{"report_id":"c91f0560-e7f2-4b64-93b0-8736c29982e3","version":0,"status":"done","tags":[],"date":"2026-06-13T12:56:51Z","url":{"schema":"http","addr":"larozza.rest/moslslat4.php","fqdn":"larozza.rest","domain":"larozza.rest","tld":"rest"},"ip":{"addr":"104.21.31.118","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"larozza.casa/moslslat4.php","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"title":"مسلسلات لاروزا","dom":{"size":1133828,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (59891)","md5":"ff43503f6e02d0878074237541de439e","sha1":"d18fcde78334ac87ab8480283ace330ee27e2366","sha256":"b18678bb92e1a5fa4671a8eeb056ef961c58958becf6cba6a61a97bd9a40ecbc","sha512":"f149400dd8046be86d84b46a5ba48733e2206a29f687df2c2214a9ef3669090bfb18d2712948aa9374330ad354c9d644a863618a6c89da4539c5ac4ef651bad2","ssdeep":"24576:P4y+N7f7SKBU2B0iMg0iMG0iMB0iM40iMf0iMj0iMM0iMB0iMz0iM00iMH0iMB0x:QSsVB0Y0e0J0A030b00050r0M0f0Z0d3","tlshash":"f135f169b7095d2f10630afd712d6b4ed1c9423efb8f8994bfd14baa76d8de10302690","dom_hash":"domhashbdf44af6e5cbef8ef03ca101f6266847","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"larozza.rest/moslslat4.php","fqdn":"larozza.rest","domain":"larozza.rest","tld":"rest"},"ip":{"addr":"104.21.31.118","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-18T12:56:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":15}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larooza.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.yachts","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.surf","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozaa.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozaa.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.living","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.living","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozaa.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"netdna.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":41692,"first_seen":"2012-09-07T15:11:00Z","last_seen":"2026-06-09T01:13:27.489734Z","alert_count":0,"request_count":3,"received_data":182611,"sent_data":1541,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-06-07T22:29:27.813409Z","alert_count":0,"request_count":2,"received_data":967794,"sent_data":965,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"larozza.casa","ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-31","domain_rank":0,"first_seen":"2026-06-13T05:52:48.688129Z","last_seen":"2026-06-13T05:52:48.688129Z","alert_count":55,"request_count":55,"received_data":4273191,"sent_data":30599,"comment":"","tags":null,"fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap:3.3.6","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"kit-pro.fontawesome.com","ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":228478,"first_seen":"2019-05-02T12:15:01Z","last_seen":"2026-06-06T16:51:55.362772Z","alert_count":0,"request_count":8,"received_data":807814,"sent_data":4520,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"larozaa.baby","ip":{"addr":"172.67.222.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-26","domain_rank":0,"first_seen":"2026-05-31T16:54:07.90965Z","last_seen":"2026-05-31T16:54:07.90965Z","alert_count":2,"request_count":1,"received_data":551,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-06-07T23:49:17.429937Z","alert_count":0,"request_count":1,"received_data":7838,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"larozza.living","ip":{"addr":"172.67.129.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-31","domain_rank":0,"first_seen":"2026-06-04T17:54:08.049089Z","last_seen":"2026-06-04T17:54:08.049089Z","alert_count":2,"request_count":1,"received_data":560,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-06-08T07:31:13.685477Z","alert_count":0,"request_count":1,"received_data":96975,"sent_data":499,"comment":"","tags":null,"fingerprints":null},{"fqdn":"larozza.yachts","ip":{"addr":"104.21.60.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-31","domain_rank":0,"first_seen":"2026-06-04T17:54:08.004625Z","last_seen":"2026-06-13T10:32:58.981737Z","alert_count":10,"request_count":10,"received_data":5788,"sent_data":5188,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"larozza.surf","ip":{"addr":"172.67.180.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-31","domain_rank":0,"first_seen":"2026-06-13T10:32:58.247217Z","last_seen":"2026-06-13T10:32:58.247217Z","alert_count":7,"request_count":7,"received_data":4017,"sent_data":3319,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"larozza.rest","ip":{"addr":"172.67.176.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-26","domain_rank":0,"first_seen":"2026-03-13T18:37:26.44844Z","last_seen":"2026-03-13T18:37:26.44844Z","alert_count":1,"request_count":1,"received_data":547,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"larooza.net","ip":{"addr":"104.21.9.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-11-24","domain_rank":0,"first_seen":"2026-02-16T00:18:51.014133Z","last_seen":"2026-05-31T16:54:08.854099Z","alert_count":1,"request_count":1,"received_data":529,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"larozza.asia","ip":{"addr":"172.67.196.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-31","domain_rank":0,"first_seen":"2026-06-13T10:32:58.244556Z","last_seen":"2026-06-13T10:32:58.244556Z","alert_count":14,"request_count":7,"received_data":3981,"sent_data":3319,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"larozaa.asia","ip":{"addr":"104.21.90.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-14","domain_rank":0,"first_seen":"2026-05-24T15:21:53.715718Z","last_seen":"2026-05-31T16:54:08.861825Z","alert_count":1,"request_count":1,"received_data":550,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"larozza.beer","ip":{"addr":"172.67.208.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-31","domain_rank":0,"first_seen":"2026-06-12T16:59:24.255892Z","last_seen":"2026-06-12T16:59:24.255892Z","alert_count":7,"request_count":7,"received_data":4003,"sent_data":3319,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"larozza.lat","ip":{"addr":"172.67.146.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-31","domain_rank":0,"first_seen":"2026-05-31T16:54:07.907374Z","last_seen":"2026-05-31T16:54:07.907374Z","alert_count":2,"request_count":1,"received_data":576,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"larozza.casa/templates/echo/js/jquery.maskedinput-1.3.min.js","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e946e6c0555be8fef529604cbb581a06","sha1":"58479bea126776a90c9bbd175beb6fdfdce14126","sha256":"fdda108043ec17e7981ad163355f2403b8d0e5edc6123ed9f1734c9d7802de18","sha512":"0dd1f09155e10cfeeb9495ef50aa4415265c8368cc142d9ca48503caf668e38c85527eb350c787e20f894d0780b89c2cb56ac1d544f8648d356228f99a22e804","ssdeep":"","tlshash":"bd71b46cf989719243f314fa40bfc509623d7bad481f6050d122f8c67e3889962afd7a","size":3574,"data":"","first_seen":"2023-03-07T14:58:51Z","last_seen":"2026-06-15T13:03:27.983119Z","times_seen":318,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-16T17:48:17.927921Z","times_seen":114593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/moslslat4.php","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"bf2e414a903131b4a2c3dd5301f4dfce","sha1":"f12965da05c2c55c09c83e1e0c9830560140c3b9","sha256":"0f454b7b92316d698b68a71e4ae883ff8fedc6cf67058200ed198a7a59af57f3","sha512":"c7fa36c0c6d9c1d5c79c06fd39eb438ab8e36ff459952c19fbbad270ca23f8d16815106b45764bacc3c912d699da727296cf11933bbb7f0db9509ac2b0a48c52","ssdeep":"","tlshash":"7ba002d668dab0bc1351970055772722b328d85588091198c5604115388908ee4b5e52","size":62,"data":"","first_seen":"2023-04-11T11:13:09Z","last_seen":"2026-06-16T14:45:05.451105Z","times_seen":1538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f03e5a3bf534f4a738bc350631fd05bd","sha1":"37b1db88b57438f1072a8ebc7559c909c9d3a682","sha256":"aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947","sha512":"8eeeaefb86cf5f9d09426814f7b60e1805e644cac3f5ab382c4d393dd0b7ab272c1909a31a57e6d38d5acf207555f097a64a6dd62f60a97093e97bb184126d2a","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"1793d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95992,"data":"","first_seen":"2023-03-07T01:02:11Z","last_seen":"2026-06-16T17:20:36.812569Z","times_seen":25638,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/js/jquery.ba-dotimeout.min.js","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc4ce95f630d8af029f161567488720b","sha1":"97359ec70486dedc0c0fd6a0f08330b702d4ec5b","sha256":"e383064a90ede5941f313745e99b6f5d5ae9c6a6007959e6a2d2b97b513bf6e0","sha512":"759f5b6d1ef08e89365db2f9b30d1d580488f77ef4eb9f247178583ab6635ae4e1ae388940672bf01d078481dd31debdf9b1dbcec763745a0c17230f86917900","ssdeep":"","tlshash":"8301f1e6b09271439fba2131607f83a59737d56132c84684b48361a05e358194413f7c","size":801,"data":"","first_seen":"2023-03-07T22:09:15Z","last_seen":"2026-06-14T22:40:54.661027Z","times_seen":221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/js/jquery.dotdotdot.min.js","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b4734aabd14811a99577bfe10db0d5e","sha1":"90adab868196e7ff9d6eff0ab50d5c67b9a75606","sha256":"0d7770062cc8a60f6e6ba27df94918a8822519755eb1765bd25a4f55a3f25c0a","sha512":"dc5658cf66c6592ad24f78f252be4377bc1592024901518185ea67c1089e3c36d676bc195600775f4da89800a3e2afca20cee7bed4151fb3ce74461cbc670e10","ssdeep":"96:b39M2+WAAAjUJOdLYuCISkT78JcUSHER3F7u3AD1Pld/VNO3SM:62eVUUZCDq78JlwyDp/VQ3SM","tlshash":"93c196a871e2346f96bb607c005ff507f3369921c48e4100e28d99a47e78d4d1b6bfad","size":6132,"data":"","first_seen":"2023-03-07T22:09:15Z","last_seen":"2026-06-14T22:40:54.6662Z","times_seen":207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/moslslat4.php","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"86a6965e541a781a37d669b260561c55","sha1":"d507b1712d0947c35ca109d78453ad0706543594","sha256":"d08064727885699b455486366ac7a1b6e9e298d7cb1d94d4e491088d0bb8ab94","sha512":"083bdf45ad8995c0ec36c921ed717a940848bf6490fb897aa3a9a9d98be61fe38d2f4284960bd6863558a922318a7a42ec756dbbda4a3e1511e1fb28ea3a15dc","ssdeep":"","tlshash":"a3f0270ab2a4993780b231885a5a4bf9766854cee508183230a8d78d1371dd4a2babb6","size":439,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-06-14T22:40:54.70798Z","times_seen":522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-KYDXRC37E4","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b2a663a955276763d66bae41c6add99","sha1":"00a11a0110885d69b025e026a1e77bcaf5a22a87","sha256":"2db857ea5ecdf45f501cc4efd80f7fb2852de7f1d9005b8e2fccf345f563c755","sha512":"f3f22a52e963fb00f6db2ca705fd9a59bc325e063b2ad92af96b663490c9589aa37759fc35e08d64e37314e43a3037a48d485a7e646032b6e6ec2c6ee33afc79","ssdeep":"6144:xBCbRknTI8s5XtjLEEQT1TpqBEzVTI1Ce8G3h7Y1MD9f:f5nTsEZXysu","tlshash":"dda4e9ceb3d674225396f478903f018ba57b29e2b448c899f189cce42e7459a4277f7c","size":483303,"data":"","first_seen":"2026-06-13T10:33:07.01685Z","last_seen":"2026-06-13T12:56:59.427515Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/moslslat4.php","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e2269d51990411e3d1bc5dc63afb38b","sha1":"d34d0b04f0f3946e29aff30f967ef56474eb6c95","sha256":"02a712fdff4646efe00e81a40fced2067812fc623fe1432bff96ac004d43c9ec","sha512":"1aa74a69bded801fb12ff869c2d0aa5c103b2dc08895b4adc4d611d19fd653c5de84a3eba5417799a6e1eb7c050dcf3ab2afaf4d9463ff3e0a007f56c47add9f","ssdeep":"","tlshash":"2dc02270799c5239807a702418fea204ae1b6910b8372140e02ca0b146ae63822b2c10","size":188,"data":"","first_seen":"2023-03-07T22:09:15Z","last_seen":"2026-06-14T22:40:54.707097Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/moslslat4.php","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d0f0b5b79e9f10c796e8a416e57dd2d","sha1":"acca3a159098bbc8a6313d6f496cfeef362c3171","sha256":"452c276bbd878d6970a8f3a2b5ebea89fcc866c5aa58e5e56afcdc9c53c2b78f","sha512":"e27276b5b768d17d9973211aed03b558904dc0b9d04d39390bfe27493d783c5c64f98dd6b676bfad19f0060eab18fd0ef3d4ffb492b0353585c3b09253e7fcf6","ssdeep":"96:u+cdSxFAl+7furhwsTulBaahwlXYDIxCrh6sTuDHO65:uXdSxFAl+7mrhNulbwlXYDIxCrhzuD/","tlshash":"bab1b909ff7a4a9b996b316075dfb1ca435f6972f30b0e1afe215c1c12e4562e063a06","size":5271,"data":"","first_seen":"2023-03-07T12:01:39Z","last_seen":"2026-06-14T22:40:54.729157Z","times_seen":518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/moslslat4.php","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5870e7e8cdf47dbdf0134ec507f053a","sha1":"b3b5ac65e47aa01b132081e22788c7f62646e4bc","sha256":"83905dcc737350af4c20ea2f5970e8f311a661b1073bb075b8ae8cf44acba96e","sha512":"67170ce36954fb595692abb641b1fd808a6ee045a657b4270d7581b0e1a393e08ad4dad02b13d034cff1761b74a1377bb933cbd1415002d5a3392304cee906ff","ssdeep":"","tlshash":"041120ab79b709708177b91567ffa30c30732013a040da203f7e66444f24f5b858d8d9","size":962,"data":"","first_seen":"2026-02-15T10:58:41.700059Z","last_seen":"2026-06-14T22:40:54.697117Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/js/melody.dev.js","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f16ddba6cfd4b23c8805f081b5208e97","sha1":"e3dd2e263d7f91f186f9e94a34819160f48aa0f9","sha256":"5097b66df85f7531b55458ec610342f211179ae8f5981c5eeb4706bf7f37c995","sha512":"4a8a3f83cd3b0e03f5106fd2817b06e0baaf6b9796ffe44452b4098c5873155476578325688189ae813528c47738df9ec25c09a9bdb4e9c23fe7799a215e701d","ssdeep":"192:EcGikGJsJb9wbyN3DkPMnBE4c+mqa5F+DiiN8lwwfJiN8lwwb:f4xiyN3DuMnBBmL+ML+u","tlshash":"5af15399b39d679eccf63262553e9404cd3ec1228203c2687d3d61941fe8ec52676bae","size":8115,"data":"","first_seen":"2023-05-01T20:12:26Z","last_seen":"2026-06-14T22:40:54.642381Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/js/jasny-bootstrap.min.js","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6b6e524d29d54ada53e4172b9d91cf7","sha1":"427153c7a2d83d2ca800e397779f29b857801ad2","sha256":"e7ad856551c720cb7c6a24a8bf4a9d6b6b24c24f07109cde96366338e53a4ff8","sha512":"13c01f28dd38a2b10ce27bc4dc60d510b2067e408ba1c0a26b0eb7fd39dd4300265278d529925e56d40bdc06a32d024558ca10a20d1ced6c186cc9ac263cc36d","ssdeep":"384:rKLCtf00Rd7HyeSOjjWhuU4AHL6JLeUxVM1MJsisNV+bocACk3N7K1nj:rbR00DHyNOjKhuVAWLxA1MJsisNV+boo","tlshash":"4e92664579b0225903ffa17601db4749f336eb28984a411cb4789ad76e39d0a72bbf3c","size":20042,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-06-16T15:53:52.879568Z","times_seen":658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/moslslat4.php","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"bf2e414a903131b4a2c3dd5301f4dfce","sha1":"f12965da05c2c55c09c83e1e0c9830560140c3b9","sha256":"0f454b7b92316d698b68a71e4ae883ff8fedc6cf67058200ed198a7a59af57f3","sha512":"c7fa36c0c6d9c1d5c79c06fd39eb438ab8e36ff459952c19fbbad270ca23f8d16815106b45764bacc3c912d699da727296cf11933bbb7f0db9509ac2b0a48c52","ssdeep":"","tlshash":"7ba002d668dab0bc1351970055772722b328d85588091198c5604115388908ee4b5e52","size":62,"data":"","first_seen":"2023-04-11T11:13:09Z","last_seen":"2026-06-16T14:45:05.451105Z","times_seen":1538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/moslslat4.php","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"471e8484d13b21388ddbe8c2938bb920","sha1":"dc64e4a1466fcbaf7fe4015c00cebfd98586f561","sha256":"035e956ac166e32a6e45def4022cbe14086d5cd5f1d79c2e57e11f6604b4e04a","sha512":"16fc0f2b02caa4ba43e66d7ce8551c15de85d271714d6fb56c51784dcafba00e538e1ab2a6e6a97ef0a9dc88a6e4d11900e291f0776793ebe4d6d6d2a7cd7ae6","ssdeep":"","tlshash":"3ac002e35116456a02a22498d105b649b765843c1e50844bedc9c94050506f907df599","size":165,"data":"","first_seen":"2026-06-13T12:56:59.446145Z","last_seen":"2026-06-13T12:56:59.446145Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/moslslat4.php","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a3609b3cde3749a15811e4b27418ea","sha1":"c5efa44f160d3903c48966c3f5623b8c4e2d8192","sha256":"aa902b3d2c7b40b2750ed80b9f205f9258c71582a98441efcd5c469d02e3d97a","sha512":"e647da0dc8147885950af79d9ba9155d63a19a71b931d6d5677a9b3fc4ff183a15df97d63ac407384a4c6d6de106e2cf0316fe297556960217fd8aa7df85cf86","ssdeep":"","tlshash":"1741bda11a15c5b10bc2691bc2cdb59cccb54cb3bb6bf93028a2622197cfdc586de275","size":2341,"data":"","first_seen":"2023-04-11T10:43:19Z","last_seen":"2026-06-14T22:40:54.695973Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/js/swfobject.js","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"892a543f3abb54e8ec1ada55be3b0649","sha1":"5847ed101f55d51c53538a7078971e7de8fb6762","sha256":"8677971b119ccdb82af697ff0e08f218490d15116f221d44301f1cc8797e67d4","sha512":"de1984908768117cc0f2cdfaab103352ea53a343f4b46c9f02f2a99c0458739cce5938aec2762ec750d3f09b74311a66dafab51657ac2229b9f67b796f3c6953","ssdeep":"192:dEBsWGAZvwGxP1hNWwI9V0YOOsFbkRHeZmyIVyX8c727LMoOyXoy7NgvZ4xsnyQ/:dAsWGAZvwGxP1hNWwI9V0YO1NkRHe4yV","tlshash":"5d22a5aab6483336abc521e144bf894671b0f532558cc1b0c572e4b02e7cca9a5b7f7d","size":10220,"data":"","first_seen":"2023-03-07T01:18:41Z","last_seen":"2026-06-16T05:55:33.090566Z","times_seen":2323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/js/bootstrap-notify.min.js","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ba070af9d1b1a2782851940de30879f","sha1":"d33390fc88bf68bd23eb182d7dbc77f5227081b2","sha256":"a13a07b242c80b57e0cbbacc6cfedb538d4d331ff1f9dff370519ec57407e450","sha512":"3d793cb731b6a060ea4b68dd622b76ee0db7f1ca5536fd4b4831b6f586c8f4f6634fcfc64d7dd93e85298225e9a4aba6d9d44ca3d8fabc2dfd365a02df60abe0","ssdeep":"96:YjcZsiBifeECqrETiqx8D6Eie9tJzg1YkwVgwIuIL3BMLbR7HdvxsyBvoPrrOLKE:kFi4f/7ETi7DcKtJ03LLkp1xs1O","tlshash":"a902768d7112926a825b9277a08e0300f536a615e517f63d3e3ac4e6bdb4de822173f6","size":8216,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-06-16T15:53:52.922915Z","times_seen":574,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/moslslat4.php","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"cae6f8624c66f13833c0cb65d1a7d4f3","sha1":"38913a239bfe49bb031bc0bba5130fdde4a9dddd","sha256":"41557c099d9a65a2febcf471b7cc43a2fc76a213f40eb129e19d06c2f3d64ce0","sha512":"a4c05ed1e653a18b4212c644636b7430b83ea8d43acf19fd4da179f7ef4b03b520a794002b9686a1bb348abee8697e34559e79e09dc3e054af916ab5ee83688f","ssdeep":"","tlshash":"d29002956cd970b817519614563b3723631494658c051094c1514119394908ae8a5a52","size":56,"data":"","first_seen":"2023-04-16T10:54:19Z","last_seen":"2026-06-14T22:40:54.690064Z","times_seen":207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/js/jquery.typewatch.js","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6915a93382a7b35f40987fd648b43f9d","sha1":"b78c77cc774594df414a7b1fb99c28083d85bb80","sha256":"1836dba8922ca00f9ac170122f314b2cd7bbb2eba09c73d8bce215597bd9cd2b","sha512":"e88f5e62ae04a867b1b5ba979e2b653cab8348167c37cf897856d13558114dca318ac33b2c07d611ad3559014c57e60b847823421a46649a47f5328720eceac4","ssdeep":"","tlshash":"6c313f4cb152a15d87e263f6aa7616ee3a7ae3785a001184316512d0a078a8f63d7bd4","size":1745,"data":"","first_seen":"2023-03-07T12:12:06Z","last_seen":"2026-06-16T15:53:52.920893Z","times_seen":466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/moslslat4.php","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"913cd1c5c7c4763916ca141bc9c75997","sha1":"1da2b868f14e1cd5a7c2cff3af2c6b64898b7077","sha256":"f7c39771c61c46a5ac822f51e3ed72bcbabeeb9756fbc20c8dc05b2ceb3f550e","sha512":"9020a369a1b4ab7c277e98639027538cfe76a1bb6efcc0c7d8f92b587d47fdf34e0fcdade4dad25f304e1b83305f457e6e98a8b4f31a5eb4639e2e4961454b11","ssdeep":"","tlshash":"e7f0b498fbdd796781ba3074cd2e12ce271db46394005cfefc649144489a9bc613296f","size":545,"data":"","first_seen":"2025-12-19T01:58:39.716087Z","last_seen":"2026-06-14T22:40:54.717217Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/js/melody.dev.js","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e238acf58475d3cdb95d614582134b24","sha1":"b13c1da1f5254cb14f4f187bd5174ed0feb08a23","sha256":"f3a4cbf3a8090b121a0d6d6dd8feda9f92831cdb5a070a7eb9ef58234c1f4eab","sha512":"7209c4cb8692e5a1fce4c6bad8081361c857d45b179b935a7291b0682c514409584e10b29bb56905dafd5d3dc8831d82c78cf9895c7b59ac2239552f6abf1f2b","ssdeep":"384:krC7SV8zve0Nfenff87NLRld9gTSOW6VUH:krC7+860lRLRGTdK","tlshash":"f5a25405f2ed1e6600b334360cafa4853a3c99b798048d59fd5d21e85f6cb7ca972f4a","size":23108,"data":"","first_seen":"2023-03-07T12:12:06Z","last_seen":"2026-06-14T22:40:54.655956Z","times_seen":569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/moslslat4.php","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"901d05a394689754b24c53a14ff0bb94","sha1":"16e6750d0db26beda439d20147af2cdf6ee85f6c","sha256":"c8d34bfa528cee7507080fac65baab9a6eacb046b4c097cc3201ff3bba0d09c1","sha512":"4ee2e549e7bf56480b4d2ffcbd59903b4f9f55ee6ee6b15ac161d70b08297ae3662e91f1cfdd2c6832601a30079245c722674147287d384efdcbe158048e63b9","ssdeep":"","tlshash":"44d0a738fc7da01104bd38ba38f74d487a36387020032845447c96e45b9aea44581c15","size":216,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-06-14T22:40:54.728375Z","times_seen":522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/js/jquery.cropit.js","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd82e0edbcecf087be901e8e7ed0d035","sha1":"2cedce9f87501152efa36eb1949d95c0ca4ff200","sha256":"b8a0d09df5a79e5e9494b3061eeff55883870c66714879886348c5095faa7840","sha512":"972ad1b4fe72296e7123bebe0c1e18aaf1fe1617ed41762b0e0b3afc9a7e58c0a4f9e5354094808d94bcebcd8f7c1d12b9c794ae17c47bc9cb3586ca9899193f","ssdeep":"384:b4Ku+vsSCLma/KSUOW5Gur0433Pfmoz8DKNzmavSbnCIjcIOHinWK0inVcaTJX5s:XWmaiSO5Gu/wemaybVtPJXm","tlshash":"4fc2b4193ba1367742a7f1a0760f800c1275e975e446e38cb638d8fa9af18148a77f76","size":27578,"data":"","first_seen":"2023-03-07T12:01:39Z","last_seen":"2026-06-14T22:40:54.679737Z","times_seen":682,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/moslslat4.php","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a5b632286f247d1ca7c9f4848492d7e","sha1":"0ba474615d1509d0d44da82152327d3f7776acd5","sha256":"15fced069d8051e82b4b9baddcda78f1bf07d02bea443460d724507001549e6c","sha512":"8adf9d7581699f5e8a1c3bf30e1ed1f1e7f093040a6c5c1745d8f3175249d3b08bece8e7de11e3c44e218a8e6d68908d0ba306ef3adf233f6d885a445d77b317","ssdeep":"","tlshash":"42e07d1bf4043b8320332170953f350e374165a8be470b32b138502c2d5aa07732250d","size":304,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-06-14T22:40:54.725683Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-migrate-1.2.