{"report_id":"ead48149-c3af-48b7-b3a4-882e89587e49","version":0,"status":"done","tags":[],"date":"2026-09-21T09:48:36Z","url":{"schema":"http","addr":"willowfieldhouse.eu/","fqdn":"willowfieldhouse.eu","domain":"willowfieldhouse.eu","tld":"eu"},"ip":{"addr":"195.54.174.251","port":0,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"http","addr":"willowfieldhouse.eu/","fqdn":"willowfieldhouse.eu","domain":"willowfieldhouse.eu","tld":"eu"},"title":"Lyralis Focus - 90 Capsules | Daily Nutritional Support | Free UK Delivery | NASTOULIS STAVROS","dom":{"size":30269,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1482)","md5":"083ab909ef52ddc02eea5cb59a700534","sha1":"1db33fd56fb620f41af293cda4573bfeee44e698","sha256":"afe677d965ac01972abe8a5710ec5cb0add7f73124667b683536a311eefca832","sha512":"c8a484070f40a1a22b224ebde7b1964d99d4eaee1f0a9ab79b4eee76b270660775f400a531219d528a5ed35b244302c9e697eb9347454efde8047972a7ad30e0","ssdeep":"384:j244GukrSZIIwxLbw8PwsOkZjU7iOStHXzpRvzR7psBeKE81C6T:P4GuJZIIwC8uT7iOStHjpRrhpwed8E6T","tlshash":"19d2c566b044263301d742e1f5566b2bbaa2c21bcf66264032fc066d9bf9c936e3754f","dom_hash":"domhash75ac39b2f4625616db3b3a38c1af2a61","first_seen":"2026-09-21T09:48:38.810018Z","last_seen":"2026-09-21T09:48:38.810018Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"willowfieldhouse.eu/","fqdn":"willowfieldhouse.eu","domain":"willowfieldhouse.eu","tld":"eu"},"ip":{"addr":"195.54.174.251","port":0,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-26T09:48:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"willowfieldhouse.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-20T23:17:00.144243Z","alert_count":0,"request_count":2,"received_data":217779,"sent_data":1176,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"trk.ai-crm.team","ip":{"addr":"149.86.227.25","port":443,"asn":201814,"as":"MEVSPACE sp. z o.o.","country":"Poland","country_code":"PL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-13T18:54:37.409902Z","last_seen":"2026-09-13T18:54:37.409902Z","alert_count":0,"request_count":1,"received_data":915,"sent_data":508,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"willowfieldhouse.eu","ip":{"addr":"195.54.174.251","port":80,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-21T09:46:13.820216Z","last_seen":"2026-09-21T09:46:13.820216Z","alert_count":45,"request_count":9,"received_data":392498,"sent_data":3767,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":7,"received_data":372991,"sent_data":3995,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":1,"received_data":10632,"sent_data":624,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"willowfieldhouse.eu/js/consent-mode.js?v=vbyn","fqdn":"willowfieldhouse.eu","domain":"willowfieldhouse.eu","tld":"eu"},"ip":{"addr":"195.54.174.251","port":80,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"23b2d02c33e06d626e34ba619b2ffd19","sha1":"bdb18f79bb57982b62a34ab0bd1b6372c192e269","sha256":"b36db3f5619ac826914aac9e5a1cf5f59cf365cf464107857d8849dab52dd3a1","sha512":"4bc7839eccaef48efa0290e3aca4a5472c4c2dbd7a05f81d19eca77fdd7c0e612df70a178215efc397266702de99480cc60291b09b219d28f2797b6a9e5c4dec","ssdeep":"","tlshash":"3611aded985618300a7b32e91abfbb0471710216a11ceaf00456028c2f68f7ad37acc9","size":1052,"data":"","first_seen":"2026-09-13T18:54:43.535555Z","last_seen":"2026-09-21T09:48:38.820813Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"willowfieldhouse.eu/js/main.js?v=vbyn","fqdn":"willowfieldhouse.eu","domain":"willowfieldhouse.eu","tld":"eu"},"ip":{"addr":"195.54.174.251","port":80,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"fda1f4c5e7e154483e095ab43dbad7c7","sha1":"656c7188e6868fff1607d6dbbe9cf65a322c408b","sha256":"e57226bcb3e56a1496f50b16e2c43e1959533cf9374571bfe5465268d5cc2c9f","sha512":"188da26ad4ead2bd6852ee224e0f0773d4cf7bbed4345286144f07f9bf4b7aec6e649ebc319cbdde52dca1a8cd4d41971564f9423bfe9ed6be41b36ee293ae17","ssdeep":"192:yZtdinYoYnrOiO3/thsVqty47yo0nJ+mLVQ6xwr2XrrCWOd+c9ES1Tk1fqOrGpjA:yZtcPIiigAbXSBAiOej/jU9jOBAIYN9","tlshash":"0e62832e7e1824bd94a711b7cdcf23c07a7526979c44c8107d5cf9062f99a8a0afe5ec","size":15179,"data":"","first_seen":"2026-09-21T09:48:38.814811Z","last_seen":"2026-09-21T09:48:38.814811Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"willowfieldhouse.eu/css/style.css?v=vbyn","fqdn":"willowfieldhouse.eu","domain":"willowfieldhouse.eu","tld":"eu"},"ip":{"addr":"195.54.174.251","port":80,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://willowfieldhouse.eu/","date":"2026-09-21T09:48:07.840Z","timestamp":1789984087840,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /css/style.css?v=vbyn HTTP/1.1\r\nHost: willowfieldhouse.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://willowfieldhouse.eu/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 21 Sep 2026 09:48:07 GMT\r\nContent-Type: text/css\r\nContent-Length: 54012\r\nLast-Modified: Thu, 01 Jan 1970 00:00:00 GMT\r\nConnection: keep-alive\r\nETag: \"0-d2fc\"\r\nExpires: Mon, 28 Sep 2026 09:48:07 GMT\r\nCache-Control: max-age=604800, public, max-age=604800\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54012,"size_decoded":54340,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (399)","md5":"72d27b5a7157d83aeb5c97fb69e1e2ea","sha1":"51e03a4258ec2fbd24b15d6250c52e348d0c6f38","sha256":"4c56de1a69e08fbf15606107f0ce83273b8a633c4577180fd84ea076c5ac975a","sha512":"d066e42127ad98f36448663b35b50dc5c23ebd581d4027f690911414ccb68e8a1eccb384f6fa1791771d2c6f5071e96ad3944519c68ebd5d7b8d4898e93ea2a6","ssdeep":"768:BOAZxFFt6qYjnqX0PfLiXXAFKp7z31Uua7+63PYduIpV9ccadn+e7X:dYdoC/D","tlshash":"ce332f1a6e5092b9ac2bf5453e8fe7ed2134b407cf1572fca852c09180cb7f61da6d4a","first_seen":"2026-09-21T09:48:38.811671Z","last_seen":"2026-09-21T09:48:38.811671Z","times_seen":1,"resource_available":true,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":64,"send":0,"wait":63,"receive":508,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"willowfieldhouse.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"willowfieldhouse.eu/images/hero-bg.webp?v=vbyn","fqdn":"willowfieldhouse.eu","domain":"willowfieldhouse.eu","tld":"eu"},"ip":{"addr":"195.54.174.251","port":80,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://willowfieldhouse.eu/","date":"2026-09-21T09:48:07.853Z","timestamp":1789984087853,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/hero-bg.webp?v=vbyn HTTP/1.1\r\nHost: willowfieldhouse.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://willowfieldhouse.eu/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 21 Sep 2026 09:48:08 GMT\r\nContent-Type: image/webp\r\nContent-Length: 31818\r\nLast-Modified: Thu, 01 Jan 1970 00:00:00 GMT\r\nConnection: keep-alive\r\nETag: \"0-7c4a\"\r\nExpires: Mon, 28 Sep 2026 09:48:08 GMT\r\nCache-Control: max-age=604800, public, max-age=604800\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31818,"size_decoded":32148,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f359a43b47bb8fb8412a63ddfea3966a","sha1":"194cdf815b24e3c0d23c239571512967a1e1466d","sha256":"3d48b45ae8d761f5f3862fc724db4e5854b362972c57233351089f94c574bfed","sha512":"cb3ba676d7668b8e510baf7c1d738c87200e5928a941e99981d60734fa359df439295364631d72bcc6eff117e8e53858b9ac49f962005657ffa17f47ccf622a0","ssdeep":"768:CJVzEXhYGKGBOlqGkMOk16grjg3/HgF+xGAXNgaiNg0y:CJVz4CGExytv5Wanb","tlshash":"e5e2f2ad248ddf1616f10b714712b2b0b2d0754ed9946fa5c34e82f4e86b2f41e264af","first_seen":"2026-09-21T09:48:38.813089Z","last_seen":"2026-09-21T09:48:38.813089Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1797,"timings":{"blocked":1015,"dns":0,"connect":0,"send":0,"wait":64,"receive":718,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"willowfieldhouse.