{"report_id":"ab994310-2080-4590-8c5a-036852d5e9b6","version":6,"status":"done","tags":[],"date":"2025-12-23T01:52:35Z","url":{"schema":"http","addr":"springhillconsultants.co.tz/","fqdn":"springhillconsultants.co.tz","domain":"springhillconsultants.co.tz","tld":"co.tz"},"ip":{"addr":"31.22.4.81","port":0,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"springhillconsultants.co.tz/","fqdn":"springhillconsultants.co.tz","domain":"springhillconsultants.co.tz","tld":"co.tz"},"title":"ComingSoon - Bootstrap Coming Soon Template","dom":{"size":8041,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"dc0b69703a2472b0f7eb4a620e223090","sha1":"2e5a41411c609bc80e17dfc6303ccb75fc763553","sha256":"f76674fea88efae8c688448c1261f4e69ef128f89cabdc40635fc12149937715","sha512":"55fb2258a3a3751d71cd6fc35ae173a9384589892fc3e44854deaa4d5e7b41e47904b26e037f2560cdda9e2d7c14f095eb23a490c845be8b6501bb511ee2218a","ssdeep":"96:nh4mUV/7aeot73Axdbjv2fV0a6RyTuDJGzs6Cvdpk0ujFBoBrwFPMwRmgCOj:h4mUVjaed5jvKV0RjkzBCvda0ujfPBxj","tlshash":"b0f11e2195f12526458280a8baa42f0fbe91e50bcb5f450835fc4bd92fd7f87cda3758","dom_hash":"domhasha14d4a95394c5b9cf9a48458601a5bc4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"springhillconsultants.co.tz/","fqdn":"springhillconsultants.co.tz","domain":"springhillconsultants.co.tz","tld":"co.tz"},"ip":{"addr":"31.22.4.81","port":0,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-27T01:52:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"springhillconsultants.co.tz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"springhillconsultants.co.tz","ip":{"addr":"31.22.4.81","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":11,"request_count":11,"received_data":621478,"sent_data":5390,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-21T22:14:03.270461Z","alert_count":0,"request_count":6,"received_data":296658,"sent_data":3347,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-21T22:17:07.06462Z","alert_count":0,"request_count":1,"received_data":61026,"sent_data":535,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"springhillconsultants.co.tz/assets/vendor/php-email-form/validate.js","fqdn":"springhillconsultants.co.tz","domain":"springhillconsultants.co.tz","tld":"co.tz"},"ip":{"addr":"31.22.4.81","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"37bb0189547ca8d17bd3789208fc527b","sha1":"352d3d4d8889de1c17db0c49afa9fdd5720655b4","sha256":"9acc646ebbb7e53e8c032a8c40b96c61428d54341e4587813bbcd3e946d6bff0","sha512":"0df9d9e3ac19bd9a6e6ab82e151aaa975a49d5f89ba4ad0e6e1f934228718f377c9eb9657dc0a972ae2986562535317cc935200a9ff4039205f2b2ca27ef51fe","ssdeep":"","tlshash":"8c51da2b126916738a33a7f56cd64b80e274503fd89045a67d4cc90d2f384e1aae8fe8","size":2590,"data":"","first_seen":"2023-03-08T20:03:48Z","last_seen":"2026-06-09T14:32:26.023963Z","times_seen":244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"springhillconsultants.co.tz/assets/js/main.js","fqdn":"springhillconsultants.co.tz","domain":"springhillconsultants.co.tz","tld":"co.tz"},"ip":{"addr":"31.22.4.81","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"52b7add3ced1317d59fc942d7753f44a","sha1":"269ef286a593205d55bfb517c5c72004bdaeb564","sha256":"1366aa668bfa9c3893eefffc16955beeb2c3fae693b8da14c54bd0a7500164f5","sha512":"954684a6ea042478cac750d7e5847e8619b12b5bd8191b2f24cc976150de78b1166f8ae80cd62018e59e134392b695ab50d01a4fd8b05d0010b9b4a3f48348d8","ssdeep":"","tlshash":"3d41c078122064b348bfe37bba562b5cf63d6227614241e93cdd95a02f70075c4eafc5","size":2096,"data":"","first_seen":"2025-12-23T01:52:40.564867Z","last_seen":"2025-12-23T01:52:40.564867Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"springhillconsultants.co.tz/assets/vendor/bootstrap/js/bootstrap.bundle.min.js","fqdn":"springhillconsultants.co.tz","domain":"springhillconsultants.co.tz","tld":"co.tz"},"ip":{"addr":"31.22.4.81","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"9afc1e0eba9521f29775ad2f6ace3f1f","sha