{"report_id":"bef55091-ff25-4258-b8f5-5a8261c14647","version":6,"status":"done","tags":[],"date":"2026-02-28T00:16:05Z","url":{"schema":"http","addr":"switchnet.ch","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":0,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"final":{"url":{"schema":"https","addr":"switchnet.ch/","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"title":"where learning is fun!","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T07:24:29.939425Z","times_seen":17775129,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"switchnet.ch","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":0,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-04T00:16:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-02-22T22:30:31.423356Z","alert_count":0,"request_count":2,"received_data":23668,"sent_data":1134,"comment":"","tags":null,"fingerprints":null},{"fqdn":"switchnet.ch","ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-28T00:16:07.21917Z","last_seen":"2026-02-28T00:16:07.21917Z","alert_count":40,"request_count":40,"received_data":3217030,"sent_data":18716,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"translate.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-02-23T04:58:31.688976Z","alert_count":0,"request_count":3,"received_data":389260,"sent_data":1684,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-22T22:14:59.650342Z","alert_count":0,"request_count":1,"received_data":7085,"sent_data":463,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.google.com","ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-02-23T07:32:49.92283Z","alert_count":0,"request_count":1,"received_data":82226,"sent_data":458,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:srcdoc#207","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"888a21ab7fc56d220a59dd25a83b18b6","sha1":"3bc9b8d495cf8e016aadf7e2bba091f2bd8b7188","sha256":"18c0d112e350349ca7390bc25c50a5fc92e9dc9b63416147c7e57851d105237e","sha512":"3dd8c3099c3300b3f74ffbe65e93e383d5c31087fb362f08bb241107c1061ef7dc8b61113851723a8588b54465c38056721341402f6a0072adce178ed3daf86e","ssdeep":"","tlshash":"b73147cdbbb7e0554272209a992f860bf17a2577981cd050e555ccd0fc70e9b447de14","size":1713,"data":"","first_seen":"2025-06-11T00:07:11.79824Z","last_seen":"2026-08-08T04:33:55.020879Z","times_seen":37110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/reykjavikslider.js","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0da1e924fa4a7cb38685b4380027681","sha1":"c2345157d8cb4ac1e2d3941b85fc3111469ee84e","sha256":"14c8a3f82aa77a616478a57d6e8f9f3fa73ada9c39d0e39dc423fc06d590657d","sha512":"9ceba9a77b1b881e00d72498b4f9579e09150044e8417368c34b77315004956f8b1c085b303fb41bdb37210f15f4e172b7326dded4d6d07651a15606f6dcfc0e","ssdeep":"96:Nwg3VPph56R6AbuAdikNCSKkx4JWKHYgKkl9ZZnEG6:ZVP06DSCSLx4JWKHYgJi","tlshash":"ab91fc2d65a93189ac73b36fde6f4488dbbb42334004c345395c944aaff44299a66eec","size":4488,"data":"","first_seen":"2026-02-28T00:16:13.856375Z","last_seen":"2026-02-28T00:26:53.445555Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/cookieswarning.js","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"1afcb3b793716a37528cbe76cfb20bfb","sha1":"a3205ec38403c4a6071cc12cda54f745ff0afe8b","sha256":"6893d1951af8109a94a7cc328d98c726faee59b65cf6ab2f0b189f2f8ffc640d","sha512":"0d9fafa7cf89c92d9fdd39e005ef2ec872e33f8be8cd135a259ec1843474abfa7cf778eea71f68ad49bed8e68be2558dfc06cd862aa6c00395bef691f8ad6ba4","ssdeep":"","tlshash":"a751128871952288933373758ebf030df57846230182c38dfd9c92a52fb28055b9aefe","size":3010,"data":"","first_seen":"2025-12-31T01:23:55.948696Z","last_seen":"2026-04-30T12:56:47.902761Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/common.js","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"e28f2ddbffe5cfd429104341c6fe46b3","sha1":"fc336b0654250ad7551d85556f2c7910c59ee18e","sha256":"92bc075c26b8d8fe2d16b4d3f70918c8f90ebd09578bfa4df06f6c14408603f2","sha512":"abe0ff30f1f89307c8fd103551014eafbdb153ed02db30f7de38b5c09258a7d60ba4c92273dd5f9449694422af21663765eb50d6d1143e4b0edb9768824652a7","ssdeep":"192:/1EfVIoFLWU1T+HXgxdMDH7BKdTxDuKPutv559auDmqh:/kVdLWU1T+HXgxKBKdtDuKPov5+W","tlshash":"46620dadb626129688b773bf5fbf824cd73d822382108395be5ca4412ff00145766fad","size":15160,"data":"","first_seen":"2023-03-10T21:45:31Z","last_seen":"2026-04-30T12:56:47.856752Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"28758ab65845d5d6b6694faa8c3088ce","sha1":"947cac72c5118ebc22690d0dbc6af15865708755","sha256":"45e89d0f84746c36bb2c0e83d3cf68e9d5fc2fb71021626b23e3e44eda2078bd","sha512":"14779146700b376738b6ce772da03c43ca92282e4097bfd827b035be44460f5f6a822dd1fd5733d3a50ac5d9a2304d33b50352dbb1808fda7050353d067ed638","ssdeep":"","tlshash":"1cc08055a575194734956156b3455c8432ad600b01394c01378dd5fd3ff3e8c43cf0ec","size":173,"data":"","first_seen":"2026-02-28T00:16:13.897094Z","last_seen":"2026-02-28T00:26:53.450018Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"387d1228893b6f87b3ef35f3218dae6c","sha1":"77382f44a6f0c83049cf6d5a3af828deb486836f","sha256":"d6805680ef287614e9b7a041314fa822b3f1ee8c9ad0334be59ae20eb680208f","sha512":"375824184d34277592fb13b41fbb18ccb9164d06a89ce41c7bdcac637195b88912be6ef171b47c06a015ad80e05c1257c90af1777e1b147d868652eee786e4da","ssdeep":"","tlshash":"6490024115396d1926107299353749b02c3d27581096a40850ac656b4685877c457e5b","size":56,"data":"","first_seen":"2026-02-28T00:16:13.898289Z","last_seen":"2026-02-28T00:26:53.451003Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/_/translate_http/_/js/k=translate_http.tr.no.dL22qibyzkE.O/am=AAAM/d=1/rs=AN8SPfoiNebLbZk1jA9PzAJ4rYh6ACX8bg/m=el_conf","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"23a0e680d2ce20b5620a3e2bf24b9027","sha1":"5816fee95bbbad3400f452b762a6c77db567649b","sha256":"06426c4777fd9685a48f2efad1ffe703804576e1fe0422bc121bb9f40fe7e2de","sha512":"0f977eaedd6948510464bb88040f0fe941f9e49347b663445414c0867f1d82b6adc224acbb01c6d3d713867d179e9fc8927fb897f3a2081aef15ff46f40d4c07","ssdeep":"1536:Xbnw0ufUp+e9aX6UPA6KqeKvJMm1/JL6sNH4eOdDZGgifwNWir:XT+e9aAtqeKvum9qIgiKr","tlshash":"6f83b8ccb6a671618263f5b5413f000eb23f59aaf8084cacb288d8e16df5959417bf7d","size":81656,"data":"","first_seen":"2026-02-28T00:16:13.879516Z","last_seen":"2026-02-28T00:26:53.44323Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/navigation.js","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"49902abaa5b77049036a2d0d5e6418f2","sha1":"494fb691414fd1aeacf458492e5a1d04813335d9","sha256":"7756f7785d216905a4bb1837c1dc647cea92f5949d2383ea782b9226b1762fe6","sha512":"c1e0bbd1331cc84dd5544c8e3e2110c5e8b704c196d8d56baee63686a3419a2dbd7982125c11c9175196f9c55ea7f267eb03db2bfc2bf696c06f0b2f2b1b101c","ssdeep":"","tlshash":"7841ed3db13217da197733790abfa798e7724a2741425381b45d25911f39008b356ffd","size":2146,"data":"","first_seen":"2023-10-23T11:14:21Z","last_seen":"2026-04-30T12:56:47.861691Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/sqwpluginshare.js","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"aff4d15d127becdcd38a0d8c8d41a644","sha1":"cc3ca951883c70e60304d77570f658a23382346f","sha256":"4a5def6493bae8787b32197811c88f79ff4474d8126ce85f69088bf7f05549cc","sha512":"d2807e812ab00242d490b6f620a31e4f13cb5ed79c05727ba519c2776ff