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"willowfieldhouse.eu/js/main.js?v=vbyn","fqdn":"willowfieldhouse.eu","domain":"willowfieldhouse.eu","tld":"eu"},"ip":{"addr":"195.54.174.251","port":80,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://willowfieldhouse.eu/","date":"2026-09-21T09:48:07.859Z","timestamp":1789984087859,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /js/main.js?v=vbyn HTTP/1.1\r\nHost: willowfieldhouse.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://willowfieldhouse.eu/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 21 Sep 2026 09:48:07 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 15179\r\nLast-Modified: Thu, 01 Jan 1970 00:00:00 GMT\r\nConnection: keep-alive\r\nETag: \"0-3b4b\"\r\nExpires: Mon, 28 Sep 2026 09:48:07 GMT\r\nCache-Control: max-age=604800, public, max-age=604800\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15179,"size_decoded":15536,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (305)","md5":"fda1f4c5e7e154483e095ab43dbad7c7","sha1":"656c7188e6868fff1607d6dbbe9cf65a322c408b","sha256":"e57226bcb3e56a1496f50b16e2c43e1959533cf9374571bfe5465268d5cc2c9f","sha512":"188da26ad4ead2bd6852ee224e0f0773d4cf7bbed4345286144f07f9bf4b7aec6e649ebc319cbdde52dca1a8cd4d41971564f9423bfe9ed6be41b36ee293ae17","ssdeep":"192:yZtdinYoYnrOiO3/thsVqty47yo0nJ+mLVQ6xwr2XrrCWOd+c9ES1Tk1fqOrGpjA:yZtcPIiigAbXSBAiOej/jU9jOBAIYN9","tlshash":"0e62832e7e1824bd94a711b7cdcf23c07a7526979c44c8107d5cf9062f99a8a0afe5ec","first_seen":"2026-09-21T09:48:38.814811Z","last_seen":"2026-09-21T09:48:38.814811Z","times_seen":1,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":63,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"willowfieldhouse.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/figtree/v9/_Xms-HUzqDCFdgfMm4S9DQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://willowfieldhouse.eu/","date":"2026-09-21T09:48:08.916Z","timestamp":1789984088916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/figtree/v9/_Xms-HUzqDCFdgfMm4S9DQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://willowfieldhouse.eu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 03:05:38 GMT\r\nexpires: Fri, 17 Sep 2027 03:05:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 369751\r\nlast-modified: Wed, 10 Sep 2025 17:04:00 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20156,"size_decoded":20969,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20156, version 1.0","md5":"202cfb54d4e66d1702404ade49339ceb","sha1":"57fd1acf8d9651d9c38c0d4af7b78bc399be0652","sha256":"4ba7d3d096695818fe0686be4f1e82c6b05134e18a22260336130335027462dd","sha512":"2b323bc185114cbb7b0e2d92b7daf844d5dbe1e79f65d5b358f50bdf973ea60e8303e45ce7af23ce09b5e64149402065f0194f795e22dcd55c86ce1e05a11451","ssdeep":"384:gqwJbbuIcjx0eifRE1S0B1FbjeXpvgwFU2F5TfB3Qj0UWAB3XZ/ol:SJrK+hqvBjbyXpvgMUuVFHdK3p/Q","tlshash":"0e92e0eb83b3abc474ccb2a1349002e960e3524213b79df0c59375f0e9bd7da1a8522d","first_seen":"2025-05-14T03:12:47.210807Z","last_seen":"2026-09-21T11:51:19.776302Z","times_seen":9634,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":0,"dns":0,"connect":62,"send":0,"wait":51,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/bricolagegrotesque/v9/3y9K6as8bTXq_nANBjzKo3IeZx8z6up5BeSl9D4dj_x9PpZBMlGIInHWUSNIpvI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://willowfieldhouse.eu/","date":"2026-09-21T09:48:08.969Z","timestamp":1789984088969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/bricolagegrotesque/v9/3y9K6as8bTXq_nANBjzKo3IeZx8z6up5BeSl9D4dj_x9PpZBMlGIInHWUSNIpvI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://willowfieldhouse.eu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 76708\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 19 Sep 2026 05:12:31 GMT\r\nexpires: Sun, 19 Sep 2027 05:12:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 