1":"77bcf0c882fa4be8fbead35052c39a944f9035e3","sha256":"a85b2fe307777c8eb47f06a1eec399fcbddfe83d252fd202d3e1358051fcf27d","sha512":"d532b8863098e7e13d1f7af9fb4e5b1066ca1b22b9d3a59a0cf7cf7b5b3f8a1c118ebe8eb4be37cc92f338543eff372238d11dfaca7b2f0adf3829f2ba43d2b2","ssdeep":"1536:n4EMTGR2t4n+3ifBHJR9WbUHk3j8YYmPwRM1C+XIpBzQffkF:z4Fj8OPwRM1CEIpBu8","tlshash":"1573c6593244b4770ade45b68037420bf2265d98b24b802cb5bcadde2a7dc863277f7c","size":80457,"data":"","first_seen":"2023-03-07T16:08:44Z","last_seen":"2026-06-12T19:48:00.287497Z","times_seen":785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"springhillconsultants.co.tz/assets/vendor/bootstrap/css/bootstrap.min.css","fqdn":"springhillconsultants.co.tz","domain":"springhillconsultants.co.tz","tld":"co.tz"},"ip":{"addr":"31.22.4.81","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://springhillconsultants.co.tz/","date":"2025-12-23T01:52:12.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.springhillconsultants.co.tz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 10:46:23 GMT","end":"Thu, 22 Jan 2026 10:46:22 GMT"},"fingerprint":{"sha1":"60:5C:75:29:88:50:00:42:95:37:C7:0F:83:BB:A6:BF:C7:9C:D7:E0","sha256":"AC:7D:B8:E8:9A:10:C2:8A:3C:A9:10:47:4B:1F:7A:D3:DE:EB:45:BC:89:0F:F4:DD:8B:7F:9A:9F:07:57:22:20"}}},"request":{"raw":"GET /assets/vendor/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: springhillconsultants.co.tz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://springhillconsultants.co.tz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 23 Dec 2025 01:52:12 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 24 Oct 2025 10:56:28 GMT\r\ncache-control: max-age=2592000, public, proxy-revalidate\r\nexpires: Thu, 22 Jan 2026 01:52:12 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":195498,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65305)","md5":"16b20908101acc6624cb9446fcac64a1","sha1":"b7cd57a4fd6a1fae6126150f427ef217397293e4","sha256":"2933c96348a4eae7cbbf8f280ca0981586a9b5c097ef952b996cad7d28f2fad0","sha512":"b22c1efe85cc8528c60b02e7fac72b68f396ac9c4795480c04c65774f7b64e7937234c771120a82f3ed66793531fa499af2c0c63e3c1d5c8f2a89e63025b823a","ssdeep":"1536:ntGg9JfW/eQK5wlP7h9gOfn3NPLsqkVkpz600I4lp:ntGg9JfWr9kVkpz600I4lp","tlshash":"fe1482d6f190307d98a7c2499591fefd866fa585d7120aaaf0137b6807ca7c30963ecc","first_seen":"2023-04-05T23:55:04Z","last_seen":"2026-06-13T10:14:00.263495Z","times_seen":989,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"springhillconsultants.co.tz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"springhillconsultants.co.tz/assets/vendor/bootstrap-icons/bootstrap-icons.css","fqdn":"springhillconsultants.co.tz","domain":"springhillconsultants.co.tz","tld":"co.tz"},"ip":{"addr":"31.22.4.81","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://springhillconsultants.co.tz/","date":"2025-12-23T01:52:12.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.springhillconsultants.co.tz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 10:46:23 GMT","end":"Thu, 22 Jan 2026 10:46:22 GMT"},"fingerprint":{"sha1":"60:5C:75:29:88:50:00:42:95:37:C7:0F:83:BB:A6:BF:C7:9C:D7:E0","sha256":"AC:7D:B8:E8:9A:10:C2:8A:3C:A9:10:47:4B:1F:7A:D3:DE:EB:45:BC:89:0F:F4:DD:8B:7F:9A:9F:07:57:22:20"}}},"request":{"raw":"GET /assets/vendor/bootstrap-icons/bootstrap-icons.css HTTP/1.1\r\nHost: springhillconsultants.co.tz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://springhillconsultants.co.tz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 23 Dec 2025 01:52:12 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 24 Oct 2025 10:56:28 GMT\r\ncache-control: max-age=2592000, public, proxy-revalidate\r\nexpires: Thu, 22 Jan 2026 01:52:12 