50c183401bb3776acd75b1f10148816b605a339c7f0cee1935a3cb146ae3f369a4f17","ssdeep":"","tlshash":"78e07d2cf2ecd44f445f7229a0773d247436902191130cd8d2704552bc5860e16de17e","size":328,"data":"","first_seen":"2026-02-28T00:16:13.885133Z","last_seen":"2026-02-28T00:26:53.429489Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/sqwplugintextpicsplit.js","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4becea66c7dbb124a8aa8e5736df14b","sha1":"9580c34eaa39e4b448f7bd214b4a3db28e5f1bf2","sha256":"1ddea492f695147b18c21cb9219e8460684b88109475df806329ba505f711f8a","sha512":"b0b28f1a4a7d375f62fa79d0a34b127109224e011e039153796a2e7437f087da0a537d6cc9a956bba3b0bd0158310500d8ae89ff969acf2dee5a1f5a53734412","ssdeep":"48:TEYXwGfM/DdnAOKiC1M9T+e0DwjAh9T+e0eJQvlmXiWSgrQSJt6gLgYZCqxWAKFk:TGG0DZRKikkT+NLDT+RmX1ZCqx+Fh1o","tlshash":"319167682b22e654d633739f4e5b510cfb15d22340028a1e3eace0886ff185df666f98","size":4302,"data":"","first_seen":"2023-11-23T19:09:36Z","last_seen":"2026-02-28T00:26:53.442597Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/jquery.js","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cbb321051a268424103cd4aea8ffa66","sha1":"7cb05e3d551cd61439337b2cb22f49b1955f9711","sha256":"82f420005cd31fab6b4ab016a07d623e8f5773de90c526777de5ba91e9be3b4d","sha512":"72165cd8cc7c0751b319234c7c9447eb78d6eee6195f35f46bf525591ad3be5e24c7162a50734cb724d303920343b8139780132e85e566d86c89a956de6b92d0","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIK6alrUnzZ6a4tsO7KixfWBP+qCddWHs3ghda98o:v4KZ+slsOuixfpwhda98HrU","tlshash":"4883d6d9b2d67062977734b850bf410bb17a98dab44c8c60f098d4e47eb4a8e507bf2d","size":85630,"data":"","first_seen":"2023-03-07T01:06:19Z","last_seen":"2026-08-07T12:42:58.741873Z","times_seen":1129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.dL22qibyzkE.O/am=AACA/d=1/exm=el_conf/ed=1/rs=AN8SPfp5xrm9-dLnfUfi5ty9tI8188X2yQ/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"493043fadf3c7a083901fa1a231bf80a","sha1":"bf0f8fe4234368913086f7fa7eab44a4ba1bec70","sha256":"bcfe9b5134badf392146316bcc1f4922b54148be5e2f53e88cddf963548c437f","sha512":"f49c23a6f0f61cded01e1f597c06d1c105197a638bdb342f1debd83b01e13a77e4fadd58765435da901239b7a352c0f3ae11eeb2a66216c13567f34209106a43","ssdeep":"3072:5wcxMgea1pYfmp1uVhp9synCyVwj6UxnFAjIuFz2exSfxdI6jEW9ag8O2Q:WmplZxu8Fjlj","tlshash":"b884d9cab266b8939262f8a190bf004bb93d9d57b4484c6cb549d8ef5db08094173f7f","size":387330,"data":"","first_seen":"2026-02-24T22:53:12.022973Z","last_seen":"2026-03-02T19:34:29.649542Z","times_seen":677,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAAM/d=0/rs=AN8SPfr_8DyEZ1uyYMKcMtbmwQc9r7i7kQ/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAAM/d=0/rs=AN8SPfr_8DyEZ1uyYMKcMtbmwQc9r7i7kQ/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Feb 2026 10:18:29 GMT\r\nexpires: Fri, 26 Feb 2027 10:18:29 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 15 Oct 2025 01:09:54 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 136635\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-07-27T10:36:14.980644Z","times_seen":37906,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":137,"dns":8,"connect":21,"send":0,"wait":22,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/moreright.svg","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /assets/moreright.svg HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/assets/sd.css\r\nCookie: w2dplugincounter626126a9af08dcc01=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:43 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 19 Aug 2024 10:08:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 309\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":556,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2524cb16da40974a0bb76b87daeb5e9f","sha1":"0f80107ac9e01f33cdf85af1e109ed80572bac30","sha256":"220b2dc5184ae5759d06650cb03c3df3c6944c4173ed920109ea78878b9e8da9","sha512":"e7e845033b3c548ba2419b75d8424a46eadbd10503729e0dbe41c958a1e8adf7bd118538c267020d75683c17f2b96b6d08cf4cd96550a8abef42e5b5058a068a","ssdeep":"","tlshash":"cef0818c9178abddc5d6d33c59b849ca832665b378e2048ca4c239bbc718497269355d","first_seen":"2026-02-28T00:16:13.823227Z","last_seen":"2026-02-28T00:26:53.426967Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/sqwpluginsharefb.svg","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /assets/sqwpluginsharefb.svg HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/assets/sqwpluginshare.css\r\nCookie: w2dplugincounter626126a9af08dcc01=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:43 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 19 Aug 2024 10:08:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 385\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":778,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"101f96c539509f708a8aacc623181bc6","sha1":"226246f75fa8fe61a740ae043632b752a49fbba9","sha256":"464225a6e5898c51c316a1784502c204092f1e3ac09ec960e0897f460bf175c0","sha512":"0ebc869865d8001f346a23fff0feaebdcc6eaa1275e6257daadfe50deff771868f844e521c871a3990b4bc329fa439999833d5bf73413d15dc0d11dc867cb53b","ssdeep":"","tlshash":"9f01b1bcc7007d5cc12363bcd6b43c59214970433af39f8dda56247b6123cc41458e2a","first_seen":"2026-02-28T00:16:13.826123Z","last_seen":"2026-02-28T00:26:53.431188Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/sqwpluginshareli.svg","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /assets/sqwpluginshareli.svg HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/assets/sqwpluginshare.css\r\nCookie: w2dplugincounter626126a9af08dcc01=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:43 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 19 Aug 2024 10:08:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 505\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1119,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b0355c386eecde1c8c9f52a62cee1d43","sha1":"75192b6c5df5c3bf2f040aef623bb24c4f60eb65","sha256":"061ed524330cba2a2bf22a115c9a7229fd6a9aa06c3d8cb2c428a11927cae820","sha512":"79962e57c5a7fb7e519caed8ac4f49e40e328a3ac6551f2f7911c66f329484211fb5f4b0c7cadb5f90c047a49609172cc2314edbe5cae3bb7101ba11d3ec2dd0","ssdeep":"","tlshash":"d321464dea4c7f8cf63663609c771849036974f1621346e89602753bd1134a63a22fa6","first_seen":"2026-02-28T00:16:13.828831Z","last_seen":"2026-02-28T00:26:53.446643Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/navigation.js","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /assets/navigation.js HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 19 Aug 2024 10:08:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 556\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2146,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"49902abaa5b77049036a2d0d5e6418f2","sha1":"494fb691414fd1aeacf458492e5a1d04813335d9","sha256":"7756f7785d216905a4bb1837c1dc647cea92f5949d2383ea782b9226b1762fe6","sha512":"c1e0bbd1331cc84dd5544c8e3e2110c5e8b704c196d8d56baee63686a3419a2dbd7982125c11c9175196f9c55ea7f267eb03db2bfc2bf696c06f0b2f2b1b101c","ssdeep":"","tlshash":"7841ed3db13217da197733790abfa798e7724a2741425381b45d25911f39008b356ffd","first_seen":"2023-10-23T11:14:21Z","last_seen":"2026-04-30T12:56:47.861691Z","times_seen":6,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/images/paratextpicsplt107616b07a089e509.jpg","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /images/paratextpicsplt107616b07a089e509.jpg HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:43 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 19 Aug 2024 10:09:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 224611\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":224611,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 300x300, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", baseline, precision 8, 962x640, components 3","md5":"0b515c9b5f8e5266056c624a3f66b203","sha1":"d3aff9ca2a057b06d28bb0065bfe4d22d9003a3f","sha256":"073ec262c1080584053d49d6d9fc1b0892be903b23279bbe0f325eeb3ab5d540","sha512":"c81046487777718b58f271f437d5657ee01b097c486090aca50a89c15eb09a87b0e1929ea294430c101a3be85acba3e05d614b70c5912d1a188bc3b58bce758e","ssdeep":"6144:GNLHtRy46lcpebmnvjJOHwRELOhvw1zOmW9ESb38KcHnoFGZ:uHzy4L8WvjgHwRELOhvSzON9aHoIZ","tlshash":"a2242328f59359951ff311613545fb0a97e0d7c2a153886cec4dec639c65826e20f8ed","first_seen":"2026-02-28T00:16:13.834088Z","last_seen":"2026-02-28T00:26:53.443842Z","times_seen":2,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/images/paratextpicsplt107616b07a08bba0a.jpg","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /images/paratextpicsplt107616b07a08bba0a.jpg HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:43 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 19 Aug 2024 10:09:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 224761\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":224761,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 300x300, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", baseline, precision 8, 960x640, components 3","md5":"3d4ae0fae7046de0c7f9dc7ed5b29cd0","sha1":"4b9d7e69092e4ca1dc68880ee69602bc3e645c0a","sha256":"7da044b0b1ffade50a0046748b11cf71e54d8e24f2227ad62edfeaf4f6f474fe","sha512":"b5fbe6d51251e931b6282ee964b8c06856b5d5068dab4bb7b5281c8380adde6f12e81a32126c644db938430c6287e55f1c27cd51199ae33b0528835979fb47a4","ssdeep":"6144:OX8ts8fokcJTGPzvPezJZ4uTSaRLoaoAbHG6mgh4s9t4x:OMrfkxGbOzfeKLTQghxbA","tlshash":"9f2412e7adfa6cd592a76531b40a194fa1a59aca1cc9931044c2c6f27540f3fb7ce0bc","first_seen":"2026-02-28T00:16:13.836554Z","last_seen":"2026-02-28T00:26:53.444385Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/home.svg","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /assets/home.svg HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/assets/sd.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:43 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 19 Aug 2024 10:08:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 310\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":628,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b5eecfcadbbed78814b9aa806fa22570","sha1":"74eef104c598c48320a56b9b6c59d082778fd9e1","sha256":"3e1e3dfa6f899ece2f1c9fec0b36c1ebdc0e6c12a66ee5039a04c4121328eed3","sha512":"c1cc77c3dda47c521f6ce8011235d57385c87c5e7f264efaeaf98ed9fc5e150fc34572d2cf5751b5636fc33df5dd132e525d640281503db1f3b38a4d39599696","ssdeep":"","tlshash":"9cf0dd8f8398d04e82085715a6b40e8556e230c318fb188ca8f0372dc52e8b62b81ea6","first_seen":"2026-02-28T00:16:13.838589Z","last_seen":"2026-02-28T00:26:53.436719Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/sqwpluginsharexi.svg","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /assets/sqwpluginsharexi.svg HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/assets/sqwpluginshare.css\r\nCookie: w2dplugincounter626126a9af08dcc01=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:43 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 19 Aug 2024 10:08:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 341\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":635,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f475a65528a26b46d15d38a9a1f82890","sha1":"a684968913cc86341c9a2d8e29aeb2e4813544a2","sha256":"e5086dacf47d5f3e16e846ea8fe4d2e3e2711529adf8313622aa8cb7d0136f44","sha512":"cd081e892578322d32992f3cddcf51e438f976b10ab94198b62d981f5cce913ad0f9027d80a22980843c9f74b5b4dc845ab3e3162a9b93b508af8d32868d33c6","ssdeep":"","tlshash":"48f02dbde684b39fd0108720826228b982f834a2796b088ccc82357fc61289289017ab","first_seen":"2026-02-28T00:16:13.840642Z","last_seen":"2026-02-28T00:26:53.438106Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/opensansitalic.woff","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /assets/opensansitalic.woff HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/assets/sf.css\r\nCookie: w2dplugincounter626126a9af08dcc01=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:43 GMT\r\ncontent-type: font/woff\r\nlast-modified: Mon, 19 Aug 2024 10:08:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19628\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19628,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 19628, version 1.1","md5":"8a81b690262a2121feac9980efc331a4","sha1":"547f34805e4d8b3b99b5583749ab28185b47e980","sha256":"08705820e4c580d053c559ddabe76cbe5a26675c7e349913c973ba2c53efed31","sha512":"a99d39099966092dc3e5515e3298892662beceb43d23f3bcaf069f6c17c04cc48da27fc9e11c0680ad8d4bf718e32be7a48037af6649868b29035147ea80876a","ssdeep":"384:ktXElqZCppL0e3/2c7XwIKBuilhfMC5+V1YPtXn/qZOSO7O7RWfY1NTS:kyQVevpPOuilCC6Y1XnSsSSSRWG2","tlshash":"a592d0c6c3d42b68ee4f5b308de06709160ddbcec4570992d27b8dbd05211fada0e655","first_seen":"2023-04-19T23:45:02Z","last_seen":"2026-04-30T12:56:47.866Z","times_seen":10,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/favicon.ico","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:44.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nCookie: w2dplugincounter626126a9af08dcc01=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sat, 28 Feb 2026 00:15:44 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-08T07:26:14.109721Z","times_seen":146511,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:44.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAAM/d=0/rs=AN8SPfr_8DyEZ1uyYMKcMtbmwQc9r7i7kQ/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Feb 2026 22:24:46 GMT\r\nexpires: Sat, 27 Feb 2027 22:24:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 6658\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-08-08T07:19:50.906587Z","times_seen":74203,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-28T00:15:43.