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb05d8d73b5b13d8d84308a4751ece96","sha1":"743052320809514fb788fe1d3df37fc87ce90452","sha256":"1e67d8dbcca1f6fd94e077c85c2fb40fa1c2756c99238daa8da882144260a68d","sha512":"7b68a43a22a41404a2ff58e0da6a237492cad0fc3e56d216980802b4d5fb483895262a7e049340d6670002bdf899ba88c319239e60d0aae1ac31d98556b0ad6e","ssdeep":"96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq","tlshash":"3fe196dc72aab5611ffa30a8503bd21b72b25aec140d95a4f08ccde5392cc5d413ab7e","size":7199,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-06-16T17:03:13.838664Z","times_seen":23686,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/js/jquery.autosize.min.js","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ed349bf05fc62b911a41f960dd72fbd","sha1":"aafd0a174e1ab3955a380f304f75af7eecea54f2","sha256":"b796706804d02d43f6f0155d2518bd4a3710cf6125cd410f544b5d1e49488de6","sha512":"13416ed74fae6fd3dad05483f9fce633fc91c6fcfa03a816c59653842e7e09d80057c11b1e3abe5e7c1ff71a3c97dd82a43a7550af996d8c505c7cf5720b03df","ssdeep":"","tlshash":"3c61657b7306682071ee4792345f7b1e2051621ee343c0b9e23599b82eebcdb3516b76","size":3294,"data":"","first_seen":"2023-03-07T22:09:15Z","last_seen":"2026-06-14T22:40:54.656626Z","times_seen":192,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netdna.bootstrapcdn.com/bootstrap/3.2.0/js/bootstrap.min.js","fqdn":"netdna.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"abda843684d022f3bc22bc83927fe05f","sha1":"26908395e7a9a4eab607d80aa50a81d65f3017cb","sha256":"24cc29533598f962823c4229bc280487646a27a42a95257c31de1b9b18f3710f","sha512":"3f1b46e9ea0fb6be507605a2783af406c6b4f885dedaa4401bff204b0fe9056656717411021594e2512e98a4e398e3238267a7deafeba1b57e443decab0477ea","ssdeep":"768:xoBFw1wl+WRydWDRQgn8WI0fBQLrX84XCqc:SAr2MRCqc","tlshash":"43e28446b23031a107dfb2e5515f020b723a6a6de906907c38b999f53db9c48727bf39","size":31819,"data":"","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-06-16T17:08:00.029655Z","times_seen":8755,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-KYDXRC37E4","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"facb96cadd092bb32ee88bc0cea1c741","sha1":"5b7280eeb3d17fb45724f0446b271a5e0095c034","sha256":"dfb438ea1e4ae74f0f2b9d118063b6143463bdc1709ba1e25e7b84785e1d0cd4","sha512":"a90945a26ef590225ecf2f8ad1e2ec2e38571a8bf7707a87b3f5dba9a72c3a88564037a33a24d137925676699e10edb604da831a42f8ed119e19ab728e565d2e","ssdeep":"6144:xUCbRknTI8s5XtjLEEQT1TpqBEzVTI1Ce8G3h7Y1MD9f:a5nTsEZXysu","tlshash":"01a4e9ceb3d674225396f478903f018ba57b29e2b448c899f189cce42e7459a4277f7c","size":483303,"data":"","first_seen":"2026-06-13T10:33:07.020089Z","last_seen":"2026-06-13T12:56:59.40407Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/moslslat4.php","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"bf2e414a903131b4a2c3dd5301f4dfce","sha1":"f12965da05c2c55c09c83e1e0c9830560140c3b9","sha256":"0f454b7b92316d698b68a71e4ae883ff8fedc6cf67058200ed198a7a59af57f3","sha512":"c7fa36c0c6d9c1d5c79c06fd39eb438ab8e36ff459952c19fbbad270ca23f8d16815106b45764bacc3c912d699da727296cf11933bbb7f0db9509ac2b0a48c52","ssdeep":"","tlshash":"7ba002d668dab0bc1351970055772722b328d85588091198c5604115388908ee4b5e52","size":62,"data":"","first_seen":"2023-04-11T11:13:09Z","last_seen":"2026-06-16T14:45:05.451105Z","times_seen":1538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/moslslat4.php","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e0288c4255c31c44c1e91953dd5aabd","sha1":"cdb0a3e8fad9341d9a428dd08a88e8315bd0e0e3","sha256":"1cad45360146d4ec53868e810c3b7eb2d4ae030b07ad2268030ece9f324266e9","sha512":"67416b9bdcf4264481ffad9d1d420ed7eb6d493550cadcc060f5d9086fdfec111c3ca63277e1e2b95d427cb8f1cb9daad34bdaf89ff69061628e2fdd3bca2273","ssdeep":"","tlshash":"0f517295f782593a413374f9997f1306632b6466da076868e2be058e07e6f38230f4a7","size":2622,"data":"","first_seen":"2025-12-19T01:58:39.699755Z","last_seen":"2026-06-14T22:40:54.723659Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/moslslat4.php","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7ec394e07da7d2e9c783428a1f1414e","sha1":"10bad134422bd14da7ad6e006d4355e5db9929ef","sha256":"1e839141c49a3eba5a59ff6d4c123303ef13e1842d7ef861f770043fff3db8ad","sha512":"fd5b832cfcba8537a4c73e3078c11f2c85a8cf349810efd5c1a695c4eda58445c03db3720bdd5b764aa41b133891af6177834eef9478c4ff20457bf01396bc5b","ssdeep":"","tlshash":"d5c02b8c210e0d7082f727408b7fb708b042322494d07931491933085d30e07e744810","size":153,"data":"","first_seen":"2025-12-19T01:58:39.718383Z","last_seen":"2026-06-14T22:40:54.725021Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/moslslat4.php","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"c0cc0fb0141f52b9fc5bf5bf281531ac","sha1":"29942c5675c543f8d2edc686e80cf4bf0e10bb70","sha256":"74c38e29231738f71a0b9ebec39d21fcb041847dad58079457731f0481a6e7ea","sha512":"eb9d30ad0c9fd6374e265504ef02e47fd672e0fbc3f50a49fedc8791de73080c353f3b3af4c0deb9c225d460f5c88ce263149c2b48f41f30eb09f86b8baf7274","ssdeep":"","tlshash":"c3a024dc14c571fc4711c15054f353137304d441440700ccc510041034454cfdc7cd11","size":79,"data":"","first_seen":"2023-04-16T10:54:19Z","last_seen":"2026-06-14T22:40:54.693946Z","times_seen":217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/js/jquery-scrolltofixed-min.js","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d356777022c9de56352b56b855abb4f3","sha1":"2b2633bba7a3579a24abf8eba36d07bd9ce6ed48","sha256":"555be26bbf1eb908369d65e57891a1f91474c4d7a2da13673c32f1ab5b5b2bb0","sha512":"8d4e82a9430fd930f88cf21ed731e84e8f7f26ce1b66dc4b3a021e2db1f2b2926e17fb1bc53ec87ed8b6cfbda29335ac4dc5e8b3f1749f03b7d41dd9c7a76201","ssdeep":"96:ST05BflUbLFQapYlN6rD1NBKzjHeubPvBPjI9G0rhLypbNIGrtl+eL/aW:wY+HFuArszyuFPsrhLypbNIGRL","tlshash":"e0b1ab602150733245dfb066e09fa3cf9171a235874bc0d6c0e4ebee6a7a6758bd3d89","size":5327,"data":"","first_seen":"2023-03-07T22:09:15Z","last_seen":"2026-06-14T22:40:54.625568Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/moslslat4.php","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56bd64921e4f22a3bb0a8a4e8b46f2a9","sha1":"b87f688b5cc4ab492d4579f817d3b6a4a7cde12a","sha256":"953deedb95bfe71531c02a3bdb27df8b64664dc44d4a2e83891830a46bf570af","sha512":"6a4c7ddadcffca1304ba71f81db2b6e0aaee01ea3ab95890a2b555999a7ea608b3e42a5a2487790c66c5fc97cadf21b41ca7271b771711f459c6b7e5c5c426a5","ssdeep":"","tlshash":"6a319946f76c1977663a14ab1c1930cc913e49b52c0426e7fcdc26945d98f28c3ea99b","size":1831,"data":"","first_seen":"2023-03-07T22:09:15Z","last_seen":"2026-06-14T22:40:54.724355Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/js/theme.js?v=0.1","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eea4f5333a4cb2a27506ac9db8011172","sha1":"a8f5391ccacc5c091c6ecb130509b98d416869e3","sha256":"0215a2f31eb07b433f63012341595b82aba2e7dd6ce2517a9a2ea4f892808220","sha512":"7355a319b9b18305cbc99a52a2adb48112642baf6363fc54caaa91ecafef837ef8ce68d5dd1d704629c9652d83fbf04f4709f20d176ffa0a841b06b567a07641","ssdeep":"768:7e1s4RPwBYlttO81x93OD4JdbNC6vALeqny+C3s1pR7T8I5HDwLYPLAWQCZYb0Y7:u4D4JdbNzvweqny+CQpmeHMYPLN3FNur","tlshash":"8913d78c7141a12b87a761f5a05f1206b172a9a5f049f83cb57dd4e2bef4ec81027fb8","size":41623,"data":"","first_seen":"2025-12-01T12:12:30.087397Z","last_seen":"2026-06-14T22:40:54.652347Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"larozza.casa/uploads/thumbs/222bd868b-1.jpg","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.561Z","timestamp":1781355386561,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /uploads/thumbs/222bd868b-1.jpg HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: image/jpeg\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Mon, 08 Jun 2026 10:57:14 GMT\r\nexpires: Tue, 11 Aug 2026 19:00:52 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 64533\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JB2C8iYmlj06LDDg3%2FIgn1zMOt8R7YrmihqZc1PM7ZTb%2B%2FOg%2FGJs%2Ffg1IqYQkiQW9PeLk5vCnQbzypxMuyoowZM6x8kZCner52%2B%2FazK6z5uGx5PGFRRrPdmJjTBHzp0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 60202\r\ncf-ray: a0b1415e0b964e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60202,"size_decoded":61105,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 800x450, components 3","md5":"425a5bbd54c1c7c44ec825eac05eb085","sha1":"ab35d80a50e3e52c7dcb6bc83414a2f0e5f2532e","sha256":"14b7a08596de9265e12cdf68034f2cdae1f9a2d179278951927de707b1457f42","sha512":"56fc97c68ce00976ddc9a27e38782fa9c9b18e1d90e6a20eb504eb268ccf4309dd72c1edd9e2680828d7c66271eb67efbc889ff8e18e71cca7437a663d791c51","ssdeep":"1536:4TSaZPPhT/BlokDy9aGEjX3IDSsObfw11+h:85PhTY+yaGEjIDfyfGAh","tlshash":"b943f193c49dea43cf1ee724ba1e293c531544b02c2556839bb63584ba17cbcf8f865e","first_seen":"2026-06-13T12:56:59.373842Z","last_seen":"2026-06-13T12:56:59.373842Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larooza.net/moslslat4.php","fqdn":"larooza.net","domain":"larooza.net","tld":"net"},"ip":{"addr":"104.21.9.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-13T12:56:16.678Z","timestamp":1781355376678,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larooza.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jun 2026 08:27:58 GMT","end":"Fri, 04 Sep 2026 09:27:37 GMT"},"fingerprint":{"sha1":"DA:04:33:69:9D:50:F3:B8:BE:80:4F:E8:8C:B7:71:1B:52:E5:E7:C7","sha256":"53:7C:94:20:AE:66:6B:65:A0:7E:5C:E2:83:23:3B:0E:FB:93:D6:E7:52:C4:C2:B2:B8:CB:29:02:9A:05:0D:F3"}}},"request":{"raw":"GET /moslslat4.php HTTP/1.1\r\nHost: larooza.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Sat, 13 Jun 2026 12:56:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://larozaa.asia/moslslat4.php\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ChuE%2B2Dc1bjTfRKGSqt4XTRnosrWbNBJfMijZpK3pYFo9bB8rNFS07bzNaSd9gKJvOp5HZ0AGwfW%2FAxehpMsjPSI6R7mcbkelylE%2BMXbpjTVPtSugB2j4iUVISRQVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b141206e33b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":8,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larooza.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/moslslat4.php","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-13T12:56:17.257Z","timestamp":1781355377257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /moslslat4.php HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 13 Jun 2026 12:56:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935; path=/\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: MISS\r\nx-server-powered-by: Engintron\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9JNOX%2BLLncOSxve66Npn5rS1ZYRNTQqRa7VptLP%2BrLbt6Oyv4pqJnYYukEyLwudIUJWwYzQZy8CNy96WVY8noEZ%2FSybns90kpN7UojSATV1v5kmdboRUj9VeGQx6uXs%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: zstd\r\ncf-ray: a0b141376e94569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap:3.3.6","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2026067,"size_decoded":160088,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (59784)","md5":"c8054cbe7fc3d302981701e2cfd9d4a3","sha1":"561ba80c6a8750142d41b2011f39a87f6250cd0c","sha256":"bd6bf0cd6e1cef545fb0f59befe197fdaac4e437aa62d254ce1ef3fa8fc0d0db","sha512":"ed52ccfd96de70b5c853cba4682c819f97225b63c34229fa7c8668afb9af436a25a0ce115f144fc4c2ac8e921cab76b92e02e8cc30f9ac27313cdcd1804b14b2","ssdeep":"24576:94y+N7f7SKBU2K0iMB0iME0iM30iMG0iME0iMm0iMv0iMY0iMH0iM30iMO0iMP0A:6SsVK050c0v0u0M0+0H0w0f0f0W0H0YD","tlshash":"64250168770d5d2f20930bfe712d5b4ed1c8427afb8f8994abc197ea65dc9e20303694","first_seen":"2026-06-13T12:56:59.378213Z","last_seen":"2026-06-13T12:56:59.378213Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4856,"timings":{"blocked":-1,"dns":9,"connect":1,"send":0,"wait":1730,"receive":0,"ssl":3115},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.yachts/templates/echo/css/echo.rtl.css","fqdn":"larozza.yachts","domain":"larozza.yachts","tld":"yachts"},"ip":{"addr":"104.21.60.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:22.813Z","timestamp":1781355382813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.yachts","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 16:43:14 GMT","end":"Wed, 02 Sep 2026 17:40:52 GMT"},"fingerprint":{"sha1":"D3:94:4B:AC:C1:BE:64:31:DA:B9:E5:4B:53:9C:72:04:4C:F1:23:E9","sha256":"1D:FE:10:7C:38:4B:FF:2A:10:EA:18:79:FC:F7:96:13:E1:5E:7E:49:CB:9D:39:FA:AF:A5:D3:8E:8C:EE:87:C4"}}},"request":{"raw":"GET /templates/echo/css/echo.rtl.css HTTP/1.1\r\nHost: larozza.yachts\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:22 GMT\r\nlocation: https://larozza.surf/templates/echo/css/echo.rtl.css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wyGwmITBbJS%2BSHt37rIjsAIkuZjzvm1wiopjU8%2FZgRXezQWlQ7sliNUfoxRMhwd5JgXYJnhB6HWLTx7854zh40ikLuWerQMVDcj84VNqFWyNcZkHwB0rDU4u%2B1e56m0AAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b14146cfbd0883-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.yachts","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/uploads/thumbs/d4ba529c8-1.jpg","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.504Z","timestamp":1781355386504,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /uploads/thumbs/d4ba529c8-1.jpg HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g6UFYGLffbh5o9m8GFhwuI8g5lsHrQeISxJgkxBK7HYQl8XJMZ5FINTtnZXMNQktp%2FurRj9IbCH6rEtFKZ7uqujAen2vCXl2Q0c5aLe%2FjReLXGDpQunEG3O3tFm8kqk%3D\"}]}\r\nlast-modified: Thu, 11 Jun 2026 22:17:39 GMT\r\nexpires: Tue, 11 Aug 2026 17:08:32 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 71274\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-length: 60982\r\ncf-ray: a0b1415dab764e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60982,"size_decoded":61875,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 800x450, components 3","md5":"8bfdfadce3301149b554c892e89fa569","sha1":"eb665a57ac6fcd4b7f682cfa5f3f0034782af3b9","sha256":"644515a2b27690591f98c10f1a779e8d2512ed2e853c8820c6d59ab45c7f8e8d","sha512":"d1694a5395feb0ff45c14734ebe39cd5835657564f598a38cc27b7a1c3990c29aae0726b393cc720f632bec518274e7589e1a6fdd2994ac7cd09bc59af3d8cfe","ssdeep":"1536:4cKzLuyHFvwfzBtoWjgl+zzXAV4zRm4snnubm:AfuwFuB+WUIzzXAMEH","tlshash":"925302dae23b42702b4242d74758dc88f099fcc65424a435b675cdf59fb0b79faa481c","first_seen":"2026-06-13T12:56:59.381014Z","last_seen":"2026-06-13T12:56:59.381014Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/uploads/thumbs/802841857-1.jpg","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.524Z","timestamp":1781355386524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /uploads/thumbs/802841857-1.jpg HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: image/jpeg\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Wed, 10 Jun 2026 15:04:44 GMT\r\nexpires: Wed, 12 Aug 2026 07:32:28 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 19437\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TigRN%2FbqON3S8CKmoqThTCfdEdmJIjqo3a98KzIAAlbhgUusX1182l%2BRuKe779BznwYRdt%2BREl4j1yXIINyYMoTnLV1bcat9Gyl45WNdSoPIKg1P7%2FAXp9c0BWNeLfQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 39589\r\ncf-ray: a0b1415dcb7d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39589,"size_decoded":40486,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 800x450, components 3","md5":"dc2609e83187f7cfe6dae2b9816da1ab","sha1":"aaf1b28be798ed147714cb8c72b71ed45ad5021b","sha256":"21878ee4cce1150dc147127d1f963b540f6f1e8ef962003267b39f5fb5a93a92","sha512":"6e99647ed280e8c1047b1e42c7bccdb9ff65d803751069a9e7c2c0d32214fea779de84da9b1a8babd57ba8a59d9a771e93dca5e40f0f7fdf03c0c78e4179a845","ssdeep":"768:GL370sadn6UkDWj/JTwhCmX5k/NsTyeXelQngkx6uNR/Fro:43+Fk2J0AmX5kiy8gc1/Fk","tlshash":"9103f1529cde382c9fd153782cdbfb87ed409dd962126890b6d6d70a3716e3a505703c","first_seen":"2026-06-13T12:56:59.383754Z","last_seen":"2026-06-13T12:56:59.383754Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/uploads/thumbs/61cd77c0a-1.jpg","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.566Z","timestamp":1781355386566,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /uploads/thumbs/61cd77c0a-1.jpg HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QkOGyHKCynXEs%2FvJCfKLS5hSOMdpnZmfZ2hih3sDiiniLKfT1tW5RxhlrD0AdN%2FqwcwRL5G5sn3ZHQ6zhbBu7fuq8YJb3bAgeWOqYf%2BCXsdLRgQMqQtCogE2CS0PUnw%3D\"}]}\r\nlast-modified: Mon, 08 Jun 2026 03:05:38 GMT\r\nexpires: Tue, 11 Aug 2026 19:00:52 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 64533\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-length: 44844\r\ncf-ray: a0b1415e0b9b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44844,"size_decoded":45739,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 800x450, components 3","md5":"a3d92ed7248152b051f4ec1840a8b823","sha1":"194fbd8887cb288337a6dfc190dcf8608789bd67","sha256":"8ceec5ca6794e643c5f525def09894376d7370bef01386299b71e4460fa69d14","sha512":"a2e06f895a1c36b8e14174117fc132e427eb020e774bfb81e5c3d90528268e7b568ff6aa5226f1e2ad79f25bd308277e3d0e583735a93c876289f50db4a95556","ssdeep":"768:GLU4P8sksXvw1ViqnDGS72nEE2auT6mFNK4leslnfmew83CPHWfyJ+DZ2feb+GUo:4U4+Ew1U0d79Pl6mi4lesleoCSy40dGp","tlshash":"6313e05b65858fc2e728f5f17f8749cd0e126309de9226ee12070e3b77a1e27816dc82","first_seen":"2026-06-13T12:56:59.385753Z","last_seen":"2026-06-13T12:56:59.385753Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/uploads/thumbs/7fe8fd121-1.jpg","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.569Z","timestamp":1781355386569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /uploads/thumbs/7fe8fd121-1.jpg HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FvXWeNLQph3oBC4R382fV7dekygAhyD%2FEaz8OCLoP9o4fToh9xJe9m80taHqeIgLnFHv11Jvj5knBShjr3RshD7CcDmWv%2Blw9ul3Z4mFPXCvKBLEIj1TytujIWKOQC8%3D\"}]}\r\nlast-modified: Mon, 08 Jun 2026 02:27:38 GMT\r\nexpires: Tue, 11 Aug 2026 19:01:14 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 64511\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-length: 33349\r\ncf-ray: a0b1415e1b9c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":33349,"size_decoded":34244,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 800x450, components 3","md5":"0fcf9e8b96cfc96f227c959bf67974ec","sha1":"4d39cc1c605cd26137083a01b3ab9e8b6b053465","sha256":"6254782c3257e65502fb7b56fbb65df407f13348333c56448621acdc34a5671b","sha512":"5ad44b1b1a6bc0e9c029485b15518b8d89eb9fa472e6bc3cd3e023615e9bb2808e737c3e571db7a8cbeb0fbe0b4b2a5b7f0930a5373fdc180482255680668e1d","ssdeep":"768:GLfiZUWPoK3g/HV72uwfJHnSpvz6izhnXch0GEU/4XL:4fiZJd3EOxnSpvmE+tp47","tlshash":"36e2e1e6be8d73d1bfcd8b38c02924f38d9c0d7c684a7db9064dc6945aa0ca8dc96475","first_seen":"2026-06-13T12:56:59.387466Z","last_seen":"2026-06-13T12:56:59.387466Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.yachts/templates/echo/css/echo.css","fqdn":"larozza.yachts","domain":"larozza.yachts","tld":"yachts"},"ip":{"addr":"104.21.60.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:22.806Z","timestamp":1781355382806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.yachts","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 16:43:14 GMT","end":"Wed, 02 Sep 2026 17:40:52 GMT"},"fingerprint":{"sha1":"D3:94:4B:AC:C1:BE:64:31:DA:B9:E5:4B:53:9C:72:04:4C:F1:23:E9","sha256":"1D:FE:10:7C:38:4B:FF:2A:10:EA:18:79:FC:F7:96:13:E1:5E:7E:49:CB:9D:39:FA:AF:A5:D3:8E:8C:EE:87:C4"}}},"request":{"raw":"GET /templates/echo/css/echo.css HTTP/1.1\r\nHost: larozza.yachts\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:22 GMT\r\nlocation: https://larozza.surf/templates/echo/css/echo.css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MflHGcdMxcoCS2jIprBE65b0bNCw2x8ZjAj1TYKFvJCFNZsvDbm0x9umRxJFIIx5QbgY8DifHkwrWOk%2B0KqlOJ3e6cZkOQcegN2yN40CpTCt1tjCuJRzYVjh%2BTffgNDLSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b14146cfb80883-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":1,"connect":26,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.yachts","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/css/animate.min.css","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:22.821Z","timestamp":1781355382821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /templates/echo/css/animate.min.css HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:22 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 17 May 2016 22:36:06 GMT\r\nexpires: Sun, 12 Jul 2026 17:07:53 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 71308\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jl7d60XijsJl%2Bug3T55XI7%2FGdj7AuVg78H%2FeQfLB2dwX5VlCbxTetrqqz3v6yJVrWXLmwwaGnpQJg2KjraGyv0YzA8Gy3wAQUGDvExSGWCuJJHQKtp0xijrNlCON6l0%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a0b14146b8554e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":57393,"size_decoded":5127,"mime_type":"text/css","magic":"ASCII text, with very long lines (319)","md5":"deda6b35f61fb73cd18ea6b68a4818de","sha1":"7f4565fb973606c0d145f8a2b14ff5c38b6901d1","sha256":"7d30926aabfb178597a84b624fdf7802ad3e2599f3501ae4c383d9a0d143494e","sha512":"9e74c62ed7e847b043c74c5680c5be900b181b11cbd173bea1a8402cf175361b2a37d7892f53dc077b39eeec8aeb55f7d6ec736890f004fadd883a5b4934e3cc","ssdeep":"768:lkZFpVIBIEwQ1oAhkIDz3gy65VraeX0UTGsXs+:lkZUwQ1oAhkIDz3gy65VraeX0UTd","tlshash":"fa4346ae5891238a91674fa283dd5e64473dc67314621cee33816c4bcf87b9e33da247","first_seen":"2023-05-01T20:12:27Z","last_seen":"2026-06-14T22:40:54.658968Z","times_seen":217,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/css/echo.rtl.css","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:23.115Z","timestamp":1781355383115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /templates/echo/css/echo.rtl.css HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:23 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 23 Nov 2016 05:37:34 GMT\r\nexpires: Mon, 13 Jul 2026 05:05:45 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 28237\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1LUhmiZ%2BzozRkJA69%2BKHmcERZEx5Rq%2B3ZDqmSVrk9iMRqUHvZlCEryo15%2FruyqVdFcuv6mORpGE0F75wsgCN8kJRnn87hcoSg9jfAryTUbjjI6t1%2BBcnF1mjgKITBIQ%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a0b1414878a04e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21636,"size_decoded":4794,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"3457b817eb3a042e536a7989702c60e1","sha1":"23ed4644ea28fb93972abf7fc419883d47285f5f","sha256":"b55cf4a22a42ae393a96c72ddee5c917363b6e06cd1309cb34490843fa2dd9f9","sha512":"31f3c3bdf4d07647b81cc0073b003b5f92b5821506d077d749d968d87ab6e9f4df54a79caacf98423f424260fec4fe037cd839cc475b2ae8b2917cea249d0adc","ssdeep":"192:YUY0/g8XEHjhgRUi4Umjqq6+ndCng3TZoVN+nPIqAe5W:5Kibq6+ngyT6+dJW","tlshash":"23a20352fe5160872432cb78f262ccd3ef1a00d3c5065bb9bf59d1a49b6918c272df9a","first_seen":"2024-01-02T23:52:33Z","last_seen":"2026-06-14T22:40:54.629783Z","times_seen":89,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/js/jasny-bootstrap.min.js","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.127Z","timestamp":1781355386127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /templates/echo/js/jasny-bootstrap.min.js HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 20 Apr 2016 19:26:52 GMT\r\nexpires: Sun, 12 Jul 2026 17:07:54 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 71311\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FbzgnghITc3GZ6q7yLw0bLHCuH34sT4DrqonrOJOXvhdAYfKQvPRTU9vVq%2BBQaGqFVdBo%2BAHb4KErhn8lts%2BpXJ1tvcVC6%2BT0JnArITSnhplLA7BlOT4xtWzqXyXdyk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a0b1415b4b0b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20042,"size_decoded":6176,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (343)","md5":"f6b6e524d29d54ada53e4172b9d91cf7","sha1":"427153c7a2d83d2ca800e397779f29b857801ad2","sha256":"e7ad856551c720cb7c6a24a8bf4a9d6b6b24c24f07109cde96366338e53a4ff8","sha512":"13c01f28dd38a2b10ce27bc4dc60d510b2067e408ba1c0a26b0eb7fd39dd4300265278d529925e56d40bdc06a32d024558ca10a20d1ced6c186cc9ac263cc36d","ssdeep":"384:rKLCtf00Rd7HyeSOjjWhuU4AHL6JLeUxVM1MJsisNV+bocACk3N7K1nj:rbR00DHyNOjKhuVAWLxA1MJsisNV+boo","tlshash":"4e92664579b0225903ffa17601db4749f336eb28984a411cb4789ad76e39d0a72bbf3c","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-06-16T15:53:52.879568Z","times_seen":658,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/js/jquery.maskedinput-1.3.min.js","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.145Z","timestamp":1781355386145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /templates/echo/js/jquery.maskedinput-1.3.min.js HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 11 Jun 2014 02:56:30 GMT\r\nexpires: Sun, 12 Jul 2026 17:07:54 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 71311\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l0y1O%2F6APvnFu29kxgmv3FuZt6zXwXJFz43psYPd%2FzrJVML012BchjZ0WGMe5hTFrZp7u%2FUTr9PuAZLTlRiWJayFlDdhh7vJ3QR6jXqOjqtrz%2BLzWUu849aNOz3l4tM%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a0b1415b6b1b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3574,"size_decoded":2566,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3366), with CRLF line terminators","md5":"e946e6c0555be8fef529604cbb581a06","sha1":"58479bea126776a90c9bbd175beb6fdfdce14126","sha256":"fdda108043ec17e7981ad163355f2403b8d0e5edc6123ed9f1734c9d7802de18","sha512":"0dd1f09155e10cfeeb9495ef50aa4415265c8368cc142d9ca48503caf668e38c85527eb350c787e20f894d0780b89c2cb56ac1d544f8648d356228f99a22e804","ssdeep":"","tlshash":"bd71b46cf989719243f314fa40bfc509623d7bad481f6050d122f8c67e3889962afd7a","first_seen":"2023-03-07T14:58:51Z","last_seen":"2026-06-15T13:03:27.983119Z","times_seen":318,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/uploads/thumbs/3e35c1b12-1.jpg","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.533Z","timestamp":1781355386533,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /uploads/thumbs/3e35c1b12-1.jpg HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Aw0j9IDn5Wphw63AkmuHmSnGN30kUyBnrZVNtFWYtJmS1HWSLc9YTrTgEcu1W9r%2BnfdDqyAczCFXPb3tX7%2FGT5%2FXyWaA1DWc4jTwZMQ12CH6V%2BaYQFqXfwtPDK2BGjo%3D\"}]}\r\nlast-modified: Wed, 10 Jun 2026 13:23:03 GMT\r\nexpires: Tue, 11 Aug 2026 17:08:32 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 71274\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-length: 67224\r\ncf-ray: a0b1415ddb814e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":67224,"size_decoded":68121,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 800x450, components 3","md5":"142a5df7611c554568a11007b297fb45","sha1":"e649314c3aeb234f289446c338d3a2bb175e0442","sha256":"cbabbe71e1f8e2aa80d7e74eeed71ed902d4ef57819bd928f5438355fff61972","sha512":"4d07aba43302127c793f40e113651291f036dd5a29e2e0e34526b971b748eef08b364ba9abf9dd509f194e15540e1ebfb678e1aa83d2d2359d5169e23def679a","ssdeep":"1536:41GMRY4gWaUiPm/Zg3L+RC5eqrUfowx/xB:sY4g1UyQ6LGC5pchxv","tlshash":"3e63024d6d980674cb2461616d47eccd22c61c17ce68196da1be1d7e83b3bfcb7091e2","first_seen":"2026-06-13T12:56:59.391582Z","last_seen":"2026-06-13T12:56:59.391582Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.yachts/fonts/BoutrosMBCDinkum-Bold.ttf","fqdn":"larozza.yachts","domain":"larozza.yachts","tld":"yachts"},"ip":{"addr":"104.21.60.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:22.803Z","timestamp":1781355382803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.yachts","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 16:43:14 GMT","end":"Wed, 02 Sep 2026 17:40:52 GMT"},"fingerprint":{"sha1":"D3:94:4B:AC:C1:BE:64:31:DA:B9:E5:4B:53:9C:72:04:4C:F1:23:E9","sha256":"1D:FE:10:7C:38:4B:FF:2A:10:EA:18:79:FC:F7:96:13:E1:5E:7E:49:CB:9D:39:FA:AF:A5:D3:8E:8C:EE:87:C4"}}},"request":{"raw":"GET /fonts/BoutrosMBCDinkum-Bold.ttf HTTP/1.1\r\nHost: larozza.yachts\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nOrigin: https://larozza.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:22 GMT\r\nlocation: https://larozza.surf/fonts/BoutrosMBCDinkum-Bold.ttf\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2Bk%2Fjln%2B%2FcQPkzFGBXqDjdmF9oGWxcYpER1Dkh%2BsV%2BbaY5XPLn9lKZnPtHhzVWxxkIGlDAPxI6n%2BRk%2BgttQYjx9jAnZsivmkIAKnigFv%2Fdj21%2BfjhxsuTMltjCXfFTJ4qQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b14146beaa5684-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.yachts","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/css/echo.css","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:22.819Z","timestamp":1781355382819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /templates/echo/css/echo.css HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:22 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 11 May 2025 03:28:35 GMT\r\nexpires: Sun, 12 Jul 2026 17:07:53 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 71308\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rRffYsWdDHqIGW3ZstAHWGhi0dHeplvMfdGBBa90NGExgoHg7PcThuWMgVJstgzTQlFI8a17yKfCnAJCTw%2FoCka3ZwZzQosnxD4doSH7609s1fK9A%2Fdx9ldVYbpRe5w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a0b14146b8544e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231901,"size_decoded":39293,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"eafa4f38993f82b4a441e86edb00d14d","sha1":"d1d6baabe96dea08e846fa110374faa6ee780c39","sha256":"434014d37d43be23563714b36e73790ec11a50257d77074800c5672929417a1f","sha512":"d0112659a0e413a370a729ea1b24b0e304cb3f05010536717e33b4fd7d3d6fba120b6372a5427d150c778537564aaaf302c23eee47c6eb06594d026cdde52575","ssdeep":"3072:Cj/4qPCi1YfBN0ucn4/ULcSLyygLdWxAnZm4T1hbtEhND2INcmeF1ppwG2wxnCEt:gp0","tlshash":"b034ef62de1910422a33e375f7538662fb2841a3d20245bcfade654c9fe958c816efcd","first_seen":"2025-12-01T12:12:30.063869Z","last_seen":"2026-06-14T22:40:54.630425Z","times_seen":81,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/js/jquery.cropit.js","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.122Z","timestamp":1781355386122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /templates/echo/js/jquery.cropit.js HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 20 Apr 2016 19:27:10 GMT\r\nexpires: Sun, 12 Jul 2026 17:07:54 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 71311\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GPHmYfO0%2BG0GyTP0ndYgznwmZpky09qcPyv2ZTAfYrBwne%2FNXGC0g8Lo6fXG9MdUbBw2jDHwNxxHiAMdAKgJm3e50m0kU2LV66MD6uCkhlAHSVcRuWOFpiG3DcT0viA%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a0b1415b4b094e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":27578,"size_decoded":7814,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (27266)","md5":"cd82e0edbcecf087be901e8e7ed0d035","sha1":"2cedce9f87501152efa36eb1949d95c0ca4ff200","sha256":"b8a0d09df5a79e5e9494b3061eeff55883870c66714879886348c5095faa7840","sha512":"972ad1b4fe72296e7123bebe0c1e18aaf1fe1617ed41762b0e0b3afc9a7e58c0a4f9e5354094808d94bcebcd8f7c1d12b9c794ae17c47bc9cb3586ca9899193f","ssdeep":"384:b4Ku+vsSCLma/KSUOW5Gur0433Pfmoz8DKNzmavSbnCIjcIOHinWK0inVcaTJX5s:XWmaiSO5Gu/wemaybVtPJXm","tlshash":"4fc2b4193ba1367742a7f1a0760f800c1275e975e446e38cb638d8fa9af18148a77f76","first_seen":"2023-03-07T12:01:39Z","last_seen":"2026-06-14T22:40:54.679737Z","times_seen":682,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/fonts/BoutrosMBCDinkum-Bold.ttf","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.194Z","timestamp":1781355386194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /fonts/BoutrosMBCDinkum-Bold.ttf HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: font/ttf\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Sun, 18 Nov 2018 11:59:34 GMT\r\nexpires: Tue, 11 Aug 2026 17:08:18 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XVqhcoSRYe0ujTBtTvo1AS5cFEQJswLkwRQcBbSknv4kb%2FfWEYp5SYt9Q%2BbuWc2GVS2CtU09hk35DJPnK%2FGkg6nZ4iiCu5W9UFtUZXFaa5VB3HqX1yEM4ZZb023MY3o%3D\"}]}\r\nage: 71288\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a0b1415bbb2c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67484,"size_decoded":33020,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 16 tables, 1st \"DSIG\", 30 names, Macintosh, Copyright (c) Boutros International, 2017BoutrosMBCDinkumBold1.000;1BOU;BoutrosMBCDinkum-BoldBou","md5":"7e78074e30615b2fc74f6cb484b1345d","sha1":"73ccb7940da45220c3bedd6ba97900cf74fd09ca","sha256":"70d0767760a104ff48d0ef2f2a9d232f1bea8f9b2eaf8aee93247734648aa4b9","sha512":"a3ae0308a1168830c7d564d27cc70acc136c6018eabe97682e02e2ad46027bc4a8537b9785a9dba9ac4c606231f98591d3a667b8b1b70fd6f0dc13aed54aae1c","ssdeep":"768:BlmGttM9Og2aD6XZCZnAPxzRltPzlgIRN8rkEDvnfUJhR/no97StwrPE5rYxQwmR:uGttMwYuPHlthgeiL/8Jve7PNEfVPlfB","tlshash":"52630a42d76ad64ed52efb3846a6cb1751baf914ea6b532adec3529c48cf580cc4f300","first_seen":"2025-09-03T06:24:47.654325Z","last_seen":"2026-06-14T22:40:54.670682Z","times_seen":101,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.beer/templates/echo/css/custom.css","fqdn":"larozza.beer","domain":"larozza.beer","tld":"beer"},"ip":{"addr":"172.67.208.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:23.083Z","timestamp":1781355383083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.beer","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 23:03:00 GMT","end":"Thu, 10 Sep 2026 00:01:24 GMT"},"fingerprint":{"sha1":"9D:0C:CB:2C:C5:07:6E:C1:0F:4C:A2:D5:BA:B1:45:21:38:92:F3:11","sha256":"21:88:78:BD:1E:F8:A4:F4:F8:9D:C1:DE:D4:0C:63:28:3B:6A:9B:F7:BF:BC:3E:BD:B9:99:08:81:E3:47:19:A4"}}},"request":{"raw":"GET /templates/echo/css/custom.css HTTP/1.1\r\nHost: larozza.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:23 GMT\r\nlocation: https://larozza.casa/templates/echo/css/custom.css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ff%2F40CPMjGYMSnxlxdMarGBDaGGQUb%2FNbq%2FHsRQZNkPMUsH4GOUFm%2FPoTiya6ZG4QKZdxyiTTd5B4WlM48IT%2BnN%2FwgT6WgfVitoZZKJ6U9GK26908ypbsVocRY01DY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b141485aacb515-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.lat/moslslat4.php","fqdn":"larozza.lat","domain":"larozza.lat","tld":"lat"},"ip":{"addr":"172.67.146.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-13T12:56:16.854Z","timestamp":1781355376854,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.lat","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 01:17:17 GMT","end":"Sat, 29 Aug 2026 01:17:16 GMT"},"fingerprint":{"sha1":"F7:74:C9:29:FA:31:4E:A4:02:67:2B:48:F4:53:45:BF:A5:BC:A7:0A","sha256":"AF:47:60:B3:1C:C4:5D:8F:D2:28:B6:5E:9A:31:C5:4D:F6:05:14:3C:09:CA:E0:03:CE:44:79:4E:CE:7D:A6:B9"}}},"request":{"raw":"GET /moslslat4.php HTTP/1.1\r\nHost: larozza.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Sat, 13 Jun 2026 12:56:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://larozza.living/moslslat4.php\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yi%2Bl0xAVH9Px2bNXz8b55jVIOyMT5Hq22JC4w2kfdSvksKzxPy79k2ndelJVXhPugGjlDFahvBd3FLatMF2aEFni7iPDf%2BkKQMuOc%2B0%2B7hhzzqASsUlWPGcAtJFUaQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b141218dd7a0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":5,"connect":1,"send":0,"wait":4,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kit-pro.fontawesome.com/releases/v6.5.0/css/pro.min.css","fqdn":"kit-pro.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:22.788Z","timestamp":1781355382788,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 21:57:31 GMT","end":"Wed, 15 Jul 2026 22:57:28 GMT"},"fingerprint":{"sha1":"AF:65:F8:6C:70:82:CB:7C:3C:AD:4D:54:65:50:3B:13:F0:3A:0B:2E","sha256":"2A:78:5B:B0:CC:FA:C9:8B:51:86:B1:FA:62:ED:C7:B8:BC:18:15:3D:91:FC:87:53:9E:E0:AF:8C:08:D1:17:2F"}}},"request":{"raw":"GET /releases/v6.5.0/css/pro.min.css HTTP/1.1\r\nHost: kit-pro.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 13 Jun 2026 12:56:25 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\nx-amz-id-2: gtpqbuM4c7D0ZIKA5HHyrXbcXiKzdmdGUU1YaWo0EVRVgNYfVigFk3g+0irKGsML3PuZMMJgxQk=\r\nx-amz-request-id: D58EJXRSKBSH9DTE\r\nlast-modified: Mon, 27 Nov 2023 22:43:28 GMT\r\netag: W/\"9d197cc86cd37aaa0780930ae15cebce\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31556926\r\nage: 2715523\r\nexpires: Sun, 13 Jun 2027 18:45:11 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: a0b1415a18d156c0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":684949,"size_decoded":114888,"mime_type":"text/css","magic":"ASCII text, with very long lines (65364)","md5":"9d197cc86cd37aaa0780930ae15cebce","sha1":"2310eaec37e78c77eeeee296aaec3dc56365711a","sha256":"0e7a277afa202463eb7565626510851dd0106dfe2c0536886b8984889299ff0c","sha512":"3453f53cb609bdf8d8479f280878824de3c111d8359aa8a48a7233ed89fcbe8af5687888ecacf6291cbef7455365eac660ec415f25852c1de7794d4a34daabe9","ssdeep":"6144:mbezzFCxKFVgdKns97nJBjHEH/R06cXEnw7NK6A87EKgnM7rKZZA7NK+i7HJ72Ij:aezzYagonge","tlshash":"72e46da0941510dcb3a3f60f6b82b629e977f33ec9804e5fd1d5584e0dd3d687182baa","first_seen":"2023-11-28T19:39:24Z","last_seen":"2026-06-14T22:40:54.671871Z","times_seen":105,"resource_available":false,"data":null}},"time_used":3161,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":17,"receive":0,"ssl":3142},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kit-pro.fontawesome.com/releases/v6.5.0/webfonts/pro-fa-solid-900-1.woff2","fqdn":"kit-pro.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:22.795Z","timestamp":1781355382795,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 21:57:31 GMT","end":"Wed, 15 Jul 2026 22:57:28 GMT"},"fingerprint":{"sha1":"AF:65:F8:6C:70:82:CB:7C:3C:AD:4D:54:65:50:3B:13:F0:3A:0B:2E","sha256":"2A:78:5B:B0:CC:FA:C9:8B:51:86:B1:FA:62:ED:C7:B8:BC:18:15:3D:91:FC:87:53:9E:E0:AF:8C:08:D1:17:2F"}}},"request":{"raw":"GET /releases/v6.5.0/webfonts/pro-fa-solid-900-1.woff2 HTTP/1.1\r\nHost: kit-pro.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nOrigin: https://larozza.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 13 Jun 2026 12:56:22 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14088\r\ncf-ray: a0b14146bdf45684-OSL\r\nx-amz-id-2: 7b3C1Z1E+yXkoSvtm+UuJwieYm9R9sfi0WInwkeB1MulNjHDUPs5lCuFzLTRAz51FSC8Rrw3YGzygIQ8/kikD0KbjRIFKT2v\r\nx-amz-request-id: TM8T43BXY71Q3RMS\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Mon, 27 Nov 2023 23:01:27 GMT\r\netag: \"fab4fb0f25f65ac54b447819628985e7\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31556926\r\naccept-ranges: bytes\r\nage: 71390\r\nexpires: Sun, 13 Jun 2027 18:45:08 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":14088,"size_decoded":14859,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14088, version 773.256","md5":"fab4fb0f25f65ac54b447819628985e7","sha1":"d31a44185daf5c82da41e6e07d7b2f94003b1e68","sha256":"2eb91bf6e0083026b31c49121ad10540a39e13ac0f8295b67c1e2366d4897e11","sha512":"b5a8e9dc4f57b2ed5b96221c38c10250659c9de978fcd3958eb1e756cf3b37705436a68dbc212f129bb1b7f518a00d1a90de4af37d0e88daac9837f94f2a2d30","ssdeep":"384:l/tCtG807FlZ9TxDOytbUiB9wdKKjd8oHD7a:VMMFBxO+bNwbq","tlshash":"0e52d03b2dd70c21a6837adce631d9918f7d453a083550ab0905b681fbf7c0b94df611","first_seen":"2023-11-28T22:52:03Z","last_seen":"2026-06-14T22:40:54.620475Z","times_seen":97,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":4,"send":0,"wait":18,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/css/jasny-bootstrap.min.css","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:22.818Z","timestamp":1781355382818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /templates/echo/css/jasny-bootstrap.min.css HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:22 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 20 Apr 2016 21:46:42 GMT\r\nexpires: Sun, 12 Jul 2026 17:07:53 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 71308\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AJ72OyaudadRDmhaPuWZ%2FwGXaGg4N%2FbbvopF9acy8T7N1SjF%2Fg%2BNtLpyrMA8bPf%2FUf5zCgU13WW%2FAtcuA0c8eogyyl8TccfG54dA08I64uMuSofUuRGViaiVNwAcItw%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a0b14146b8524e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14003,"size_decoded":3408,"mime_type":"text/css","magic":"ASCII text, with very long lines (13803), with CRLF line terminators","md5":"56a224ccaaf1ad3df6ee7dbbc019aeac","sha1":"2ce1ef76b342a8fafda1e03a62b99be5340812bf","sha256":"777a9e5bb5d35fd671e5b252c67a0cf462baa8258db145ef6ea7dadf4de4b481","sha512":"5d4aabc83a5c849c66b818d21dc630da87df200b5fb0cee8f6209f7dfad5982136e2030f7d9fd9bc644a30b5689498aa40b42274ff8880a09f78d3209d64a30e","ssdeep":"96:4jVRNThJA9SfqYUV3KSIu97RC1dCVHvQroKSccwHF964Uv8zc2aHn51P/CtEDBW6:Q3uSfZDHu97RC1QVHvKDUv8zc2adB97P","tlshash":"ec52bdd17ca47a8a9e13820f90d5d6f0db1218519d982ab7f1b333895d0b78d82f9f2d","first_seen":"2023-04-07T18:47:56Z","last_seen":"2026-06-16T15:59:07.489792Z","times_seen":487,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.surf/templates/echo/css/echo.rtl.css","fqdn":"larozza.surf","domain":"larozza.surf","tld":"surf"},"ip":{"addr":"172.67.180.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:23.008Z","timestamp":1781355383008,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.surf","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 01:11:21 GMT","end":"Sat, 05 Sep 2026 02:09:42 GMT"},"fingerprint":{"sha1":"44:EC:B6:B5:47:4E:F0:6D:29:00:A6:43:28:AA:0F:0E:6B:3A:5C:6D","sha256":"AB:91:7A:30:57:FF:7F:A2:8B:E4:2B:CF:0D:A8:86:3B:08:03:48:09:4F:D4:B4:3B:1F:32:D3:03:50:CF:A4:D2"}}},"request":{"raw":"GET /templates/echo/css/echo.rtl.css HTTP/1.1\r\nHost: larozza.surf\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:23 GMT\r\nlocation: https://larozza.asia/templates/echo/css/echo.rtl.css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2BiIgvBi0BE7ws81EI0SPC05fS4YxrZVUG6rYleFToGhK%2BkN8bKajnqzkJ%2FhL%2FfysaRVQpRZ4%2BOVhhes%2B86lDZQ7C5IDCNBBQC6Le5nj2BEDdBYPaaV%2BIskcg%2FrEguM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b14147dcacb51b-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.surf","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.beer/templates/echo/css/bootstrap.min.rtl.css","fqdn":"larozza.beer","domain":"larozza.beer","tld":"beer"},"ip":{"addr":"172.67.208.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:23.088Z","timestamp":1781355383088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.beer","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 23:03:00 GMT","end":"Thu, 10 Sep 2026 00:01:24 GMT"},"fingerprint":{"sha1":"9D:0C:CB:2C:C5:07:6E:C1:0F:4C:A2:D5:BA:B1:45:21:38:92:F3:11","sha256":"21:88:78:BD:1E:F8:A4:F4:F8:9D:C1:DE:D4:0C:63:28:3B:6A:9B:F7:BF:BC:3E:BD:B9:99:08:81:E3:47:19:A4"}}},"request":{"raw":"GET /templates/echo/css/bootstrap.min.rtl.css HTTP/1.1\r\nHost: larozza.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:23 GMT\r\nlocation: https://larozza.casa/templates/echo/css/bootstrap.min.rtl.css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h3sF7d%2Fb%2BvYz1CUtp%2FamfHVmLI1WAak%2FnYbmf849N6Uutbr0da9CECt%2BIzWCPRxBkBQkb1%2BF0hFT3ARq6ZSbThmVdVYT%2FaqI8mA%2FSQKy2qYEyql77LH1plsVL4h0kFw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b141485aadb515-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.beer/moslslat4.php","fqdn":"larozza.beer","domain":"larozza.beer","tld":"beer"},"ip":{"addr":"172.67.208.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-13T12:56:17.189Z","timestamp":1781355377189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.beer","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 23:03:00 GMT","end":"Thu, 10 Sep 2026 00:01:24 GMT"},"fingerprint":{"sha1":"9D:0C:CB:2C:C5:07:6E:C1:0F:4C:A2:D5:BA:B1:45:21:38:92:F3:11","sha256":"21:88:78:BD:1E:F8:A4:F4:F8:9D:C1:DE:D4:0C:63:28:3B:6A:9B:F7:BF:BC:3E:BD:B9:99:08:81:E3:47:19:A4"}}},"request":{"raw":"GET /moslslat4.php HTTP/1.1\r\nHost: larozza.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:17 GMT\r\nlocation: https://larozza.casa/moslslat4.php\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2BAeF9jzdbIoHHQUxUloW%2FtGba5n1BTVGUbeExMBPccbdqaVEvUOPu%2BH%2FwpfmGq9BvPVneL8wDHrZysqSrBwMHwSq%2FhNVwkPmspQnmAoUXcHwyBiviUimwgJPNODBqY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b14123ad8cb4fa-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":22,"connect":12,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kit-pro.fontawesome.com/releases/v6.5.0/webfonts/pro-fa-thin-100-9.woff2","fqdn":"kit-pro.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:22.801Z","timestamp":1781355382801,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 21:57:31 GMT","end":"Wed, 15 Jul 2026 22:57:28 GMT"},"fingerprint":{"sha1":"AF:65:F8:6C:70:82:CB:7C:3C:AD:4D:54:65:50:3B:13:F0:3A:0B:2E","sha256":"2A:78:5B:B0:CC:FA:C9:8B:51:86:B1:FA:62:ED:C7:B8:BC:18:15:3D:91:FC:87:53:9E:E0:AF:8C:08:D1:17:2F"}}},"request":{"raw":"GET /releases/v6.5.0/webfonts/pro-fa-thin-100-9.woff2 HTTP/1.1\r\nHost: kit-pro.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nOrigin: https://larozza.