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88585,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"91f7cf4a3d3f0660b4e3914e5ac9298a","sha1":"6e12e1ebcd983f848e5c280ab77649eeb44e74bc","sha256":"f0cf9bd878febf2ff6279b59f696031deb8f0f9f4ab1a1199f55d78f7c558638","sha512":"09a4cc428278f64e2fc3d5ced15a5306998ccfc5e90963f92611a606fb81a8239a3875843563b50ab565d3dbb8ca9f320554880fab260f8fa0a730c955038fc1","ssdeep":"768:iqnm8OAL1Mzocm4KyH2CuwZwmij34k4RDl8IbgFVC:fOocm4FuwZ5ijINRDl8i","tlshash":"9283eebad14f05f9d341e4d92743674693aab93ce1812c7ad342399ee3c16188ad73ec","first_seen":"2023-04-06T17:13:13Z","last_seen":"2026-06-13T09:29:29.58635Z","times_seen":2236,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"springhillconsultants.co.tz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"springhillconsultants.co.tz/assets/js/main.js","fqdn":"springhillconsultants.co.tz","domain":"springhillconsultants.co.tz","tld":"co.tz"},"ip":{"addr":"31.22.4.81","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://springhillconsultants.co.tz/","date":"2025-12-23T01:52:12.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.springhillconsultants.co.tz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 10:46:23 GMT","end":"Thu, 22 Jan 2026 10:46:22 GMT"},"fingerprint":{"sha1":"60:5C:75:29:88:50:00:42:95:37:C7:0F:83:BB:A6:BF:C7:9C:D7:E0","sha256":"AC:7D:B8:E8:9A:10:C2:8A:3C:A9:10:47:4B:1F:7A:D3:DE:EB:45:BC:89:0F:F4:DD:8B:7F:9A:9F:07:57:22:20"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: springhillconsultants.co.tz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://springhillconsultants.co.tz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 23 Dec 2025 01:52:12 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 24 Oct 2025 10:56:28 GMT\r\ncache-control: max-age=2592000, public, proxy-revalidate, public, proxy-revalidate\r\nexpires: Thu, 22 Jan 2026 01:52:12 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2096,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"52b7add3ced1317d59fc942d7753f44a","sha1":"269ef286a593205d55bfb517c5c72004bdaeb564","sha256":"1366aa668bfa9c3893eefffc16955beeb2c3fae693b8da14c54bd0a7500164f5","sha512":"954684a6ea042478cac750d7e5847e8619b12b5bd8191b2f24cc976150de78b1166f8ae80cd62018e59e134392b695ab50d01a4fd8b05d0010b9b4a3f48348d8","ssdeep":"","tlshash":"3d41c078122064b348bfe37bba562b5cf63d6227614241e93cdd95a02f70075c4eafc5","first_seen":"2025-12-23T01:52:40.564867Z","last_seen":"2025-12-23T01:52:40.564867Z","times_seen":1,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"springhillconsultants.co.tz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://springhillconsultants.co.tz/","date":"2025-12-23T01:52:13.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://springhillconsultants.co.tz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 17 Dec 2025 12:35:15 GMT\r\nexpires: Thu, 17 Dec 2026 12:35:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 479818\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-06-14T01:12:21.51319Z","times_seen":55525,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":173,"dns":3,"connect":7,"send":0,"wait":10,"receive":3,"ssl":161},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"springhillconsultants.co.tz/assets/vendor/bootstrap-icons/fonts/bootstrap-icons.woff2?8d200481aa7f02a2d63a331fc782cfaf","fqdn":"springhillconsultants.co.tz","domain":"springhillconsultants.co.tz","tld":"co.tz"},"ip":{"addr":"31.22.4.81","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://springhillconsultants.co.tz/","date":"2025-12-23T01:52:13.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.springhillconsultants.co.tz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 10:46:23 GMT","end":"Thu, 22 Jan 2026 10:46:22 GMT"},"fingerprint":{"sha1":"60:5C:75:29:88:50:00:42:95:37:C7:0F:83:BB:A6:BF:C7:9C:D7:E0","sha256":"AC:7D:B8:E8:9A:10:C2:8A:3C:A9:10:47:4B:1F:7A:D3:DE:EB:45:BC:89:0F:F4:DD:8B:7F:9A:9F:07:57:22:20"}}},"request":{"raw":"GET /assets/vendor/bootstrap-icons/fonts/bootstrap-icons.woff2?8d200481aa7f02a2d63a331fc782cfaf HTTP/1.1\r\nHost: springhillconsultants.co.tz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://springhillconsultants.co.tz/assets/vendor/bootstrap-icons/bootstrap-icons.