe91e32aad30507162c5db6c1155c438bc8e4ec4","first_seen":"2025-09-11T19:05:43.498829Z","last_seen":"2026-05-30T01:07:22.461004Z","times_seen":29332,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":117,"dns":0,"connect":0,"send":0,"wait":90,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-content/uploads/2018/12/resodanse-salsa.mp4","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-content/uploads/2018/12/resodanse-salsa.mp4 HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=2392064-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Thu, 26 Feb 2026 10:52:25 GMT\r\netag: \"1f5b037-64bb7ea7e9ad4\"\r\naccept-ranges: bytes\r\ncontent-length: 30486583\r\ncontent-range: bytes 2392064-32878646/32878647\r\ncontent-type: video/mp4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1092029,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"16e5fbcf1c02fa829a8f4866bca868c5","sha1":"961e6e3f1f2e3f95993610d5aca552d4cc51eb0f","sha256":"3d7cff76e1624e5afc43f00857a8ac747218d9f4ac69eafde693da29b02368f5","sha512":"8e5d693bcbc5c57fb23ae1107f3ba5b59507d665311c5d65cfb76524c2fa91c200796327530f24241164e1ab82149c2321f045c59a9d3ec77fd0930cf1213495","ssdeep":"24576:zxGeXA87nWorO+yWBSHHLOHXwxwqEJ+cO7oM6Jo6l:zxvA87WorOGMnyHXm5E4/7r36l","tlshash":"ac2533bf0958fca2ca66b4bf7769400ca080c3c41cde7697f98274127ae57cc1de9999","first_seen":"2026-05-29T21:34:32.17959Z","last_seen":"2026-05-29T21:40:02.819985Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-content/uploads/2018/10/background.jpg","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-content/uploads/2018/10/background.jpg HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Thu, 26 Feb 2026 10:52:21 GMT\r\netag: \"201122-64bb7ea3acb80\"\r\naccept-ranges: bytes\r\ncontent-length: 2101538\r\ncontent-type: image/jpeg\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2101538,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=1700, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=1900], progressive, precision 8, 1900x1700, components 3","md5":"95cd7390de2de25eb48533c39d78314e","sha1":"b36f243409cb6e6772b943dc2dbf114a541858da","sha256":"0577605a212b674e039e23dabc90b69fd00df386fa51bd0c2b80b896336ec417","sha512":"847cf8c99d4faf9441351daa50c46f18f7ca59596f612b0e750abeb0a7d948511f17c5d7a6f0a8c01ec742bc26ad247cd1efa5c5e005feaf0ce3300b2af9c2ab","ssdeep":"24576:Fv5yNM3PVInrwhr3AsiDWgL9g3eHSU/j0n:FRyNM3tInYQsifIeyUgn","tlshash":"5e2523f02e25d873e9895d3689e2dfc9b62a8f11a0438516fcbcce12bfe259047756c4","first_seen":"2026-05-29T21:34:32.180309Z","last_seen":"2026-05-29T21:40:02.799954Z","times_seen":2,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"resodanse-salsa.ch/","fqdn":"resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-29T21:33:54.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Fri, 29 May 2026 21:33:54 GMT\r\nserver: Apache\r\nvary: Accept-Encoding,Cookie,X-FORWARDED-PROTO\r\nx-redirect-by: WordPress\r\nstrict-transport-security: max-age=16000000\r\nlocation: https://www.resodanse-salsa.ch/\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":149820,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-30T02:03:07.475075Z","times_seen":15895966,"resource_available":true,"data":null}},"time_used":676,"timings":{"blocked":131,"dns":55,"connect":33,"send":0,"wait":406,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-content/et-cache/7/et-divi-dynamic-7.css?ver=1778490240","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-content/et-cache/7/et-divi-dynamic-7.css?ver=1778490240 HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Mon, 11 May 2026 09:04:00 GMT\r\netag: \"3ba6-6518706fef866-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 2452\r\ncontent-type: text/css\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15270,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6697)","md5":"48795fa7b5a3af56f3a5f8123bd3220e","sha1":"5c5373d9431eb5015398ad1802a79fa035f0c3aa","sha256":"1d7292244f99ac6004ca4f15d755efc837ef77fdfee39e8d7af637eab11ad343","sha512":"2d6856b2940fbe6dc0b300c2432407b88c0f9ff34bb615f172110855bbd0803751e74f9b45fbae76098fb6d20889a54ef98f8db5b749c3e24830d105a31a82e7","ssdeep":"96:CHxasv+ypNJBA/4+ftNLt0c2+5H5e9g54bFEoghakd5VWIOQbl48EztyPJv5J7J6:CHxasvJa/+bGgdk6mQ73fM3WsI6C","tlshash":"2f629baabb3122d93323da027987d364a5ead29bf6152ee3fd1e73105a573c9057240c","first_seen":"2023-04-19T02:54:28Z","last_seen":"2026-05-29T21:40:02.817884Z","times_seen":184,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Wed, 10 Dec 2025 04:12:14 GMT\r\netag: \"3509-645913bac8380-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 4872\r\ncontent-type: application/javascript\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-05-30T01:58:39.08205Z","times_seen":805760,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-content/uploads/2018/12/resodanse-salsa.mp4","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-content/uploads/2018/12/resodanse-salsa.mp4 HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=2392064-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Thu, 26 Feb 2026 10:52:25 GMT\r\netag: \"1f5b037-64bb7ea7e9ad4\"\r\naccept-ranges: bytes\r\ncontent-length: 30486583\r\ncontent-range: bytes 2392064-32878646/32878647\r\ncontent-type: video/mp4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1572864,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"16e5fbcf1c02fa829a8f4866bca868c5","sha1":"961e6e3f1f2e3f95993610d5aca552d4cc51eb0f","sha256":"3d7cff76e1624e5afc43f00857a8ac747218d9f4ac69eafde693da29b02368f5","sha512":"8e5d693bcbc5c57fb23ae1107f3ba5b59507d665311c5d65cfb76524c2fa91c200796327530f24241164e1ab82149c2321f045c59a9d3ec77fd0930cf1213495","ssdeep":"24576:zxGeXA87nWorO+yWBSHHLOHXwxwqEJ+cO7oM6Jo6l:zxvA87WorOGMnyHXm5E4/7r36l","tlshash":"ac2533bf0958fca2ca66b4bf7769400ca080c3c41cde7697f98274127ae57cc1de9999","first_seen":"2026-05-29T21:34:32.17959Z","last_seen":"2026-05-29T21:40:02.819985Z","times_seen":2,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-content/et-cache/7/et-divi-dynamic-7-late.css","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-content/et-cache/7/et-divi-dynamic-7-late.css HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Mon, 11 May 2026 09:04:00 GMT\r\netag: \"4184-6518707017905-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1419\r\ncontent-type: text/css\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16772,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16772), with no line terminators","md5":"e30c1804775c1b0fc9b45cb827fba95a","sha1":"27a8fc58f91d36379d724afaed4fcdc94a5deec5","sha256":"3208b4b1e486296a399984bc45ceb0df6013f7c9103c383c39be2db7cac9a491","sha512":"f720d903fdc279fbbe27c89c7061b41ed1ebc9a395a783d00dceb0d172c399b0efacc7acfcadcd59816cb57b0966b5ab91c1d60ca0bf4dc111266d9904c1c038","ssdeep":"96:8qsrXrHDvDmWIWIuOFOaz0x8Ivx8IhkuQjlM7:LWlfOFOBx8Ivx8Ih74lM7","tlshash":"3272f7af8ac2225551234e66c7cd4e684b2dcba318611cde3751294fcb42fde72e621f","first_seen":"2023-04-10T02:23:22Z","last_seen":"2026-05-29T21:40:02.778138Z","times_seen":3312,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-content/et-cache/7/et-core-unified-deferred-7.min.css?ver=1778490240","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-content/et-cache/7/et-core-unified-deferred-7.min.css?ver=1778490240 HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Mon, 11 May 2026 09:04:00 GMT\r\netag: \"1785-65187070188a5-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1204\r\ncontent-type: text/css\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6021,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6021), with no line terminators","md5":"3f1dbe022c209489b537ef4084407ca7","sha1":"f1600cccda876cd25634653e344b8da963a9d893","sha256":"3badd67020357ad1ae39f4e58fe5299ac0e00a1deec48ef1ac00da9275c7d46d","sha512":"fb0a2b99ef1462f463afb5e70cb2f9f1a57d13cd9def4c1a4d00f0be14707de8a926b14517eacf991f0deaec8bbb560d1dc5714b6895c5bafb633fd3d70b6c99","ssdeep":"96:0Q/DJ2VRYRJ2mnyeLBAtugRn6crILXRqRe+5Le9sgRT:0QF2TS2mnllA0n4RhC","tlshash":"cdc1f04b7bb33e393053415af45337799eb96403d38a0fa9bc16a7a1cf911d2247261e","first_seen":"2026-05-29T21:34:32.182526Z","last_seen":"2026-05-29T21:40:02.821935Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17 HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Wed, 10 Dec 2025 04:12:14 GMT\r\netag: \"2bf8-645913bac8380-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 2592\r\ncontent-type: text/css\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11256,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11256), with no line terminators","md5":"2b0dd7eecea03b4bdedb94ba622fdb03","sha1":"703becba85161118dd6fc66af465428ef43f561c","sha256":"b7908a015a567ec2363011df2475368dbff34360e9da3fdff50604d6395fb646","sha512":"fe64cff950921bdf83ec09fe79ca5ce52de40f5b8788697eb1d7b28055f2817778347d5d3c81a324801c7ec7151b3ee0eee99b2882c3c3b10bd760342d3bf3e7","ssdeep":"192:xthsVmeDXDanvgZenjAJKdXSMpNO96hDIzL79V1QVSD1CNxn6fR31r:czDanvuenjAkNBhDInSwh31r","tlshash":"713223929c88212cf43795645ac107ec923fc303fd62ededb73c7679caca58a516a943","first_seen":"2023-04-05T04:06:46Z","last_seen":"2026-05-30T01:37:01.833933Z","times_seen":82599,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=7.0","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=7.0 HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Wed, 10 Dec 2025 04:12:14 GMT\r\netag: \"105a-645913bac8380-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1156\r\ncontent-type: text/css\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4186,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4186), with no line terminators","md5":"ea958276b7de454bd3c2873f0dc47e5f","sha1":"b143f6e8e8f79d8f104c26b0057ef5514d763219","sha256":"2e10d353ff038c2cad3492fc17801af3e6ef2669c9e9713bdb78b1dcb104c4fe","sha512":"2d40a1e713355eff88fa3bbf5471b4db5acc48fa2b978a555c034f2e5c7f131fcaf48e849d5d048df9d5dae068c4b6467a97b1dde99115e6b32f57e928569fc1","ssdeep":"48:wFfAeWkkqEsKO+TBxaBIIj+NqUFQW76d7JrOv2bN:wueWkkrLoI7U","tlshash":"d9810c1084149d2cf4eab33766cec75db43ad747fe75e7b86936e2b8c098a842073484","first_seen":"2023-04-05T04:06:46Z","last_seen":"2026-05-30T01:37:01.832562Z","times_seen":83559,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Wed, 10 Dec 2025 04:12:14 GMT\r\netag: \"15601-645913bac8380-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 30368\r\ncontent-type: application/javascript\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-05-30T01:58:39.063929Z","times_seen":872991,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=7.0","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=7.0 HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Wed, 10 Dec 2025 04:12:14 GMT\r\netag: \"453-645913bac8380-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 538\r\ncontent-type: application/javascript\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1107,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1107), with no line terminators","md5":"8a5c9689ae636c452b6808740ba04136","sha1":"8d2c85d7779d00c12aeb6b55a99443952d9a144e","sha256":"79cb399203843f65199bec32bc4abac5dfd20f141d3e4ec1424bf00c7108fa45","sha512":"a80491b5c34e4719b042d1ef0dc8cff0e2ad29343ac8926a3cab36202b02dc360000b430b3141e474fe08bffc54329eb47082d530af6b44727490c4cd0f0ed0c","ssdeep":"","tlshash":"ee11f3d43e84757909d75428a47f0b18a0fb4d76804e0db0ee54b63e7d7cd409196a4a","first_seen":"2023-03-29T22:52:25Z","last_seen":"2026-05-30T01:35:47.23761Z","times_seen":47277,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.resodanse-salsa.ch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 13:55:06 GMT\r\nexpires: Sat, 29 May 2027 13:55:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 27529\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-05-30T01:58:57.796142Z","times_seen":168079,"resource_available":false,"data":null}},"time_used":874,"timings":{"blocked":417,"dns":0,"connect":30,"send":0,"wait":17,"receive":2,"ssl":406},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-content/themes/Divi/core/admin/fonts/fontawesome/fa-brands-400.woff2","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-content/themes/Divi/core/admin/fonts/fontawesome/fa-brands-400.woff2 HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Fri, 27 Feb 2026 14:10:17 GMT\r\netag: \"1327c-64bcecbfb8331\"\r\naccept-ranges: bytes\r\ncontent-length: 78460\r\ncontent-type: font/woff2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":78460,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78460, version 331.-31392","md5":"f075c50f89795e4cdb4d45b51f1a6800","sha1":"f726c4275bb494a045fde059175f072de06c01df","sha256":"71b3ce72680f4183d28db86b184542051fd533bb1146933233e4f6a20cf98cba","sha512":"5f4f35e9acdb825a245e678a834b2bc6d5c302693fffc3497717024c2d8385ffdeb233d4d7f368f1356a2adfcaab0a89157edbcca45b9f310f1cdd7f44cac955","ssdeep":"1536:uZWBokruo7jgeq3Yv8E9MjaR3yOWaaqPbkJSmMlckzeSUSalX:sWBbuo/vqov8yTS/qPmMekzyx","tlshash":"7b73124d6fe2a9eaa9bc3f332fb38412ac819d654bf2c1b3055e12d51c8177da8d4135","first_seen":"2023-04-06T10:15:59Z","last_seen":"2026-05-30T01:42:18.805506Z","times_seen":19563,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-content/uploads/2018/12/resodanse-salsa.mp4","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:56.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-content/uploads/2018/12/resodanse-salsa.mp4 HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=786432-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 29 May 2026 21:33:56 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Thu, 26 Feb 2026 10:52:25 GMT\r\netag: \"1f5b037-64bb7ea7e9ad4\"\r\naccept-ranges: bytes\r\ncontent-length: 32092215\r\ncontent-range: bytes 786432-32878646/32878647\r\ncontent-type: video/mp4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":676985,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"2b83dd899987c3f05a0d694502b9f3e2","sha1":"5aa9ce1452297524675c2bb1cef64822644fac5b","sha256":"683f720f177bf4d5f16dd31f762d7575772ee32d54237600d6d28ddc173ad6a7","sha512":"3fdbd751f40aebc303880765b0c81089892c0d460bcdeef5888f5f560bc0a81453adb60f70e4121ce7feafea211cde5d721654af68c4be02fd643aca761358df","ssdeep":"12288:LkUYn8DCk001fjKrQ5XUPrTPZGeriqdlK13qS0AEPwKeCmi+XgcGBLdyby2qyQxc:4dnGCzeOrQi3PZZdlE/EKCmnGBLwbyZO","tlshash":"0ae423ea0f6289da4906cdf9c49ed47a6967ffcbe4b2c6491c3c52b438738b244049d7","first_seen":"2026-05-29T21:34:32.186542Z","last_seen":"2026-05-29T21:34:32.186542Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17 HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Wed, 10 Dec 2025 04:12:14 GMT\r\netag: \"26935-645913bac8380-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 38789\r\ncontent-type: application/javascript\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":158005,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65266)","md5":"e53ec3d6e21be78115810135f5e956fe","sha1":"523892839b88351523e0498ba881c4431197b54e","sha256":"b15c3ea03d50c2430490e7416733a254feea4237bb60b54181bd3473ebe4149f","sha512":"84b080eaaa043928f038421ceb18bba7483afee5b6480a92ee01992317cde2361a6dd255b16ec036e51e8a1fef46b5379c6a5ff5c9ec69d682f96deaa03a8842","ssdeep":"3072:cWdIxUMz/tGzT3+XtHi2iX6JPMupdggt1YHWyFxAcDHzEJLDnWTnWNBEBysX6qMa:dwhggc1l7","tlshash":"14f31849718473b246c720ee653f1b0e7137ce69d009d060a936faf61eb8f8a512bf65","first_seen":"2023-03-08T14:26:25Z","last_seen":"2026-05-30T01:35:47.233769Z","times_seen":49912,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-content/uploads/2018/12/resodanse-salsa.mp4","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-content/uploads/2018/12/resodanse-salsa.mp4 HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Thu, 26 Feb 2026 10:52:25 GMT\r\netag: \"1f5b037-64bb7ea7e9ad4\"\r\naccept-ranges: bytes\r\ncontent-length: 32878647\r\ncontent-range: bytes 0-32878646/32878647\r\ncontent-type: video/mp4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1255550,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"11cdac751aebafd5450cbe2817a1bcff","sha1":"8fed24530da354bab22e38ac0852f7ce968306c5","sha256":"f632f5c2c9e6cf018985262de0a808182dec8bdcf56e15ee554af0b949e84804","sha512":"1dd7810ed2b98d554540163231d1b7cf7a67c4b1c69cbb007b8d249db3762efa7b7143bcf53b0496417b94eb3807a268da9cc1d78b8745d2534a38a4878cfcb9","ssdeep":"24576:Emx04uozCdp7GbEZdMb+CfbrJKvoHu2JTdnGCzeOrQi3PZG:jxVpIp7GbIdMxfvb4CprQi8","tlshash":"8d25121c5ae205c3f15eba77d98a75382aa37bd3d8c397c035cf94520f505aa0e1a8e7","first_seen":"2026-05-29T21:34:32.187894Z","last_seen":"2026-05-29T21:40:02.816656Z","times_seen":2,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.woff","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-content/themes/Divi/core/admin/fonts/modules/all/modules.woff HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Fri, 27 Feb 2026 14:10:17 GMT\r\netag: \"167b4-64bcecbfb92d1\"\r\naccept-ranges: bytes\r\ncontent-length: 92084\r\ncontent-type: font/woff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":92084,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 92084, version 2.4","md5":"4f7c51948ce1b802a13ebbccec151d0c","sha1":"5b1d3cd0929108da4b6334c4a487db08c9520f1d","sha256":"fe67b77ac7e0ef4b482dafb86adfa403db1b89a2f337d2dc8bd1278cfe975196","sha512":"87fab156e0c1e79f4dd07075cee8905dcc8c01c7708fbf6e9f6592f1c0f62083c86d0076ec23f73fc4351b51d6e03951ff7aece0ad9305488b910a8f8fefb023","ssdeep":"1536:n2S6qLRqKELiXMjCs7VDmGWALXJ8jzxJ9OIgr26F9BEFDTs8/M/OuWhX5j63QWIh:n2S6qLRqKELiXMjCs7VDmGWAN8H79OIl","tlshash":"e593f97bc3cbcf7fe955e775087b4a252dfadb26926fc40e9a451c869504cf80d28290","first_seen":"2023-09-22T00:38:17Z","last_seen":"2026-05-30T01:42:18.820174Z","times_seen":41443,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.resodanse-salsa.ch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 