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 13 Jun 2026 12:56:22 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 29480\r\ncf-ray: a0b14146bdf35684-OSL\r\nx-amz-id-2: 2uvvXby1hQ8NiNsJp5J1ChRci+OTP+W1wiQiuOwcgK2zxv0BUjO0Dc2F+VscTpxokEuluUfvXtBPZiMWr93ywE13ear2PANS\r\nx-amz-request-id: TM8WAPF618ZFT0P5\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Mon, 27 Nov 2023 23:01:28 GMT\r\netag: \"97156d65921ebbf8a5669116701f2772\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31556926\r\naccept-ranges: bytes\r\nage: 71390\r\nexpires: Sun, 13 Jun 2027 18:45:08 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":29480,"size_decoded":30251,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29480, version 773.256","md5":"97156d65921ebbf8a5669116701f2772","sha1":"689625560985ec758f60078eaf8d2071b8c669c3","sha256":"92d3b055aee90421b6a187f2f6b038d9ed15691cfe2937aac51a5ec64514f3fd","sha512":"157e99c77441731c88a001668757a95b36cedb5c1ced15aa8586154f02e8397d09897a071f9e2ea26a181cef97f4316a2a3979ac4322d09d8a8aecd45c836873","ssdeep":"768:Ka8nkSxP+8M5uF5tsuU4bShDbjCHPnlx9AQbwiSYnPOUDI:KfnM8k2q3p8lx9XbOiPZDI","tlshash":"41d2e11808496218af85756eafd60c2cb8e1bc3bf06905e142341b6fa221cf8d7ddc9f","first_seen":"2026-02-15T10:58:41.667344Z","last_seen":"2026-06-14T22:40:54.679105Z","times_seen":71,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.yachts/fonts/BoutrosMBCDinkum-Medium.ttf","fqdn":"larozza.yachts","domain":"larozza.yachts","tld":"yachts"},"ip":{"addr":"104.21.60.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:22.802Z","timestamp":1781355382802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.yachts","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 16:43:14 GMT","end":"Wed, 02 Sep 2026 17:40:52 GMT"},"fingerprint":{"sha1":"D3:94:4B:AC:C1:BE:64:31:DA:B9:E5:4B:53:9C:72:04:4C:F1:23:E9","sha256":"1D:FE:10:7C:38:4B:FF:2A:10:EA:18:79:FC:F7:96:13:E1:5E:7E:49:CB:9D:39:FA:AF:A5:D3:8E:8C:EE:87:C4"}}},"request":{"raw":"GET /fonts/BoutrosMBCDinkum-Medium.ttf HTTP/1.1\r\nHost: larozza.yachts\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nOrigin: https://larozza.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:22 GMT\r\nlocation: https://larozza.surf/fonts/BoutrosMBCDinkum-Medium.ttf\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o92HMkSYSM0tyH679CPN9dfxpMtOd5J2Q2vpyj5XV9t3eCvS8%2BgzUum%2BbBGcZVNBeh6cwF06H6qTHlihpuhCtrbmtTP1MXcw80umaH8kXPmMjuXLrszjHYOuy7NW%2F6YOlA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b14146beab5684-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":1,"connect":27,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.yachts","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.yachts/templates/echo/css/bootstrap.min.rtl.css","fqdn":"larozza.yachts","domain":"larozza.yachts","tld":"yachts"},"ip":{"addr":"104.21.60.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:22.810Z","timestamp":1781355382810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.yachts","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 16:43:14 GMT","end":"Wed, 02 Sep 2026 17:40:52 GMT"},"fingerprint":{"sha1":"D3:94:4B:AC:C1:BE:64:31:DA:B9:E5:4B:53:9C:72:04:4C:F1:23:E9","sha256":"1D:FE:10:7C:38:4B:FF:2A:10:EA:18:79:FC:F7:96:13:E1:5E:7E:49:CB:9D:39:FA:AF:A5:D3:8E:8C:EE:87:C4"}}},"request":{"raw":"GET /templates/echo/css/bootstrap.min.rtl.css HTTP/1.1\r\nHost: larozza.yachts\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:22 GMT\r\nlocation: https://larozza.surf/templates/echo/css/bootstrap.min.rtl.css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FMDs3lcqX0qx7w78%2F8WCRgsWtSq3YD%2FXHfgQdMTE%2BjI3zJDNPh3Mt%2BZwbZqHscv2MKtomjCMHxXBiLpPCiUhpb2lTgSVH2btjE6bJg1R4xKnDqb6SoEv283f2%2BTbgbc2sw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b14146cfbc0883-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.yachts","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.yachts/templates/echo/css/jasny-bootstrap.min.css","fqdn":"larozza.yachts","domain":"larozza.yachts","tld":"yachts"},"ip":{"addr":"104.21.60.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:22.811Z","timestamp":1781355382811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.yachts","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 16:43:14 GMT","end":"Wed, 02 Sep 2026 17:40:52 GMT"},"fingerprint":{"sha1":"D3:94:4B:AC:C1:BE:64:31:DA:B9:E5:4B:53:9C:72:04:4C:F1:23:E9","sha256":"1D:FE:10:7C:38:4B:FF:2A:10:EA:18:79:FC:F7:96:13:E1:5E:7E:49:CB:9D:39:FA:AF:A5:D3:8E:8C:EE:87:C4"}}},"request":{"raw":"GET /templates/echo/css/jasny-bootstrap.min.css HTTP/1.1\r\nHost: larozza.yachts\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:22 GMT\r\nlocation: https://larozza.surf/templates/echo/css/jasny-bootstrap.min.css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K0ngYDOgckn2skQ5WsrGJzzt0DGEegJQM2Ds5X1l61hiNsRl1P%2BhTx2l1MvcksFE0qKrhXZGHJJjqFOGZ90NzfbxFBv1E4Q92SkUI1czV0xaTFxE4t26ZJQODeAGK%2BWrFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b14146cfbb0883-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.yachts","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:22.827Z","timestamp":1781355382827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Mon, 15 Jun 2026 12:56:22 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y9%2BB0gOyNRFJQULTxi2I5dujgX7kXEnbbEOCCFdF1p4cckVqDnl5lieZ6p8LB1xUrbjDYAD3lwOlnzjrnVZWUo2UYoyF77Ds0dgQddcM20llZsm%2F%2BQTpadiUDHlqGdM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sat, 13 Jun 2026 12:56:22 GMT\r\nserver: cloudflare\r\ncf-ray: a0b14146b8584e4c-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":4788,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-16T17:48:17.927921Z","times_seen":114593,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.beer/templates/echo/css/echo.css","fqdn":"larozza.beer","domain":"larozza.beer","tld":"beer"},"ip":{"addr":"172.67.208.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:23.092Z","timestamp":1781355383092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.beer","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 23:03:00 GMT","end":"Thu, 10 Sep 2026 00:01:24 GMT"},"fingerprint":{"sha1":"9D:0C:CB:2C:C5:07:6E:C1:0F:4C:A2:D5:BA:B1:45:21:38:92:F3:11","sha256":"21:88:78:BD:1E:F8:A4:F4:F8:9D:C1:DE:D4:0C:63:28:3B:6A:9B:F7:BF:BC:3E:BD:B9:99:08:81:E3:47:19:A4"}}},"request":{"raw":"GET /templates/echo/css/echo.css HTTP/1.1\r\nHost: larozza.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:23 GMT\r\nlocation: https://larozza.casa/templates/echo/css/echo.css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wUaIcJjKkLU6nXYK0roOK5ijQgrpjUe9j9%2BhmiB127q%2Bs2CI8sl9sfqFXP3kmbQ7%2BlH5qlgOWzRkPLY3NUNlUrkPYTj0jxB31Y9wqmgxcmua3ouxof3aJRu%2FHuvHGf8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b141485aaeb515-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/css/bootstrap.min.rtl.css","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:23.113Z","timestamp":1781355383113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /templates/echo/css/bootstrap.min.rtl.css HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:23 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 14 Apr 2016 20:16:50 GMT\r\nexpires: Sun, 12 Jul 2026 17:07:53 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 71309\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NpbbrGsbIxIIR6psFWzI9nD%2BPKxoMeZzdgTr6t%2FFN3emNMMVlzLL5HsqnW6ZOUmgfN21Hsfj%2Fbw71H99tIhH7bcs0oNSjtkuyIgLh5fAylTmK0RQjF0FCpw6JjMgWlk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i=?0\r\ncf-ray: a0b14148789f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34818,"size_decoded":5644,"mime_type":"text/css","magic":"ASCII text, with very long lines (540), with CRLF line terminators","md5":"50650996f24f8595aca871946cf4bfc7","sha1":"7fa88ac85d0f97dcd3c80c62a62dca78aedf73f2","sha256":"16725d7575da85e45223fc328ae010003775db250fda7bfdec9dc1e1676437a4","sha512":"5e1703ad4922c54176c14ccdf7a25de5c6a9c995dc969e56a77d1aa322513cb1541576b94f9eb73f6cd49ad063c85025a1d04f908a4215330eb5de6b65fb5933","ssdeep":"384:3+tv2XFJh7Laaijc2+vnRLWC+1CxOVK2Mho:3Q27DijczBWC+1CxOVKRo","tlshash":"c1f2a0c88e311944b171c7bfb7a28c46ab1530a7a67bd8a3f6e17d52fb295050423dcb","first_seen":"2023-04-07T18:47:56Z","last_seen":"2026-06-14T22:40:54.646897Z","times_seen":350,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/css/echo.rtl.css","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:22.824Z","timestamp":1781355382824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /templates/echo/css/echo.rtl.css HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:22 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 23 Nov 2016 05:37:34 GMT\r\nexpires: Mon, 13 Jul 2026 05:05:45 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 28237\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ua7WhDQe6RUr%2BoXVRg82UGYIfYcbpNwJaZ9UxiEmGxRl4Qn4LFoLBLAg5R5urtaZiPiS1rolow8D3a0QwuNSg1BLXBc62ejhO1OvJPymxSuz%2F5siOHoEKOtSARn2Kkk%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a0b14146b8564e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":21636,"size_decoded":4788,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"3457b817eb3a042e536a7989702c60e1","sha1":"23ed4644ea28fb93972abf7fc419883d47285f5f","sha256":"b55cf4a22a42ae393a96c72ddee5c917363b6e06cd1309cb34490843fa2dd9f9","sha512":"31f3c3bdf4d07647b81cc0073b003b5f92b5821506d077d749d968d87ab6e9f4df54a79caacf98423f424260fec4fe037cd839cc475b2ae8b2917cea249d0adc","ssdeep":"192:YUY0/g8XEHjhgRUi4Umjqq6+ndCng3TZoVN+nPIqAe5W:5Kibq6+ngyT6+dJW","tlshash":"23a20352fe5160872432cb78f262ccd3ef1a00d3c5065bb9bf59d1a49b6918c272df9a","first_seen":"2024-01-02T23:52:33Z","last_seen":"2026-06-14T22:40:54.629783Z","times_seen":89,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.asia/templates/echo/css/jasny-bootstrap.min.css","fqdn":"larozza.asia","domain":"larozza.asia","tld":"asia"},"ip":{"addr":"172.67.196.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:23.055Z","timestamp":1781355383055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.asia","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:01:11 GMT","end":"Sun, 06 Sep 2026 16:59:31 GMT"},"fingerprint":{"sha1":"7F:15:78:6F:D0:BC:13:B0:8C:63:98:3B:5C:EC:44:8E:E4:3B:50:00","sha256":"FB:BD:1B:8D:30:5C:14:A8:5E:7C:E2:25:40:8B:74:65:C5:E3:8F:3B:C4:E7:9D:14:2E:50:27:96:97:69:18:C5"}}},"request":{"raw":"GET /templates/echo/css/jasny-bootstrap.min.css HTTP/1.1\r\nHost: larozza.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:23 GMT\r\nlocation: https://larozza.beer/templates/echo/css/jasny-bootstrap.min.css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y1rn7%2BiYMstG82Yv5jUPoH51BgE6JaZJThWTG%2FRhfzw9IPHbWWnLLLmZDMbm1QPXboiZ3odaXPYtVhX%2F1s210O9ZcG8TmPSxEGuRLoOt9qseT%2BDmk91lL3k%2FdPeXnFM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b141482a42b4f9-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.beer/templates/echo/css/echo.rtl.css","fqdn":"larozza.beer","domain":"larozza.beer","tld":"beer"},"ip":{"addr":"172.67.208.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:23.090Z","timestamp":1781355383090,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.beer","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 23:03:00 GMT","end":"Thu, 10 Sep 2026 00:01:24 GMT"},"fingerprint":{"sha1":"9D:0C:CB:2C:C5:07:6E:C1:0F:4C:A2:D5:BA:B1:45:21:38:92:F3:11","sha256":"21:88:78:BD:1E:F8:A4:F4:F8:9D:C1:DE:D4:0C:63:28:3B:6A:9B:F7:BF:BC:3E:BD:B9:99:08:81:E3:47:19:A4"}}},"request":{"raw":"GET /templates/echo/css/echo.rtl.css HTTP/1.1\r\nHost: larozza.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:23 GMT\r\nlocation: https://larozza.casa/templates/echo/css/echo.rtl.css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ImA1C8%2F5xGCoxBfAR%2FRDfNUbWYl%2FVeTu8tcoG6IVsfxCDwix%2BpP8bbwvc1T3m1H821p8msQsiquhXV%2FH4JAHjAlhCyiwhmQm9838ZaPsBICkkj8GZEJqrYPhGMKXCv4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b141485aaab515-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/css/animate.min.css","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:23.110Z","timestamp":1781355383110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /templates/echo/css/animate.min.css HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:23 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 17 May 2016 22:36:06 GMT\r\nexpires: Sun, 12 Jul 2026 17:07:53 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 71309\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QLKECyjybYI4EU0ev9um2J3O2ZHELo2uA92WQP%2B%2B8ZfmbJSa3P0oWHGpzBkkZGQ9Gwy6gsTmrrXJnxGfZHuJhHNQml%2B97cOGE5YnFhUIbwxmW6hhq3YCiqL6Aq4lVok%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a0b14148789d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57393,"size_decoded":5127,"mime_type":"text/css","magic":"ASCII text, with very long lines (319)","md5":"deda6b35f61fb73cd18ea6b68a4818de","sha1":"7f4565fb973606c0d145f8a2b14ff5c38b6901d1","sha256":"7d30926aabfb178597a84b624fdf7802ad3e2599f3501ae4c383d9a0d143494e","sha512":"9e74c62ed7e847b043c74c5680c5be900b181b11cbd173bea1a8402cf175361b2a37d7892f53dc077b39eeec8aeb55f7d6ec736890f004fadd883a5b4934e3cc","ssdeep":"768:lkZFpVIBIEwQ1oAhkIDz3gy65VraeX0UTGsXs+:lkZUwQ1oAhkIDz3gy65VraeX0UTd","tlshash":"fa4346ae5891238a91674fa283dd5e64473dc67314621cee33816c4bcf87b9e33da247","first_seen":"2023-05-01T20:12:27Z","last_seen":"2026-06-14T22:40:54.658968Z","times_seen":217,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/css/custom.css","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:23.120Z","timestamp":1781355383120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /templates/echo/css/custom.css HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:23 GMT\r\ncontent-type: text/css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Sat, 13 Jul 2024 23:16:54 GMT\r\nexpires: Sun, 12 Jul 2026 17:07:53 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 71309\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ya6arEONmiA35lWDV%2BziW%2BYK%2Boz2R4L47KFuAwBalzxUUfw4ia5lVhP6ht1%2FNWHGbqnhj7raqC2Dbek0UISqpAeNMREGRSxfEJR2yfH3OMHUiPcaRRzhdjqUADEm%2BpA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i=?0\r\ncontent-length: 44\r\ncf-ray: a0b1414888a34e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44,"size_decoded":941,"mime_type":"text/css","magic":"ASCII text","md5":"4dbf57b4c7793d05f72a0e0034440d8e","sha1":"d1386517b9f500e962fba5e15dffb65a9dcfb095","sha256":"790236cdff70cdb2168b8416a8d94608cc947ebc94b801a0061f18f351c4ae3b","sha512":"b9447b087cc8311ff7e5a85e6b801f646fe25a1e984b241f4e7d803b8109273f6ff6a67a0db888d280af43b72d49e7f521994ffa9c24218b72d045967aad833d","ssdeep":"","tlshash":"b29002d16850046440660e30892d404d451682609981010c7519840884828609b472d0","first_seen":"2023-05-17T19:06:56Z","last_seen":"2026-06-14T22:40:54.631971Z","times_seen":184,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/favicons/favicon.ico","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.104Z","timestamp":1781355386104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /favicons/favicon.ico HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: image/x-icon\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 22 Dec 2024 15:37:01 GMT\r\nexpires: Tue, 11 Aug 2026 17:07:54 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 71311\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3o6TY6YaPrn9%2BRODnQDdJBbloWpixVVSE6PDvzLou1srUY%2FOG18BdCXpg87s7FNbvuHrFVxgeliA513lPf3eRFcB5OeiGP3q6eEn%2B0sJqy1yQe5Y87f%2BfWXPQuPaoOQ%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a0b1415b2b074e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":15406,"size_decoded":3998,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"bb9a0663eda1fdace0fa1678790802ff","sha1":"3b79d3e19b5cff86ca56c1d6e2375a1dc0eb7776","sha256":"2150d3f54f7d401a651efe5e0df55bbd0a7b4e612e595dfff11175a56e96e0b3","sha512":"87ccb0e6182c4ab112ef89c9378453b0b1c2c9805f25e742b42a5369053bc7142160df7db61717c257aa24bdafaf0a0ee26258fbf73ba1a70af72d6fdbfe86f3","ssdeep":"384:PsVkTMwucc4zpS7iV6xELLygDLXEL6iULJrLw+LLkLZLzYzVmtLjL7LMLiLSLZL7:kVqbucc4zRWKrPMCg22","tlshash":"57623673dead5addcc3c4e30ca75236f2ffd9eeb2060e651884e36602230e1a551c869","first_seen":"2024-08-20T11:42:05.259811Z","last_seen":"2026-06-14T22:40:54.645725Z","times_seen":104,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/js/swfobject.js","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.151Z","timestamp":1781355386151,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /js/swfobject.js HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 09 Mar 2022 22:49:10 GMT\r\nexpires: Sun, 12 Jul 2026 17:07:54 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 71311\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q9ptkTDZFtN9AoaqUk3vA9Gdno8OGgtrOvQ4wJNXkOyfbWuIhZ9BgCMAEvECaDsWK16x03uN%2FIcMBUXNu3sqQqJ%2F%2FovkYx9YYacL729cipFhp1poUL3vELKRQOf03cY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a0b1415b7b1f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10220,"size_decoded":4850,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10071)","md5":"892a543f3abb54e8ec1ada55be3b0649","sha1":"5847ed101f55d51c53538a7078971e7de8fb6762","sha256":"8677971b119ccdb82af697ff0e08f218490d15116f221d44301f1cc8797e67d4","sha512":"de1984908768117cc0f2cdfaab103352ea53a343f4b46c9f02f2a99c0458739cce5938aec2762ec750d3f09b74311a66dafab51657ac2229b9f67b796f3c6953","ssdeep":"192:dEBsWGAZvwGxP1hNWwI9V0YOOsFbkRHeZmyIVyX8c727LMoOyXoy7NgvZ4xsnyQ/:dAsWGAZvwGxP1hNWwI9V0YO1NkRHe4yV","tlshash":"5d22a5aab6483336abc521e144bf894671b0f532558cc1b0c572e4b02e7cca9a5b7f7d","first_seen":"2023-03-07T01:18:41Z","last_seen":"2026-06-16T05:55:33.090566Z","times_seen":2323,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netdna.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css","fqdn":"netdna.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:22.790Z","timestamp":1781355382790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 06:14:57 GMT","end":"Sat, 01 Aug 2026 07:14:54 GMT"},"fingerprint":{"sha1":"87:39:8B:D4:F5:C1:CE:D2:17:B0:DA:A6:93:21:38:E7:CA:4B:7E:2A","sha256":"22:95:0A:F1:20:E2:D1:60:17:3F:96:BF:26:3A:90:BA:38:84:38:04:30:52:7D:AE:EA:74:8D:58:1E:F7:C7:0B"}}},"request":{"raw":"GET /bootstrap/3.3.6/css/bootstrap.min.css HTTP/1.1\r\nHost: netdna.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 13 Jun 2026 12:56:22 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=0,i=?0\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"2f624089c65f12185e79925bc5a7fc42\"\r\nlast-modified: Mon, 25 Jan 2021 22:03:59 GMT\r\ncdn-cachedat: 10/12/2024 20:34:21\r\ncdn-proxyver: 1.04\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1048\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: af09f1b3be27f0be3ed1c7bad6227529\r\ncdn-cache: HIT\r\nage: 4787890\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a0b141469fe923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121260,"size_decoded":21230,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65371)","md5":"2f624089c65f12185e79925bc5a7fc42","sha1":"8eb176c70b9cfa6871b76d6dc98fb526e7e9b3de","sha256":"eece6e0c65b7007ab0eb1b4998d36dafe381449525824349128efc3f86f4c91c","sha512":"9cda3ec821c4ca7d2c98cc52b309dffce9d7ebf2b026e65394d6418dab8a8532b473ecd3faae49382c7450585743aac947d8e0e84b3c80fb83dae65c6032ea4b","ssdeep":"768:ly3Gxw/jc/QWlJxtQ8IuiHlqLmzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FS:Xw/o1BIuiHlqLmN8lDbNmPbh","tlshash":"4dc3c7a0f21031ea7333c55a75d0ed872219a153e56a4fb7f22f25d88f845ca1673f1a","first_seen":"2023-04-05T03:20:05Z","last_seen":"2026-06-16T16:49:25.38879Z","times_seen":17906,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":1,"connect":18,"send":0,"wait":7,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kit-pro.fontawesome.com/releases/v6.5.0/webfonts/pro-fa-thin-100-15.woff2","fqdn":"kit-pro.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:22.798Z","timestamp":1781355382798,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 21:57:31 GMT","end":"Wed, 15 Jul 2026 22:57:28 GMT"},"fingerprint":{"sha1":"AF:65:F8:6C:70:82:CB:7C:3C:AD:4D:54:65:50:3B:13:F0:3A:0B:2E","sha256":"2A:78:5B:B0:CC:FA:C9:8B:51:86:B1:FA:62:ED:C7:B8:BC:18:15:3D:91:FC:87:53:9E:E0:AF:8C:08:D1:17:2F"}}},"request":{"raw":"GET /releases/v6.5.0/webfonts/pro-fa-thin-100-15.woff2 HTTP/1.1\r\nHost: kit-pro.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nOrigin: https://larozza.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 13 Jun 2026 12:56:22 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 18276\r\ncf-ray: a0b14146bdfa5684-OSL\r\nx-amz-id-2: PVjRNabquNU+Z7+7n+P/Yoisb2ZhECf+UgMURzT7wY6TqpKjxoBqGW/7CUXv4gvn5ZVxu5zHcRhDRYm7bS4IxIpnMoKXMuNU\r\nx-amz-request-id: TM8KDNVXCRH339KP\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Mon, 27 Nov 2023 23:01:28 GMT\r\netag: \"1cdaea742a0a5cb7fd299c3a8a3818c0\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31556926\r\naccept-ranges: bytes\r\nage: 71390\r\nexpires: Sun, 13 Jun 2027 18:45:08 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":18276,"size_decoded":19047,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18276, version 773.256","md5":"1cdaea742a0a5cb7fd299c3a8a3818c0","sha1":"566c4854e5493f34395b4a7590e9150f0aac998c","sha256":"d7ca38359961f53a93975de9f8ded069f955e6c0bb493acb8dbebf1b2eb31f37","sha512":"713c5bb0ad68723909a0333156e1f76d60967de09058ba9bb0c8e5204073e795217e6ddfa217a77ec513df6da793a60bf35c982fcf6c571d3b43b141306946e1","ssdeep":"384:pRN8jmOJK/4bjruOkoOY4sfXRNDExPXLMS0:p8lJq4bjKDoOY4sJNiv4S0","tlshash":"1f82d0c05064cc60ec13fcf6c5d3ee45c9a8fcd9b6674f6ba40529a452af866cc2b89c","first_seen":"2026-02-15T10:58:41.659134Z","last_seen":"2026-06-14T22:40:54.648516Z","times_seen":71,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":4,"send":0,"wait":15,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.surf/templates/echo/css/echo.css","fqdn":"larozza.surf","domain":"larozza.surf","tld":"surf"},"ip":{"addr":"172.67.180.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:23.002Z","timestamp":1781355383002,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.surf","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 01:11:21 GMT","end":"Sat, 05 Sep 2026 02:09:42 GMT"},"fingerprint":{"sha1":"44:EC:B6:B5:47:4E:F0:6D:29:00:A6:43:28:AA:0F:0E:6B:3A:5C:6D","sha256":"AB:91:7A:30:57:FF:7F:A2:8B:E4:2B:CF:0D:A8:86:3B:08:03:48:09:4F:D4:B4:3B:1F:32:D3:03:50:CF:A4:D2"}}},"request":{"raw":"GET /templates/echo/css/echo.css HTTP/1.1\r\nHost: larozza.surf\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:23 GMT\r\nlocation: https://larozza.asia/templates/echo/css/echo.css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ESVA88uervmg%2BZsU2OZrQivMP7J8amkvnmgxU7z0HD%2FWAzRQ6LrzBuoZNVP5kZSBpb01tK6xr3JKPBE5%2BlwiIcGg3ZBKPn9jEoXNjm8juUB183oZ%2BKj5Cs0m9O6DFNQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b14147dcadb51b-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":2,"dns":2,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.surf","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.asia/templates/echo/css/bootstrap.min.rtl.css","fqdn":"larozza.asia","domain":"larozza.asia","tld":"asia"},"ip":{"addr":"172.67.196.