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 23 Dec 2025 01:52:13 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 112440\r\nlast-modified: Fri, 24 Oct 2025 10:56:28 GMT\r\naccept-ranges: bytes\r\nexpires: Tue, 23 Dec 2025 01:52:13 GMT\r\npragma: public\r\ncache-control: max-age=0, public\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":112440,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 112440, version 1.0","md5":"31e1300d419245fd27614630601dc74d","sha1":"3a284b0618771f29da8eb6be900e99439253dce0","sha256":"c69bf1ccae5f13b5aa4345dcfeb209a8148ad0bfa1e0678b93792aae0429c764","sha512":"d861071b92e4db2ab0c39fd97099aa7024b50c594c9dee7fa4b2137668fea79ebc4b5290558a87d6ee5e48bdeea10dc4b7877105b84ec06d60c3b1b5aff6396f","ssdeep":"3072:gRAJT6JF9ltW5gQJNMiJiRk6lKu1MwRuoV/9:zEJFrI5gMM+0k6lT6wR59","tlshash":"a3b3121c4b3ff207ec3abe35ac8e036ac7a35a51e6445b760de9aa91243c54bf061713","first_seen":"2023-04-19T16:25:28Z","last_seen":"2026-06-13T18:38:13.164119Z","times_seen":4309,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"springhillconsultants.co.tz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"springhillconsultants.co.tz/assets/img/apple-touch-icon.png","fqdn":"springhillconsultants.co.tz","domain":"springhillconsultants.co.tz","tld":"co.tz"},"ip":{"addr":"31.22.4.81","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://springhillconsultants.co.tz/","date":"2025-12-23T01:52:13.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.springhillconsultants.co.tz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 10:46:23 GMT","end":"Thu, 22 Jan 2026 10:46:22 GMT"},"fingerprint":{"sha1":"60:5C:75:29:88:50:00:42:95:37:C7:0F:83:BB:A6:BF:C7:9C:D7:E0","sha256":"AC:7D:B8:E8:9A:10:C2:8A:3C:A9:10:47:4B:1F:7A:D3:DE:EB:45:BC:89:0F:F4:DD:8B:7F:9A:9F:07:57:22:20"}}},"request":{"raw":"GET /assets/img/apple-touch-icon.png HTTP/1.1\r\nHost: springhillconsultants.co.tz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://springhillconsultants.co.tz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 23 Dec 2025 01:52:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 1738\r\nlast-modified: Fri, 24 Oct 2025 10:56:28 GMT\r\naccept-ranges: bytes\r\nexpires: Thu, 22 Jan 2026 01:52:13 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public, proxy-revalidate, public\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1738,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"042a7e9fdd293212aca19150aef71b0d","sha1":"2a70c0370ffbaac9124d9eca97cadac47915c9d0","sha256":"66e7252ff9afd2c49ca8fd05f708bc330a42beaf1af7fc2ab6998cb3dc654bda","sha512":"e4895f6a1962ac649729f0e1ac577960a374900b71e771eee4cafb359f818c41a1178d265ba6e415c292a24e4a6367111beb56cb4f1b2abfedc8f2595c179fd4","ssdeep":"","tlshash":"9d31b6cd674dbc1cb160742b61413760c7b480720e46b213813a28ba9076bd2f504cee","first_seen":"2023-05-03T12:55:30Z","last_seen":"2026-06-12T22:28:32.752472Z","times_seen":606,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"springhillconsultants.co.tz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"springhillconsultants.co.tz/","fqdn":"springhillconsultants.co.tz","domain":"springhillconsultants.co.tz","tld":"co.tz"},"ip":{"addr":"31.22.4.81","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-23T01:52:12.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.springhillconsultants.co.tz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 10:46:23 GMT","end":"Thu, 22 Jan 2026 10:46:22 GMT"},"fingerprint":{"sha1":"60:5C:75:29:88:50:00:42:95:37:C7:0F:83:BB:A6:BF:C7:9C:D7:E0","sha256":"AC:7D:B8:E8:9A:10:C2:8A:3C:A9:10:47:4B:1F:7A:D3:DE:EB:45:BC:89:0F:F4:DD:8B:7F:9A:9F:07:57:22:20"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: springhillconsultants.co.tz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 23 Dec 2025 01:52:12 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 24 Oct 2025 