13:55:06 GMT\r\nexpires: Sat, 29 May 2027 13:55:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 27529\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-05-30T01:58:57.796142Z","times_seen":168079,"resource_available":false,"data":null}},"time_used":649,"timings":{"blocked":226,"dns":1,"connect":20,"send":0,"wait":170,"receive":1,"ssl":227},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.resodanse-salsa.ch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20556\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 14:18:09 GMT\r\nexpires: Sat, 29 May 2027 14:18:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 26146\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20556,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20556, version 1.0","md5":"8feefe1e602c4b14ff414a77c3af2c2c","sha1":"e57daae78e76c8944e97edecfa656f8608e09db5","sha256":"2addf2d86d7a5778653b36d551e97a39da52855f82fac7461cfc1bd86d460aed","sha512":"893f9695ee887eed00246f24d4ec3e17ed64e2af4fab055f951795f50d34f3685aafcfbda943060a132c42169d2ef5c99d3db4fb901d57a09e712b4ff02afd92","ssdeep":"384:tpv6fcCujSd2+uNZ0omwRnNPqfWvx/CldKV8D2w9lQXL79Ci5q8S/USM2BHRpWp6:fxC0So4wRhx90K6ywQLIWS8S5By5AR","tlshash":"8792e056b288746a77e4e3ecc859ae6c65ed9b0f0c1b15b909322122f196c4734930f9","first_seen":"2026-02-19T22:35:21.90447Z","last_seen":"2026-05-30T01:58:57.796663Z","times_seen":16775,"resource_available":false,"data":null}},"time_used":843,"timings":{"blocked":399,"dns":1,"connect":25,"send":0,"wait":16,"receive":1,"ssl":394},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.resodanse-salsa.ch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 47208\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 27 May 2026 09:21:00 GMT\r\nexpires: Thu, 27 May 2027 09:21:00 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:52:51 GMT\r\ncontent-type: font/woff2\r\nage: 216775\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":47208,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 47208, version 1.0","md5":"2465bec3a1d5ad40ceb1828a07763d2f","sha1":"656fca193330ac8ec592a0942f4e7d718fa69cbf","sha256":"14f23757c6b41b4b6c0b967ca3fa74ff47a868728158373461c4e6e4b6368f19","sha512":"171195e97870d0794a5762cb3324c2994542a534f4e8ec490400f5667527c48c0c2814071fe9449f4d78169b2d35228466cfadea81229f6ebddf791dd3fb2099","ssdeep":"768:/FAcvRO+HWzD3hVYA6By+jNbKulKiuJ+YAnmWjKiXN0EoGlknbxWuFYCrJRSx89Z:33sD38k+jYulvuUHnmTq0bGlyFWuFYiV","tlshash":"6123f16ca80df34596fae4f76b11fcebf248bc9177c5ee10278c864d8575aa5cc28241","first_seen":"2026-02-19T22:36:20.820122Z","last_seen":"2026-05-30T01:34:10.200862Z","times_seen":12908,"resource_available":false,"data":null}},"time_used":642,"timings":{"blocked":225,"dns":11,"connect":15,"send":0,"wait":170,"receive":2,"ssl":210},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.resodanse-salsa.ch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 13:55:06 GMT\r\nexpires: Sat, 29 May 2027 13:55:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 27529\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-05-30T01:58:57.796142Z","times_seen":168079,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":99,"dns":0,"connect":0,"send":0,"wait":77,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-content/uploads/2018/12/resodanse-salsa.mp4","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-content/uploads/2018/12/resodanse-salsa.mp4 HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Thu, 