{"report_id":"e8e1c01d-241a-4018-9ed2-dbc811eae922","version":0,"status":"done","tags":[],"date":"2026-10-08T00:27:39Z","url":{"schema":"http","addr":"femmedica.pl/","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"final":{"url":{"schema":"https","addr":"femmedica.pl/","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"title":"FemMedica - Gabinety Ginekologiczne","dom":{"size":13584,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (787)","md5":"e4f4fa217c078341a0c0575babe2e2b2","sha1":"546d1cd6d7b91a6f0caddfff6fcc11d2bef9d332","sha256":"4a45db147e13dfd9175abb272063a64384e2113afac1fd8e584e690b5c5bf8f6","sha512":"61f1e82715c3f4be52e1f23f61cec83120e00998b7f15cfd55c9de792e92afa2b026130d2c3d6f60429c8c1ac3da490f6a96f068d248bac58d07d8a30c7478ee","ssdeep":"192:LLkiJYjxAgCEDAbgpsD03DPfS9SxhZny7vJzXUF:fMjxAbzgX62","tlshash":"1e527131d5e8c437214741fd74616f5eedda5a0bea0a5e38b1fe02a02fd3e866823589","dom_hash":"domhash2140752cdc8f8286ce06e16b5a5be387","first_seen":"2026-10-08T00:27:43.631454Z","last_seen":"2026-10-08T00:27:43.631454Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"femmedica.pl/","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-12T00:27:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"femmedica.pl","ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"domain_registered":"2018-04-26","domain_rank":0,"first_seen":"2019-05-17T00:37:42Z","last_seen":"2026-08-05T01:50:52.374334Z","alert_count":56,"request_count":28,"received_data":1356100,"sent_data":13607,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:1.11.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-10-05T08:57:44.698487Z","alert_count":0,"request_count":1,"received_data":96976,"sent_data":484,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"femmedica.pl/js/jquery-1.11.0.min.js","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"52d16e147b5346147d0f3269cd4d0f80","sha1":"4566b5815f47f976c7c3d3083c600ad5561b6fc0","sha256":"2e945ebcd9b955e7c543ba4ad41e8f7779a077b482a0207db74bd6ded2021d17","sha512":"0fe5de77f19213aed8b6db18fc80f80fcea320e1c97cee40dec9cf5187c0c13237bc94f110071fc27a685920ffbcd71643cf41753f744773afd02784a1a0432f","ssdeep":"1536:EPpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jqkODZ2D5N9Rag0MOIdSZAgtgoX5Y/:bIO/e2D5c4LgtImLja98HrA","tlshash":"0093e8d9b6d2706297b730a851bf510bb17698eab80c4c60f058d8e47eb4e8d507bf2d","size":96380,"data":"","first_seen":"2023-03-07T01:18:53Z","last_seen":"2026-10-08T02:41:08.793634Z","times_seen":3144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/js/lightbox.min.js","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd614a6e54383b733dbe5e20ba7859a5","sha1":"128273a9c66a32d7d59a6f290deb6cc4a2b2ee5a","sha256":"6c8abd074d9c4f8b738945503c713ca0f39eefd42421b7902cc3b6ac83d954c2","sha512":"94c79515a63600c49846391e05d9f424e872679acbdffff0a21130a6e1348991ce9b326500e58c51aca170995fa26207caa76f10d7056720a031b19d0f9dce7d","ssdeep":"96:tov6PTK8IGftdKcaevYgzozT9piR0CJKTYm0mt0ey8/IwCR04BLNKZG:+v6PTddKJevYgczJcyYPSSBqG","tlshash":"bdf15305fb202039ea6e40d7311b5b26133a6636be07da6d743cc6e959f0d44597bf38","size":7800,"data":"","first_seen":"2023-03-07T12:03:44Z","last_seen":"2026-10-08T00:27:43.654142Z","times_seen":943,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/js/ie-emulation-modes-warning.js","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"eeae8e727506b74e63a540d9dbeb9719","sha1":"cb2d9ab24e79ace7d1158b4017f988b2d822c013","sha256":"4865ffd276f3237560a277196880f84db333e25601ea68a9f97e8eeeab4d1763","sha512":"9945380890c6ebbf19b7c27339adcffd80ff18852cf50067ea6c6015a405cbfe2918ad8a08ed11e49c28fa61b11860841d870c9b7913503cb1723e3b4f0420ee","ssdeep":"","tlshash":"5d41f1ae1931a2630332a769c76be004f37b431227159434b8cdd6112b72da9533acea","size":2179,"data":"","first_seen":"2023-03-07T12:11:36Z","last_seen":"2026-10-08T00:27:43.634779Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f03e5a3bf534f4a738bc350631fd05bd","sha1":"37b1db88b57438f1072a8ebc7559c909c9d3a682","sha256":"aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947","sha512":"8eeeaefb86cf5f9d09426814f7b60e1805e644cac3f5ab382c4d393dd0b7ab272c1909a31a57e6d38d5acf207555f097a64a6dd62f60a97093e97bb184126d2a","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"1793d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95992,"data":"","first_seen":"2023-03-07T01:02:11Z","last_seen":"2026-10-08T02:26:11.81262Z","times_seen":28694,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/js/bootstrap.min.js","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7d9a06cf9053c51cd4ad3386da0659a","sha1":"e45bf1054704a1fdfc4ee2713a16bf9283dea995","sha256":"9a3724b2051a82064c923cbd68343dcb04014adac3ccb8c4d8ac6a31ba2e12cd","sha512":"62d02aa363b048e9355fe47cae7e42045488157c7dcff504807b963a9358fb72a12a262398a97323ab3e77b95a34fe13e089028672fce7055be70740be926402","ssdeep":"768:28iUD27UwlNEMl9RqNuCqNjhqg8epm5VCoFXflY8Gf3ZsbQ:1875vhqKGvl+3ZsQ","tlshash":"f9f29606b23031a107efb1e1525b020a7239696ee906907c78b99af53db9c48717bf3d","size":36822,"data":"","first_seen":"2023-03-07T01:10:31Z","last_seen":"2026-10-08T00:27:43.64704Z","times_seen":5184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/js/ie10-viewport-bug-workaround.js","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb70061bb97adbe73f7a82e851d94611","sha1":"4298dbe9b38428a76c410ad346f55a16d2e75ec5","sha256":"4c47a96380865bff32cb084e596fbba52f3ba44ff7c2eb92c6ff2885ceb8785a","sha512":"b50c43d716a84aa1cd42131da498a9686b3aac9f7d7722144fbbcfa00bfb641ba5b250e3217703c3b4a70631f70278c65803d51c243b92fe7f776ad8c383d6a2","ssdeep":"","tlshash":"9f019959571050ae0a73126ba46b67c5faa41143eb9b649638de5f985f30c83102bc9c","size":662,"data":"","first_seen":"2023-03-07T12:11:36Z","last_seen":"2026-10-08T00:27:43.658708Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"femmedica.pl/js/ie-emulation-modes-warning.js","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://femmedica.pl/","date":"2026-10-08T00:27:09.509Z","timestamp":1791419229509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"femmedica.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:14:49 GMT","end":"Fri, 06 Nov 2026 20:14:48 GMT"},"fingerprint":{"sha1":"22:6D:13:EB:31:45:D1:90:02:5A:55:EE:4B:F1:2E:4D:D5:8A:23:2C","sha256":"3D:64:E6:20:A9:AC:C5:6A:AC:FF:C3:DB:96:43:6A:15:E9:6E:C7:AD:EB:6D:86:A1:26:25:9C:5D:91:BD:6E:33"}}},"request":{"raw":"GET /js/ie-emulation-modes-warning.js HTTP/1.1\r\nHost: femmedica.