10:56:28 GMT\r\ncache-control: max-age=500, public, proxy-revalidate\r\nexpires: Tue, 23 Dec 2025 02:00:32 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8047,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"1bc0833c7fb264db353db42ca0bb1c2c","sha1":"d192ef1fde7a08ef14f96f3a9a29c36983f810fe","sha256":"0e95170d88d555279bea22a2db9722af2e6eba40eb3529fd1f4dfc8ffaba1073","sha512":"a3e7677ae5844ffaefd8530871309277435853f5f007714c4c3e56badae56ccc3d57b663423c5a292c920e9de43e2a0dd305b1f86a6fd814a222f6d0c726a326","ssdeep":"192:R4mUVjaedzBvKV0RjkzBCvda0ujbPBxUAM:R/UDKV0BH1bsbxM","tlshash":"6cf12e2599f0252645828098baa43f0fae90e50bcb5f464835fc4bc92fd7f87cda3758","first_seen":"2025-12-23T01:52:40.571228Z","last_seen":"2025-12-23T01:52:40.571228Z","times_seen":1,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":158,"dns":75,"connect":35,"send":0,"wait":39,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"springhillconsultants.co.tz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i|Raleway:300,300i,400,400i,600,600i,700,700i","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://springhillconsultants.co.tz/","date":"2025-12-23T01:52:12.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i|Raleway:300,300i,400,400i,600,600i,700,700i HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://springhillconsultants.co.tz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 23 Dec 2025 01:52:12 GMT\r\ndate: Tue, 23 Dec 2025 01:52:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60340,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"183606f7e1ea3cbfcd99da9432fd0e10","sha1":"19236157a3f969b7960d8f56f2e9dce8797c7a20","sha256":"95097308b6b8317a08e569634cc5a3177c472e1bd08fd0654e4772a01a3a3167","sha512":"10235f5ed509a30e3d90ea0696304ae70935cdd7c339f196105f7a44fb747191b70befc8b48deb1076b73a8e0b04d544865edd0454a1cfffbf02f75ee38e39ad","ssdeep":"384:+eO2pXt2tv/qY49Ynx8bOjI8t7KvGqY49xn+vROFuGttcvoqY497nMZ6OiFLty5X:YbPUiCAgkgHLFosL3Jbcu","tlshash":"0f432e9104176440a7432dd633de3e31ee0fa2507044847a9bfd9beaeddad6a63b435c","first_seen":"2025-09-21T14:31:36.530334Z","last_seen":"2026-06-07T07:39:35.387386Z","times_seen":39,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":287,"dns":91,"connect":7,"send":0,"wait":19,"receive":0,"ssl":192},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"springhillconsultants.co.tz/assets/vendor/bootstrap/js/bootstrap.bundle.min.js","fqdn":"springhillconsultants.co.tz","domain":"springhillconsultants.co.tz","tld":"co.tz"},"ip":{"addr":"31.22.4.81","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://springhillconsultants.co.tz/","date":"2025-12-23T01:52:12.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.springhillconsultants.co.tz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 10:46:23 GMT","end":"Thu, 22 Jan 2026 10:46:22 GMT"},"fingerprint":{"sha1":"60:5C:75:29:88:50:00:42:95:37:C7:0F:83:BB:A6:BF:C7:9C:D7:E0","sha256":"AC:7D:B8:E8:9A:10:C2:8A:3C:A9:10:47:4B:1F:7A:D3:DE:EB:45:BC:89:0F:F4:DD:8B:7F:9A:9F:07:57:22:20"}}},"request":{"raw":"GET /assets/vendor/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: springhillconsultants.co.tz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://springhillconsultants.co.tz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 23 Dec 2025 01:52:12 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 24 Oct 2025 10:56:28 GMT\r\ncache-control: max-age=2592000, public, proxy-revalidate, public, proxy-revalidate\r\nexpires: Thu, 22 Jan 2026 01:52:12 