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/5.6.40\r\ncontent-type: text/html; charset=ISO-8859-1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17543,"size_decoded":0,"mime_type":"text/html; charset=ISO-8859-1","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1616), with CRLF line terminators","md5":"0874c7bc967afd4ded01802d766810da","sha1":"599a75662abee4e686452654c74116ab8711d7ae","sha256":"8a1f172b18d827c1b49670a368734ed30ad7932cd1c723a4dbdeb71f84cf2016","sha512":"5ee45664e894cb38c120c1cf10cd593af0ddd4361ad5ff365470a78cb2eceb5f3c1aa54a2677fc01b9e1e579614c1cbc153cc06784f9a275b8d3f2213a705eea","ssdeep":"384:i9yhsNzVEyLnL4JU4ZAUwhm5aH7ONjlhFthJ1/7lsLoN:oyhsNAaH7cjlVhPBsq","tlshash":"cc72b71260d66eeb87714af4e041b795f322c38da2078e64a5ec12bb75c9ecc5b3d11e","first_seen":"2026-02-28T00:16:13.846312Z","last_seen":"2026-02-28T00:16:13.846312Z","times_seen":1,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":156,"dns":86,"connect":31,"send":0,"wait":34,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/images/woman-in-yellow-962-x-640_640.jpg","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /images/woman-in-yellow-962-x-640_640.jpg HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:43 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 06 May 2025 12:52:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 105213\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":105213,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 300x300, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", baseline, precision 8, 640x425, components 3","md5":"2c18e228af5920c74a32b5c821e48b1a","sha1":"efdda3e551d355433bd7483ba76f159787158c1e","sha256":"65dc1644ffe17e126e443e84a2fe4ad7e0a27c1a2554f575ecd349b7430d8163","sha512":"26a49dccf46be67b83f7837fad2a522cb8712ad29b1e727c560ee842db1c4dc1e96db2823a83e696f42390ef54cf4c1c5bfbb68a643b4a6f34e72d3441595c3d","ssdeep":"1536:KXXocY/kBBhFR4e9+DMwWQbhABVX0GJr31bEZZyfuP7XmHZOzVbkfoev+F97pXXd:X/ycDBWQbhAnVrRwy0zVbkQ4+jpXdoY","tlshash":"6aa312e0b4ad537cddf8b5e2150e9db261b5b0286d62069f270d380faa8c319c2ced5d","first_seen":"2026-02-28T00:16:13.84771Z","last_seen":"2026-02-28T00:26:53.426253Z","times_seen":2,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/bullet.svg","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /assets/bullet.svg HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/assets/sd.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:43 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 19 Aug 2024 10:08:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 297\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":566,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fe16609a8efb8e73da2e2163d6cc1201","sha1":"52c852ed5e579e6b4b749a93d9d728c74bdb2bf3","sha256":"fb697c1c6e1c2d79c084b722a9e7809ed14ccff7b5ba5cabc13cf01f7479aa5e","sha512":"957c1b03042060c7fbaf8251996e1fab14eef1ae0f55ee35478519088eebb49a7516b4d6eb930af516d3fdd35225e270ec5423510f1d8415849aaa0fe5a6fd26","ssdeep":"","tlshash":"8af0e14c930ca87dd7158214e2be666143aa21c348d6124de851343ed7201ea7dd32b8","first_seen":"2026-02-28T00:16:13.84887Z","last_seen":"2026-02-28T00:26:53.420625Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/sqwpluginsharegp.svg","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /assets/sqwpluginsharegp.svg HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/assets/sqwpluginshare.css\r\nCookie: w2dplugincounter626126a9af08dcc01=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:43 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 19 Aug 2024 10:08:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 547\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1135,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b3a4aa0b0c24733485a519cf60f31925","sha1":"3643d58f7fb86c4839746a5b0cebd5226dd5125e","sha256":"0b986f267ef629e2b16d737e4d14b2eb6cdb93447e3d86915fd021d5ce8ac1e0","sha512":"bc232d17d93d27995d2323558e23e7fd61ddceb2b11c03a2d866f8ff3264ba73354e4500289835755fb13107a3320a321280e6eddc98f785a868ef04664c9d39","ssdeep":"","tlshash":"f4210029e36095adc11e8f608e7a9452312934b37663cf8ccdd8f436e9a14cd8c42b6b","first_seen":"2026-02-28T00:16:13.850164Z","last_seen":"2026-02-28T00:26:53.421408Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/opensanssemibold.woff","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /assets/opensanssemibold.woff HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/assets/sf.css\r\nCookie: w2dplugincounter626126a9af08dcc01=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:43 GMT\r\ncontent-type: font/woff\r\nlast-modified: Mon, 19 Aug 2024 10:08:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20860\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20860,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 20860, version 1.1","md5":"49fbe77658d29a343cd06b5245be483e","sha1":"adb2daec48669c7b205edfad36830a0ed8201225","sha256":"60b4c0467984be694a0e9ea4e7eb1f486731991ad9e7798996f1add8f9b9f439","sha512":"d87e03919948f479ad4ffa31d711750f3ef310fa10aa7754cedaa602d3bf4109b6b92dece24d1af97806512d2ab9640014686c98a85459a751c06087e2c9f178","ssdeep":"384:JFz0G9HuLiXzs0C/W/OrL51Hz2F7SwBYVm6moDn/qZOSO7O7RWfEGT:zIq8iXPuWS7z2FbBYZmoDnSsSSSRWJ","tlshash":"da92cfc62d527eb6ec0ac7fc19e977140818f6d444e2559e16e30efe90c8572bc4b1e2","first_seen":"2023-05-08T16:55:16Z","last_seen":"2026-07-26T04:06:39.444018Z","times_seen":61,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:54.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://switchnet.ch/\r\nX-Goog-AuthUser: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1174\r\nOrigin: https://switchnet.ch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1174,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,\"de\",null,\"TE_20260225\",null,null,[4,0]]],1871,[[1772237744312,null,null,null,null,null,null,\"[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,\\\"no\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[1,\\\"te\\\",\\\"0A6E2FDC-3B1E-4E22-9474-177104C53F8F\\\",[\\\"https://switchnet.ch\\\",null,[\\\"\\\",[],[],null,null,[\\\"navigation\\\",\\\"h2\\\",[],[],[],[null,26000000],[null,27000000],[null,113000000],[null,114000000],[null,182000000],[null,147000000],null,[null,217000000],[null,217000000],5312,4928,17543]],[\\\"translate:page_load_to_initialized\\\",[null,217000000],[null,804000000],null,[]]]]]\",null,null,1,null,null,null,0,null,null,null,null,null,1]],1772237754313]"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://switchnet.ch\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Sat, 28 Feb 2026 00:15:54 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-08-08T07:17:02.080082Z","times_seen":585722,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/images/paratextpicsplt107616b1e809c326d.jpg","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /images/paratextpicsplt107616b1e809c326d.jpg HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:43 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Sep 2024 10:08:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 401341\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":401341,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", baseline, precision 8, 1038x1038, components 3","md5":"a8785b367e8914a168a4e9241618021b","sha1":"10e83966326e93fb98d532d55175d33f12bd08fd","sha256":"d81e5c7a69163a751a84d2f177008533cacf9d8d1ca7bd5165ffa31ac3394190","sha512":"2721d2436a12558d17fd065bfaf009b78053e82b5ccd013809d8184b2aebc80fd9dbfd1160dade8d857e4835857c58ee3eb55f201be8eaaeb0f29c852adb90d3","ssdeep":"6144:Wt6dtMHzPA0N+3rQuWWXB+sDsS39a2y/afiODEvfCQB1sUN3G3o3sW9kaqeCSgD8:bwHzcv+sDXtzEafiODC2Ul73MaqeUavT","tlshash":"12842345ec19ff2d8c6cae6238e04d3752593fb4acb3019199428ae7d4a27f391cd34a","first_seen":"2026-02-28T00:16:13.853189Z","last_seen":"2026-02-28T00:26:53.430074Z","times_seen":2,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/sf.css","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /assets/sf.css HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 Aug 2024 10:08:31 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 356\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1597,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6b0c2d6820a5322f5a256e0a60f23315","sha1":"b22f08e33e599c0499abce3859961627034566ba","sha256":"829091208288176e34249169485d4fefeeb46895fbc3e4fca1cf00a87e4c2181","sha512":"76e563cef1a4ab6ca6cb1817956a279d1e0e94b55faf04dec4a11ce4979c5e4a40b608db25fb4ba6574e3b156e86d5faac333d8ab66400004b975a6e8d348e59","ssdeep":"","tlshash":"06312d4d659a24389a310e97bb8f3d309a2c9935210ec17777b48c14bec5a2e1370fcd","first_seen":"2023-11-23T19:09:37Z","last_seen":"2026-04-30T12:56:47.878623Z","times_seen":5,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/reykjavikslider.js","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /assets/reykjavikslider.js HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 19 Aug 2024 10:08:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1013\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4488,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"d0da1e924fa4a7cb38685b4380027681","sha1":"c2345157d8cb4ac1e2d3941b85fc3111469ee84e","sha256":"14c8a3f82aa77a616478a57d6e8f9f3fa73ada9c39d0e39dc423fc06d590657d","sha512":"9ceba9a77b1b881e00d72498b4f9579e09150044e8417368c34b77315004956f8b1c085b303fb41bdb37210f15f4e172b7326dded4d6d07651a15606f6dcfc0e","ssdeep":"96:Nwg3VPph56R6AbuAdikNCSKkx4JWKHYgKkl9ZZnEG6:ZVP06DSCSLx4JWKHYgJi","tlshash":"ab91fc2d65a93189ac73b36fde6f4488dbbb42334004c345395c944aaff44299a66eec","first_seen":"2026-02-28T00:16:13.856375Z","last_seen":"2026-02-28T00:26:53.445555Z","times_seen":2,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/cookieswarning.js","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /assets/cookieswarning.js HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 19 Aug 2024 10:08:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 840\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3010,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"1afcb3b793716a37528cbe76cfb20bfb","sha1":"a3205ec38403c4a6071cc12cda54f745ff0afe8b","sha256":"6893d1951af8109a94a7cc328d98c726faee59b65cf6ab2f0b189f2f8ffc640d","sha512":"0d9fafa7cf89c92d9fdd39e005ef2ec872e33f8be8cd135a259ec1843474abfa7cf778eea71f68ad49bed8e68be2558dfc06cd862aa6c00395bef691f8ad6ba4","ssdeep":"","tlshash":"a751128871952288933373758ebf030df57846230182c38dfd9c92a52fb28055b9aefe","first_seen":"2025-12-31T01:23:55.948696Z","last_seen":"2026-04-30T12:56:47.902761Z","times_seen":4,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/moredown.svg","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /assets/moredown.svg HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/assets/sd.css\r\nCookie: w2dplugincounter626126a9af08dcc01=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:43 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 19 Aug 2024 10:08:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 311\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":554,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"657490e576d1fe118f1fa15cd7084953","sha1":"4dcc15bf1035f86030a60d0a5965ad6bdb7101b1","sha256":"342e90a6320489e3c530cfebc2f4a80db18b1922f0b242f65fcbd9338aae7a3a","sha512":"64a33d4739a4e38b51476900fdf18dedae0fc88093da638b0840d02e98be1fb82287ae56841412e552132647fd131dde519bba5c80f975390ae5cfa68a7952ce","ssdeep":"","tlshash":"9ef020dcd31ceedcc4a2d3381ab849c6433734b675e2548ce08238bae61d4a73a83259","first_seen":"2026-02-28T00:16:13.859595Z","last_seen":"2026-02-28T00:26:53.446107Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/images/kostenlose-probelektion_eyectacher.jpg","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:49.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /images/kostenlose-probelektion_eyectacher.jpg HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nCookie: w2dplugincounter626126a9af08dcc01=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 26 Jan 2025 12:17:27 GMT\r\naccept-ranges: bytes\r\ncontent-length: 385009\r\ndate: Sat, 28 Feb 2026 00:15:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":385009,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", baseline, precision 8, 1920x640, components 3","md5":"a6543becb65ea82d61307d09bd03bdbe","sha1":"c5359126d5065d9a87bd327ac1a7a5915cd7277c","sha256":"f9b78c8dbf1760dafd00d5439469dbc5d2cb239cfeb823068a82f1e970447c8e","sha512":"c8b339e7a18d9fe12e5049d4f70afb4963816b256c1aa30cd688255a88829082cf93ca7fc301af8e411969e97c960ec867c8ee13f8a5531f2ee4723286d7f890","ssdeep":"6144:ia4zMEXUbWAJt16IRmOnP5Ixx+engzkasm69k3ny4x9nwMVD4lVAY4OI3FBqvrzZ:iqWUblhmE5IOzOcy4x17qAY4OIyjMLRk","tlshash":"798412539c4a5b16937046b8bc478f1c7e566b9ebd8668fe29030debbfb00510d4c4ae","first_seen":"2026-02-28T00:16:13.860968Z","last_seen":"2026-02-28T00:26:53.416328Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/images/englisch-fuer-erwachsene-web-banner_1_eyectacher.jpg","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:54.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /images/englisch-fuer-erwachsene-web-banner_1_eyectacher.jpg HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nCookie: w2dplugincounter626126a9af08dcc01=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:54 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 03 May 2025 10:24:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 309282\r\ndate: Sat, 28 Feb 2026 00:15:54 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":309282,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", baseline, precision 8, 1920x640, components 3","md5":"f4ae3ea1c37845e3fa0a2febe56ebcab","sha1":"6276fad1be55c693fd898a0c6b1272265b229500","sha256":"4280438876ea55bd248ebe7d38104b9740a8358f7f34fd4a16562f05fd7df6ab","sha512":"41a07c0ade81c2b61e5f36d087ab48f13781bb3dd9f2473670fe5be3802b6af2cd12ac35d81aabe27fd1d480f88ff82d859cdd0ef93864d785b100e74d822f48","ssdeep":"6144:+8PaQow8JSw1P0hiyflWwwbacuyvtLXEw8KIDjB3jRkYdUUDkMZ:MJ4w1O/N1GacVFLXEfnB3jR7j","tlshash":"b26402534d0e5b8bd01d43b83e431da96e593b6cadc559ef02611fca3f206a99d8f30a","first_seen":"2026-02-28T00:16:13.862458Z","last_seen":"2026-02-28T00:26:53.422542Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/common.js","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /assets/common.js HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 19 Aug 2024 10:08:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2951\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15160,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e28f2ddbffe5cfd429104341c6fe46b3","sha1":"fc336b0654250ad7551d85556f2c7910c59ee18e","sha256":"92bc075c26b8d8fe2d16b4d3f70918c8f90ebd09578bfa4df06f6c14408603f2","sha512":"abe0ff30f1f89307c8fd103551014eafbdb153ed02db30f7de38b5c09258a7d60ba4c92273dd5f9449694422af21663765eb50d6d1143e4b0edb9768824652a7","ssdeep":"192:/1EfVIoFLWU1T+HXgxdMDH7BKdTxDuKPutv559auDmqh:/kVdLWU1T+HXgxKBKdtDuKPov5+W","tlshash":"46620dadb626129688b773bf5fbf824cd73d822382108395be5ca4412ff00145766fad","first_seen":"2023-03-10T21:45:31Z","last_seen":"2026-04-30T12:56:47.856752Z","times_seen":8,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.dL22qibyzkE.O/am=AACA/d=1/exm=el_conf/ed=1/rs=AN8SPfp5xrm9-dLnfUfi5ty9tI8188X2yQ/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:44.