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://femmedica.pl/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 30 Nov 2020 13:28:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 951\r\ndate: Thu, 08 Oct 2026 00:27:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2179,"size_decoded":1187,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"eeae8e727506b74e63a540d9dbeb9719","sha1":"cb2d9ab24e79ace7d1158b4017f988b2d822c013","sha256":"4865ffd276f3237560a277196880f84db333e25601ea68a9f97e8eeeab4d1763","sha512":"9945380890c6ebbf19b7c27339adcffd80ff18852cf50067ea6c6015a405cbfe2918ad8a08ed11e49c28fa61b11860841d870c9b7913503cb1723e3b4f0420ee","ssdeep":"","tlshash":"5d41f1ae1931a2630332a769c76be004f37b431227159434b8cdd6112b72da9533acea","first_seen":"2023-03-07T12:11:36Z","last_seen":"2026-10-08T00:27:43.634779Z","times_seen":6,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/js/holder.min.js","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://femmedica.pl/","date":"2026-10-08T00:27:09.747Z","timestamp":1791419229747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"femmedica.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:14:49 GMT","end":"Fri, 06 Nov 2026 20:14:48 GMT"},"fingerprint":{"sha1":"22:6D:13:EB:31:45:D1:90:02:5A:55:EE:4B:F1:2E:4D:D5:8A:23:2C","sha256":"3D:64:E6:20:A9:AC:C5:6A:AC:FF:C3:DB:96:43:6A:15:E9:6E:C7:AD:EB:6D:86:A1:26:25:9C:5D:91:BD:6E:33"}}},"request":{"raw":"GET /js/holder.min.js HTTP/1.1\r\nHost: femmedica.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://femmedica.pl/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 30 Nov 2020 13:28:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4965\r\ndate: Thu, 08 Oct 2026 00:27:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9426,"size_decoded":5202,"mime_type":"text/javascript","magic":"HTML document, ASCII text, with very long lines (3909), with CRLF line terminators","md5":"04d202d6b970bfc2b1c545a204e3abed","sha1":"1b0f289573dea8851ebd8936853833cd2d8e1362","sha256":"5b7b35ae0ddd7bbcdb2436d0a7030f76c2417f6ea1a97b87ef2f3826c65735af","sha512":"e96cf46d11cf49c116d1019482b2c17c30ae6ad225db34953322fc6a5ba8cc8893d294b7f758966dde275bd2b60f7eea00f701eedd7dc8ee7776d0c306de7429","ssdeep":"192:yA31t/JnkIJ/odCALQDUnulGVopLAvVALQD6vnglET31iCLL39:O033DUulGmm93D6vglETliCfN","tlshash":"be126c7e19c93708c4328b15bdb2679dff25440f9a861b6ab5ad1313cfaad10a153bcc","first_seen":"2026-10-08T00:27:43.63601Z","last_seen":"2026-10-08T00:27:43.63601Z","times_seen":1,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/images/slider/4.jpg","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://femmedica.pl/","date":"2026-10-08T00:27:09.761Z","timestamp":1791419229761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"femmedica.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:14:49 GMT","end":"Fri, 06 Nov 2026 20:14:48 GMT"},"fingerprint":{"sha1":"22:6D:13:EB:31:45:D1:90:02:5A:55:EE:4B:F1:2E:4D:D5:8A:23:2C","sha256":"3D:64:E6:20:A9:AC:C5:6A:AC:FF:C3:DB:96:43:6A:15:E9:6E:C7:AD:EB:6D:86:A1:26:25:9C:5D:91:BD:6E:33"}}},"request":{"raw":"GET /images/slider/4.jpg HTTP/1.1\r\nHost: femmedica.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://femmedica.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 00:27:09 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 30 Nov 2020 13:28:19 GMT\r\naccept-ranges: bytes\r\ncontent-length: 136642\r\ndate: Thu, 08 Oct 2026 00:27:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":136642,"size_decoded":136910,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x664, components 3","md5":"5baef5e10e0b94854c427bbf3ae49119","sha1":"c90434b767619980925a80a304f978d79c58171c","sha256":"f0df2a27e32925caa538ca4e74e037288d1a4885360885e4e9a809ee879384e9","sha512":"9b480a70186d6c648709adf859dad89578cc35938180cb731625338aca4bd6142a6d1d5a8020946a3fe37c7d96b6f3eba0f799d0a6e06927d67b68edd8986bf2","ssdeep":"3072:Bl/9b/FLp/IddGc6Z1YFuEM1CpIwseYCbHWHFzUO/hZ0g:Bl/x1tIrG+uSGeYCzWH6OYg","tlshash":"cdd312cb03ddb75969cbb1a2c04279608e1e1e98948fde6353f0e0d4bbc12f84d97669","first_seen":"2023-07-18T00:32:27Z","last_seen":"2026-10-08T00:27:43.637143Z","times_seen":2,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/images/logo-femmedica.png","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://femmedica.pl/","date":"2026-10-08T00:27:09.754Z","timestamp":1791419229754,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"femmedica.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:14:49 GMT","end":"Fri, 06 Nov 2026 20:14:48 GMT"},"fingerprint":{"sha1":"22:6D:13:EB:31:45:D1:90:02:5A:55:EE:4B:F1:2E:4D:D5:8A:23:2C","sha256":"3D:64:E6:20:A9:AC:C5:6A:AC:FF:C3:DB:96:43:6A:15:E9:6E:C7:AD:EB:6D:86:A1:26:25:9C:5D:91:BD:6E:33"}}},"request":{"raw":"GET /images/logo-femmedica.png HTTP/1.1\r\nHost: femmedica.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://femmedica.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 00:27:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 01 Dec 2020 12:47:33 GMT\r\naccept-ranges: bytes\r\ncontent-length: 21644\r\ndate: Thu, 08 Oct 2026 00:27:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21644,"size_decoded":21910,"mime_type":"image/png","magic":"PNG image data, 321 x 200, 8-bit/color RGBA, non-interlaced","md5":"025843d06fce9e58799eeaf75850401b","sha1":"93b73942ebf656438e85e888b0cb5f7d5cd7d103","sha256":"66fe86c3ea4ee4867d4fbe4dd5bc06d82f2de495c4a2b83d41867d2a970bb2d7","sha512":"f8e39a0eb67d611bfc73cc0ce3724d5f8643d3649d9aa7e652f510dc905ddea6208f70ea2c4f210b5c7e525a3cadba9970ee074def174b8d5cba3cd09b839ccd","ssdeep":"384:Psn0zpGw+HfOTey6LzREaODqhU71C4I2F3v/luQ6Dt1VuxXt0USbNXzF4xkyfbGv:PsWpGr/ykLzRvtsF3vQQu1VaWRXpsky4","tlshash":"c0a2d033b27eda0667d03ddb65b24c2c9bc778658350b268f3c19816c4384abadd2e47","first_seen":"2023-07-18T00:32:27Z","last_seen":"2026-10-08T00:27:43.638424Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/images/slider/2.jpg","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://femmedica.pl/","date":"2026-10-08T00:27:09.760Z","timestamp":1791419229760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"femmedica.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:14:49 GMT","end":"Fri, 06 Nov 2026 20:14:48 GMT"},"fingerprint":{"sha1":"22:6D:13:EB:31:45:D1:90:02:5A:55:EE:4B:F1:2E:4D:D5:8A:23:2C","sha256":"3D:64:E6:20:A9:AC:C5:6A:AC:FF:C3:DB:96:43:6A:15:E9:6E:C7:AD:EB:6D:86:A1:26:25:9C:5D:91:BD:6E:33"}}},"request":{"raw":"GET /images/slider/2.jpg HTTP/1.1\r\nHost: femmedica.