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80457,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"9afc1e0eba9521f29775ad2f6ace3f1f","sha1":"77bcf0c882fa4be8fbead35052c39a944f9035e3","sha256":"a85b2fe307777c8eb47f06a1eec399fcbddfe83d252fd202d3e1358051fcf27d","sha512":"d532b8863098e7e13d1f7af9fb4e5b1066ca1b22b9d3a59a0cf7cf7b5b3f8a1c118ebe8eb4be37cc92f338543eff372238d11dfaca7b2f0adf3829f2ba43d2b2","ssdeep":"1536:n4EMTGR2t4n+3ifBHJR9WbUHk3j8YYmPwRM1C+XIpBzQffkF:z4Fj8OPwRM1CEIpBu8","tlshash":"1573c6593244b4770ade45b68037420bf2265d98b24b802cb5bcadde2a7dc863277f7c","first_seen":"2023-03-07T16:08:44Z","last_seen":"2026-06-12T19:48:00.287497Z","times_seen":785,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"springhillconsultants.co.tz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"springhillconsultants.co.tz/assets/vendor/php-email-form/validate.js","fqdn":"springhillconsultants.co.tz","domain":"springhillconsultants.co.tz","tld":"co.tz"},"ip":{"addr":"31.22.4.81","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://springhillconsultants.co.tz/","date":"2025-12-23T01:52:12.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.springhillconsultants.co.tz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 10:46:23 GMT","end":"Thu, 22 Jan 2026 10:46:22 GMT"},"fingerprint":{"sha1":"60:5C:75:29:88:50:00:42:95:37:C7:0F:83:BB:A6:BF:C7:9C:D7:E0","sha256":"AC:7D:B8:E8:9A:10:C2:8A:3C:A9:10:47:4B:1F:7A:D3:DE:EB:45:BC:89:0F:F4:DD:8B:7F:9A:9F:07:57:22:20"}}},"request":{"raw":"GET /assets/vendor/php-email-form/validate.js HTTP/1.1\r\nHost: springhillconsultants.co.tz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://springhillconsultants.co.tz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 23 Dec 2025 01:52:12 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 24 Oct 2025 10:56:28 GMT\r\ncache-control: max-age=2592000, public, proxy-revalidate, public, proxy-revalidate\r\nexpires: Thu, 22 Jan 2026 01:52:12 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2590,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"37bb0189547ca8d17bd3789208fc527b","sha1":"352d3d4d8889de1c17db0c49afa9fdd5720655b4","sha256":"9acc646ebbb7e53e8c032a8c40b96c61428d54341e4587813bbcd3e946d6bff0","sha512":"0df9d9e3ac19bd9a6e6ab82e151aaa975a49d5f89ba4ad0e6e1f934228718f377c9eb9657dc0a972ae2986562535317cc935200a9ff4039205f2b2ca27ef51fe","ssdeep":"","tlshash":"8c51da2b126916738a33a7f56cd64b80e274503fd89045a67d4cc90d2f384e1aae8fe8","first_seen":"2023-03-08T20:03:48Z","last_seen":"2026-06-09T14:32:26.023963Z","times_seen":244,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"springhillconsultants.co.tz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://springhillconsultants.co.tz/","date":"2025-12-23T01:52:13.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://springhillconsultants.co.tz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 17 Dec 2025 12:35:15 GMT\r\nexpires: Thu, 17 Dec 2026 12:35:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 479818\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-06-14T01:12:21.51319Z","times_seen":55525,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":178,"dns":2,"connect":20,"send":0,"wait":8,"receive":3,"ssl":144},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://springhillconsultants.co.tz/","date":"2025-12-23T01:52:13.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://springhillconsultants.co.tz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 17 Dec 2025 12:35:15 GMT\r\nexpires: Thu, 17 Dec 2026 12:35:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 479818\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-06-14T01:12:21.51319Z","times_seen":55525,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":11,"receive":11,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://springhillconsultants.co.tz/","date":"2025-12-23T01:52:13.