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:23.048Z","timestamp":1781355383048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.asia","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:01:11 GMT","end":"Sun, 06 Sep 2026 16:59:31 GMT"},"fingerprint":{"sha1":"7F:15:78:6F:D0:BC:13:B0:8C:63:98:3B:5C:EC:44:8E:E4:3B:50:00","sha256":"FB:BD:1B:8D:30:5C:14:A8:5E:7C:E2:25:40:8B:74:65:C5:E3:8F:3B:C4:E7:9D:14:2E:50:27:96:97:69:18:C5"}}},"request":{"raw":"GET /templates/echo/css/bootstrap.min.rtl.css HTTP/1.1\r\nHost: larozza.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:23 GMT\r\nlocation: https://larozza.beer/templates/echo/css/bootstrap.min.rtl.css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hJONlWwSwtApHRRMtLMcRUIRPDB4M0p2AScPeupkNB6rUFNubPEoGUYeGPah%2Bp2mIyoKLteq%2FAH11tKn6irL6ePspFpKnuOn7qNRSYYGFaIOfmeV%2Batd2c1bUHlV10g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b141482a40b4f9-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/img/favicon-16x16.png","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:24.341Z","timestamp":1781355384341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /templates/echo/img/favicon-16x16.png HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:24 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LWzHtwAc7h6aCvgOEKyGqcA%2FMuDqLDOMpg9b%2FRfj9CGB72FpFNcIecxevJOBM66Q7H16glittjWDMp7FMchWbApxNCwASnqOVov6nZ8th%2BJZ0e5SsXBEfiXVn72bSec%3D\"}]}\r\nlast-modified: Sun, 22 Dec 2024 15:37:01 GMT\r\nexpires: Tue, 11 Aug 2026 17:08:08 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 71295\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-length: 519\r\ncf-ray: a0b14150299c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":519,"size_decoded":1412,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"fea3298b743c02acb1edc2102b272ebd","sha1":"29a48027dd4628bdbbb7d554582a4eeb8cbc3b63","sha256":"c06bfb7baaecb657bd85df3db0e814ad4a94fbfc841dc77298f59d554eaced72","sha512":"306b90d54ec57db74f53f81f022146e3dc37374b20e88d8f6dead59b745d400b31991757e13b216300e14dee2acf820a3b03d27b39b062c5fe4b36c6aa0435d5","ssdeep":"","tlshash":"f3f020dab3e31ea8eb985131b7264c33602329480b53700c4a0ef2220622e00ad91220","first_seen":"2023-12-05T16:24:29Z","last_seen":"2026-06-14T22:40:54.640066Z","times_seen":85,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/img/icon-play-32.png","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.100Z","timestamp":1781355386100,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /templates/echo/img/icon-play-32.png HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/templates/echo/css/echo.css\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: image/png\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Thu, 10 Mar 2022 05:52:42 GMT\r\nexpires: Tue, 11 Aug 2026 17:07:54 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 71311\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xPobCjL9GasrA3B2aN4rII5f8ebjkiyqxJuz%2Bi32z%2BMRJltTCZ1gADeKFQsCXzBM2gJq3gazK8UAuFvFsae2eXrUStDne6LLbaGzBZXCriAT96UQWsjhEE0oqnashvk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncontent-length: 620\r\ncf-ray: a0b1415b2b054e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":620,"size_decoded":1510,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"5fe87e7bad23bcbca5e96a02b70a4d6a","sha1":"17330b4d8db98b393a0a6a8650d58647449e54c4","sha256":"c6efc7dc2b727933693bf823252963497b5be185b415b901e58bcb0497ce9bf0","sha512":"a88e8492fdf20f6f20e588dbc75711002d6d3c5d170b8ade82a8556bc9870316ab16138e5b9c8a6c93b40cc9e367abe687d7a350a413ee6e23ecce9b21e365d2","ssdeep":"","tlshash":"04f0b7cba0c03bfccc2e556b20638c0cedea49a52e776cd8583411f4047a68c330025b","first_seen":"2023-12-05T16:24:28Z","last_seen":"2026-06-14T22:40:54.65442Z","times_seen":118,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-KYDXRC37E4","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.117Z","timestamp":1781355386117,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:26 GMT","end":"Mon, 17 Aug 2026 08:36:25 GMT"},"fingerprint":{"sha1":"B1:69:2D:8A:87:48:5C:47:05:41:5B:52:3B:0E:2C:E9:BD:CC:03:75","sha256":"91:1E:26:69:78:6C:F7:F4:05:E8:B1:07:F4:04:FB:66:B9:20:6A:EB:43:9D:02:70:C8:AF:60:8C:BB:58:30:4F"}}},"request":{"raw":"GET /gtag/js?id=G-KYDXRC37E4 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\nexpires: Sat, 13 Jun 2026 12:56:26 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 163768\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":483303,"size_decoded":164372,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"facb96cadd092bb32ee88bc0cea1c741","sha1":"5b7280eeb3d17fb45724f0446b271a5e0095c034","sha256":"dfb438ea1e4ae74f0f2b9d118063b6143463bdc1709ba1e25e7b84785e1d0cd4","sha512":"a90945a26ef590225ecf2f8ad1e2ec2e38571a8bf7707a87b3f5dba9a72c3a88564037a33a24d137925676699e10edb604da831a42f8ed119e19ab728e565d2e","ssdeep":"6144:xUCbRknTI8s5XtjLEEQT1TpqBEzVTI1Ce8G3h7Y1MD9f:a5nTsEZXysu","tlshash":"01a4e9ceb3d674225396f478903f018ba57b29e2b448c899f189cce42e7459a4277f7c","first_seen":"2026-06-13T10:33:07.020089Z","last_seen":"2026-06-13T12:56:59.40407Z","times_seen":2,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":43,"receive":49,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/uploads/thumbs/744f8e3a6-1.jpg","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.501Z","timestamp":1781355386501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /uploads/thumbs/744f8e3a6-1.jpg HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: image/jpeg\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Fri, 12 Jun 2026 05:58:47 GMT\r\nexpires: Tue, 11 Aug 2026 17:08:32 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 71274\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CcUrkdhaAxuF6tjS5LN13qRE5xdS2OTuoSF%2FcsAcWRHHZqWKF06IhowKundzyrcsdlROkYC39t8crejo1uDu%2Fr15%2FillEoXUQ%2Fca9sjtQ5xbzrZrLcCXKA8U%2FUhV5iY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 30659\r\ncf-ray: a0b1415dab754e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30659,"size_decoded":31558,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 800x450, components 3","md5":"a1b2f06419613353450271c1656435a6","sha1":"263f6710defaf10d7d2e7e6dfdd70b420e1b7aaf","sha256":"bf4fb07c8d1041243f8116333323fa5b024f82fd84dfdf6093ca4a6fd906c02d","sha512":"3e249877343a973c43110c41cae0b4f3713c8247889f5e424a15cbc9f1dff31a1d1358a21dad61b8a09a86c88ad403d44194f55b33f202eb04f74eb9837781d7","ssdeep":"768:GLtOSPA1tAMB4zNwoAwgS3K+SUDa7kcXu5:4tbTFzNwVS6pUDa71u5","tlshash":"61d249179d099e53e125c7e9ff476e5c27167a1cf887b2fa04250edb2f11a240c8a17e","first_seen":"2026-06-13T12:56:59.405732Z","last_seen":"2026-06-13T12:56:59.405732Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozaa.baby/moslslat4.php","fqdn":"larozaa.baby","domain":"larozaa.baby","tld":"baby"},"ip":{"addr":"172.67.222.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-13T12:56:16.760Z","timestamp":1781355376760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozaa.baby","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 12:20:05 GMT","end":"Mon, 24 Aug 2026 12:20:04 GMT"},"fingerprint":{"sha1":"DC:12:91:71:FC:D5:E6:5C:9F:92:04:DE:7C:9D:88:F7:93:D3:74:5B","sha256":"C1:B0:6F:7A:AD:42:F3:24:3A:CA:DB:67:54:5C:5E:CB:D5:42:5F:1E:8C:DA:97:4B:D1:6F:4F:6F:DD:55:41:51"}}},"request":{"raw":"GET /moslslat4.php HTTP/1.1\r\nHost: larozaa.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:16 GMT\r\nlocation: https://larozza.lat/moslslat4.php\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6qwZaU8cMPmU1ArvCkBqA1Ys5MmZRSdZNfBJr4I%2F2DEmVLXD8Tz2WOWI5Q5uieuKEhMkvcwYRQ7DiLb%2Fb2z9YK4lnjKnS%2BldvFYJzf2Kj0eLTsc8i5klPFhBUPEs%2BwQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b141214de78deb-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":71,"connect":15,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozaa.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozaa.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/css/custom.css","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:22.826Z","timestamp":1781355382826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /templates/echo/css/custom.css HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:22 GMT\r\ncontent-type: text/css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Sat, 13 Jul 2024 23:16:54 GMT\r\nexpires: Sun, 12 Jul 2026 17:07:53 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 71308\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SyXhbWG2zWtQ5FqJhOoDnH%2BrjRTuCKnpMc8UhLXubG9oJMSccDJfgAvAQrnvXNC1IY4YTI1un0yK9h86NyrH40%2FqGwwjZO8eQj9ckoYIftrYbQXDUXaIMOix%2B9Md5wI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-length: 44\r\ncf-ray: a0b14146b8574e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44,"size_decoded":937,"mime_type":"text/css","magic":"ASCII text","md5":"4dbf57b4c7793d05f72a0e0034440d8e","sha1":"d1386517b9f500e962fba5e15dffb65a9dcfb095","sha256":"790236cdff70cdb2168b8416a8d94608cc947ebc94b801a0061f18f351c4ae3b","sha512":"b9447b087cc8311ff7e5a85e6b801f646fe25a1e984b241f4e7d803b8109273f6ff6a67a0db888d280af43b72d49e7f521994ffa9c24218b72d045967aad833d","ssdeep":"","tlshash":"b29002d16850046440660e30892d404d451682609981010c7519840884828609b472d0","first_seen":"2023-05-17T19:06:56Z","last_seen":"2026-06-14T22:40:54.631971Z","times_seen":184,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/js/bootstrap-notify.min.js","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.137Z","timestamp":1781355386137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /js/bootstrap-notify.min.js HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 09 Mar 2022 22:49:10 GMT\r\nexpires: Sun, 12 Jul 2026 17:07:54 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 71311\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RetOPOQRh%2BvXmnUzZ1y1yaQHS6KmHCEVb%2FmYsWfh%2FsoD20Bt5WzoeMprIHWOm6HwsFeOaHOGwkjWKUdwikxXRPvZKT7kpF%2F8MV7csyCRT3ET7JtihmR14oVOu%2BSk0RI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a0b1415b5b154e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8216,"size_decoded":3620,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (595)","md5":"5ba070af9d1b1a2782851940de30879f","sha1":"d33390fc88bf68bd23eb182d7dbc77f5227081b2","sha256":"a13a07b242c80b57e0cbbacc6cfedb538d4d331ff1f9dff370519ec57407e450","sha512":"3d793cb731b6a060ea4b68dd622b76ee0db7f1ca5536fd4b4831b6f586c8f4f6634fcfc64d7dd93e85298225e9a4aba6d9d44ca3d8fabc2dfd365a02df60abe0","ssdeep":"96:YjcZsiBifeECqrETiqx8D6Eie9tJzg1YkwVgwIuIL3BMLbR7HdvxsyBvoPrrOLKE:kFi4f/7ETi7DcKtJ03LLkp1xs1O","tlshash":"a902768d7112926a825b9277a08e0300f536a615e517f63d3e3ac4e6bdb4de822173f6","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-06-16T15:53:52.922915Z","times_seen":574,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/css/fonts/Material-Icon-PHP-Melody.ttf?206bv4","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.197Z","timestamp":1781355386197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /templates/echo/css/fonts/Material-Icon-PHP-Melody.ttf?206bv4 HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/templates/echo/css/echo.css\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: font/ttf\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Sat, 05 Dec 2015 03:53:02 GMT\r\nexpires: Tue, 11 Aug 2026 23:25:48 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=17PaGzqjDQGIRcPBEs5x1SeAdJPdmE3CqzfPGPr5YxoHZ%2Fg1XHo34caRqHGXfY1oakGT8mhA8b3bvODOsmCVQW9S5HtcKLt%2FVYtiFJyyYNgq1efas7rbb%2BykdR%2Ftieo%3D\"}]}\r\nage: 48637\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a0b1415bbb324e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":126808,"size_decoded":54755,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, Material-Icon-PHP-Melody","md5":"c66525c487d980ccda56d4668eccd47b","sha1":"e9b984773ce1a225a851ac1769875b57e2e4a3f9","sha256":"48ab864568194da965b383bf041943f4fbd6d13e5e7f60da9556c4667eb052f6","sha512":"af4684cf0c159b2a166b781d80b0d557c4dbee268f1c8b77be76aff304397305cf9f805724d78f317fd2c782026c1890939320237342a1594e69efc656ef7755","ssdeep":"1536:7gGdj76E2oK5LDS1K2bd9kG/Wn5z7Qk7ir7q627CeDY+d324xLTFg:Lj76E2r55UqnJs29xw4X","tlshash":"3bc3c580d765bc16ee0d5234d4dae31ad7fcb725eb56939a8dcaa80ccd1b4f2c98c150","first_seen":"2023-04-27T21:11:40Z","last_seen":"2026-06-14T21:28:28.338381Z","times_seen":169,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/uploads/custom-logo.png","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.232Z","timestamp":1781355386232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /uploads/custom-logo.png HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: image/png\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Mon, 27 Apr 2026 17:07:01 GMT\r\nexpires: Tue, 11 Aug 2026 17:07:54 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 71311\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1JTAsB0BG%2F%2Ba%2Bu%2F5cfGaGaQbTqsyI%2BA1U7XbiSh%2BiKJWNDUlxNqfuyYTnn07weRrYWn5rANetPZaYKuFjI2kRhWrq9wJIVA%2BLD4xNoIPUkBxntwR4NmQunrl4AoTb%2Bk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncontent-length: 22189\r\ncf-ray: a0b1415bfb384e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22189,"size_decoded":23091,"mime_type":"image/png","magic":"PNG image data, 209 x 70, 8-bit/color RGBA, non-interlaced","md5":"a63c1620a4f003c51fe4f7f42a8383c7","sha1":"47549591ae7e0e1ad131b20cad6ee0aeddc617fa","sha256":"54ebfdcb45fb418e4c522434dd7d6fd5298e33a8618466d49d6e58b0828a5f6b","sha512":"04cfe4e5ba099e632eb52e8c5ba958fd1810bb75cfa63fe00e5f86b78ded982a194af64f30260978dc998ca8e0c9e0233a0b8c5ec7c0530b0462f12f7b6742d1","ssdeep":"384:r8Rn04vL0hJKtp8CuWlWZEWvPmQI4o10fkH1Qvi1Pmyqbptb/YRxr/l5e17EQ8:gR04BiCDuEemqI0fe1QIOf/Cxh5ew","tlshash":"d6a2b006e8913a85c6954b40eefec36387a70b40c9f69016b8b3da75dc5193cc85fdca","first_seen":"2026-04-28T08:34:23.579968Z","last_seen":"2026-06-14T22:40:54.668795Z","times_seen":16,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/uploads/thumbs/70ab94e6d-1.jpg","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.518Z","timestamp":1781355386518,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /uploads/thumbs/70ab94e6d-1.jpg HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ngDHuTAZCH1VbJkloGiufwm83IamBX5XJZdI4NrFkacfMrUY%2FqhRvMzfM4SY%2FZWpfTe8SwTq2EgUueY2sjYO%2BGpSw%2FkND%2BBpeOtqQxV7SHfYfOC50mdar%2FAPa3DQFA%3D\"}]}\r\nlast-modified: Wed, 10 Jun 2026 15:28:28 GMT\r\nexpires: Tue, 11 Aug 2026 17:08:32 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 71274\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-length: 63427\r\ncf-ray: a0b1415dbb7c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":63427,"size_decoded":64328,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 800x450, components 3","md5":"f5a9db49e33119b30aebdde12bc1c1ce","sha1":"a665fae440a442f1a23daaf10fc0d8eff83bd658","sha256":"3356d072fa3bc4140ecbfb8ce151457684928eed4642be9d343beab450a3b996","sha512":"593a586301e15f543c2a57737d763d448c074f06d65e4bcbbda6576dd14ae3333754bdf290c64216238fa8bf16cf15c265779c23a5a4091dd6b8eddf563c40d3","ssdeep":"1536:4uUbWCt1/pFZMpLF5fHlsKLjW4mrF+uTuGsxY0KQMqdYs1AOb:RKdfZyF1FvLjW4uF+mZiLAqX3b","tlshash":"2653f117a928d707851193dd7d071c246b0e836da49462ff02b28fab7f10a786ad64bf","first_seen":"2026-06-13T12:56:59.409315Z","last_seen":"2026-06-13T12:56:59.409315Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/uploads/thumbs/38b26cdab-1.jpg","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.551Z","timestamp":1781355386551,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /uploads/thumbs/38b26cdab-1.jpg HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: image/jpeg\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Mon, 08 Jun 2026 15:40:05 GMT\r\nexpires: Tue, 11 Aug 2026 17:08:34 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 71272\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FRYL6%2BBPFLnoi98jAg%2Fy6yi4KQDzRZAWfgg29BuS2KtIsOlWEVo5ubZZxhtW0H%2FTgtmCaTwBLLUYoX6lFdpSfUnXZiJ1s7y6rsW%2Bh2RvNslDLu6EaPkwp60nPx5dYNI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 31175\r\ncf-ray: a0b1415dfb914e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31175,"size_decoded":32072,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 800x450, components 3","md5":"8245a7d7b83d665ef7634b98315e1cf3","sha1":"4f14af94ac97ed31e6efca942f6f51bf8d1f7542","sha256":"205aeb78fc918b44b96ae0ad2bc1ba99e04624390e4e04c06c8d524d7764ed63","sha512":"658baaeab2cabbce53d6b1cfc07a3c76ee14f58f37c1d72fc6cab98226ec76e86147e1c1def43348a70401148587cf79625de69db5b2731a0ae6e6a8cb293a73","ssdeep":"768:GLCVH5pXU2sttn0tflTymZWgLEzyxFhlMYRrsuhf6E4qi:48Zh5Ut0vXZWg8y9lh34","tlshash":"d0e2f1cb889814ce8e1a53883458ba5d6b77593c0b067dbe2b76c8cc2cd5f7008eda34","first_seen":"2026-06-13T12:56:59.41091Z","last_seen":"2026-06-13T12:56:59.41091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/uploads/thumbs/cb0d70200-1.jpg","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.558Z","timestamp":1781355386558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /uploads/thumbs/cb0d70200-1.jpg HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: image/jpeg\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Mon, 08 Jun 2026 12:08:18 GMT\r\nexpires: Tue, 11 Aug 2026 19:00:52 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 64533\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K4E9INq0owaET8FlO1f9LaRgSQGLGHVH8B3zEQ%2BYuJl6Dm%2BbP3Rs5rJ4qLvn1X0KL4oJghuWuw7KZAgEbrsUBiFxJ2s%2FjswW083A%2FOyU0MlQwiLnJHIzP5%2FIkFFrRUM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 41776\r\ncf-ray: a0b1415e0b944e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":41776,"size_decoded":42675,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 800x450, components 3","md5":"73dbd1584f7adb117af457950ecbd76e","sha1":"228cdcef914f16c2dc0701c39d5c1a1d4daf365d","sha256":"d39081cb972d2a4edb1222e94870bf4bb257278106d116ef0d0458701ce17bd1","sha512":"3fb982d5c5c3aaffaff1964dc3eb87ce391caa63d52ea7828c8da53691d305abc4b38971dbcea395fcdc6cce6351a5fe6dd16b80ac35fd7863a269c180d037c8","ssdeep":"768:GLoEIbl3M+qf79RVuh5oKWj8yySfp26sxN0FxHn8ox0nLgX:4olMzf79Ro5oF8y1w9zGZNaQ","tlshash":"8713f14b8d4602deefb51be6f94160c793d6830cf788b978ad1202ea584ec350f6567a","first_seen":"2026-06-13T12:56:59.412446Z","last_seen":"2026-06-13T12:56:59.412446Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.surf/templates/echo/css/jasny-bootstrap.min.css","fqdn":"larozza.surf","domain":"larozza.surf","tld":"surf"},"ip":{"addr":"172.67.180.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:23.004Z","timestamp":1781355383004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.surf","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 01:11:21 GMT","end":"Sat, 05 Sep 2026 02:09:42 GMT"},"fingerprint":{"sha1":"44:EC:B6:B5:47:4E:F0:6D:29:00:A6:43:28:AA:0F:0E:6B:3A:5C:6D","sha256":"AB:91:7A:30:57:FF:7F:A2:8B:E4:2B:CF:0D:A8:86:3B:08:03:48:09:4F:D4:B4:3B:1F:32:D3:03:50:CF:A4:D2"}}},"request":{"raw":"GET /templates/echo/css/jasny-bootstrap.min.css HTTP/1.1\r\nHost: larozza.surf\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:23 GMT\r\nlocation: https://larozza.asia/templates/echo/css/jasny-bootstrap.min.css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZlNGUCkBhXbIYS2PgvP9EOHIVd7%2B90w%2FyK%2F%2FMNk7PVCxuGjXKOg1kfA7tKntoa3NtfEVkNs04dqN7dxBJ1n0aV7%2BK9NeR3VjkLM1ncDGr78kwHf3e0oaKZyyBb5SdDI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b14147dcaab51b-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.surf","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/js/melody.dev.js","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.134Z","timestamp":1781355386134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /js/melody.dev.js HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 09 Mar 2022 22:49:10 GMT\r\nexpires: Sun, 12 Jul 2026 17:07:54 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 71311\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8vWAtybpKMq8GYd70uY1oYcfElYQqXTfD3gv49yHuq1kbHl%2Bgljnv66zHfq1e4j02VWuLQcMAR%2BQUXgocSU2VCJD1mWKGYNt%2BZi2TC%2FTwSPkWw3x%2FvOjaPHdAT3WJ8s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a0b1415b5b144e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":23108,"size_decoded":5264,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"e238acf58475d3cdb95d614582134b24","sha1":"b13c1da1f5254cb14f4f187bd5174ed0feb08a23","sha256":"f3a4cbf3a8090b121a0d6d6dd8feda9f92831cdb5a070a7eb9ef58234c1f4eab","sha512":"7209c4cb8692e5a1fce4c6bad8081361c857d45b179b935a7291b0682c514409584e10b29bb56905dafd5d3dc8831d82c78cf9895c7b59ac2239552f6abf1f2b","ssdeep":"384:krC7SV8zve0Nfenff87NLRld9gTSOW6VUH:krC7+860lRLRGTdK","tlshash":"f5a25405f2ed1e6600b334360cafa4853a3c99b798048d59fd5d21e85f6cb7ca972f4a","first_seen":"2023-03-07T12:12:06Z","last_seen":"2026-06-14T22:40:54.655956Z","times_seen":569,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/js/jquery-scrolltofixed-min.js","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.143Z","timestamp":1781355386143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /templates/echo/js/jquery-scrolltofixed-min.js HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 20 Dec 2013 09:57:48 GMT\r\nexpires: Sun, 12 Jul 2026 17:07:54 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 71311\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nHXIp27u1FuYlPCNtWGYO%2FtIRuo3MRmEnBZ1%2BI552mnH6rNrxOLhfgMdG%2B3Kwg7LErD2HT0zPO55YJlKiMJ8GjS2R9sWpRIXjXAhOZJmkYaHOm%2F0vkWgWETTZDj3SUA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a0b1415b6b1a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5327,"size_decoded":2491,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5325), with CRLF line terminators","md5":"d356777022c9de56352b56b855abb4f3","sha1":"2b2633bba7a3579a24abf8eba36d07bd9ce6ed48","sha256":"555be26bbf1eb908369d65e57891a1f91474c4d7a2da13673c32f1ab5b5b2bb0","sha512":"8d4e82a9430fd930f88cf21ed731e84e8f7f26ce1b66dc4b3a021e2db1f2b2926e17fb1bc53ec87ed8b6cfbda29335ac4dc5e8b3f1749f03b7d41dd9c7a76201","ssdeep":"96:ST05BflUbLFQapYlN6rD1NBKzjHeubPvBPjI9G0rhLypbNIGrtl+eL/aW:wY+HFuArszyuFPsrhLypbNIGRL","tlshash":"e0b1ab602150733245dfb066e09fa3cf9171a235874bc0d6c0e4ebee6a7a6758bd3d89","first_seen":"2023-03-07T22:09:15Z","last_seen":"2026-06-14T22:40:54.625568Z","times_seen":101,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-migrate-1.2.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.154Z","timestamp":1781355386154,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-migrate-1.2.