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://femmedica.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 00:27:09 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 30 Nov 2020 13:28:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 91407\r\ndate: Thu, 08 Oct 2026 00:27:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":91407,"size_decoded":91674,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x664, components 3","md5":"49eefd5a7f02c14db177026618c72859","sha1":"8a4b7adec19688ecdeffdd92afba1f5309f543bd","sha256":"881a54ad86919515c7491ef5ed34151d9df0ec4e4a2c57dbbf99a3762c4cf44d","sha512":"242c8dd6b7a902279c2cb358386b366cdf86e2e68b7c9dd7ec13afa55be21fc56691fcf2476fb7ccff0d06b28d9642136abfb69cdeb7b01257a8207482b9cf15","ssdeep":"1536:juIrYYL/O3w0BWQBVhbDtphfNtb0EGNenIqOA0FrIYoYhLnfZY0U:nB1E/bHlNqonULoYJe","tlshash":"bc93120957534f4accd026bc4497bf992f639021460dec864fb2e9aebc757243e5a8ca","first_seen":"2023-07-18T00:32:27Z","last_seen":"2026-10-08T00:27:43.639523Z","times_seen":2,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/fonts/glyphicons-halflings-regular.woff2","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://femmedica.pl/","date":"2026-10-08T00:27:09.887Z","timestamp":1791419229887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"femmedica.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:14:49 GMT","end":"Fri, 06 Nov 2026 20:14:48 GMT"},"fingerprint":{"sha1":"22:6D:13:EB:31:45:D1:90:02:5A:55:EE:4B:F1:2E:4D:D5:8A:23:2C","sha256":"3D:64:E6:20:A9:AC:C5:6A:AC:FF:C3:DB:96:43:6A:15:E9:6E:C7:AD:EB:6D:86:A1:26:25:9C:5D:91:BD:6E:33"}}},"request":{"raw":"GET /fonts/glyphicons-halflings-regular.woff2 HTTP/1.1\r\nHost: femmedica.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://femmedica.pl/css/bootstrap.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 00:27:09 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 30 Nov 2020 13:28:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18028\r\ndate: Thu, 08 Oct 2026 00:27:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18028,"size_decoded":18295,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18028, version 1.589","md5":"448c34a56d699c29117adc64c43affeb","sha1":"ca35b697d99cae4d1b60f2d60fcd37771987eb07","sha256":"fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c","sha512":"3811804f56ec3c82f0bef35de0a9250e546a1e357fb59e2784f610d638fec355a27b480e3f796243c0e3d3743be3eadda8f9064c2b5b49577e16b7e40efcdb83","ssdeep":"384:Y22oezK7jlf4flnEPn9+1z2DIH6r3lEsNgV:Y22oeKjlCnm9+1y8gA","tlshash":"d082d0f4ea92999085b01c37d19acb48dc87b9cef5a4d01611e4e13eb5ff8ad684c6c8","first_seen":"2023-04-05T16:42:51Z","last_seen":"2026-10-08T01:47:30.080176Z","times_seen":54098,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/img/next.png","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://femmedica.pl/","date":"2026-10-08T00:27:09.924Z","timestamp":1791419229924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"femmedica.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:14:49 GMT","end":"Fri, 06 Nov 2026 20:14:48 GMT"},"fingerprint":{"sha1":"22:6D:13:EB:31:45:D1:90:02:5A:55:EE:4B:F1:2E:4D:D5:8A:23:2C","sha256":"3D:64:E6:20:A9:AC:C5:6A:AC:FF:C3:DB:96:43:6A:15:E9:6E:C7:AD:EB:6D:86:A1:26:25:9C:5D:91:BD:6E:33"}}},"request":{"raw":"GET /img/next.png HTTP/1.1\r\nHost: femmedica.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://femmedica.pl/css/lightbox.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 00:27:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Nov 2020 13:28:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1350\r\ndate: Thu, 08 Oct 2026 00:27:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1350,"size_decoded":1615,"mime_type":"image/png","magic":"PNG image data, 50 x 45, 8-bit/color RGBA, non-interlaced","md5":"31f15875975aab69085470aabbfec802","sha1":"777e92c050f600b4519299c3d786b8f2f459fea4","sha256":"15b869b02c6fbaa8c6c26445a2dd2d9bad80fd27b1409f8179e5dd89dc89d90a","sha512":"edc920dcd2f5ac9a6e08098c6a59f888a9cb135ff4ef3dc2183931e065b6531e00e2c8acd3c329a3d90eb939ea3db318a9b677b5aa78a227815373d7008d40aa","ssdeep":"","tlshash":"c221d8f1f658249b813a8279587be1602cbf985e31b4cb8709ddbb3323b5c04e102376","first_seen":"2023-04-05T16:20:30Z","last_seen":"2026-10-08T01:55:27.309853Z","times_seen":22473,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/css/bootstrap.min.css","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://femmedica.pl/","date":"2026-10-08T00:27:09.508Z","timestamp":1791419229508,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"femmedica.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:14:49 GMT","end":"Fri, 06 Nov 2026 20:14:48 GMT"},"fingerprint":{"sha1":"22:6D:13:EB:31:45:D1:90:02:5A:55:EE:4B:F1:2E:4D:D5:8A:23:2C","sha256":"3D:64:E6:20:A9:AC:C5:6A:AC:FF:C3:DB:96:43:6A:15:E9:6E:C7:AD:EB:6D:86:A1:26:25:9C:5D:91:BD:6E:33"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: femmedica.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://femmedica.pl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 00:27:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 30 Nov 2020 13:28:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19621\r\ndate: Thu, 08 Oct 2026 00:27:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":140887,"size_decoded":19931,"mime_type":"text/css","magic":"ASCII text, with very long lines (558), with CRLF line terminators","md5":"bb19b83862707c40a6f9a3a2fb7c86bf","sha1":"f10e2eecdb6cb47e9a4b0023ec7fe9268d70c635","sha256":"c3800e930157284b37ab67d665813f689e1ba7df6c3579944f928f5b10be1ffa","sha512":"3f404ede0af92a75be199cd699a860d790abf3e5132751972de23af77eb8f261c176c104aaa9e9cd1e39e8267a8518587e4d629e91c912ef83faf2fd0a66e9c0","ssdeep":"768:fGn6XXHaMlJXXfa3IA5hsIV8UBJhTgJyXJo6ZJhfJ2AP59OdUak6AJ6P9JkFJ4I2:uG7lURdJhDf9OJdly1+huhU","tlshash":"16d36334b91331cf3393d848b7b0ad822e186146dd5f4ef2f1aa25ac43d45a93a62f5d","first_seen":"2023-07-18T00:32:27Z","last_seen":"2026-10-08T00:27:43.642161Z","times_seen":2,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://femmedica.pl/","date":"2026-10-08T00:27:09.743Z","timestamp":1791419229743,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /ajax/libs/jquery/1.11.3/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://femmedica.pl/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33507\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 