189338\r\nlast-modified: Wed, 10 Sep 2025 16:56:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":76708,"size_decoded":77521,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76708, version 1.0","md5":"e4fb7cb2cabbdbaeb698e9107c10995b","sha1":"6fcd8fb90adf70483ab37cd1055dd21f577c2ddf","sha256":"37d43e1615cd7f5c6e41d0da9a45253b89c06837026ff7caed07519bf9493e05","sha512":"7e2523e867c79af7dc8e6e87d5f9479acd9bacac87d793bacd23303a5d7d5815ef5162346858504f0767289fab6f70215ddd831552a53e6d1c16937c9a829256","ssdeep":"1536:gVJjNzmEcEb3votzMp0Rbd6nKqo9ZJxiYjrPaB86zyU49Xg:yj1mEcAAF7RbNqyJsuPz6zi9Q","tlshash":"117313a8ae33dfa890acfa7ca15846598385e815c9e99711ccdd5d7c2833f8d14fbc80","first_seen":"2025-03-13T21:45:43.00591Z","last_seen":"2026-09-21T09:48:38.817304Z","times_seen":2413,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":114,"receive":231,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Bricolage+Grotesque:opsz,wght@12..96,400;12..96,500;12..96,600;12..96,700;12..96,800\u0026family=Figtree:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://willowfieldhouse.eu/","date":"2026-09-21T09:48:07.837Z","timestamp":1789984087837,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=Bricolage+Grotesque:opsz,wght@12..96,400;12..96,500;12..96,600;12..96,700;12..96,800\u0026family=Figtree:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://willowfieldhouse.eu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 21 Sep 2026 09:48:07 GMT\r\ndate: Mon, 21 Sep 2026 09:48:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9948,"size_decoded":1381,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"244d766b50b665b82ceaf58d7bac2fc7","sha1":"c70716e6bb42f03be46bb42f973a22bf5e236ac9","sha256":"b19c54c9c52655bf228c29d35db14705bd2dc898141e96db1e967557d5b478da","sha512":"ba47fd6d6cfe3de0086c0c3c23b5f2abc6e059738de4d1f7691bdf345804bba902c2f3d79791bb2c86ee915133f8acfc0c794b889a309bb61eaee7e80337ea7a","ssdeep":"192:cp+4izyl4Zzjw4kz0v4Tz1i4+Dc76cUXcdG:cEti7W","tlshash":"5722ef50443be2409b97ccc663da7d33ee6ea1607484e5787ffe189c9daac126352b4c","first_seen":"2026-09-21T09:48:38.818042Z","last_seen":"2026-09-21T09:48:38.818042Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1032,"timings":{"blocked":-1,"dns":0,"connect":48,"send":0,"wait":917,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/bricolagegrotesque/v9/3y9K6as8bTXq_nANBjzKo3IeZx8z6up5BeSl9D4dj_x9PpZBMlGIInHWUSNIpvI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://willowfieldhouse.eu/","date":"2026-09-21T09:48:08.961Z","timestamp":1789984088961,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/bricolagegrotesque/v9/3y9K6as8bTXq_nANBjzKo3IeZx8z6up5BeSl9D4dj_x9PpZBMlGIInHWUSNIpvI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://willowfieldhouse.eu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 76708\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 19 Sep 2026 05:12:31 GMT\r\nexpires: Sun, 19 Sep 2027 05:12:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 189338\r\nlast-modified: Wed, 10 Sep 2025 16:56:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":76708,"size_decoded":77521,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76708, version 1.0","md5":"e4fb7cb2cabbdbaeb698e9107c10995b","sha1":"6fcd8fb90adf70483ab37cd1055dd21f577c2ddf","sha256":"37d43e1615cd7f5c6e41d0da9a45253b89c06837026ff7caed07519bf9493e05","sha512":"7e2523e867c79af7dc8e6e87d5f9479acd9bacac87d793bacd23303a5d7d5815ef5162346858504f0767289fab6f70215ddd831552a53e6d1c16937c9a829256","ssdeep":"1536:gVJjNzmEcEb3votzMp0Rbd6nKqo9ZJxiYjrPaB86zyU49Xg:yj1mEcAAF7RbNqyJsuPz6zi9Q","tlshash":"117313a8ae33dfa890acfa7ca15846598385e815c9e99711ccdd5d7c2833f8d14fbc80","first_seen":"2025-03-13T21:45:43.00591Z","last_seen":"2026-09-21T09:48:38.817304Z","times_seen":2413,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":151,"receive":264,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/figtree/v9/_Xms-HUzqDCFdgfMm4S9DQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://willowfieldhouse.eu/","date":"2026-09-21T09:48:08.964Z","timestamp":1789984088964,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/figtree/v9/_Xms-HUzqDCFdgfMm4S9DQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://willowfieldhouse.eu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 