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-1c1f\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\nage: 1461395\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270022-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 46664, 19673\r\nx-timer: S1781355386.187702,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 3063\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7199,"size_decoded":3702,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7085)","md5":"eb05d8d73b5b13d8d84308a4751ece96","sha1":"743052320809514fb788fe1d3df37fc87ce90452","sha256":"1e67d8dbcca1f6fd94e077c85c2fb40fa1c2756c99238daa8da882144260a68d","sha512":"7b68a43a22a41404a2ff58e0da6a237492cad0fc3e56d216980802b4d5fb483895262a7e049340d6670002bdf899ba88c319239e60d0aae1ac31d98556b0ad6e","ssdeep":"96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq","tlshash":"3fe196dc72aab5611ffa30a8503bd21b72b25aec140d95a4f08ccde5392cc5d413ab7e","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-06-16T17:03:13.838664Z","times_seen":23686,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":9,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/uploads/thumbs/8071a58b1-1.jpg","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.537Z","timestamp":1781355386537,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /uploads/thumbs/8071a58b1-1.jpg HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: image/jpeg\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Tue, 09 Jun 2026 16:45:38 GMT\r\nexpires: Tue, 11 Aug 2026 17:08:32 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 71274\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kn4ZJwRWUHeRlfuak%2BCCBuSGGUPzwIqNxub6nktZh8VzF%2BdisRGYFGI2spwLVeCmZFiZiRCgPYAgea7sYoskHyap%2FGlcoyhKnj8ADvXN52N3dCqN14jdCTm82oet4xE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 53274\r\ncf-ray: a0b1415ddb844e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53274,"size_decoded":54169,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 800x450, components 3","md5":"8d113e2b48dc982f964da4ea19a97264","sha1":"8ddaadc42d1814027cb6558b49f22aed920c0b99","sha256":"2465f11d41dc946f401aec8d8893cf0f5c1268040558694fdc8e7dc5b8b68f95","sha512":"8f58b5dd15b7bc855578770712a306f0c10d5f121c152423c93c410c683ac66dc2042d861a2229b407b691657e41281f5d8e95dda09353c6b4462c6e3d9288d1","ssdeep":"1536:4+YHVmzaF273/99qzKha99EB70b5Cs24U:BYYPLqmhTNsC","tlshash":"9a33f20de429f698d78a7ea8892472adf44a957dd8b53c61827c388bcce1c738f1d14d","first_seen":"2026-06-13T12:56:59.416004Z","last_seen":"2026-06-13T12:56:59.416004Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/uploads/thumbs/e2d49a5e8-1.jpg","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.548Z","timestamp":1781355386548,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /uploads/thumbs/e2d49a5e8-1.jpg HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IZdC8e0DS7iW7MfWOI5noMfIJUR4h6fNbNiPnjVbYt93JGkFflyqrSidcxEYup59F2jLvz3wDPG8Tw8N99m1QtnI27W006EFEdiRu%2B8BxLTDTjQqKQhJu2PrFte5Wog%3D\"}]}\r\nlast-modified: Mon, 08 Jun 2026 16:26:40 GMT\r\nexpires: Tue, 11 Aug 2026 17:08:34 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 71272\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-length: 54066\r\ncf-ray: a0b1415dfb904e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54066,"size_decoded":54957,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 800x450, components 3","md5":"5c4831d0dcc50a6b2bd3608b6accf0c2","sha1":"875d2a1afd7a9df1e52be66c5c6f5607f23c4f5b","sha256":"f7b4b166f27eb11382657938e54c36b4f64defefc8e8d31c3f81622de80043b3","sha512":"c726c8d96bedfa0873722599935ce076474e5393cae3d909baa9a65595c3ef047a621d26e68df8f851c58514ee97f2ae900e11d36c2dcf76137fe2c3c597ce93","ssdeep":"1536:4H+1UX6o5eX2tY8QvwbrhMP8Ya0kkz4JKjID4v9:o+uXZAX2zQ4PhKYZkz4JTE","tlshash":"753301a3e6b45051ef6a60554e6a33c0131d08f714b45bf9e806e7db8efacb104a4bcc","first_seen":"2026-06-13T12:56:59.417575Z","last_seen":"2026-06-13T12:56:59.417575Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/uploads/thumbs/f6bc1ef0c-1.jpg","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.556Z","timestamp":1781355386556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /uploads/thumbs/f6bc1ef0c-1.jpg HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BpbnA%2FDIbVuoi37k1FCTSG2cZJ39KbHAYmJsqkDormsh7a37tQ%2BH4vYR93HWjnsMjtODpYuafaNYxaao4lLwXvAtpFPeSK%2FxIrQn8qZwPHoOBf7k3tqHmJohZTkj9PM%3D\"}]}\r\nlast-modified: Mon, 08 Jun 2026 12:26:57 GMT\r\nexpires: Tue, 11 Aug 2026 19:00:52 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 64533\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-length: 80605\r\ncf-ray: a0b1415dfb934e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":80605,"size_decoded":81502,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 800x450, components 3","md5":"b8232204f0b142dadc605a5294f2e9c4","sha1":"203f5b08a9d74817a4820a7db715db44990fc6cc","sha256":"bf1fa9dbd364633b87637931d60c4a1405cc14ce974744d6e87ad5952e4f7a58","sha512":"b0f647cd71f435174ec634a0bfa392b3284f800955825aec55c0720a5e4e220044b52b823a34f5539873c181e2522a31220a49634b02237f9aa9d14aff8f14c4","ssdeep":"1536:4Be5ojtURB85YBqPvSHM+vXFgUiqku167wPH3JkKFXBc43OZ3:oeGhURBSYEyH7vXFgUiHH8v3H+iOZ3","tlshash":"437302cbed4c5605db35529af303282a7a2e823d3742e8fd24b18ef16a55d30b55e4ca","first_seen":"2026-06-13T12:56:59.419598Z","last_seen":"2026-06-13T12:56:59.419598Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/uploads/thumbs/e491c29d5-1.jpg","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.564Z","timestamp":1781355386564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /uploads/thumbs/e491c29d5-1.jpg HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mMyr0wUHxyJStxbEtP9HDdSGNVR5gr%2FrEpz6X962fGpUYHhdQo%2FNWXQjaox2RpJBcJ0d5gUQLS487NjNebKz4mMAvNnEy6165%2BnZVLwlKAEll2%2B5ccGlej1iA9UFFpU%3D\"}]}\r\nlast-modified: Mon, 08 Jun 2026 03:42:51 GMT\r\nexpires: Tue, 11 Aug 2026 19:00:52 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 64533\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-length: 40411\r\ncf-ray: a0b1415e0b994e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":40411,"size_decoded":41308,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 800x450, components 3","md5":"417dc4e0e9f42eb46a748dd4f926188f","sha1":"fd35a2a9c1f4aadabc7e0494ad633df0b16ee0c0","sha256":"355bf7d60ff871f3f1215e2795c6201d29288fbce74534cddade375224c8ca1b","sha512":"66e92476d2adf127bd643c41788877b8b2e2bd647ff5c76e70ec0043e56848ea847f0b6503005d8990aa8a623c2776dbde3c511e9e8eb6ae40233487c03fa0e6","ssdeep":"768:GLZGeelt+OcACYI+hUABqyJ2jJrKjB4j+hzvCoihOnjJRDM+GiRadCmJQTHbAa:4pYtbVhLBqsIrIBi+hvCb0jJRDMy9","tlshash":"b503f16b983afb44cf3a0565280faad6130c3368f09431be2663cf5a2cd47a785cd45d","first_seen":"2026-06-13T12:56:59.421125Z","last_seen":"2026-06-13T12:56:59.421125Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.living/moslslat4.php","fqdn":"larozza.living","domain":"larozza.living","tld":"living"},"ip":{"addr":"172.67.129.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-13T12:56:16.890Z","timestamp":1781355376890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.living","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 07:50:40 GMT","end":"Tue, 01 Sep 2026 08:49:19 GMT"},"fingerprint":{"sha1":"C1:87:32:64:09:DE:99:24:58:91:DB:61:70:4C:DA:79:1A:E4:39:33","sha256":"16:CE:DE:70:73:92:E8:C4:6A:B6:24:8F:7A:9D:DD:F0:7A:5D:92:65:05:C6:37:54:93:CD:AA:7F:B6:08:D4:91"}}},"request":{"raw":"GET /moslslat4.php HTTP/1.1\r\nHost: larozza.living\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:16 GMT\r\nlocation: https://larozza.yachts/moslslat4.php\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2b51NmacJTyNbJ8vR4XiSZtmQVux3frNefb%2FFV6Tj5YtTj5JZyVbJXXoBV9FfXdqC7b%2BBlmfPpgjUCWrChCk4Vk3%2Bp%2FNzfR5STdeKWRiVEqzjfCa7B80NgNPZCSdsNBg1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b141220f0e120a-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":58,"connect":13,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.living","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.living","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.asia/moslslat4.php","fqdn":"larozza.asia","domain":"larozza.asia","tld":"asia"},"ip":{"addr":"104.21.52.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-13T12:56:17.103Z","timestamp":1781355377103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.asia","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:01:11 GMT","end":"Sun, 06 Sep 2026 16:59:31 GMT"},"fingerprint":{"sha1":"7F:15:78:6F:D0:BC:13:B0:8C:63:98:3B:5C:EC:44:8E:E4:3B:50:00","sha256":"FB:BD:1B:8D:30:5C:14:A8:5E:7C:E2:25:40:8B:74:65:C5:E3:8F:3B:C4:E7:9D:14:2E:50:27:96:97:69:18:C5"}}},"request":{"raw":"GET /moslslat4.php HTTP/1.1\r\nHost: larozza.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:17 GMT\r\nlocation: https://larozza.beer/moslslat4.php\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FTjlLFTCHvnqeF40dZc4rAok5gg0OfUWDcj%2BXLUZoz9vuKrosmHpSQ4u12KMatbt6sLrNaDi47zp%2FRcEVnme62U00NhUtahJdb0xebSeq18ZRbYNTt8gSfB9Kd%2BhNyo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b1412368015699-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":66,"connect":11,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.surf/templates/echo/css/custom.css","fqdn":"larozza.surf","domain":"larozza.surf","tld":"surf"},"ip":{"addr":"172.67.180.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:23.000Z","timestamp":1781355383000,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.surf","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 01:11:21 GMT","end":"Sat, 05 Sep 2026 02:09:42 GMT"},"fingerprint":{"sha1":"44:EC:B6:B5:47:4E:F0:6D:29:00:A6:43:28:AA:0F:0E:6B:3A:5C:6D","sha256":"AB:91:7A:30:57:FF:7F:A2:8B:E4:2B:CF:0D:A8:86:3B:08:03:48:09:4F:D4:B4:3B:1F:32:D3:03:50:CF:A4:D2"}}},"request":{"raw":"GET /templates/echo/css/custom.css HTTP/1.1\r\nHost: larozza.surf\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:23 GMT\r\nlocation: https://larozza.asia/templates/echo/css/custom.css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0yFElNDoM0Nl%2B3UYXJW3xVpsVYeIsBE9YtFAmcIBd05OWbPutPHYZ3p14az%2FT9ktljCJc4mgrGAszwgUZrI%2BuuVJFXsXSiEksDkiFQv%2Bs9991LeE0c%2BwkE%2Bj1E6ANe8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b14147dca9b51b-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":5,"connect":8,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.surf","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.asia/templates/echo/css/custom.css","fqdn":"larozza.asia","domain":"larozza.asia","tld":"asia"},"ip":{"addr":"172.67.196.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:23.051Z","timestamp":1781355383051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.asia","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:01:11 GMT","end":"Sun, 06 Sep 2026 16:59:31 GMT"},"fingerprint":{"sha1":"7F:15:78:6F:D0:BC:13:B0:8C:63:98:3B:5C:EC:44:8E:E4:3B:50:00","sha256":"FB:BD:1B:8D:30:5C:14:A8:5E:7C:E2:25:40:8B:74:65:C5:E3:8F:3B:C4:E7:9D:14:2E:50:27:96:97:69:18:C5"}}},"request":{"raw":"GET /templates/echo/css/custom.css HTTP/1.1\r\nHost: larozza.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:23 GMT\r\nlocation: https://larozza.beer/templates/echo/css/custom.css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FYkBZ9vzREpPPvpm4vdl9v0KyvbLYHGIuIq0WWnTjbKVe91pc8mLcz7y8r0cmFcp0BVp2l7toLjXy8xsVIWuY%2BmCffQbSxsb0d6LxQl9471LFXbnjlEFyDHzlmslkfE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b141482a43b4f9-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/css/jasny-bootstrap.min.css","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:23.117Z","timestamp":1781355383117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /templates/echo/css/jasny-bootstrap.min.css HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:23 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 20 Apr 2016 21:46:42 GMT\r\nexpires: Sun, 12 Jul 2026 17:07:53 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 71309\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MhSxDcHXWW9v1kK4h3ps2Oz4UtaHhAFp%2BAQpSF0pGeRUwZJxv%2FCb6bJSYroMJJbApR74Y3cobEAT10xZ89dP64XYrJ0BA6Wkt1%2B4SZYyOUXlj4sos5TJnpqhVChaLps%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a0b1414878a14e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":14003,"size_decoded":3402,"mime_type":"text/css","magic":"ASCII text, with very long lines (13803), with CRLF line terminators","md5":"56a224ccaaf1ad3df6ee7dbbc019aeac","sha1":"2ce1ef76b342a8fafda1e03a62b99be5340812bf","sha256":"777a9e5bb5d35fd671e5b252c67a0cf462baa8258db145ef6ea7dadf4de4b481","sha512":"5d4aabc83a5c849c66b818d21dc630da87df200b5fb0cee8f6209f7dfad5982136e2030f7d9fd9bc644a30b5689498aa40b42274ff8880a09f78d3209d64a30e","ssdeep":"96:4jVRNThJA9SfqYUV3KSIu97RC1dCVHvQroKSccwHF964Uv8zc2aHn51P/CtEDBW6:Q3uSfZDHu97RC1QVHvKDUv8zc2adB97P","tlshash":"ec52bdd17ca47a8a9e13820f90d5d6f0db1218519d982ab7f1b333895d0b78d82f9f2d","first_seen":"2023-04-07T18:47:56Z","last_seen":"2026-06-16T15:59:07.489792Z","times_seen":487,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/js/jquery.typewatch.js","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.139Z","timestamp":1781355386139,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /js/jquery.typewatch.js HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 09 Mar 2022 22:49:10 GMT\r\nexpires: Sun, 12 Jul 2026 17:07:54 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 71311\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NWNpFibdvg%2FiCG4Rdvich5la9P3jZBNhGTmawxqlaNNNB9vTCyLWtqwy00OlKtR3PqW33lbc8%2BA1jsceMT4QBxf9z8%2F5ScJVpgQKfCIAi1Rt0tcAQRg5aOoE5sFopfM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a0b1415b5b164e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1745,"size_decoded":1737,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1440)","md5":"6915a93382a7b35f40987fd648b43f9d","sha1":"b78c77cc774594df414a7b1fb99c28083d85bb80","sha256":"1836dba8922ca00f9ac170122f314b2cd7bbb2eba09c73d8bce215597bd9cd2b","sha512":"e88f5e62ae04a867b1b5ba979e2b653cab8348167c37cf897856d13558114dca318ac33b2c07d611ad3559014c57e60b847823421a46649a47f5328720eceac4","ssdeep":"","tlshash":"6c313f4cb152a15d87e263f6aa7616ee3a7ae3785a001184316512d0a078a8f63d7bd4","first_seen":"2023-03-07T12:12:06Z","last_seen":"2026-06-16T15:53:52.920893Z","times_seen":466,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/js/theme.js?v=0.1","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.147Z","timestamp":1781355386147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /templates/echo/js/theme.js?v=0.1 HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 19 May 2025 22:57:28 GMT\r\nexpires: Sun, 12 Jul 2026 17:07:54 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 71311\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mZLYYf4cgfEN8bHvYTW8HLdHCE8geN2YpF54GyGlzTGHWdiEaxJdZ1sCMVtMbTcCJC1%2Fb3Ns85bc9ZTOqlYcTHYEUf3YDgoa07mQZP%2BL60x7snGRq8DHOp8NJCJkPWs%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a0b1415b6b1d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41623,"size_decoded":13751,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5348), with CRLF line terminators","md5":"eea4f5333a4cb2a27506ac9db8011172","sha1":"a8f5391ccacc5c091c6ecb130509b98d416869e3","sha256":"0215a2f31eb07b433f63012341595b82aba2e7dd6ce2517a9a2ea4f892808220","sha512":"7355a319b9b18305cbc99a52a2adb48112642baf6363fc54caaa91ecafef837ef8ce68d5dd1d704629c9652d83fbf04f4709f20d176ffa0a841b06b567a07641","ssdeep":"768:7e1s4RPwBYlttO81x93OD4JdbNC6vALeqny+C3s1pR7T8I5HDwLYPLAWQCZYb0Y7:u4D4JdbNzvweqny+CQpmeHMYPLN3FNur","tlshash":"8913d78c7141a12b87a761f5a05f1206b172a9a5f049f83cb57dd4e2bef4ec81027fb8","first_seen":"2025-12-01T12:12:30.087397Z","last_seen":"2026-06-14T22:40:54.652347Z","times_seen":81,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/uploads/thumbs/8e421b25e-1.jpg","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.540Z","timestamp":1781355386540,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /uploads/thumbs/8e421b25e-1.jpg HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: image/jpeg\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Tue, 09 Jun 2026 16:06:13 GMT\r\nexpires: Tue, 11 Aug 2026 17:08:32 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 71274\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3AdhdwaA0ZETo%2BIJlCUhCnpoZ7GaPY6%2B4ColM6akkh5YOKzKLsO8cZ3uHiPue%2Fcbfamm0MZkFd8PzxMgVIS6Jn4ZNUcbmNhoLiV1b9%2BO%2Bk%2BeNKF%2Fv3%2B0jzlP1fXnmPk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 49339\r\ncf-ray: a0b1415deb894e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49339,"size_decoded":50244,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 800x450, components 3","md5":"b99078d8f485dad4f19694976ef1a3b4","sha1":"1a3e71f16a1e5eed3d2b8f1dbebe26ee6e3dcc17","sha256":"eadfecb21f1b0bd777486978b957e777a18a601ff9d0285ba40016f5824ec2db","sha512":"a29b6c0043c72b5bad6862c7287246b100f4362c4fe8cfe3cb9ff9e7fc59447b0d1e5473fabab1d10ebbb8223104422f26606827b0015b96f6d7b122cf8986c7","ssdeep":"1536:4aaroQSsxfujedAF2LbSnVcFjH2nSDKU/T:sNH9q5FZV9wjT","tlshash":"0823f11534637041c35f5b931a0984879ffcb9be42b4bab333e7a41e13faa26958d824","first_seen":"2026-06-13T12:56:59.423929Z","last_seen":"2026-06-13T12:56:59.423929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.surf/moslslat4.php","fqdn":"larozza.surf","domain":"larozza.surf","tld":"surf"},"ip":{"addr":"104.21.67.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-13T12:56:17.053Z","timestamp":1781355377053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.surf","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 01:11:21 GMT","end":"Sat, 05 Sep 2026 02:09:42 GMT"},"fingerprint":{"sha1":"44:EC:B6:B5:47:4E:F0:6D:29:00:A6:43:28:AA:0F:0E:6B:3A:5C:6D","sha256":"AB:91:7A:30:57:FF:7F:A2:8B:E4:2B:CF:0D:A8:86:3B:08:03:48:09:4F:D4:B4:3B:1F:32:D3:03:50:CF:A4:D2"}}},"request":{"raw":"GET /moslslat4.php HTTP/1.1\r\nHost: larozza.surf\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:17 GMT\r\nlocation: https://larozza.asia/moslslat4.php\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9YiHA5iA65k1z8d58WrrCIAVbNDjeyxr%2F0fwf0ngzeBiSf%2FTNEgj0smctNABwialom2xBnJm7%2B7B7xCHO%2Bpb2gtT8Szalgq%2FEijI26fIm3mxS%2B7hdSASYWukowtT9Tc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b14122d90d5691-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":25,"connect":12,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.surf","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.yachts/templates/echo/css/fonts/Material-Icon-PHP-Melody.ttf?206bv4","fqdn":"larozza.yachts","domain":"larozza.yachts","tld":"yachts"},"ip":{"addr":"104.21.60.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:22.804Z","timestamp":1781355382804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.yachts","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 16:43:14 GMT","end":"Wed, 02 Sep 2026 17:40:52 GMT"},"fingerprint":{"sha1":"D3:94:4B:AC:C1:BE:64:31:DA:B9:E5:4B:53:9C:72:04:4C:F1:23:E9","sha256":"1D:FE:10:7C:38:4B:FF:2A:10:EA:18:79:FC:F7:96:13:E1:5E:7E:49:CB:9D:39:FA:AF:A5:D3:8E:8C:EE:87:C4"}}},"request":{"raw":"GET /templates/echo/css/fonts/Material-Icon-PHP-Melody.ttf?206bv4 HTTP/1.1\r\nHost: larozza.yachts\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nOrigin: https://larozza.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:22 GMT\r\nlocation: https://larozza.surf/templates/echo/css/fonts/Material-Icon-PHP-Melody.ttf?206bv4\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v0aHMz%2BSnBoNeTsL5jsagDAd3jL0EIQ7sOSqQ%2FCwXJhDsPSJtwZ67VGcBZInmkYoidBqtA3IPVlEUqNnPYWN8oigU6iFXgr7o9vpuaEjTcZ8xVmdZdmE2TumPYB%2FikyTIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b14146bea95684-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.yachts","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.surf/templates/echo/css/animate.min.css","fqdn":"larozza.surf","domain":"larozza.surf","tld":"surf"},"ip":{"addr":"172.67.180.