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/opensans/v44/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://springhillconsultants.co.tz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50216\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 17 Dec 2025 21:35:41 GMT\r\nexpires: Thu, 17 Dec 2026 21:35:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 447392\r\nlast-modified: Mon, 15 Sep 2025 16:31:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50216,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50216, version 1.0","md5":"b577bb8d8c25082a9a50522f5ec995e5","sha1":"b3e5bd7b3c40d97eeefad7837daa986857596070","sha256":"186836b74ceac07b2764c07c0379420e3014efb30fe918461c235e0ef6cbc4a2","sha512":"54d26a07921bc6ea7c90b3d810c3e1e965e6dbc227b002cc385c07d2f3878ec42c7580663b8663638d7cad3ff50a8402dd64673aec5452d26d30760fb5c871c9","ssdeep":"1536:fTniLxNYt7dypMNb88NcWU5a91c+D+ZXA:Ti1NYtRyp2g8iW4atkXA","tlshash":"4a33f10bc7bbaa5ec58c1bb5cd55d311a980b0f1c028bf2724230b8537a899c62b65f9","first_seen":"2025-09-17T00:16:45.72892Z","last_seen":"2026-06-14T00:55:38.54255Z","times_seen":48008,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":65,"dns":1,"connect":20,"send":0,"wait":18,"receive":5,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://springhillconsultants.co.tz/","date":"2025-12-23T01:52:13.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://springhillconsultants.co.tz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Dec 2025 09:55:49 GMT\r\nexpires: Fri, 18 Dec 2026 09:55:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 402984\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-06-14T01:29:48.051324Z","times_seen":285120,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":65,"dns":2,"connect":21,"send":0,"wait":12,"receive":4,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"springhillconsultants.co.tz/assets/css/style.css","fqdn":"springhillconsultants.co.tz","domain":"springhillconsultants.co.tz","tld":"co.tz"},"ip":{"addr":"31.22.4.81","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://springhillconsultants.co.tz/","date":"2025-12-23T01:52:12.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.springhillconsultants.co.tz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 10:46:23 GMT","end":"Thu, 22 Jan 2026 10:46:22 GMT"},"fingerprint":{"sha1":"60:5C:75:29:88:50:00:42:95:37:C7:0F:83:BB:A6:BF:C7:9C:D7:E0","sha256":"AC:7D:B8:E8:9A:10:C2:8A:3C:A9:10:47:4B:1F:7A:D3:DE:EB:45:BC:89:0F:F4:DD:8B:7F:9A:9F:07:57:22:20"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: springhillconsultants.co.tz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://springhillconsultants.co.tz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 23 Dec 2025 01:52:12 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 24 Oct 2025 10:56:28 GMT\r\ncache-control: max-age=2592000, public, proxy-revalidate\r\nexpires: Thu, 22 Jan 2026 01:52:12 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":9681,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF, LF line terminators","md5":"169bb8aa02da4a47aa0f353e2b99ecec","sha1":"d7ce4a0a41c70147239b9b090f83d1c56c9f9f9c","sha256":"06e105b567e8ef9f60ff32b26c275034a210e4576a4d22d8b42c33b5f5692ce8","sha512":"91fd3c8c28f2ea116116b7f09e58780e9a669860ec1d4de4c90ca87bee28ac61f69408a6fcb7fdcd0b043ae704e8204594320a2887dead7392b1610851494d28","ssdeep":"192:uI8Na8lgCxC545dy1Wo/W0nC3z5hk5ZFF0exNaZClCv8:uIWa4D5Q1Wo/W0nC3z5hk5ZFF0exNa98","tlshash":"3512fc876fe25200650bc8a07593ef49f32c8452940fcd796be5202ceec85eea56fb4c","first_seen":"2025-12-23T01:52:40.577391Z","last_seen":"2025-12-23T01:52:40.577391Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"springhillconsultants.co.tz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"springhillconsultants.co.tz/assets/img/bg.jpg","fqdn":"springhillconsultants.co.tz","domain":"springhillconsultants.co.tz","tld":"co.tz"},"ip":{"addr":"31.22.4.81","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://springhillconsultants.co.tz/","date":"2025-12-23T01:52:13.