26 Feb 2026 10:52:25 GMT\r\netag: \"1f5b037-64bb7ea7e9ad4\"\r\naccept-ranges: bytes\r\ncontent-length: 32878647\r\ncontent-range: bytes 0-32878646/32878647\r\ncontent-type: video/mp4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1572864,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"11cdac751aebafd5450cbe2817a1bcff","sha1":"8fed24530da354bab22e38ac0852f7ce968306c5","sha256":"f632f5c2c9e6cf018985262de0a808182dec8bdcf56e15ee554af0b949e84804","sha512":"1dd7810ed2b98d554540163231d1b7cf7a67c4b1c69cbb007b8d249db3762efa7b7143bcf53b0496417b94eb3807a268da9cc1d78b8745d2534a38a4878cfcb9","ssdeep":"24576:Emx04uozCdp7GbEZdMb+CfbrJKvoHu2JTdnGCzeOrQi3PZG:jxVpIp7GbIdMxfvb4CprQi8","tlshash":"8d25121c5ae205c3f15eba77d98a75382aa37bd3d8c397c035cf94520f505aa0e1a8e7","first_seen":"2026-05-29T21:34:32.187894Z","last_seen":"2026-05-29T21:40:02.816656Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-content/themes/Divi/includes/builder/styles/images/preloader.gif","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-content/themes/Divi/includes/builder/styles/images/preloader.gif HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Fri, 27 Feb 2026 14:10:18 GMT\r\netag: \"24d3-64bcecbfe32b1\"\r\naccept-ranges: bytes\r\ncontent-length: 9427\r\ncontent-type: image/gif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9427,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"9895a027d72a1a9bd7c2e922d0ad273c","sha1":"350a7c0f6b64e19c61b183afef7ffaca57befa30","sha256":"27422f830d71474144ea902369ce78d178d1ace4e38a029ba2e359b7b55b4176","sha512":"c3d57a4b7c767198a5a56611ab4ba1f870e305c98dc5c09d4ccefc3079408764e105d9e13bd3d850b5464f62ec4d840269395e97d6437539ed2b1d8f89bf1a66","ssdeep":"192:VmXoeFjM6gkixGp4SfyWMRESELO0LMVwiRTAThEG:VmXoeFqevfyWMRyyaMVRRsVJ","tlshash":"e012f8bcc03ab561ef6d43bda03d527e50bf6a72026e515709a13157a43b3a81682bbc","first_seen":"2023-05-04T10:10:00Z","last_seen":"2026-05-29T23:08:31.881596Z","times_seen":4020,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-content/uploads/2018/10/RD_Photo_1.png","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-content/uploads/2018/10/RD_Photo_1.png HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Thu, 26 Feb 2026 10:52:21 GMT\r\netag: \"3f2a0f-64bb7ea3b969f\"\r\naccept-ranges: bytes\r\ncontent-length: 4139535\r\ncontent-type: image/png\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4139535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2980 x 1407, 8-bit/color RGB, non-interlaced","md5":"be7a4ab927de6cf32d3d3e3eedefd550","sha1":"6b97f6d8bc51e1d23f7bba142397f13f2118dd2d","sha256":"d1184524cdbbe4a694e6032de938490d22de55cb4997b3ae7cbf044d1ad98511","sha512":"8aa05b5c0b326aaad3fddae6dab94e3a1c1f50dd1d30ce9adbae34813807e1c2cefd419227e6181f8be57611e759609f37b68355532e5202c42672b3e9b42315","ssdeep":"24576:2F6lG4iJGqkVLEb4JqE8MdtW+P86XG8eh1SVIUla:M4DiJDkVLI4l8M7P86feLUla","tlshash":"9a2533f4e23141f3083175a9a49838b27d0b58f9c6c48a7284bde570f079bff5a653a5","first_seen":"2026-05-29T21:34:32.190531Z","last_seen":"2026-05-29T21:40:02.810244Z","times_seen":2,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":353,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-content/uploads/2018/10/RD_Photo_8.png","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-content/uploads/2018/10/RD_Photo_8.png HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/wp-content/et-cache/7/et-core-unified-deferred-7.min.css?ver=1778490240\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Thu, 26 Feb 