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.dL22qibyzkE.O/am=AACA/d=1/exm=el_conf/ed=1/rs=AN8SPfp5xrm9-dLnfUfi5ty9tI8188X2yQ/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 110060\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 18:29:38 GMT\r\nexpires: Thu, 25 Feb 2027 18:29:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 24 Feb 2026 20:10:13 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 193566\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":387330,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2481)","md5":"493043fadf3c7a083901fa1a231bf80a","sha1":"bf0f8fe4234368913086f7fa7eab44a4ba1bec70","sha256":"bcfe9b5134badf392146316bcc1f4922b54148be5e2f53e88cddf963548c437f","sha512":"f49c23a6f0f61cded01e1f597c06d1c105197a638bdb342f1debd83b01e13a77e4fadd58765435da901239b7a352c0f3ae11eeb2a66216c13567f34209106a43","ssdeep":"3072:5wcxMgea1pYfmp1uVhp9synCyVwj6UxnFAjIuFz2exSfxdI6jEW9ag8O2Q:WmplZxu8Fjlj","tlshash":"b884d9cab266b8939262f8a190bf004bb93d9d57b4484c6cb549d8ef5db08094173f7f","first_seen":"2026-02-24T22:53:12.022973Z","last_seen":"2026-03-02T19:34:29.649542Z","times_seen":677,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":77,"dns":7,"connect":20,"send":0,"wait":22,"receive":49,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:44.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Feb 2026 03:31:24 GMT\r\nexpires: Fri, 26 Feb 2027 03:31:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nage: 161060\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-08-08T07:19:50.93725Z","times_seen":79168,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":31,"dns":0,"connect":8,"send":0,"wait":8,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/images/englisch-fuer-kinder-web-banner_2_eyectacher.jpg","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:59.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /images/englisch-fuer-kinder-web-banner_2_eyectacher.jpg HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nCookie: w2dplugincounter626126a9af08dcc01=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 19 Aug 2024 10:09:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 317167\r\ndate: Sat, 28 Feb 2026 00:15:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":317167,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", baseline, precision 8, 1920x640, components 3","md5":"daa36feb905a706234c9bcf4748cf2ff","sha1":"884237cd7c931f94def0edc363125ebfc0653b11","sha256":"2c6ca76484ad5702ea88c148a23b447115a7f32b0018edb7bb9d416dadd3851e","sha512":"197737f7d1d9783c7c90b0a14d500b7a45b92b7cefef402da0f49b2bb9e4872a459e81b77c51469798081672b0494697067a4f556862fa808929ed2fb58b904b","ssdeep":"6144:2Pv7LBOZo58qKSrYCrIITYxSymW6nzf+D6DMYL1/PJ0mfXbqrqk:WjLBso582rITmLzf+D6YYp/PJ0mfWR","tlshash":"b66412078d294306e074a7a8bc434edd6f291b5cea5726ff00535ed79e242734e8a1ae","first_seen":"2026-02-28T00:16:13.866918Z","last_seen":"2026-02-28T00:26:53.427546Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/sqwplugintextpicsplit.js","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /assets/sqwplugintextpicsplit.js HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 19 Aug 2024 10:08:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 849\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4302,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"c4becea66c7dbb124a8aa8e5736df14b","sha1":"9580c34eaa39e4b448f7bd214b4a3db28e5f1bf2","sha256":"1ddea492f695147b18c21cb9219e8460684b88109475df806329ba505f711f8a","sha512":"b0b28f1a4a7d375f62fa79d0a34b127109224e011e039153796a2e7437f087da0a537d6cc9a956bba3b0bd0158310500d8ae89ff969acf2dee5a1f5a53734412","ssdeep":"48:TEYXwGfM/DdnAOKiC1M9T+e0DwjAh9T+e0eJQvlmXiWSgrQSJt6gLgYZCqxWAKFk:TGG0DZRKikkT+NLDT+RmX1ZCqx+Fh1o","tlshash":"319167682b22e654d633739f4e5b510cfb15d22340028a1e3eace0886ff185df666f98","first_seen":"2023-11-23T19:09:36Z","last_seen":"2026-02-28T00:26:53.442597Z","times_seen":3,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/cookieswarning.css","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /assets/cookieswarning.css HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 Aug 2024 10:08:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 254\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":655,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"eafdbc5ad4c571be65bd943c1d72f328","sha1":"15a1b3edbcd8a55eb583085b9a2b3077e9e622a5","sha256":"8fbd87fb2265c42b4786c4fe1f3f02d8448af2ba31956bfe6ab59b5aa99bcf93","sha512":"d42f119ae261778455102dee9017fcf05b5d88ff940cfa5fafe774a83d01072b46bbc3d57ca767ebf7eb1d41b8ce7a12d14e824efc1cdda0138d8365bf26b670","ssdeep":"","tlshash":"acf07d985646334dea7a52d8cff0c3046e4600a07b4a116ef8e87122f3a8ab74c75ec6","first_seen":"2025-12-31T01:23:55.937978Z","last_seen":"2026-04-30T12:56:47.828714Z","times_seen":4,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/jquery.js","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /assets/jquery.js HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 19 Aug 2024 10:08:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29237\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":85630,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32019)","md5":"6cbb321051a268424103cd4aea8ffa66","sha1":"7cb05e3d551cd61439337b2cb22f49b1955f9711","sha256":"82f420005cd31fab6b4ab016a07d623e8f5773de90c526777de5ba91e9be3b4d","sha512":"72165cd8cc7c0751b319234c7c9447eb78d6eee6195f35f46bf525591ad3be5e24c7162a50734cb724d303920343b8139780132e85e566d86c89a956de6b92d0","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIK6alrUnzZ6a4tsO7KixfWBP+qCddWHs3ghda98o:v4KZ+slsOuixfpwhda98HrU","tlshash":"4883d6d9b2d67062977734b850bf410bb17a98dab44c8c60f098d4e47eb4a8e507bf2d","first_seen":"2023-03-07T01:06:19Z","last_seen":"2026-08-07T12:42:58.741873Z","times_seen":1129,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/images/blended-learning-2_eyecatcher.jpg","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /images/blended-learning-2_eyecatcher.jpg HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:43 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 03 May 2025 10:53:13 GMT\r\naccept-ranges: bytes\r\ncontent-length: 296168\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":296168,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", baseline, precision 8, 1920x640, components 3","md5":"5442bc7f2559cd6db6996329bd915437","sha1":"9db2da362c527462252276909392ff81207d8827","sha256":"0d007799050a682ef497aecacc259536d3ce8d1d356b0287390c37971a071c09","sha512":"b4b22091a9636543f98eff2748ca51a6a54466208af4729aa603bdd87037a58cf09ea89e3c2abab9b354ce92247564de9ce1ccbd87f152ffd4facf461857cda5","ssdeep":"6144:KzEcClMewjI3elAYVgQKON9V/PPBtKG6d0Ag:KzEdM7seqYVtZPPBr6Rg","tlshash":"bc5401179a0487c2e46842d1be8b0dbc9f152f5cf6d62afb09499f973c18b634c9c52e","first_seen":"2026-02-28T00:16:13.871734Z","last_seen":"2026-02-28T00:26:53.448855Z","times_seen":2,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/opensans.woff","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /assets/opensans.woff HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/assets/sf.