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.springhillconsultants.co.tz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 10:46:23 GMT","end":"Thu, 22 Jan 2026 10:46:22 GMT"},"fingerprint":{"sha1":"60:5C:75:29:88:50:00:42:95:37:C7:0F:83:BB:A6:BF:C7:9C:D7:E0","sha256":"AC:7D:B8:E8:9A:10:C2:8A:3C:A9:10:47:4B:1F:7A:D3:DE:EB:45:BC:89:0F:F4:DD:8B:7F:9A:9F:07:57:22:20"}}},"request":{"raw":"GET /assets/img/bg.jpg HTTP/1.1\r\nHost: springhillconsultants.co.tz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://springhillconsultants.co.tz/assets/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 23 Dec 2025 01:52:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 116310\r\nlast-modified: Fri, 24 Oct 2025 10:56:28 GMT\r\naccept-ranges: bytes\r\nexpires: Thu, 22 Jan 2026 01:52:13 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public, proxy-revalidate, public\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":116310,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1], progressive, precision 8, 1920x1272, components 3","md5":"3b3fb0b9d5288866b277bfc21fd56c75","sha1":"7e301bbb4756dd56728a689558e95afe16bf1e7d","sha256":"2d735ab1a765060f526cbb4421cc596ad4af765cdaba1ea207887701972cb737","sha512":"d6ba61bfe5d781eeb7cf52ba277410f08cc94372355529269e107144f6404deeaa8da2d464dc736ada5c608e0af8e0eea171af56a8088ff71be3c9de7f51fce7","ssdeep":"1536:koftKyz4O8NtKWzZCVf4eKK+4mHxSfgp0YwAVgW86W6rLwbKNd50E1wze17A7RnD:ptvMhfagePB6krRAiJ6W6rrN/OOk9MYH","tlshash":"16b30218f7f84983d22d507f4784ab222bcc87a56b7e2c5169ebdf3934c41643a6d252","first_seen":"2023-05-19T16:33:36Z","last_seen":"2025-12-23T01:52:40.57929Z","times_seen":7,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"springhillconsultants.co.tz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://springhillconsultants.co.tz/","date":"2025-12-23T01:52:13.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://springhillconsultants.co.tz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Dec 2025 09:55:49 GMT\r\nexpires: Fri, 18 Dec 2026 09:55:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 402984\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-06-14T01:29:48.051324Z","times_seen":285120,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":169,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":154},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"springhillconsultants.co.tz/assets/img/favicon.png","fqdn":"springhillconsultants.co.tz","domain":"springhillconsultants.co.tz","tld":"co.tz"},"ip":{"addr":"31.22.4.81","port":443,"asn":34119,"as":"Wildcard UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://springhillconsultants.co.tz/","date":"2025-12-23T01:52:13.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.springhillconsultants.co.tz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 10:46:23 GMT","end":"Thu, 22 Jan 2026 10:46:22 GMT"},"fingerprint":{"sha1":"60:5C:75:29:88:50:00:42:95:37:C7:0F:83:BB:A6:BF:C7:9C:D7:E0","sha256":"AC:7D:B8:E8:9A:10:C2:8A:3C:A9:10:47:4B:1F:7A:D3:DE:EB:45:BC:89:0F:F4:DD:8B:7F:9A:9F:07:57:22:20"}}},"request":{"raw":"GET /assets/img/favicon.png HTTP/1.1\r\nHost: springhillconsultants.co.tz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://springhillconsultants.co.tz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Tue, 23 Dec 2025 01:52:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 491\r\nlast-modified: Fri, 24 Oct 2025 10:56:28 GMT\r\naccept-ranges: bytes\r\nexpires: Thu, 22 Jan 2026 01:52:13 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public, proxy-revalidate, public\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":491,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"fed84e16b6ccfe88ee7ffaae5dfefd34","sha1":"3c62b134071e6abcdbb48133e35c150ef184401c","sha256":"8eb9ffc8b36969d4a82d36631fb758c4b7b758de4f64aa5b4889cdf723e5debb","sha512":"9bfd707d01dc1fd3aef9bbc942b7cfa74d63b3688d37772b4ca3076578f2806f0d64e6fbb36a9992b47947745fce16c31dcec396ec6101e839255af954c481b7","ssdeep":"","tlshash":"7bf00ec232b4ee72e463436736a8459c84906a835417c61c519394768b4ce088ddc283","first_seen":"2023-05-06T05:15:54Z","last_seen":"2026-06-12T22:28:32.719786Z","times_seen":241,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-23","alert":"Sinkholed","trigger":"springhillconsultants.co.tz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}