2026 10:52:21 GMT\r\netag: \"3fa82-64bb7ea4819bd\"\r\naccept-ranges: bytes\r\ncontent-length: 260738\r\ncontent-type: image/png\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":260738,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1100 x 733, 8-bit/color RGB, non-interlaced","md5":"f7031cd40e0a0723daa4ede3659a51f7","sha1":"10c073168d80636cb44a4e480663d7bc09fd8211","sha256":"015eaa23fd8c4371904f3a5beb349ffaa8f1432625055d205dc49b2ed52b321e","sha512":"89bc28d6e274d222d3fbc9a85874366ca2270fced35dfd9d50288504110b83ba2987c4521b353357b8b426a89dd44dc0cb5fbfdf739577334ebcc220f2328bf4","ssdeep":"6144:QbiE+eFkV7OV1FLNguGKB/QkES9Ya6udkH/dSd1pdb0niBdTTw5:mEee87FKNKTHYpuufCpdInSdTU5","tlshash":"ef4423678c13444b464885ac1461609bdf875ef6e138f474268fc38aa6ae0991d3febb","first_seen":"2026-05-29T21:34:32.191475Z","last_seen":"2026-05-29T21:40:02.802342Z","times_seen":2,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resodanse-salsa.ch/wp-content/uploads/et-fonts/Oswald-Regular.ttf","fqdn":"www.resodanse-salsa.ch","domain":"resodanse-salsa.ch","tld":"ch"},"ip":{"addr":"185.125.27.82","port":443,"asn":29222,"as":"Infomaniak Network SA","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resodanse-salsa.ch","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 11:58:01 GMT","end":"Sun, 09 Aug 2026 11:58:00 GMT"},"fingerprint":{"sha1":"1B:F0:E1:72:FB:71:9F:2E:41:9A:76:7E:4E:F5:D0:15:82:85:67:CE","sha256":"0F:64:D2:CF:A8:2E:9A:FB:17:63:25:67:B3:B6:7B:8A:E9:C8:86:86:2E:A8:33:FD:83:DD:4B:21:96:4D:9E:1A"}}},"request":{"raw":"GET /wp-content/uploads/et-fonts/Oswald-Regular.ttf HTTP/1.1\r\nHost: www.resodanse-salsa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resodanse-salsa.ch/wp-content/et-cache/7/et-core-unified-deferred-7.min.css?ver=1778490240\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 21:33:55 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=16000000\r\nlast-modified: Thu, 26 Feb 2026 10:52:28 GMT\r\netag: \"16bcc-64bb7eaac80cc\"\r\naccept-ranges: bytes\r\ncontent-length: 93132\r\ncontent-type: font/ttf\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":93132,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 26 names, Macintosh, Copyright 2016 The Oswald Project Authors (https://github.com/googlefonts/OswaldFont)OswaldRegul","md5":"68a85f5cf2497486387d6c9f253bde62","sha1":"ad340aec266c4c25abf8bd96121ed5cf3c4574be","sha256":"43b55a174fb3f5a1e6218a5385f647d2eace04776ab58673f4a439381930006e","sha512":"18f526d5268f8addd047438db64cbed2043c294e75695b1726a8438f0580c9b15317a29ee3ebc909a8bf1833a9eb9feef797715e726dd47f87c847ba9ffaf566","ssdeep":"1536:MDx4DUAeZahwZbAIz1e6oLrVNxOdmwip8nXcx0:MDmDm3gxLrGiWi0","tlshash":"01932a17f749d70bef164e3856a673e5a358fc212e0787cb91096f69ec970ca484328e","first_seen":"2023-06-10T03:58:16Z","last_seen":"2026-05-29T21:40:02.777111Z","times_seen":76,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"www.resodanse-salsa.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.resodanse-salsa.ch/","date":"2026-05-29T21:33:55.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.resodanse-salsa.ch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 13:55:06 GMT\r\nexpires: Sat, 29 May 2027 13:55:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 27529\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-05-30T01:58:57.796142Z","times_seen":168079,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":151,"dns":0,"connect":14,"send":0,"wait":18,"receive":58,"ssl":150},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}