02 Oct 2026 14:37:33 GMT\r\nexpires: Sat, 02 Oct 2027 14:37:33 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 467376\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95992,"size_decoded":34491,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32038)","md5":"f03e5a3bf534f4a738bc350631fd05bd","sha1":"37b1db88b57438f1072a8ebc7559c909c9d3a682","sha256":"aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947","sha512":"8eeeaefb86cf5f9d09426814f7b60e1805e644cac3f5ab382c4d393dd0b7ab272c1909a31a57e6d38d5acf207555f097a64a6dd62f60a97093e97bb184126d2a","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"1793d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:02:11Z","last_seen":"2026-10-08T02:26:11.81262Z","times_seen":28694,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":16,"receive":16,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/images/ico-navi.png","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://femmedica.pl/","date":"2026-10-08T00:27:09.758Z","timestamp":1791419229758,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"femmedica.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:14:49 GMT","end":"Fri, 06 Nov 2026 20:14:48 GMT"},"fingerprint":{"sha1":"22:6D:13:EB:31:45:D1:90:02:5A:55:EE:4B:F1:2E:4D:D5:8A:23:2C","sha256":"3D:64:E6:20:A9:AC:C5:6A:AC:FF:C3:DB:96:43:6A:15:E9:6E:C7:AD:EB:6D:86:A1:26:25:9C:5D:91:BD:6E:33"}}},"request":{"raw":"GET /images/ico-navi.png HTTP/1.1\r\nHost: femmedica.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://femmedica.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 00:27:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Nov 2020 13:28:13 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2513\r\ndate: Thu, 08 Oct 2026 00:27:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2513,"size_decoded":2778,"mime_type":"image/png","magic":"PNG image data, 53 x 53, 8-bit/color RGBA, non-interlaced","md5":"6a1686997c3d0b74ff8207e756d5977b","sha1":"b236dfdc95f57be4ce983e0d4087092d9d452a7f","sha256":"7cd61ffd91087c37a18bcc2c12ee720b50a298e9b8e447cae92ec9d2ad3cdfeb","sha512":"e10e8b6c7ad9bfcec38235c6b991267cbbd50ab1a92ffd373e78b023206337e9fc3f19f5f6ba3cdb749d01516f5e323c5fb70cb601139d1bca74522b6a829766","ssdeep":"","tlshash":"e95119d1da304aae63371daaaea75a88a7725987c7371b45383f8d4583f01fd1c6c144","first_seen":"2023-07-18T00:32:27Z","last_seen":"2026-10-08T00:27:43.643898Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/images/slider/1.jpg","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://femmedica.pl/","date":"2026-10-08T00:27:09.759Z","timestamp":1791419229759,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"femmedica.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:14:49 GMT","end":"Fri, 06 Nov 2026 20:14:48 GMT"},"fingerprint":{"sha1":"22:6D:13:EB:31:45:D1:90:02:5A:55:EE:4B:F1:2E:4D:D5:8A:23:2C","sha256":"3D:64:E6:20:A9:AC:C5:6A:AC:FF:C3:DB:96:43:6A:15:E9:6E:C7:AD:EB:6D:86:A1:26:25:9C:5D:91:BD:6E:33"}}},"request":{"raw":"GET /images/slider/1.jpg HTTP/1.1\r\nHost: femmedica.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://femmedica.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 00:27:09 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 30 Nov 2020 13:28:17 GMT\r\naccept-ranges: bytes\r\ncontent-length: 97968\r\ndate: Thu, 08 Oct 2026 00:27:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":97968,"size_decoded":98235,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x664, components 3","md5":"df37d49a75249c3a3e3ca92747688d6d","sha1":"86b872425b8b5992e2cac6c54cdac1c5fccbb6c5","sha256":"d3339d3da8e367e4c7882a0b58f1153ecf86ab78b001d64e61c66ed8738239ee","sha512":"38c108c83a45fc1f8aac602f0bd8eb0b921dbd0d68325a5dd77a555c219db31cf0e182482d7f4c04856541f64148a9d1900f6d330aad652de8a7d28913f7273c","ssdeep":"1536:jAfp2fCvnEE+/2645u/GOgRjWlokC6Yn5vxodaSrfWS/sc0QNZJOSqTcA:0ECvEO2GhZWloO4sdaSrfqcbIl","tlshash":"05a3020f57a36c6fccc40237724389cdbd5a98b47a195c0af22dea9a12f9714fd9d026","first_seen":"2023-07-18T00:32:27Z","last_seen":"2026-10-08T00:27:43.644924Z","times_seen":2,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/images/slider/5.jpg","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://femmedica.pl/","date":"2026-10-08T00:27:09.762Z","timestamp":1791419229762,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"femmedica.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:14:49 GMT","end":"Fri, 06 Nov 2026 20:14:48 GMT"},"fingerprint":{"sha1":"22:6D:13:EB:31:45:D1:90:02:5A:55:EE:4B:F1:2E:4D:D5:8A:23:2C","sha256":"3D:64:E6:20:A9:AC:C5:6A:AC:FF:C3:DB:96:43:6A:15:E9:6E:C7:AD:EB:6D:86:A1:26:25:9C:5D:91:BD:6E:33"}}},"request":{"raw":"GET /images/slider/5.jpg HTTP/1.1\r\nHost: femmedica.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://femmedica.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 00:27:09 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 30 Nov 2020 13:28:19 GMT\r\naccept-ranges: bytes\r\ncontent-length: 104391\r\ndate: Thu, 08 Oct 2026 00:27:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":104391,"size_decoded":104659,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x664, components 3","md5":"88838eff522be170897e5c523b625975","sha1":"67601c6ec8bc1c51228dc9d97c36fd88723b37a5","sha256":"e394ec583d668936008583ed71d4ca705acb98a02f1580145e9527829e35202a","sha512":"5fb5d56c4f0a2f941f2d022f1c3a69126108aa0ea293cf3d820feaccf31feba256947245ea08c89bb7287cfc7184d3abe3b8d28051285eebce02253924252ab3","ssdeep":"1536:jmQ0w9FHpSQM7/ErVpI0UFKphoGhBm8kiCCmOF5rbqGnrPY6aeJQuV2:6pw9FHpSQw/ErfI0UgphbrCshRnTYeO","tlshash":"15a302c1d3128e9bc364973280a2fb53ae4a4e1dcf94534fa2f458252dff751de96218","first_seen":"2023-07-18T00:32:27Z","last_seen":"2026-10-08T00:27:43.64598Z","times_seen":2,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/js/bootstrap.min.js","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://femmedica.pl/","date":"2026-10-08T00:27:09.745Z","timestamp":1791419229745,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"femmedica.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:14:49 GMT","end":"Fri, 06 Nov 2026 20:14:48 GMT"},"fingerprint":{"sha1":"22:6D:13:EB:31:45:D1:90:02:5A:55:EE:4B:F1:2E:4D:D5:8A:23:2C","sha256":"3D:64:E6:20:A9:AC:C5:6A:AC:FF:C3:DB:96:43:6A:15:E9:6E:C7:AD:EB:6D:86:A1:26:25:9C:5D:91:BD:6E:33"}}},"request":{"raw":"GET /js/bootstrap.min.js HTTP/1.1\r\nHost: femmedica.