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:23.006Z","timestamp":1781355383006,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.surf","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 01:11:21 GMT","end":"Sat, 05 Sep 2026 02:09:42 GMT"},"fingerprint":{"sha1":"44:EC:B6:B5:47:4E:F0:6D:29:00:A6:43:28:AA:0F:0E:6B:3A:5C:6D","sha256":"AB:91:7A:30:57:FF:7F:A2:8B:E4:2B:CF:0D:A8:86:3B:08:03:48:09:4F:D4:B4:3B:1F:32:D3:03:50:CF:A4:D2"}}},"request":{"raw":"GET /templates/echo/css/animate.min.css HTTP/1.1\r\nHost: larozza.surf\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:23 GMT\r\nlocation: https://larozza.asia/templates/echo/css/animate.min.css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wsfY60BP6LalZ49kGAtZ0OiM%2F86jOPDJnpTjvPT2JhMl6wOxYC9A%2FDa3%2FGj%2B3x4xh%2Fy9pc77mcIBfndH%2Btyfe%2B99eeBbq03yWzu2V0KAvmp0e31pXUNbPMtTyFkuOn0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b14147dcaeb51b-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.surf","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/img/apple-touch-icon.png","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:24.339Z","timestamp":1781355384339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /templates/echo/img/apple-touch-icon.png HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:24 GMT\r\ncontent-type: image/png\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Sun, 22 Dec 2024 15:37:01 GMT\r\nexpires: Tue, 11 Aug 2026 17:08:08 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 71295\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IuoryVjhQS0UKuqz%2FD1V4HxbR0ELoARZ5GAHPXX5txNVzeTz0pAX35PGdqYRSkbvNdefGDYRvC2chmGAzvQ3EPSM%2FDWBs8oj6hczlXG34rFo5PcGlMssKT2tAoKSCr4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncontent-length: 10497\r\ncf-ray: a0b14150299b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":10497,"size_decoded":11390,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"2d77dde79285d8214fb6fe03b52b4261","sha1":"a1b8a89617a2aedb1bdd97fd8278b784a4502a2e","sha256":"373bf4ff82e1a2133c69aa2555ae198ff9a26effbf0b10ef80351a13b38641ca","sha512":"11cb3ec5ad74b339ec1fc00aca2bb77d97db508983da8ec011a9ebe34ccebc7036a81d5e135702de787707be13674eb51ecdd8d38468194bff057632f82eecf1","ssdeep":"192:G7WiZWhTHpS/sgpsQUo73rjlYsTbs3FczUhdBnScgD1cTBHI6HU2b:2WiZMTpS/sgpokrjysTg3FcghdBnJg0t","tlshash":"7522aff454bae5c24b331274bb33fbe525a5c0663a4ebb017190d804a8687d787f8b93","first_seen":"2025-12-01T12:12:30.056017Z","last_seen":"2026-06-14T22:40:54.658192Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/uploads/thumbs/6c504036a-1.jpg","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.542Z","timestamp":1781355386542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /uploads/thumbs/6c504036a-1.jpg HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: image/jpeg\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Tue, 09 Jun 2026 13:12:58 GMT\r\nexpires: Tue, 11 Aug 2026 17:08:34 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 71272\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SzQNaQ61z%2BSBvbpSRWE4Y4a5H4cRlCY5Z4jVRuLf6Y3N8u3FAkuxcbx1IftDilnBJ%2BDK%2FSAktebvb5V3ARb%2BUN%2FUM4U%2BPrPPb8LHJW8FIHnkhs3Tpb7IXc4j5uRgmFE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 52710\r\ncf-ray: a0b1415deb8b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52710,"size_decoded":53611,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 800x450, components 3","md5":"c562874d62ba52f902cd19bc9d27d321","sha1":"b87baa6d6212040c29491bba8f4f076436286653","sha256":"f525722e8ae3ee6e75447ec852def14902f70a35bdbac93046ae5d0c59f5f3bb","sha512":"6fa26ab8fb50d11ac9f0969028bdd32fe6b0494f885e0d0e81e47b539004dfb32d55d74b51ff94370790cf5be5b8aa049a05c8858d80a0a060da95faa9c30834","ssdeep":"1536:4z9nv2pjZCaVa/OFcRcBR7gI3v5xER6uQR:CvUAag/K+sSwxx66uQR","tlshash":"1633d0039d3d6253a72d51f93c0b4e7c2fd91a4cd99961fe98a29fd67c20ab10c2b50a","first_seen":"2026-06-13T12:56:59.426029Z","last_seen":"2026-06-13T12:56:59.426029Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-KYDXRC37E4","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:31.498Z","timestamp":1781355391498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:26 GMT","end":"Mon, 17 Aug 2026 08:36:25 GMT"},"fingerprint":{"sha1":"B1:69:2D:8A:87:48:5C:47:05:41:5B:52:3B:0E:2C:E9:BD:CC:03:75","sha256":"91:1E:26:69:78:6C:F7:F4:05:E8:B1:07:F4:04:FB:66:B9:20:6A:EB:43:9D:02:70:C8:AF:60:8C:BB:58:30:4F"}}},"request":{"raw":"GET /gtag/js?id=G-KYDXRC37E4 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 13 Jun 2026 12:56:31 GMT\r\nexpires: Sat, 13 Jun 2026 12:56:31 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 163763\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":483303,"size_decoded":164347,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"1b2a663a955276763d66bae41c6add99","sha1":"00a11a0110885d69b025e026a1e77bcaf5a22a87","sha256":"2db857ea5ecdf45f501cc4efd80f7fb2852de7f1d9005b8e2fccf345f563c755","sha512":"f3f22a52e963fb00f6db2ca705fd9a59bc325e063b2ad92af96b663490c9589aa37759fc35e08d64e37314e43a3037a48d485a7e646032b6e6ec2c6ee33afc79","ssdeep":"6144:xBCbRknTI8s5XtjLEEQT1TpqBEzVTI1Ce8G3h7Y1MD9f:f5nTsEZXysu","tlshash":"dda4e9ceb3d674225396f478903f018ba57b29e2b448c899f189cce42e7459a4277f7c","first_seen":"2026-06-13T10:33:07.01685Z","last_seen":"2026-06-13T12:56:59.427515Z","times_seen":2,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.beer/templates/echo/css/animate.min.css","fqdn":"larozza.beer","domain":"larozza.beer","tld":"beer"},"ip":{"addr":"172.67.208.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:23.085Z","timestamp":1781355383085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.beer","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 23:03:00 GMT","end":"Thu, 10 Sep 2026 00:01:24 GMT"},"fingerprint":{"sha1":"9D:0C:CB:2C:C5:07:6E:C1:0F:4C:A2:D5:BA:B1:45:21:38:92:F3:11","sha256":"21:88:78:BD:1E:F8:A4:F4:F8:9D:C1:DE:D4:0C:63:28:3B:6A:9B:F7:BF:BC:3E:BD:B9:99:08:81:E3:47:19:A4"}}},"request":{"raw":"GET /templates/echo/css/animate.min.css HTTP/1.1\r\nHost: larozza.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:23 GMT\r\nlocation: https://larozza.casa/templates/echo/css/animate.min.css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FEi18jDYQwgDCpw1JnKEuLUzwQE8eKlYfwUReFqPKO5hIVqv%2BXnC6oltlIwJ0YORJIr%2B8DldeOz%2FIP1muNW1ZNUH7U7uw9eq9TMYmmkKXRqlP1M0cHnqoeaFj4CVBxU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b141485aabb515-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozaa.asia/moslslat4.php","fqdn":"larozaa.asia","domain":"larozaa.asia","tld":"asia"},"ip":{"addr":"104.21.90.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-13T12:56:16.735Z","timestamp":1781355376735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozaa.asia","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 10:46:42 GMT","end":"Sat, 22 Aug 2026 10:46:41 GMT"},"fingerprint":{"sha1":"C9:CE:C8:6F:18:BF:9C:34:ED:43:1F:89:5C:52:03:A4:C9:83:6E:14","sha256":"D2:3F:B7:E6:7F:7A:D9:1C:62:86:8B:AE:E0:E7:91:0A:6B:E1:CB:0E:42:4B:EC:2E:27:BB:D2:DB:7F:87:35:CD"}}},"request":{"raw":"GET /moslslat4.php HTTP/1.1\r\nHost: larozaa.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:16 GMT\r\nlocation: https://larozaa.baby/moslslat4.php\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fkTfWY6HHMnFAmxon01DzdSjf9DEBpqe3xijQmj5DirsXIItXR48Ks%2FBZ9M8u53iftnvQjelHQO%2F7zThBaaFCF2I3qHXSzvJvpzEV2jJ8%2FRhMs8EHjscHmxF5WBwiCc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b14120ba564e4c-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":4,"connect":12,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozaa.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netdna.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css","fqdn":"netdna.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:22.792Z","timestamp":1781355382792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 06:14:57 GMT","end":"Sat, 01 Aug 2026 07:14:54 GMT"},"fingerprint":{"sha1":"87:39:8B:D4:F5:C1:CE:D2:17:B0:DA:A6:93:21:38:E7:CA:4B:7E:2A","sha256":"22:95:0A:F1:20:E2:D1:60:17:3F:96:BF:26:3A:90:BA:38:84:38:04:30:52:7D:AE:EA:74:8D:58:1E:F7:C7:0B"}}},"request":{"raw":"GET /font-awesome/4.4.0/css/font-awesome.min.css HTTP/1.1\r\nHost: netdna.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 13 Jun 2026 12:56:22 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=0,i=?0\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"0831cba6a670e405168b84aa20798347\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:54 GMT\r\ncdn-cachedat: 02/22/2025 16:50:44\r\ncdn-proxyver: 1.19\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1047\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 42e3c4a62d8856e8d46263b832aab469\r\ncdn-cache: HIT\r\nage: 2710391\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a0b141469fed23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26711,"size_decoded":6984,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (26548)","md5":"0831cba6a670e405168b84aa20798347","sha1":"05ea25bc9b3ac48993e1fee322d3bc94b49a6e22","sha256":"936ffccdc35bc55221e669d0e76034af76ba8c080c1b1149144dbbd3b5311829","sha512":"655f4a6b01b62de824c29de7025c4b21516e7536ae5ae0690b5d2e11a7cc1d82f449aaebcf903b1bbf645e1e7ee7ec28c50e47339e7d5d7d94663309dfa5a996","ssdeep":"384:/i5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/7:klr+Klk3YlKfwYUf8l8yQ/7","tlshash":"5ec240e8e54c01d66731c48bff85b36862b6f73dd5804da9f01f690c29d22a522c5fba","first_seen":"2023-04-05T03:42:18Z","last_seen":"2026-06-16T16:32:05.401654Z","times_seen":21003,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.yachts/templates/echo/css/animate.min.css","fqdn":"larozza.yachts","domain":"larozza.yachts","tld":"yachts"},"ip":{"addr":"104.21.60.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:22.807Z","timestamp":1781355382807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.yachts","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 16:43:14 GMT","end":"Wed, 02 Sep 2026 17:40:52 GMT"},"fingerprint":{"sha1":"D3:94:4B:AC:C1:BE:64:31:DA:B9:E5:4B:53:9C:72:04:4C:F1:23:E9","sha256":"1D:FE:10:7C:38:4B:FF:2A:10:EA:18:79:FC:F7:96:13:E1:5E:7E:49:CB:9D:39:FA:AF:A5:D3:8E:8C:EE:87:C4"}}},"request":{"raw":"GET /templates/echo/css/animate.min.css HTTP/1.1\r\nHost: larozza.yachts\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:22 GMT\r\nlocation: https://larozza.surf/templates/echo/css/animate.min.css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4QkmoXCdsGDMfRsQDPj0t7ilPpKx%2Fp0gIsQqVuSlGDVZEjRrcZ9T%2F4R79aFv6fEWaBRMenN6pILKD7Q5uTX8%2FZj1Ay2LITmu1MpysJeEfPp3c4Kb9XWooi4i4Ciyz2r1Nw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b14146cfba0883-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.yachts","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.yachts/templates/echo/css/custom.css","fqdn":"larozza.yachts","domain":"larozza.yachts","tld":"yachts"},"ip":{"addr":"104.21.60.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:22.815Z","timestamp":1781355382815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.yachts","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 16:43:14 GMT","end":"Wed, 02 Sep 2026 17:40:52 GMT"},"fingerprint":{"sha1":"D3:94:4B:AC:C1:BE:64:31:DA:B9:E5:4B:53:9C:72:04:4C:F1:23:E9","sha256":"1D:FE:10:7C:38:4B:FF:2A:10:EA:18:79:FC:F7:96:13:E1:5E:7E:49:CB:9D:39:FA:AF:A5:D3:8E:8C:EE:87:C4"}}},"request":{"raw":"GET /templates/echo/css/custom.css HTTP/1.1\r\nHost: larozza.yachts\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:22 GMT\r\nlocation: https://larozza.surf/templates/echo/css/custom.css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dKVA%2BsEhPjoNmVdPWJZhmmZA0uJcw7TYTtEf1W4vi%2FnQXWKKr93eht4eXahx10u6%2FeCUkU7xRSUFCgzB6yJzE363fN0cD3oUCdHv0imk%2FSVbulC7Irs2YSPqNEtMf21Swg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b14146cfb90883-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.yachts","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.surf/templates/echo/css/bootstrap.min.rtl.css","fqdn":"larozza.surf","domain":"larozza.surf","tld":"surf"},"ip":{"addr":"172.67.180.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:23.010Z","timestamp":1781355383010,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.surf","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 01:11:21 GMT","end":"Sat, 05 Sep 2026 02:09:42 GMT"},"fingerprint":{"sha1":"44:EC:B6:B5:47:4E:F0:6D:29:00:A6:43:28:AA:0F:0E:6B:3A:5C:6D","sha256":"AB:91:7A:30:57:FF:7F:A2:8B:E4:2B:CF:0D:A8:86:3B:08:03:48:09:4F:D4:B4:3B:1F:32:D3:03:50:CF:A4:D2"}}},"request":{"raw":"GET /templates/echo/css/bootstrap.min.rtl.css HTTP/1.1\r\nHost: larozza.surf\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:23 GMT\r\nlocation: https://larozza.asia/templates/echo/css/bootstrap.min.rtl.css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DobRbqd5%2F76fDNA1Vu8Ctn9qAZwwvCuYypQr%2FnKgb66k%2BXQ86gf%2BUae%2B2xPN5JxaLR4piaFkYZZZ9QrzCj3Vl0vpEvO2fr85nDImZHN0EdqLuGk25h8aw8%2B43RQrqTU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b14147dcabb51b-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.surf","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.asia/templates/echo/css/echo.rtl.css","fqdn":"larozza.asia","domain":"larozza.asia","tld":"asia"},"ip":{"addr":"172.67.196.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:23.044Z","timestamp":1781355383044,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.asia","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:01:11 GMT","end":"Sun, 06 Sep 2026 16:59:31 GMT"},"fingerprint":{"sha1":"7F:15:78:6F:D0:BC:13:B0:8C:63:98:3B:5C:EC:44:8E:E4:3B:50:00","sha256":"FB:BD:1B:8D:30:5C:14:A8:5E:7C:E2:25:40:8B:74:65:C5:E3:8F:3B:C4:E7:9D:14:2E:50:27:96:97:69:18:C5"}}},"request":{"raw":"GET /templates/echo/css/echo.rtl.css HTTP/1.1\r\nHost: larozza.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:23 GMT\r\nlocation: https://larozza.beer/templates/echo/css/echo.rtl.css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LSG00mhSFGOP%2FKZSNA0UG2QD8qy1tsf2VoY3bHFyhc2O7QtbvfBoOBJzN7TmsFRaV0psKBLD7a%2Ff%2FFEVFQkG6e5g1Z8%2FJhvLaqLh4boxYuHOYmpG7suaFfs8%2BME%2BvnY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b141482a41b4f9-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":4,"connect":13,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.asia/templates/echo/css/echo.css","fqdn":"larozza.asia","domain":"larozza.asia","tld":"asia"},"ip":{"addr":"172.67.196.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:23.053Z","timestamp":1781355383053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.asia","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:01:11 GMT","end":"Sun, 06 Sep 2026 16:59:31 GMT"},"fingerprint":{"sha1":"7F:15:78:6F:D0:BC:13:B0:8C:63:98:3B:5C:EC:44:8E:E4:3B:50:00","sha256":"FB:BD:1B:8D:30:5C:14:A8:5E:7C:E2:25:40:8B:74:65:C5:E3:8F:3B:C4:E7:9D:14:2E:50:27:96:97:69:18:C5"}}},"request":{"raw":"GET /templates/echo/css/echo.css HTTP/1.1\r\nHost: larozza.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:23 GMT\r\nlocation: https://larozza.beer/templates/echo/css/echo.css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gdZZuNayZjGfllyD7V6iaRkiBCV0%2BAK4mfP0CVNkzwEicJJm671FmUX%2BifVkRjO63ez0Ka09WPb9%2FlilxHx2B%2BpWnOH6Mg8o4FAPUuD7ciuKj4Y3vk36yjUwBBx%2FkPw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b141482a45b4f9-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netdna.bootstrapcdn.com/bootstrap/3.2.0/js/bootstrap.min.js","fqdn":"netdna.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.149Z","timestamp":1781355386149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 06:14:57 GMT","end":"Sat, 01 Aug 2026 07:14:54 GMT"},"fingerprint":{"sha1":"87:39:8B:D4:F5:C1:CE:D2:17:B0:DA:A6:93:21:38:E7:CA:4B:7E:2A","sha256":"22:95:0A:F1:20:E2:D1:60:17:3F:96:BF:26:3A:90:BA:38:84:38:04:30:52:7D:AE:EA:74:8D:58:1E:F7:C7:0B"}}},"request":{"raw":"GET /bootstrap/3.2.0/js/bootstrap.min.js HTTP/1.1\r\nHost: netdna.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"abda843684d022f3bc22bc83927fe05f\"\r\nlast-modified: Mon, 25 Jan 2021 22:03:57 GMT\r\ncdn-cachedat: 08/24/2025 11:32:39\r\ncdn-proxyver: 1.34\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1055\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 0930f51d4c2a94ede01f9b61784e9930\r\ncdn-cache: HIT\r\nage: 2745237\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a0b1415b6a3c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31819,"size_decoded":9837,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31650)","md5":"abda843684d022f3bc22bc83927fe05f","sha1":"26908395e7a9a4eab607d80aa50a81d65f3017cb","sha256":"24cc29533598f962823c4229bc280487646a27a42a95257c31de1b9b18f3710f","sha512":"3f1b46e9ea0fb6be507605a2783af406c6b4f885dedaa4401bff204b0fe9056656717411021594e2512e98a4e398e3238267a7deafeba1b57e443decab0477ea","ssdeep":"768:xoBFw1wl+WRydWDRQgn8WI0fBQLrX84XCqc:SAr2MRCqc","tlshash":"43e28446b23031a107dfb2e5515f020b723a6a6de906907c38b999f53db9c48727bf39","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-06-16T17:08:00.029655Z","times_seen":8755,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kit-pro.fontawesome.com/releases/v6.5.0/webfonts/pro-fa-solid-900-22.woff2","fqdn":"kit-pro.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.198Z","timestamp":1781355386198,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 21:57:31 GMT","end":"Wed, 15 Jul 2026 22:57:28 GMT"},"fingerprint":{"sha1":"AF:65:F8:6C:70:82:CB:7C:3C:AD:4D:54:65:50:3B:13:F0:3A:0B:2E","sha256":"2A:78:5B:B0:CC:FA:C9:8B:51:86:B1:FA:62:ED:C7:B8:BC:18:15:3D:91:FC:87:53:9E:E0:AF:8C:08:D1:17:2F"}}},"request":{"raw":"GET /releases/v6.5.0/webfonts/pro-fa-solid-900-22.woff2 HTTP/1.1\r\nHost: kit-pro.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://larozza.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kit-pro.fontawesome.com/releases/v6.5.0/css/pro.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 13036\r\ncf-ray: a0b1415bb94a5684-OSL\r\nx-amz-id-2: HXNiSOWqMeUk0hdd0D8AngS1UCx8ClvGNTKBOlKWpn7G6tdKzy7W7k2Li/+e+VX20bQlMO1Byz4HewSNNoCzuoNOPmuBN1Xv\r\nx-amz-request-id: 2NN7E17QNY5ZG4W4\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Mon, 27 Nov 2023 23:01:27 GMT\r\netag: \"eff5bd312d9c3983c0977203bf4115d3\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31556926\r\naccept-ranges: bytes\r\nage: 71320\r\nexpires: Sun, 13 Jun 2027 18:45:12 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13036,"size_decoded":13807,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13036, version 773.256","md5":"eff5bd312d9c3983c0977203bf4115d3","sha1":"5af61ad848830c24f73585471d2c6da7fdee413f","sha256":"3bb150a8fc05e7ec0965704a70786bba6ccc36695bec69ce2d7e9ad371678081","sha512":"75b988b045555f0f7afb7e324eefcea7ea83924185417a5050184541f10a5707653bce4831a467dac743ccf9ddfc01a6d63fbac30302bd9971805d24f94dea76","ssdeep":"192:JsNivdyUy53EwDNzBKn/Yc7koWm7ne0+a5KZ74oKrTCK+QovRdeBO3t+ONMg:PU75zUY+WOygeEzTCfTLcFg","tlshash":"0742d0d2696a87fc8e529d0182d18f9ce1284cae1171e412af5f94b8f43197153b2a84","first_seen":"2023-11-28T22:52:03Z","last_seen":"2026-06-14T22:40:54.675221Z","times_seen":89,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/uploads/thumbs/ece4ba693-1.jpg","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.515Z","timestamp":1781355386515,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /uploads/thumbs/ece4ba693-1.jpg HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yvP%2FxuJ%2BVmvtmNihpjKmcs0PWz84mEFsFjEvBNltiwRGa7RwPs1%2FU%2FYcqndpAoTi6odnqVwmXMa9qBqjTtyyZeecRgCMqlUpnDgylvOglLWb2K%2Fh05G0r7HP4ZW2I9E%3D\"}]}\r\nlast-modified: Wed, 10 Jun 2026 19:18:07 GMT\r\nexpires: Tue, 11 Aug 2026 17:08:32 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 71274\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-length: 60443\r\ncf-ray: a0b1415dbb7a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60443,"size_decoded":61342,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 800x434, components 3","md5":"9ae95d1467d7d15ed08fc1e3ead4c8e8","sha1":"09a9ecc439519ed9bfe7e5fe4c9c8037634affc9","sha256":"ee65cf0cd5924c515ec0513e2c39833e228e76e62b84fd71e35f89845201340d","sha512":"e4643b93b0fd7b21364e07b4a8db9c71f07a87eb9750855d0ef9335cb070e4cda52e19738ac6d62767c01326ffa8158d0da6c546a71a21db89be758965a5d5ae","ssdeep":"1536:oxfcMTFX0IlnWwx54vTjlKffu74ksLE3kSt7jj:4fnT9/LsCfu8kF3Dj","tlshash":"3c43f2af46576b745a47a22ad713c0fd1c7a05878a0805f0ff1e1b824186fe5718efad","first_seen":"2026-06-13T12:56:59.430545Z","last_seen":"2026-06-13T12:56:59.430545Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/uploads/thumbs/5366b85ec-1.jpg","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.545Z","timestamp":1781355386545,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /uploads/thumbs/5366b85ec-1.jpg HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zl%2FTS8NXrPjDVyhv4Sjlz7XTkzaL8ki3kqYao1INqMNd9rT7KWFUEZRdjgKmC%2BBqD%2F8SpkbQAFWK1Ub038yZYG58XDF3qwH9EK9AjMPTLAHCadOP7mTYrBwdGaZC2RI%3D\"}]}\r\nlast-modified: Tue, 09 Jun 2026 11:54:40 GMT\r\nexpires: Wed, 12 Aug 2026 07:32:28 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 19437\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-length: 32326\r\ncf-ray: a0b1415deb8d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32326,"size_decoded":33221,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 800x450, components 3","md5":"cc1da8591e3bbfa47b54198177078715","sha1":"5016a49a79bbf89b70ea8173532fb8df5600aee2","sha256":"8433519bd4e739611c4bb69a5c2210f4b819a70eabc0c2a4b27fe92d11c82641","sha512":"fa9ea040b148e4b7794c4ad06828166f630c41d4dfc9f4fa5c743c9e85b399517304975b24adff9df919fc67178e814bfc72232d595c793a7ed2ebee3be5b354","ssdeep":"768:GLSvXfe66/I2OfeQGQo61HQvo87JhJ8eWkv3nQ2n:4SvXh6brNaQvocfttvQ2n","tlshash":"04e2e10b779fcb21ca6b63d0aa430c6950839f286fde10d86b301eaf4ca5f711c9466d","first_seen":"2026-06-13T12:56:59.43208Z","last_seen":"2026-06-13T12:56:59.43208Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/uploads/thumbs/f63dea413-1.jpg","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.572Z","timestamp":1781355386572,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /uploads/thumbs/f63dea413-1.jpg HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: image/jpeg\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Sun, 07 Jun 2026 17:08:41 GMT\r\nexpires: Wed, 12 Aug 2026 08:08:00 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 17305\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NqoEdsiMNgSQJuGWIXMuysXvvXvQRgt2BOUADDzC454P6wJyGFL92P8qEofxpxM%2Bo0tKO1ilPvgq%2BgHEFSTrRzuP53AgcsWPJf6d6Xazj7nTis57avycVmjs0%2BYHjpo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 61326\r\ncf-ray: a0b1415e1b9d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":61326,"size_decoded":62221,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 800x450, components 3","md5":"b271f23980b399a35250e823a6fd9fb3","sha1":"0536329e0f31659c53692401de3771df04bc2b16","sha256":"3887e222227713fbb9daa425e350ebd4acca7fd3fdf96e97c683b5f131ad9067","sha512":"b1e5fdd7f31cabcfcb99c24f09ebbf61cbc8245c6d1edd76c7bd27df7c17bc039a1c330366f762e56b991a1ffd1f7843aa891eab0e5b11327ff74a96a897e4b1","ssdeep":"1536:4HxknAL6e64IbTTa50DuUD9unltRIrcO4:YLmTfyUQnLyrU","tlshash":"12530222587633e65e43f45f6e1b2c29c4a8681edc802d1ed553bdd33694fb28385dd2","first_seen":"2026-06-13T12:56:59.433945Z","last_seen":"2026-06-13T12:56:59.433945Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.rest/moslslat4.php","fqdn":"larozza.rest","domain":"larozza.rest","tld":"rest"},"ip":{"addr":"172.67.176.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-13T12:56:16.586Z","timestamp":1781355376586,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.rest","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 17:18:23 GMT","end":"Sun, 09 Aug 2026 17:18:22 GMT"},"fingerprint":{"sha1":"D1:B5:34:39:00:DC:0C:87:44:4B:E1:F5:BF:85:8C:4B:7F:97:63:9C","sha256":"20:62:A1:78:46:23:3D:C2:F6:FB:00:E7:BA:86:8A:67:A4:01:56:5D:4E:BF:D3:7D:45:15:71:88:15:A7:77:85"}}},"request":{"raw":"GET /moslslat4.php HTTP/1.1\r\nHost: larozza.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:16 GMT\r\nlocation: https://larooza.net/moslslat4.php\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GNrjHKcd7nO7%2Fu%2BJFgdc4OEXhhQbjZDrb0K6VFs3dke98qPcErZHUyWEgLnwRbw5lZqQTlosPrRChHnSVOHgEJbjZvYxuZ6Z3N0Vk5pYU2Gbc5fNTeYD6k0lc9ii7Hw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b141202d36b4fa-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":63,"connect":15,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kit-pro.fontawesome.com/releases/v6.5.0/webfonts/pro-fa-solid-900-12.woff2","fqdn":"kit-pro.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:22.796Z","timestamp":1781355382796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 21:57:31 GMT","end":"Wed, 15 Jul 2026 22:57:28 GMT"},"fingerprint":{"sha1":"AF:65:F8:6C:70:82:CB:7C:3C:AD:4D:54:65:50:3B:13:F0:3A:0B:2E","sha256":"2A:78:5B:B0:CC:FA:C9:8B:51:86:B1:FA:62:ED:C7:B8:BC:18:15:3D:91:FC:87:53:9E:E0:AF:8C:08:D1:17:2F"}}},"request":{"raw":"GET /releases/v6.5.0/webfonts/pro-fa-solid-900-12.woff2 HTTP/1.1\r\nHost: kit-pro.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nOrigin: https://larozza.