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:43 GMT\r\ncontent-type: font/woff\r\nlast-modified: Mon, 19 Aug 2024 10:08:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20248\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20248,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 20248, version 1.1","md5":"ce659615885f33d928eb7fe276574106","sha1":"84f97fc997632d2fffb788cd07c92241f178a9a1","sha256":"819747b05df4938922997e60e199603ecb04f4d987331ba5c3f7db30a835c3bd","sha512":"938099e7ac8c58ee66fc954012f4ad3d5df29f2f886a001017bc07294a5cd01d8b40beda31881a16412234ac59d824f82cb0f7de7dd25fa8fac49a6054179734","ssdeep":"384:bh0tpjLDPUNChodKs1RJYhSx9KQp3onLGAInwlNPpn/qZOSO7O7RWfBWu4OYk:bh0vHDUNCT6KQViLGAInOhnSsSSSRWMG","tlshash":"c992cf4772796ef1fc0f1bbd4ad113003d5492a8dc83e8e237e8ade80628179bda915d","first_seen":"2023-04-15T04:11:10Z","last_seen":"2026-08-01T17:46:04.333278Z","times_seen":327,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/sqwpluginsharetw.svg","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /assets/sqwpluginsharetw.svg HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/assets/sqwpluginshare.css\r\nCookie: w2dplugincounter626126a9af08dcc01=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:43 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 19 Aug 2024 10:08:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 869\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1977,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eee3c5ee14dbc0831ed5c2e528507ed3","sha1":"0c3ff4913288472fc2521dbba18781ed464c9fcc","sha256":"b7a8a9420b213c32a6149588da6b93be6d516cb5c90089e25283713b0bbe4c29","sha512":"8afd7c2c6100b698badb7ddeb85d1ddc4cce005ba9f6366c4ef142fe691dfae6ebe5cf2c5ad872d4b57b648a83ea89c96056afe01164441e9531a0cdfd333a51","ssdeep":"","tlshash":"2e41548da29d23cdb215d778d1a21c7126bb39f93e22a39d4875a8b6ab320cd044dd43","first_seen":"2026-02-28T00:16:13.877451Z","last_seen":"2026-02-28T00:26:53.433718Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:54.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-goog-authuser\r\nReferer: https://switchnet.ch/\r\nOrigin: https://switchnet.ch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://switchnet.ch\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Sat, 28 Feb 2026 00:15:54 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T07:24:29.939425Z","times_seen":17775129,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"FC:29:4D:58:5E:E6:74:45:80:0C:2C:FE:14:2F:15:E5:F5:52:19:FC","sha256":"97:7E:CA:18:F0:30:B2:D8:F5:C6:F8:72:E1:CF:30:B5:CE:EA:5D:CF:26:AC:0B:BB:CF:17:23:E2:33:E0:56:12"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":81656,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2064)","md5":"23a0e680d2ce20b5620a3e2bf24b9027","sha1":"5816fee95bbbad3400f452b762a6c77db567649b","sha256":"06426c4777fd9685a48f2efad1ffe703804576e1fe0422bc121bb9f40fe7e2de","sha512":"0f977eaedd6948510464bb88040f0fe941f9e49347b663445414c0867f1d82b6adc224acbb01c6d3d713867d179e9fc8927fb897f3a2081aef15ff46f40d4c07","ssdeep":"1536:Xbnw0ufUp+e9aX6UPA6KqeKvJMm1/JL6sNH4eOdDZGgifwNWir:XT+e9aAtqeKvum9qIgiKr","tlshash":"6f83b8ccb6a671618263f5b5413f000eb23f59aaf8084cacb288d8e16df5959417bf7d","first_seen":"2026-02-28T00:16:13.879516Z","last_seen":"2026-02-28T00:26:53.44323Z","times_seen":2,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":56,"dns":0,"connect":7,"send":0,"wait":27,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/images/paratextpicsplt107616b07a08d790d.jpg","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /images/paratextpicsplt107616b07a08d790d.jpg HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:43 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 03 May 2025 11:41:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 185372\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":185372,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", baseline, precision 8, 1038x1038, components 3","md5":"51de4af133ec496233241a152f88110d","sha1":"d720b89ce5c26ef4573ad411cc63f2d627e898b6","sha256":"8ff8eb554b157afe9a3c62d18a0695d08002eb34ea1a7699688d14884cfa4ffd","sha512":"0f9d6caa79942f25ec5f9d1d2e4df39bdc6caf8c871455fb791b011d67fc2ffe500de353635e3e5dd52c34182f2f6aa929db7bd4fcc31957cd44d2902796222a","ssdeep":"3072:wg/aZoodZ553t5xBRf1TB7bR0/vzhLu78yNSDDqwCHvhWvkqEY63QSbKhirR14pV:eRdhXxBRf1T4/vzbZD7UvhWxBhirY","tlshash":"62049b138c185ed3a42dc3e9bf431eed2f59ab18e9423eff44560ec63b246135c4a52a","first_seen":"2026-02-28T00:16:13.880826Z","last_seen":"2026-02-28T00:26:53.445034Z","times_seen":2,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/wait.svg","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /assets/wait.svg HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/assets/sd.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:43 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 19 Aug 2024 10:08:33 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 753\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1945,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"862b420d8dc3da73c7c7f5e6504dad62","sha1":"e3fbff898e3cdb3c09162e4078b1ac50db23120f","sha256":"99778fce11562a9d965c0338b8a131add71f6f1e124bb8ae1e0bea36043fc935","sha512":"21d5a4130c420552b8bf5c010c2743768e585c8441059a134ed51cf8462a48fa706f4b5e98dd6c18f83ab85e9090b74f9dbbdb12f59ac34c67617ee793f05baf","ssdeep":"","tlshash":"724133bed23c52bdf2305368891a74b014b9a8a07d63c5afd7cf3c6fa8114be0456705","first_seen":"2023-10-23T11:14:21Z","last_seen":"2026-04-30T12:56:47.885844Z","times_seen":5,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/sqwpluginshare.css","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /assets/sqwpluginshare.css HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 Aug 2024 10:08:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 258\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1130,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9f834364fcff9aaf4a2a10d911fd2865","sha1":"6e77478148ac84e69297ea1a4397656d088c6e92","sha256":"23a2d4bc6e8caf7ea372a01231b1a583fbe0217f65d9248caea11e99abc036cb","sha512":"6927d138c6a9ae755aef9041d659c3c1b38dc211091a04689445e8b02cb0ef69b6a2ca53158924a2303736e9344ba4d594983d11d7d738aa4cbb8f950e1cc762","ssdeep":"","tlshash":"c2216fd4f58720ce720755162273b1516c788057994f4edcf1ad12f736960ac68ff297","first_seen":"2026-02-28T00:16:13.883799Z","last_seen":"2026-02-28T00:26:53.428942Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/sqwpluginshare.js","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /assets/sqwpluginshare.js HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 19 Aug 2024 10:08:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 169\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":328,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"aff4d15d127becdcd38a0d8c8d41a644","sha1":"cc3ca951883c70e60304d77570f658a23382346f","sha256":"4a5def6493bae8787b32197811c88f79ff4474d8126ce85f69088bf7f05549cc","sha512":"d2807e812ab00242d490b6f620a31e4f13cb5ed79c05727ba519c2776ff50c183401bb3776acd75b1f10148816b605a339c7f0cee1935a3cb146ae3f369a4f17","ssdeep":"","tlshash":"78e07d2cf2ecd44f445f7229a0773d247436902191130cd8d2704552bc5860e16de17e","first_seen":"2026-02-28T00:16:13.885133Z","last_seen":"2026-02-28T00:26:53.429489Z","times_seen":2,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/sd.css","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /assets/sd.css HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 Aug 2024 10:08:31 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1544\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7267,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b06746087498308f137e9bfc8004650d","sha1":"99025644496e0e1bb5d367fd52d6e8d8903d45b4","sha256":"433ece51fadc47aa4e7142b842a14f42e32d6ea9720d39772c7940dd3a655ed9","sha512":"4034a1ddeb3f8959840b0ff6132795ec35df29c116fa092964bbb44fa63809373f337fc38bd0969572a90d43bff15e6bf4d0d7a0fdd2448cbe38608783897174","ssdeep":"192:HVBdrcIyvJBB3K10eY7c0yosgn96sX4GVVIhPlJD:Hr3jiHkDx","tlshash":"fbe1103d8bb31244a67bd3b4dbf26325de3910279703038cfae8a491bb69148d069ed5","first_seen":"2026-02-28T00:16:13.886634Z","last_seen":"2026-02-28T00:26:53.418285Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/sc.css","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /assets/sc.css HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 Aug 2024 10:08:31 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3068\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17464,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4b0347723baa36f1ada04d12e0c6e10b","sha1":"0be67e2505e82778d2c6db88c40a735db813bcd6","sha256":"f5de863b531ba99665e7c5fc38399140aedb5eae82c124a6de0d715ba60b943e","sha512":"b481df4b501a20a51c8f3f3ab26cf8dbcce03dbd8dc9de4f25578397e6bb034504ee0736e4e5d36aa79ab7ba60b0a83bccd23f591b5647203249209a04e0947b","ssdeep":"384:Q3i8Uv9yxKMzKcAx9WeR+7DE8/V8+RW4l1zxDYQh/t/vCbfTq:Q30vcxKIcx9PB4tN","tlshash":"6272436ccb82510ab37ad3f6fbe16304ab1950e187030376fef85059b38a6994576fd8","first_seen":"2026-02-28T00:16:13.889546Z","last_seen":"2026-02-28T00:26:53.428166Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/sqwplugintextpicsplit.css","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /assets/sqwplugintextpicsplit.css HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 Aug 2024 10:08:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 566\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3304,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"07b421c6fea14f199807491f2de363a1","sha1":"0950b990377fa4dc1326c9ea9ba899a06274c5c5","sha256":"3944d68f37e76f7c9c4f50d44895a0a4389dc46fee3b6ec67880fee8d5e20acb","sha512":"4e11a06c65f549dc1a4ea1a7d0965c7497bd1255779926f873aef29eba2612f531a1e9936ce43b5f4c29c866669ec684754007692aad9633e0eda2b46c52700d","ssdeep":"","tlshash":"1961265c7741e9cec70297c256f4a646fe2480626a2bc8dee18e053777a215ce3fc257","first_seen":"2026-02-28T00:16:13.891578Z","last_seen":"2026-02-28T00:26:53.441851Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/images/paratextpicsplt107616b15e0cc7719.jpg","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /images/paratextpicsplt107616b15e0cc7719.jpg HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:43 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 19 Aug 2024 10:09:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 275085\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":275085,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 41x41, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", baseline, precision 8, 1038x833, components 3","md5":"edaffeaceb9d774a6fa783cc95a0bf2b","sha1":"a924577db017ab8aac0de34cb5bce2c828269251","sha256":"65c695736e09cd91602701f8cabf981abfd0ee819e1641ce7f1b939a97ee8009","sha512":"b3d0778f116b7ceb1a8bdbe177427dd30401689d6eb486cc24ca2252d7be94f9348e8a5c96b6d0b9074e30c3b0f5ef05171b2e9b654731322cc5a3a2c0c30f33","ssdeep":"6144:9rKgm8Il41h7w+8gide6RfrZUsit2ycBxql3dMK9ooMwc8e:JmEdTaRfr6siYyexu3dD9w","tlshash":"59442269edaf1339c58718e472374ce8b0136d9347c5ab74abd0ea5b6e98173030ad27","first_seen":"2026-02-28T00:16:13.892887Z","last_seen":"2026-02-28T00:26:53.433121Z","times_seen":2,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/images/paratextpicsplt107616b16c09f8215.jpg","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /images/paratextpicsplt107616b16c09f8215.jpg HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:43 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 19 Aug 2024 10:09:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 224763\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":224763,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.00, resolution (DPI), density 41x41, segment length 16, comment: \"LEAD Technologies Inc. V1.01\", baseline, precision 8, 1038x779, components 3","md5":"fa6a32c86f73ba4681b04a5e7f1cde71","sha1":"5e410e3949961fb35fb53a9529c5df86e4b50617","sha256":"12357ed875805f950b4b83a3158908bdb29129e3926325ddcfcbe91c323f236e","sha512":"ad41e0ad92c26f7ed273882f2f1e74bc894cc24b2f659479dd18340bf44ac146431d18163155d12c5e8b2dcca7e445aab3c581af355de2ce4d3c32404cb4b973","ssdeep":"6144:Wj0w1U1eNu5F6SQF2LBYB+Mm1Q+W1CXQJq69:TulavY2LBy+MN1CZ69","tlshash":"c92423fd363363a76f98a8e0a41204c886f82ed1d5f906982f87dcc9e0b69537d18c06","first_seen":"2026-02-28T00:16:13.894209Z","last_seen":"2026-02-28T00:26:53.419119Z","times_seen":2,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchnet.ch/assets/opensanslight.woff","fqdn":"switchnet.ch","domain":"switchnet.ch","tld":"ch"},"ip":{"addr":"193.33.128.139","port":443,"asn":35206,"as":"NovaTrend Services GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://switchnet.ch/","date":"2026-02-28T00:15:43.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.switchnet.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 04:50:27 GMT","end":"Wed, 06 May 2026 04:50:26 GMT"},"fingerprint":{"sha1":"8A:D8:DD:26:B8:6F:0B:BE:9A:A2:E4:A9:82:92:EF:13:88:15:10:B1","sha256":"D5:4C:80:B4:ED:0A:8D:B4:0A:A4:43:26:6B:CC:99:F3:A0:74:36:51:85:4F:4A:A2:E9:E0:38:3B:07:B7:29:09"}}},"request":{"raw":"GET /assets/opensanslight.woff HTTP/1.1\r\nHost: switchnet.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://switchnet.ch/assets/sf.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Mar 2026 00:15:43 GMT\r\ncontent-type: font/woff\r\nlast-modified: Mon, 19 Aug 2024 10:08:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20848\r\ndate: Sat, 28 Feb 2026 00:15:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20848,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 20848, version 1.1","md5":"0d0d7107450f05b72a4507d0d7687dd1","sha1":"845bbcd4bd3d110360a1994e213f709ef73ac6e8","sha256":"a5d937d8ccd079f0088d8095ac27f8387ac099382a8201ab903962a37a41ca1d","sha512":"5168aa05368cb22dbeda191f0330569fe1b96fb9ed98e90154974c8c7593e15600c0e054f3b7bdabd4c6a4a0d6b0dd6fc1dd26aa1ae1bdfa022fcdcdb23dce81","ssdeep":"384:H/nOTvLGbZPwLPPpOyqxgfmZR6KcCorHiRmwuvoLUwPwXDJnnraZkDn/qZOSO7Oi:H/EGblkPcRLcCDRmwMoLWraSnSsSSSRE","tlshash":"1592c04675d82c72e9bb4b781dd4c31a1a2a1a44c9c311d613e94fd71cfa2f22e5e5c2","first_seen":"2023-04-15T04:11:10Z","last_seen":"2026-08-07T03:34:09.972239Z","times_seen":220,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-28","alert":"Sinkholed","trigger":"switchnet.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}