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://femmedica.pl/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 30 Nov 2020 13:28:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9438\r\ndate: Thu, 08 Oct 2026 00:27:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36822,"size_decoded":9675,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32034), with CRLF line terminators","md5":"e7d9a06cf9053c51cd4ad3386da0659a","sha1":"e45bf1054704a1fdfc4ee2713a16bf9283dea995","sha256":"9a3724b2051a82064c923cbd68343dcb04014adac3ccb8c4d8ac6a31ba2e12cd","sha512":"62d02aa363b048e9355fe47cae7e42045488157c7dcff504807b963a9358fb72a12a262398a97323ab3e77b95a34fe13e089028672fce7055be70740be926402","ssdeep":"768:28iUD27UwlNEMl9RqNuCqNjhqg8epm5VCoFXflY8Gf3ZsbQ:1875vhqKGvl+3ZsQ","tlshash":"f9f29606b23031a107efb1e1525b020a7239696ee906907c78b99af53db9c48717bf3d","first_seen":"2023-03-07T01:10:31Z","last_seen":"2026-10-08T00:27:43.64704Z","times_seen":5184,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/img/nfzlogo.jpg","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://femmedica.pl/","date":"2026-10-08T00:27:09.756Z","timestamp":1791419229756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"femmedica.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:14:49 GMT","end":"Fri, 06 Nov 2026 20:14:48 GMT"},"fingerprint":{"sha1":"22:6D:13:EB:31:45:D1:90:02:5A:55:EE:4B:F1:2E:4D:D5:8A:23:2C","sha256":"3D:64:E6:20:A9:AC:C5:6A:AC:FF:C3:DB:96:43:6A:15:E9:6E:C7:AD:EB:6D:86:A1:26:25:9C:5D:91:BD:6E:33"}}},"request":{"raw":"GET /img/nfzlogo.jpg HTTP/1.1\r\nHost: femmedica.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://femmedica.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 00:27:09 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 16 Apr 2025 12:35:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 100522\r\ndate: Thu, 08 Oct 2026 00:27:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":100522,"size_decoded":100790,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1203x672, components 3","md5":"bfed487197e973f71d6c256d9057380f","sha1":"7560feed08b47178c82c676f557c5d981fd73038","sha256":"05e65750b3d1dbdd68a55d1577c23ce2d4e3e946f92283a16ac0c297acece45d","sha512":"bbedee5788e95f276bdc9d1c61b9ae7712695d61368f79e46fd5d0bc1f688bde81e3a572f67c4e3772782f93302ef047d41cf066341e292a30bf988dc059d3b6","ssdeep":"3072:DcSU3l3kln7H887bZcXPG6ceIyhQshQGnuQup5d1:4kw8pc/bHhFhUQKR","tlshash":"35a38c074c49db87656c93e4be475dac1b5b1b1ca5867efe21220ecf3ea86260cdd02d","first_seen":"2026-10-08T00:27:43.647554Z","last_seen":"2026-10-08T00:27:43.647554Z","times_seen":1,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/images/ico-tel.png","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://femmedica.pl/","date":"2026-10-08T00:27:09.757Z","timestamp":1791419229757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"femmedica.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:14:49 GMT","end":"Fri, 06 Nov 2026 20:14:48 GMT"},"fingerprint":{"sha1":"22:6D:13:EB:31:45:D1:90:02:5A:55:EE:4B:F1:2E:4D:D5:8A:23:2C","sha256":"3D:64:E6:20:A9:AC:C5:6A:AC:FF:C3:DB:96:43:6A:15:E9:6E:C7:AD:EB:6D:86:A1:26:25:9C:5D:91:BD:6E:33"}}},"request":{"raw":"GET /images/ico-tel.png HTTP/1.1\r\nHost: femmedica.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://femmedica.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 00:27:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Nov 2020 13:28:13 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2710\r\ndate: Thu, 08 Oct 2026 00:27:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2710,"size_decoded":2975,"mime_type":"image/png","magic":"PNG image data, 55 x 55, 8-bit/color RGBA, non-interlaced","md5":"9f19c636ea12d72b8c4c3d10cf1dfbfb","sha1":"aa43e961d1927ba0eb79272cfa84fc84fdcc7c7a","sha256":"1eb878f71303478e4d07eae4f163422ee11749025864ec88deb9814103f96b46","sha512":"b8c7a44fc226e500eec5d59a93fdb6679d9c4bfb5f05c78fafb6cc63176e37e9c0e49f9811ab57faa7192ceb47e1f23a5b68b01b3287e0d8f2c0ca07539f5634","ssdeep":"","tlshash":"5b514ca0e72eb5981113b5a164b30021e53363aef057ad427b52c33ab81e32fc489110","first_seen":"2023-07-18T00:32:27Z","last_seen":"2026-10-08T00:27:43.648609Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/images/lekarze_femmedica.jpg","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://femmedica.pl/","date":"2026-10-08T00:27:09.763Z","timestamp":1791419229763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"femmedica.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:14:49 GMT","end":"Fri, 06 Nov 2026 20:14:48 GMT"},"fingerprint":{"sha1":"22:6D:13:EB:31:45:D1:90:02:5A:55:EE:4B:F1:2E:4D:D5:8A:23:2C","sha256":"3D:64:E6:20:A9:AC:C5:6A:AC:FF:C3:DB:96:43:6A:15:E9:6E:C7:AD:EB:6D:86:A1:26:25:9C:5D:91:BD:6E:33"}}},"request":{"raw":"GET /images/lekarze_femmedica.jpg HTTP/1.1\r\nHost: femmedica.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://femmedica.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 00:27:09 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 27 Jan 2021 11:54:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 162223\r\ndate: Thu, 08 Oct 2026 00:27:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":162223,"size_decoded":162491,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1600x1135, components 3","md5":"fef7e590f3e468a3b155a52903e1e1ec","sha1":"0db8147924c9780898d177767217c3bfee4682b8","sha256":"e16b4d2a53ffe4a6690170538c4fdafaf707dca95339171d8e58d668739b6caf","sha512":"dc15af8fbe53f0647cc0d4959dbb156116efe69e840f64cb0d138fb54a04782907cfa5127d3a56293d5804cc62a517d739576d0799d6223870ff55cff840abcd","ssdeep":"3072:1skt4rUUEyQS5mwPPeu1IX7tFabqpSYU47uHr3JEIDndAmcq8TddNXORbOf:K44gUEaEOKtFRp/7WVVn6m4pdxORCf","tlshash":"d6f3125f0b42272586cf06396f2bd900480a096c7b572f0f5cfac60e3995db5f9a794b","first_seen":"2023-07-18T00:32:27Z","last_seen":"2026-10-08T00:27:43.649758Z","times_seen":2,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/img/prev.png","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://femmedica.pl/","date":"2026-10-08T00:27:09.922Z","timestamp":1791419229922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"femmedica.