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 13 Jun 2026 12:56:22 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 13728\r\ncf-ray: a0b14146bdfc5684-OSL\r\nx-amz-id-2: JSPIz30ZuEfFkbF1aJMJXkuxpp7gJUb27sYfOG2E/DILCm8q8h2KEKgyxUlox/4UXmUhKoJrIgdOiTmT7ROQlmCTYk3pvKBH\r\nx-amz-request-id: TM8QESP57MTH491A\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Mon, 27 Nov 2023 23:01:27 GMT\r\netag: \"e8c7ebc4361e0b3afeeefe64a791fa0c\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31556926\r\naccept-ranges: bytes\r\nage: 71389\r\nexpires: Sun, 13 Jun 2027 18:45:08 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13728,"size_decoded":14499,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13728, version 773.256","md5":"e8c7ebc4361e0b3afeeefe64a791fa0c","sha1":"e20108880d8c78fe84f34848d9aada5069da2744","sha256":"42f30464125806b64c09da0030e090375090c496f07d6d793c103e33b42c32be","sha512":"881cebac12688c4c7442aaa36455bc4b0f9fc6253cc9ca5c994686b74069c3bf099bafcb13c7b39cb7654b3442e1298a3978eb0a25146f1768c667fc71c8d2fb","ssdeep":"384:wS+SllpyFQKSzdFUxhtISUNFKwh9/SZVR:QS06KSzdFUmj9Kx","tlshash":"8452d02d698fab5fb3e7f937df2cca1404eca9a901d4c0aa00db698179847f65a000c1","first_seen":"2023-11-30T09:45:59Z","last_seen":"2026-06-14T22:40:54.678477Z","times_seen":95,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":1,"connect":4,"send":0,"wait":15,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kit-pro.fontawesome.com/releases/v6.5.0/webfonts/pro-fa-thin-100-0.woff2","fqdn":"kit-pro.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:22.799Z","timestamp":1781355382799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 21:57:31 GMT","end":"Wed, 15 Jul 2026 22:57:28 GMT"},"fingerprint":{"sha1":"AF:65:F8:6C:70:82:CB:7C:3C:AD:4D:54:65:50:3B:13:F0:3A:0B:2E","sha256":"2A:78:5B:B0:CC:FA:C9:8B:51:86:B1:FA:62:ED:C7:B8:BC:18:15:3D:91:FC:87:53:9E:E0:AF:8C:08:D1:17:2F"}}},"request":{"raw":"GET /releases/v6.5.0/webfonts/pro-fa-thin-100-0.woff2 HTTP/1.1\r\nHost: kit-pro.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nOrigin: https://larozza.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 13 Jun 2026 12:56:22 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 16296\r\ncf-ray: a0b14146bdf75684-OSL\r\nx-amz-id-2: AhnFbCNWxRdM12fSyfExDusYdwOWrA71VDL3vt5kcpLQsjAc90cwYZywCujv5PTnxxuZZvLnRt1LP3cthBaY9evex5uUNjrP\r\nx-amz-request-id: TM8VZBW5CE1GEH6F\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Mon, 27 Nov 2023 23:01:27 GMT\r\netag: \"9d29c672cd441b9377052221e79b60ee\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31556926\r\naccept-ranges: bytes\r\nage: 71389\r\nexpires: Sun, 13 Jun 2027 18:45:08 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":16296,"size_decoded":17067,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16296, version 773.256","md5":"9d29c672cd441b9377052221e79b60ee","sha1":"bd878c4304c0e418979c81f065a66a6b93e4d536","sha256":"4bd3eec048162cbeb3d2fa94b64f48766517a10d23e69f3e67dacc1eaef70747","sha512":"9ac56f639654a311ef46433cf939e4459bcffbb672b7cbd652b89fbf72154ca8569eea3379308bad8d1dc11a2d5b93fdaab23c03d3e0aaeb9af6415d90392a7b","ssdeep":"384:g1wmPPzWWy8aWoT5Gx2fLmdGBfg0pU0n3o0oftlJJMbB:EPPzWRfWoVe2yYBo0Ln3o0u8bB","tlshash":"a072d082ef0cfba24ec2de7a677173338778617407a4939f80756982b4ba044052e93e","first_seen":"2026-02-15T10:58:41.671695Z","last_seen":"2026-06-14T22:40:54.646291Z","times_seen":71,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":4,"send":0,"wait":18,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.asia/templates/echo/css/animate.min.css","fqdn":"larozza.asia","domain":"larozza.asia","tld":"asia"},"ip":{"addr":"172.67.196.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:23.056Z","timestamp":1781355383056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.asia","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:01:11 GMT","end":"Sun, 06 Sep 2026 16:59:31 GMT"},"fingerprint":{"sha1":"7F:15:78:6F:D0:BC:13:B0:8C:63:98:3B:5C:EC:44:8E:E4:3B:50:00","sha256":"FB:BD:1B:8D:30:5C:14:A8:5E:7C:E2:25:40:8B:74:65:C5:E3:8F:3B:C4:E7:9D:14:2E:50:27:96:97:69:18:C5"}}},"request":{"raw":"GET /templates/echo/css/animate.min.css HTTP/1.1\r\nHost: larozza.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:23 GMT\r\nlocation: https://larozza.beer/templates/echo/css/animate.min.css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rr2sDtwPiSpo8MnBVy2Pp9v2yJoglAXriQZGwGVFWawxdct3bPYl4HQiTklfNLqOu95v5G0ssSUjUdLg0DaMOy0M2ocJY7JE1r1lN7hSOnQnFCXCV9a0ATMNeHDKhaI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b141482a44b4f9-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/css/echo.css","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:23.118Z","timestamp":1781355383118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /templates/echo/css/echo.css HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:23 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 11 May 2025 03:28:35 GMT\r\nexpires: Sun, 12 Jul 2026 17:07:53 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 71309\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0mfKMjwEMR4HFZyDuvA4vobkYLuPCk9vjXSMxW8hvGEVINvcWqpAY%2BTHINSAVr8OLq5AIO6l7zHcULjV0kC7ZvKdEKBWECpRD7kJfUHUPMX%2Fe9qh7bI9Wwz7Ob4IjZ4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i=?0\r\ncf-ray: a0b1414878a24e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231901,"size_decoded":39293,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"eafa4f38993f82b4a441e86edb00d14d","sha1":"d1d6baabe96dea08e846fa110374faa6ee780c39","sha256":"434014d37d43be23563714b36e73790ec11a50257d77074800c5672929417a1f","sha512":"d0112659a0e413a370a729ea1b24b0e304cb3f05010536717e33b4fd7d3d6fba120b6372a5427d150c778537564aaaf302c23eee47c6eb06594d026cdde52575","ssdeep":"3072:Cj/4qPCi1YfBN0ucn4/ULcSLyygLdWxAnZm4T1hbtEhND2INcmeF1ppwG2wxnCEt:gp0","tlshash":"b034ef62de1910422a33e375f7538662fb2841a3d20245bcfade654c9fe958c816efcd","first_seen":"2025-12-01T12:12:30.063869Z","last_seen":"2026-06-14T22:40:54.630425Z","times_seen":81,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/js/jquery.autosize.min.js","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.125Z","timestamp":1781355386125,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /templates/echo/js/jquery.autosize.min.js HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 26 Oct 2015 20:49:22 GMT\r\nexpires: Sun, 12 Jul 2026 17:07:54 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 71311\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tmk%2FIwCSJFEs%2F9Ffjzk1q%2BRzFa5We2Jy7HkN35hQxUqxeFhXdpe2h6ZRNuPthzLgu9SDG%2F7cvFIHhoEPOryYXJt7O62Xhxd6C1r9tTQ%2Bzep%2FhrB6Jv8IxruJxvL1CXc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a0b1415b4b0a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3294,"size_decoded":2375,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3078)","md5":"9ed349bf05fc62b911a41f960dd72fbd","sha1":"aafd0a174e1ab3955a380f304f75af7eecea54f2","sha256":"b796706804d02d43f6f0155d2518bd4a3710cf6125cd410f544b5d1e49488de6","sha512":"13416ed74fae6fd3dad05483f9fce633fc91c6fcfa03a816c59653842e7e09d80057c11b1e3abe5e7c1ff71a3c97dd82a43a7550af996d8c505c7cf5720b03df","ssdeep":"","tlshash":"3c61657b7306682071ee4792345f7b1e2051621ee343c0b9e23599b82eebcdb3516b76","first_seen":"2023-03-07T22:09:15Z","last_seen":"2026-06-14T22:40:54.656626Z","times_seen":192,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/js/jquery.dotdotdot.min.js","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.129Z","timestamp":1781355386129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /templates/echo/js/jquery.dotdotdot.min.js HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 11 Jun 2014 00:45:30 GMT\r\nexpires: Sun, 12 Jul 2026 17:07:54 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 71311\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cAg1wnTWIisKtozn9s%2BJpy70po4bsKRmms%2FsKuByN0HMXxTm1kJMSDGpViz9CEt7c2M1Ed%2BhxdpAqeNN9t1pzbpqNQKFdxyBwAcSVvEhEa6xT7h%2BXXRKSEjcVkDgs%2FI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a0b1415b4b0e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":6132,"size_decoded":3404,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5838)","md5":"6b4734aabd14811a99577bfe10db0d5e","sha1":"90adab868196e7ff9d6eff0ab50d5c67b9a75606","sha256":"0d7770062cc8a60f6e6ba27df94918a8822519755eb1765bd25a4f55a3f25c0a","sha512":"dc5658cf66c6592ad24f78f252be4377bc1592024901518185ea67c1089e3c36d676bc195600775f4da89800a3e2afca20cee7bed4151fb3ce74461cbc670e10","ssdeep":"96:b39M2+WAAAjUJOdLYuCISkT78JcUSHER3F7u3AD1Pld/VNO3SM:62eVUUZCDq78JlwyDp/VQ3SM","tlshash":"93c196a871e2346f96bb607c005ff507f3369921c48e4100e28d99a47e78d4d1b6bfad","first_seen":"2023-03-07T22:09:15Z","last_seen":"2026-06-14T22:40:54.6662Z","times_seen":207,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/uploads/thumbs/7ff1bef2b-1.jpg","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.553Z","timestamp":1781355386553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /uploads/thumbs/7ff1bef2b-1.jpg HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HBck0YdWmkqpkbvg2YDxri6t5hFg3p2JAAPP47DTUEP2tqmRSRuVfh3sH9duHed%2FXSzAsHi4vucvboboE2SoUbtajwMwfZ3RZWpixirl%2BJ93NCCmAr3I%2Fw3%2B3CZEO5E%3D\"}]}\r\nlast-modified: Mon, 08 Jun 2026 14:30:37 GMT\r\nexpires: Tue, 11 Aug 2026 19:00:52 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 64533\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-length: 35838\r\ncf-ray: a0b1415dfb924e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35838,"size_decoded":36735,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 800x450, components 3","md5":"9c8389023a983113b3de9d4bfdde8a11","sha1":"07c43e317977d34b1e0b49197b6fec157efb6c10","sha256":"2068d72ef5443843423dce1d79c1b8451d218a49d8521de79319315f72f04859","sha512":"a229d260afdca945a1e775fd493fd3e5530b22e6c555a2f9c7ae540cc642c033c84f5df83765d2c97b3aaf166d1303e90c7cd746545f288a56475289f689d465","ssdeep":"768:GLLsozCTbzCJcCAN0U3riYiAxAiZrwoPEcSC5wuc50a8G//PLsL:4LsoKzZpiYiA7xwoPEo5xDGPLsL","tlshash":"78f2e0238c55b6c6f62a93cabc171d9f590c5798f8083fbb201692db3c58d77580f12a","first_seen":"2026-06-13T12:56:59.437847Z","last_seen":"2026-06-13T12:56:59.437847Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:22.785Z","timestamp":1781355382785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /ajax/libs/jquery/1.11.3/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33507\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 12 Jun 2026 14:34:51 GMT\r\nexpires: Sat, 12 Jun 2027 14:34:51 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 80491\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":95992,"size_decoded":34490,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32038)","md5":"f03e5a3bf534f4a738bc350631fd05bd","sha1":"37b1db88b57438f1072a8ebc7559c909c9d3a682","sha256":"aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947","sha512":"8eeeaefb86cf5f9d09426814f7b60e1805e644cac3f5ab382c4d393dd0b7ab272c1909a31a57e6d38d5acf207555f097a64a6dd62f60a97093e97bb184126d2a","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"1793d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:02:11Z","last_seen":"2026-06-16T17:20:36.812569Z","times_seen":25638,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":15,"receive":15,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/css/bootstrap.min.rtl.css","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:22.822Z","timestamp":1781355382822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /templates/echo/css/bootstrap.min.rtl.css HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:22 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 14 Apr 2016 20:16:50 GMT\r\nexpires: Sun, 12 Jul 2026 17:07:53 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 71308\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SaIEyhr9WCa%2BQqUPW6%2B9jfwU6TvTUjJ%2FGhInZfe1hJSm717zfIwxl5iRBC2w6V5daUZe8hpkTPbimwqEFtzZrXEwqdCbI1Sb0teUu8NpNIMu1v2S%2BBXKSyflk9wLrJM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a0b14146b8534e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34818,"size_decoded":5646,"mime_type":"text/css","magic":"ASCII text, with very long lines (540), with CRLF line terminators","md5":"50650996f24f8595aca871946cf4bfc7","sha1":"7fa88ac85d0f97dcd3c80c62a62dca78aedf73f2","sha256":"16725d7575da85e45223fc328ae010003775db250fda7bfdec9dc1e1676437a4","sha512":"5e1703ad4922c54176c14ccdf7a25de5c6a9c995dc969e56a77d1aa322513cb1541576b94f9eb73f6cd49ad063c85025a1d04f908a4215330eb5de6b65fb5933","ssdeep":"384:3+tv2XFJh7Laaijc2+vnRLWC+1CxOVK2Mho:3Q27DijczBWC+1CxOVKRo","tlshash":"c1f2a0c88e311944b171c7bfb7a28c46ab1530a7a67bd8a3f6e17d52fb295050423dcb","first_seen":"2023-04-07T18:47:56Z","last_seen":"2026-06-14T22:40:54.646897Z","times_seen":350,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.beer/templates/echo/css/jasny-bootstrap.min.css","fqdn":"larozza.beer","domain":"larozza.beer","tld":"beer"},"ip":{"addr":"172.67.208.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:23.080Z","timestamp":1781355383080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.beer","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 23:03:00 GMT","end":"Thu, 10 Sep 2026 00:01:24 GMT"},"fingerprint":{"sha1":"9D:0C:CB:2C:C5:07:6E:C1:0F:4C:A2:D5:BA:B1:45:21:38:92:F3:11","sha256":"21:88:78:BD:1E:F8:A4:F4:F8:9D:C1:DE:D4:0C:63:28:3B:6A:9B:F7:BF:BC:3E:BD:B9:99:08:81:E3:47:19:A4"}}},"request":{"raw":"GET /templates/echo/css/jasny-bootstrap.min.css HTTP/1.1\r\nHost: larozza.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:23 GMT\r\nlocation: https://larozza.casa/templates/echo/css/jasny-bootstrap.min.css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sTsxd4TsyUBKUyvMdXtc8cqsTCg8LRg5j8GHfR9jjRdDy4QcU7ewkE%2Fl9xcpJVceM6B%2BALJaJ2A2ABLuFFaOOkpsApVb%2BXxWDsRJ2io3itlQTBBFryFV21mxoAqPzbQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b141485aa9b515-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":4,"connect":9,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.yachts/moslslat4.php","fqdn":"larozza.yachts","domain":"larozza.yachts","tld":"yachts"},"ip":{"addr":"104.21.60.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-13T12:56:16.970Z","timestamp":1781355376970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.yachts","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 16:43:14 GMT","end":"Wed, 02 Sep 2026 17:40:52 GMT"},"fingerprint":{"sha1":"D3:94:4B:AC:C1:BE:64:31:DA:B9:E5:4B:53:9C:72:04:4C:F1:23:E9","sha256":"1D:FE:10:7C:38:4B:FF:2A:10:EA:18:79:FC:F7:96:13:E1:5E:7E:49:CB:9D:39:FA:AF:A5:D3:8E:8C:EE:87:C4"}}},"request":{"raw":"GET /moslslat4.php HTTP/1.1\r\nHost: larozza.yachts\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 13 Jun 2026 12:56:17 GMT\r\nlocation: https://larozza.surf/moslslat4.php\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=js5pKCtiUtwbL00DJE2qTCpzvXAcaHNkrt7cuaZn%2FQeS%2BA70e6VHzK5h8dMKtuIijWGzLgJV3hbhyHvxarYwzutffTPyoI6bL6YSp%2BPcaZDu5HTrytB3sKq8JQt2EUONrQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0b141228bbba41f-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-16T17:50:43.021957Z","times_seen":16476669,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":59,"connect":11,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.yachts","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kit-pro.fontawesome.com/releases/v6.5.0/webfonts/pro-fa-solid-900-0.woff2","fqdn":"kit-pro.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:22.793Z","timestamp":1781355382793,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 21:57:31 GMT","end":"Wed, 15 Jul 2026 22:57:28 GMT"},"fingerprint":{"sha1":"AF:65:F8:6C:70:82:CB:7C:3C:AD:4D:54:65:50:3B:13:F0:3A:0B:2E","sha256":"2A:78:5B:B0:CC:FA:C9:8B:51:86:B1:FA:62:ED:C7:B8:BC:18:15:3D:91:FC:87:53:9E:E0:AF:8C:08:D1:17:2F"}}},"request":{"raw":"GET /releases/v6.5.0/webfonts/pro-fa-solid-900-0.woff2 HTTP/1.1\r\nHost: kit-pro.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://larozza.casa/\r\nOrigin: https://larozza.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 13 Jun 2026 12:56:22 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 12000\r\ncf-ray: a0b14146bdf25684-OSL\r\nx-amz-id-2: BgrKmo/B4VUZo1PLAWsi6ZhdvXzHnL+80MFKI/LhR0J+cBbzgD065O2VdIg4Xyy7gFa4P2i91vTadUi5K0azRGoB4kdmXnS1\r\nx-amz-request-id: TM8REF1GWEH4Y3JH\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Mon, 27 Nov 2023 23:01:27 GMT\r\netag: \"842ef44c4047b63357b6df2ce03babca\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31556926\r\naccept-ranges: bytes\r\nage: 71390\r\nexpires: Sun, 13 Jun 2027 18:45:08 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":12000,"size_decoded":12771,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12000, version 773.256","md5":"842ef44c4047b63357b6df2ce03babca","sha1":"32c043423c0f878780d6a41e99c33e75d95be2f0","sha256":"2cd7e514b3b1cca39aeb6c8aaab585115bcbd0b0994175df09b2f4af9b965042","sha512":"33cb4ab95d32d7e0d3c36233f7f7d8d1e2bf71880eda65876c511c41869b2bafb00810786e15aad48bc8553bf67abbeb3b85fe68834ac99de8025b0f3daaa9ec","ssdeep":"192:OuBcVtgQjqPapiXXvZMx0CbEn9kbvreZhJABPQ4qbVQL3N6ct+nYpd8t4ssYxIj:OuYtgQOiiXXvZMCCYkbgPABPQc6ctFpz","tlshash":"ed42d01cb5e280c39e5f1de1d71580e00e0e2ab91297eed907e5c6a2209bdc5bf7d2c1","first_seen":"2023-11-30T09:45:59Z","last_seen":"2026-06-14T22:40:54.659742Z","times_seen":93,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":19,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/js/melody.dev.js","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.132Z","timestamp":1781355386132,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /templates/echo/js/melody.dev.js HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 20 May 2016 20:02:04 GMT\r\nexpires: Sun, 12 Jul 2026 17:07:54 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 71311\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aSQSD98f06gut226choAuF560QPs99e4lXh%2BqLPZu8sTxGYm%2BzoGYTeoJulUB%2F7NinP0hHUhMKJagdQhHmt3BQYbuG%2BUGaABYePdCB7S%2BvBsw2nqTofZpwSmDHXFOxc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a0b1415b5b134e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8115,"size_decoded":3350,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"f16ddba6cfd4b23c8805f081b5208e97","sha1":"e3dd2e263d7f91f186f9e94a34819160f48aa0f9","sha256":"5097b66df85f7531b55458ec610342f211179ae8f5981c5eeb4706bf7f37c995","sha512":"4a8a3f83cd3b0e03f5106fd2817b06e0baaf6b9796ffe44452b4098c5873155476578325688189ae813528c47738df9ec25c09a9bdb4e9c23fe7799a215e701d","ssdeep":"192:EcGikGJsJb9wbyN3DkPMnBE4c+mqa5F+DiiN8lwwfJiN8lwwb:f4xiyN3DuMnBBmL+ML+u","tlshash":"5af15399b39d679eccf63262553e9404cd3ec1228203c2687d3d61941fe8ec52676bae","first_seen":"2023-05-01T20:12:26Z","last_seen":"2026-06-14T22:40:54.642381Z","times_seen":90,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/templates/echo/js/jquery.ba-dotimeout.min.js","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.141Z","timestamp":1781355386141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /templates/echo/js/jquery.ba-dotimeout.min.js HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 20 Apr 2016 19:27:00 GMT\r\nexpires: Sun, 12 Jul 2026 17:07:54 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 71311\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EYbjnWEDoLD1lgsx%2B5neXiCSiMQUqdjc%2FTIcIRY4k7w%2FYn1H1DEQRNxJBw4Vl2xQ%2FtNUT3%2FYKOSl%2BxdRlMkVpAyWj%2BoetrgMYUYgLOvUnCYxAdxjkt1nKdnzjRaXI0g%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a0b1415b6b194e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":801,"size_decoded":1369,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (801), with no line terminators","md5":"bc4ce95f630d8af029f161567488720b","sha1":"97359ec70486dedc0c0fd6a0f08330b702d4ec5b","sha256":"e383064a90ede5941f313745e99b6f5d5ae9c6a6007959e6a2d2b97b513bf6e0","sha512":"759f5b6d1ef08e89365db2f9b30d1d580488f77ef4eb9f247178583ab6635ae4e1ae388940672bf01d078481dd31debdf9b1dbcec763745a0c17230f86917900","ssdeep":"","tlshash":"8301f1e6b09271439fba2131607f83a59737d56132c84684b48361a05e358194413f7c","first_seen":"2023-03-07T22:09:15Z","last_seen":"2026-06-14T22:40:54.661027Z","times_seen":221,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"larozza.casa/fonts/BoutrosMBCDinkum-Medium.ttf","fqdn":"larozza.casa","domain":"larozza.casa","tld":"casa"},"ip":{"addr":"104.21.58.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://larozza.casa/moslslat4.php","date":"2026-06-13T12:56:26.193Z","timestamp":1781355386193,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"larozza.casa","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 16:05:25 GMT","end":"Thu, 10 Sep 2026 17:02:41 GMT"},"fingerprint":{"sha1":"6B:2E:1B:7D:D3:B0:DE:A1:A7:16:D1:52:27:26:01:7D:69:F0:6A:34","sha256":"EA:E6:B7:99:B0:18:1E:F9:57:03:B2:B6:B5:AB:79:5A:EA:E6:46:18:22:26:DA:E6:89:FD:52:3C:D9:1B:D6:D6"}}},"request":{"raw":"GET /fonts/BoutrosMBCDinkum-Medium.ttf HTTP/1.1\r\nHost: larozza.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://larozza.casa/moslslat4.php\r\nCookie: PHPSESSID=f3c6075ffa4537a7ba3ea2942e861935\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 13 Jun 2026 12:56:26 GMT\r\ncontent-type: font/ttf\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Sun, 18 Nov 2018 11:59:34 GMT\r\nexpires: Tue, 11 Aug 2026 17:08:18 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Ctk0FxADjKAD0EIQn8zN0L3HYzsoz%2Bvzs%2BmZxRe3%2FcFQB7aV0xg%2FwHxV4BxHm036cZRgdkz65jGDqLxs0OX9FOo2QTTuxt6kK1I8tmX3mnijsQ7lkCD5mPQUaKeVSI%3D\"}]}\r\nage: 71288\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a0b1415bbb264e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":69144,"size_decoded":32193,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 16 tables, 1st \"DSIG\", 30 names, Macintosh, Copyright (c) Boutros International, 2017BoutrosMBCDinkumMedium1.800;1BOU;BoutrosMBCDinkum-Mediu","md5":"c64d444ae59dbbb03dfaed116a2bee88","sha1":"ab1bd3278cc2b940667bff060aed2adcc6fdb7c7","sha256":"a899efa55d2e7b66864b54c687c6a97886cd37657bf2d287a152812334481956","sha512":"a10f694c0c973c80502129158723bb007b0c7d85242f201fae37532e255fa27d3b29558f6e90564724efcd29d77a6d3e8a5df84acd5e0bdd159e6b2192de2c23","ssdeep":"1536:rgNe0zzzzzkX5mb+ozgGzPK2UZ/H9N6Ry5acf+:VxXE+oznzSRZvr5b+","tlshash":"5c633c01e3b1e149e4a9bf784525d72b62bbba28d93f43af8e4a05ec948f5914c5f301","first_seen":"2024-08-20T13:50:00.692099Z","last_seen":"2026-06-14T22:40:54.638041Z","times_seen":95,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"larozza.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}