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:14:49 GMT","end":"Fri, 06 Nov 2026 20:14:48 GMT"},"fingerprint":{"sha1":"22:6D:13:EB:31:45:D1:90:02:5A:55:EE:4B:F1:2E:4D:D5:8A:23:2C","sha256":"3D:64:E6:20:A9:AC:C5:6A:AC:FF:C3:DB:96:43:6A:15:E9:6E:C7:AD:EB:6D:86:A1:26:25:9C:5D:91:BD:6E:33"}}},"request":{"raw":"GET /img/prev.png HTTP/1.1\r\nHost: femmedica.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://femmedica.pl/css/lightbox.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 00:27:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Nov 2020 13:28:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1360\r\ndate: Thu, 08 Oct 2026 00:27:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1360,"size_decoded":1625,"mime_type":"image/png","magic":"PNG image data, 50 x 45, 8-bit/color RGBA, non-interlaced","md5":"84b76dee6b27b795e89e3649078a11c2","sha1":"6640a3432f7ba7aea6129cdf7a5d3eabd47c295c","sha256":"7fd9273f20fdb1229c224341271a119020a5eee74ccf6b4605730917c864caf2","sha512":"f7128971cd4b6442ebac344cad93186e1fcc976470e2f5a4e758f3439c7b07421fb99a927450414b86b4bbfc0f2cc605b0e63c217057e094f9d866d9906960f5","ssdeep":"","tlshash":"b121f8b5a75040bddc73b70a4428be38ced1ba204dcdce0b42719c77a082c29d7f1082","first_seen":"2023-04-05T16:20:30Z","last_seen":"2026-10-08T01:55:27.461229Z","times_seen":22489,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/favicon.ico","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://femmedica.pl/","date":"2026-10-08T00:27:09.970Z","timestamp":1791419229970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"femmedica.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:14:49 GMT","end":"Fri, 06 Nov 2026 20:14:48 GMT"},"fingerprint":{"sha1":"22:6D:13:EB:31:45:D1:90:02:5A:55:EE:4B:F1:2E:4D:D5:8A:23:2C","sha256":"3D:64:E6:20:A9:AC:C5:6A:AC:FF:C3:DB:96:43:6A:15:E9:6E:C7:AD:EB:6D:86:A1:26:25:9C:5D:91:BD:6E:33"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: femmedica.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://femmedica.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 00:27:09 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 30 Nov 2020 13:28:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 53962\r\ndate: Thu, 08 Oct 2026 00:27:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":135496,"size_decoded":54276,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"74a554a8b0b9a6f366ad07c26470d69e","sha1":"7a5265f78fb92cd4e47e1e4419c8869f2f161e12","sha256":"d0570618ab8636eb1c668654dcbac1e93a63a10603b449b4f7387230d80b5613","sha512":"4e561a6844f8dabfd93b84c577947bee6a3a8d341116f75ba32c57de3f653ca00867bd7b363caa092c578b8445a7bfc338f223e069120119b5b9af09c8f9899d","ssdeep":"1536:U2RyIZMLb7GlWtk1uL+iR7NND2Z8ztPx9YKqTXiu98EC:jZEC2NVpJfOTw","tlshash":"8bd31de53a87d1beee780eb2949b14c6ac981c7f14206095069de52ce83bdfcf3a1615","first_seen":"2023-07-18T00:32:27Z","last_seen":"2026-10-08T00:27:43.651391Z","times_seen":4,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-08T00:27:08.933Z","timestamp":1791419228933,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"femmedica.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:14:49 GMT","end":"Fri, 06 Nov 2026 20:14:48 GMT"},"fingerprint":{"sha1":"22:6D:13:EB:31:45:D1:90:02:5A:55:EE:4B:F1:2E:4D:D5:8A:23:2C","sha256":"3D:64:E6:20:A9:AC:C5:6A:AC:FF:C3:DB:96:43:6A:15:E9:6E:C7:AD:EB:6D:86:A1:26:25:9C:5D:91:BD:6E:33"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: femmedica.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Sun, 25 Jan 2026 09:06:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3624\r\ndate: Thu, 08 Oct 2026 00:27:09 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:1.11.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]}],"data":{"size":13323,"size_decoded":3933,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (791), with CRLF line terminators","md5":"47dd8a378a5724afee9c7af57bcf1e5f","sha1":"0b15d18285a588411dd1d590a7170fa451f04b9d","sha256":"ebe187084015b6508ff72dd8651a59aca5897661013a221a7d722f21183bddbd","sha512":"2b030d19b653b0db6c55d12017b0d40c2655ca023d4bd9d1fa798104ce3638cd492dc0d2715c746f4f1460a8facce5d78b2725cd0fb974fa017f4c8cab13d0aa","ssdeep":"192:7HRJMtx74eEJPLBM7X0vzWUlDn+S1nSf7Hrh6yZQyThR:7Itx7TwBS3lX","tlshash":"4852a630a5c0c433127341ba2571af1eee9a4907e60a5e75b5fe13b72ff3e52281354a","first_seen":"2026-10-08T00:27:43.652624Z","last_seen":"2026-10-08T00:27:43.652624Z","times_seen":1,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":211,"connect":24,"send":0,"wait":33,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/js/jquery-1.11.0.min.js","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://femmedica.pl/","date":"2026-10-08T00:27:09.501Z","timestamp":1791419229501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"femmedica.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:14:49 GMT","end":"Fri, 06 Nov 2026 20:14:48 GMT"},"fingerprint":{"sha1":"22:6D:13:EB:31:45:D1:90:02:5A:55:EE:4B:F1:2E:4D:D5:8A:23:2C","sha256":"3D:64:E6:20:A9:AC:C5:6A:AC:FF:C3:DB:96:43:6A:15:E9:6E:C7:AD:EB:6D:86:A1:26:25:9C:5D:91:BD:6E:33"}}},"request":{"raw":"GET /js/jquery-1.11.0.min.js HTTP/1.1\r\nHost: femmedica.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://femmedica.pl/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 30 Nov 2020 13:28:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 32427\r\ndate: Thu, 08 Oct 2026 00:27:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":96380,"size_decoded":32665,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32341)","md5":"52d16e147b5346147d0f3269cd4d0f80","sha1":"4566b5815f47f976c7c3d3083c600ad5561b6fc0","sha256":"2e945ebcd9b955e7c543ba4ad41e8f7779a077b482a0207db74bd6ded2021d17","sha512":"0fe5de77f19213aed8b6db18fc80f80fcea320e1c97cee40dec9cf5187c0c13237bc94f110071fc27a685920ffbcd71643cf41753f744773afd02784a1a0432f","ssdeep":"1536:EPpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jqkODZ2D5N9Rag0MOIdSZAgtgoX5Y/:bIO/e2D5c4LgtImLja98HrA","tlshash":"0093e8d9b6d2706297b730a851bf510bb17698eab80c4c60f058d8e47eb4e8d507bf2d","first_seen":"2023-03-07T01:18:53Z","last_seen":"2026-10-08T02:41:08.793634Z","times_seen":3144,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/js/lightbox.min.js","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://femmedica.pl/","date":"2026-10-08T00:27:09.506Z","timestamp":1791419229506,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"femmedica.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:14:49 GMT","end":"Fri, 06 Nov 2026 20:14:48 GMT"},"fingerprint":{"sha1":"22:6D:13:EB:31:45:D1:90:02:5A:55:EE:4B:F1:2E:4D:D5:8A:23:2C","sha256":"3D:64:E6:20:A9:AC:C5:6A:AC:FF:C3:DB:96:43:6A:15:E9:6E:C7:AD:EB:6D:86:A1:26:25:9C:5D:91:BD:6E:33"}}},"request":{"raw":"GET /js/lightbox.min.js HTTP/1.1\r\nHost: femmedica.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://femmedica.pl/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 30 Nov 2020 13:28:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2228\r\ndate: Thu, 08 Oct 2026 00:27:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7800,"size_decoded":2465,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7463)","md5":"dd614a6e54383b733dbe5e20ba7859a5","sha1":"128273a9c66a32d7d59a6f290deb6cc4a2b2ee5a","sha256":"6c8abd074d9c4f8b738945503c713ca0f39eefd42421b7902cc3b6ac83d954c2","sha512":"94c79515a63600c49846391e05d9f424e872679acbdffff0a21130a6e1348991ce9b326500e58c51aca170995fa26207caa76f10d7056720a031b19d0f9dce7d","ssdeep":"96:tov6PTK8IGftdKcaevYgzozT9piR0CJKTYm0mt0ey8/IwCR04BLNKZG:+v6PTddKJevYgczJcyYPSSBqG","tlshash":"bdf15305fb202039ea6e40d7311b5b26133a6636be07da6d743cc6e959f0d44597bf38","first_seen":"2023-03-07T12:03:44Z","last_seen":"2026-10-08T00:27:43.654142Z","times_seen":943,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/css/carousel.css","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://femmedica.pl/","date":"2026-10-08T00:27:09.511Z","timestamp":1791419229511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"femmedica.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:14:49 GMT","end":"Fri, 06 Nov 2026 20:14:48 GMT"},"fingerprint":{"sha1":"22:6D:13:EB:31:45:D1:90:02:5A:55:EE:4B:F1:2E:4D:D5:8A:23:2C","sha256":"3D:64:E6:20:A9:AC:C5:6A:AC:FF:C3:DB:96:43:6A:15:E9:6E:C7:AD:EB:6D:86:A1:26:25:9C:5D:91:BD:6E:33"}}},"request":{"raw":"GET /css/carousel.css HTTP/1.1\r\nHost: femmedica.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://femmedica.pl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Thu, 08 Oct 2026 00:27:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-10-08T02:40:28.803015Z","times_seen":158153,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/images/slider/3.jpg","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://femmedica.pl/","date":"2026-10-08T00:27:09.760Z","timestamp":1791419229760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"femmedica.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:14:49 GMT","end":"Fri, 06 Nov 2026 20:14:48 GMT"},"fingerprint":{"sha1":"22:6D:13:EB:31:45:D1:90:02:5A:55:EE:4B:F1:2E:4D:D5:8A:23:2C","sha256":"3D:64:E6:20:A9:AC:C5:6A:AC:FF:C3:DB:96:43:6A:15:E9:6E:C7:AD:EB:6D:86:A1:26:25:9C:5D:91:BD:6E:33"}}},"request":{"raw":"GET /images/slider/3.jpg HTTP/1.1\r\nHost: femmedica.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://femmedica.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 00:27:09 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 30 Nov 2020 13:28:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 146975\r\ndate: Thu, 08 Oct 2026 00:27:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":146975,"size_decoded":147243,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x664, components 3","md5":"9d81c859efd684adc6c193c87f18a0fb","sha1":"a821feb8dc2060d2ef317339d5f92f2e1ceb0393","sha256":"dede51e1189f128ceff2215277cfaa5af5d2816c26088197633ce5ebecb00de4","sha512":"e50ec6cda687aa9648933c13f9fb72dc258f9ab003b2f9fbf7dde0efbbd63344fe6aec2c490787133beea0aa3f6b6bb72d95f3ab8e5cd0709b2ec657b3ed3529","ssdeep":"3072:z2FhdfPdHQBySFLWVBygMkQyx5KE+1Ti0yqSQuaaBiXGwF:z2FhdtHTSYggJQyXITimEaGiXGm","tlshash":"bae3122ea50982f3bdd2b6f934e27347f2cba45b93811d1e8e3dbef184a6154c4c4586","first_seen":"2023-07-18T00:32:27Z","last_seen":"2026-10-08T00:27:43.655178Z","times_seen":2,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/css/lightbox.css","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://femmedica.pl/","date":"2026-10-08T00:27:09.507Z","timestamp":1791419229507,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"femmedica.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:14:49 GMT","end":"Fri, 06 Nov 2026 20:14:48 GMT"},"fingerprint":{"sha1":"22:6D:13:EB:31:45:D1:90:02:5A:55:EE:4B:F1:2E:4D:D5:8A:23:2C","sha256":"3D:64:E6:20:A9:AC:C5:6A:AC:FF:C3:DB:96:43:6A:15:E9:6E:C7:AD:EB:6D:86:A1:26:25:9C:5D:91:BD:6E:33"}}},"request":{"raw":"GET /css/lightbox.css HTTP/1.1\r\nHost: femmedica.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://femmedica.pl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 00:27:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 30 Nov 2020 13:28:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 892\r\ndate: Thu, 08 Oct 2026 00:27:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4174,"size_decoded":1200,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"90cc2d8810f79169e627cd27e7365a4d","sha1":"691f0b67f44d144d22442c7a088136f6224aef63","sha256":"a022a05b2819c8e24d3c08f5a8939bbfe85cff44692afd7f320e74bc7ee58802","sha512":"e20de4dabe334c1de1e5d2fc40eaef7e116c210897297374d8db04f5ed03328f2f61c7d1c421b8cc1f384501f7869e236c227d3ddfa1338ed0a74038b3820bab","ssdeep":"96:xEonrDoKQdsY9KaD9Y5IHtgc7HGrmq6mOK:fnrDodNxW","tlshash":"2581112cd7565106e633d590bb80cba63a6d91937b1202ebfed46062f3c322c1471fe9","first_seen":"2026-10-08T00:27:43.656246Z","last_seen":"2026-10-08T00:27:43.656246Z","times_seen":1,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/css/carousel.css","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://femmedica.pl/","date":"2026-10-08T00:27:09.812Z","timestamp":1791419229812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"femmedica.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:14:49 GMT","end":"Fri, 06 Nov 2026 20:14:48 GMT"},"fingerprint":{"sha1":"22:6D:13:EB:31:45:D1:90:02:5A:55:EE:4B:F1:2E:4D:D5:8A:23:2C","sha256":"3D:64:E6:20:A9:AC:C5:6A:AC:FF:C3:DB:96:43:6A:15:E9:6E:C7:AD:EB:6D:86:A1:26:25:9C:5D:91:BD:6E:33"}}},"request":{"raw":"GET /css/carousel.css HTTP/1.1\r\nHost: femmedica.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://femmedica.pl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Thu, 08 Oct 2026 00:27:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-10-08T02:40:28.803015Z","times_seen":158153,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/img/loading.gif","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://femmedica.pl/","date":"2026-10-08T00:27:09.925Z","timestamp":1791419229925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"femmedica.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:14:49 GMT","end":"Fri, 06 Nov 2026 20:14:48 GMT"},"fingerprint":{"sha1":"22:6D:13:EB:31:45:D1:90:02:5A:55:EE:4B:F1:2E:4D:D5:8A:23:2C","sha256":"3D:64:E6:20:A9:AC:C5:6A:AC:FF:C3:DB:96:43:6A:15:E9:6E:C7:AD:EB:6D:86:A1:26:25:9C:5D:91:BD:6E:33"}}},"request":{"raw":"GET /img/loading.gif HTTP/1.1\r\nHost: femmedica.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://femmedica.pl/css/lightbox.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 00:27:09 GMT\r\ncontent-type: image/gif\r\nlast-modified: Mon, 30 Nov 2020 13:28:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8476\r\ndate: Thu, 08 Oct 2026 00:27:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8476,"size_decoded":8741,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"2299ad0b3f63413f026dfec20c205b8f","sha1":"cf720b50cf8dde0e1a84ce1c6a77788bfc5882d5","sha256":"225aa88b6ab02c06222ec9468d62e15fa188e39cdb9431d1f55401ad380753ed","sha512":"dc299ee8de6d5bb9d3a95a0fc200ea380c6dbaeb72fbff74e1e8bb260ee3deec6c981d9cfc05bf2409b8760613ef1c02bd7396456bec618f287ca56a7a93957d","ssdeep":"192:e8mZU0o1P1rUssaXA6RJiqlrcDUpTQ+ZSIWl7QBhr5z:iZc1PvA6RJiqYUq/l7Md5z","tlshash":"52028fece9242716ec37e7fa4248970edcc81de4067653096239360f3927139796a99d","first_seen":"2023-04-07T04:16:20Z","last_seen":"2026-10-08T02:41:08.672978Z","times_seen":28709,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/style.css","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://femmedica.pl/","date":"2026-10-08T00:27:09.499Z","timestamp":1791419229499,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"femmedica.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:14:49 GMT","end":"Fri, 06 Nov 2026 20:14:48 GMT"},"fingerprint":{"sha1":"22:6D:13:EB:31:45:D1:90:02:5A:55:EE:4B:F1:2E:4D:D5:8A:23:2C","sha256":"3D:64:E6:20:A9:AC:C5:6A:AC:FF:C3:DB:96:43:6A:15:E9:6E:C7:AD:EB:6D:86:A1:26:25:9C:5D:91:BD:6E:33"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: femmedica.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://femmedica.pl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 00:27:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 30 Nov 2020 13:28:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 473\r\ndate: Thu, 08 Oct 2026 00:27:09 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2520,"size_decoded":839,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"f35454249a54e5cd241f8ef785add5c6","sha1":"422af6202678275593d058413ab0c1a9e7250f1f","sha256":"c947b100e8d6361a0dd70ff09d8f07093286d2424e6645804c2da2cc5bc7fb16","sha512":"89d084be648818a0c7e27b67109f07f90a64df0d681ecf9abdc90de417d02cd74eaf8af492293ef379b750b89e51603fa0b548e85b4b8113451f8eb98661276e","ssdeep":"","tlshash":"9e515888e246f1a1263b8d74b722d722e77811d6dd2386fcbefe46c0a2245b82111e5d","first_seen":"2026-10-08T00:27:43.6577Z","last_seen":"2026-10-08T00:27:43.6577Z","times_seen":1,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/js/ie10-viewport-bug-workaround.js","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://femmedica.pl/","date":"2026-10-08T00:27:09.749Z","timestamp":1791419229749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"femmedica.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:14:49 GMT","end":"Fri, 06 Nov 2026 20:14:48 GMT"},"fingerprint":{"sha1":"22:6D:13:EB:31:45:D1:90:02:5A:55:EE:4B:F1:2E:4D:D5:8A:23:2C","sha256":"3D:64:E6:20:A9:AC:C5:6A:AC:FF:C3:DB:96:43:6A:15:E9:6E:C7:AD:EB:6D:86:A1:26:25:9C:5D:91:BD:6E:33"}}},"request":{"raw":"GET /js/ie10-viewport-bug-workaround.js HTTP/1.1\r\nHost: femmedica.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://femmedica.pl/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 30 Nov 2020 13:28:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 332\r\ndate: Thu, 08 Oct 2026 00:27:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":662,"size_decoded":568,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"cb70061bb97adbe73f7a82e851d94611","sha1":"4298dbe9b38428a76c410ad346f55a16d2e75ec5","sha256":"4c47a96380865bff32cb084e596fbba52f3ba44ff7c2eb92c6ff2885ceb8785a","sha512":"b50c43d716a84aa1cd42131da498a9686b3aac9f7d7722144fbbcfa00bfb641ba5b250e3217703c3b4a70631f70278c65803d51c243b92fe7f776ad8c383d6a2","ssdeep":"","tlshash":"9f019959571050ae0a73126ba46b67c5faa41143eb9b649638de5f985f30c83102bc9c","first_seen":"2023-03-07T12:11:36Z","last_seen":"2026-10-08T00:27:43.658708Z","times_seen":119,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"femmedica.pl/img/close.png","fqdn":"femmedica.pl","domain":"femmedica.pl","tld":"pl"},"ip":{"addr":"146.59.0.159","port":443,"asn":16276,"as":"OVH SAS","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://femmedica.pl/","date":"2026-10-08T00:27:09.926Z","timestamp":1791419229926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"femmedica.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 20:14:49 GMT","end":"Fri, 06 Nov 2026 20:14:48 GMT"},"fingerprint":{"sha1":"22:6D:13:EB:31:45:D1:90:02:5A:55:EE:4B:F1:2E:4D:D5:8A:23:2C","sha256":"3D:64:E6:20:A9:AC:C5:6A:AC:FF:C3:DB:96:43:6A:15:E9:6E:C7:AD:EB:6D:86:A1:26:25:9C:5D:91:BD:6E:33"}}},"request":{"raw":"GET /img/close.png HTTP/1.1\r\nHost: femmedica.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://femmedica.pl/css/lightbox.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 00:27:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Nov 2020 13:28:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 280\r\ndate: Thu, 08 Oct 2026 00:27:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":280,"size_decoded":544,"mime_type":"image/png","magic":"PNG image data, 27 x 27, 8-bit colormap, non-interlaced","md5":"d9d2d0b1308cb694aa8116915592e2a9","sha1":"3ca48361cfe0e41163023d03c26296f375bb3eac","sha256":"5d62e6c90005bfb71f6abb440f9e4753681cb23bbd5e60477ab6f442d2f0e69c","sha512":"ae70339ec05f19d698a319cc265da583814711acbefd81ddcb7d6d5e59934b78b289e5a55c666af62216a8f9ce5de60afd6f41c54ef7e4ea569d5458cef78af5","ssdeep":"","tlshash":"14d02bde1679ec69ec90667161128210d83778517264a145704fa125944b685f515367","first_seen":"2023-04-05T16:20:30Z","last_seen":"2026-10-08T01:55:27.364174Z","times_seen":23778,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"femmedica.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}