03:05:38 GMT\r\nexpires: Fri, 17 Sep 2027 03:05:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 369751\r\nlast-modified: Wed, 10 Sep 2025 17:04:00 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20156,"size_decoded":20969,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20156, version 1.0","md5":"202cfb54d4e66d1702404ade49339ceb","sha1":"57fd1acf8d9651d9c38c0d4af7b78bc399be0652","sha256":"4ba7d3d096695818fe0686be4f1e82c6b05134e18a22260336130335027462dd","sha512":"2b323bc185114cbb7b0e2d92b7daf844d5dbe1e79f65d5b358f50bdf973ea60e8303e45ce7af23ce09b5e64149402065f0194f795e22dcd55c86ce1e05a11451","ssdeep":"384:gqwJbbuIcjx0eifRE1S0B1FbjeXpvgwFU2F5TfB3Qj0UWAB3XZ/ol:SJrK+hqvBjbyXpvgMUuVFHdK3p/Q","tlshash":"0e92e0eb83b3abc474ccb2a1349002e960e3524213b79df0c59375f0e9bd7da1a8522d","first_seen":"2025-05-14T03:12:47.210807Z","last_seen":"2026-09-21T11:51:19.776302Z","times_seen":9634,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":106,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/figtree/v9/_Xms-HUzqDCFdgfMm4S9DQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://willowfieldhouse.eu/","date":"2026-09-21T09:48:08.956Z","timestamp":1789984088956,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/figtree/v9/_Xms-HUzqDCFdgfMm4S9DQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://willowfieldhouse.eu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 03:05:38 GMT\r\nexpires: Fri, 17 Sep 2027 03:05:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 369751\r\nlast-modified: Wed, 10 Sep 2025 17:04:00 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20156,"size_decoded":20969,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20156, version 1.0","md5":"202cfb54d4e66d1702404ade49339ceb","sha1":"57fd1acf8d9651d9c38c0d4af7b78bc399be0652","sha256":"4ba7d3d096695818fe0686be4f1e82c6b05134e18a22260336130335027462dd","sha512":"2b323bc185114cbb7b0e2d92b7daf844d5dbe1e79f65d5b358f50bdf973ea60e8303e45ce7af23ce09b5e64149402065f0194f795e22dcd55c86ce1e05a11451","ssdeep":"384:gqwJbbuIcjx0eifRE1S0B1FbjeXpvgwFU2F5TfB3Qj0UWAB3XZ/ol:SJrK+hqvBjbyXpvgMUuVFHdK3p/Q","tlshash":"0e92e0eb83b3abc474ccb2a1349002e960e3524213b79df0c59375f0e9bd7da1a8522d","first_seen":"2025-05-14T03:12:47.210807Z","last_seen":"2026-09-21T11:51:19.776302Z","times_seen":9634,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":73,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/bricolagegrotesque/v9/3y9K6as8bTXq_nANBjzKo3IeZx8z6up5BeSl9D4dj_x9PpZBMlGIInHWUSNIpvI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://willowfieldhouse.eu/","date":"2026-09-21T09:48:08.958Z","timestamp":1789984088958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/bricolagegrotesque/v9/3y9K6as8bTXq_nANBjzKo3IeZx8z6up5BeSl9D4dj_x9PpZBMlGIInHWUSNIpvI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://willowfieldhouse.eu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 76708\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 19 Sep 2026 05:12:31 GMT\r\nexpires: Sun, 19 Sep 2027 05:12:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 189338\r\nlast-modified: Wed, 10 Sep 2025 16:56:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":76708,"size_decoded":77521,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76708, version 1.0","md5":"e4fb7cb2cabbdbaeb698e9107c10995b","sha1":"6fcd8fb90adf70483ab37cd1055dd21f577c2ddf","sha256":"37d43e1615cd7f5c6e41d0da9a45253b89c06837026ff7caed07519bf9493e05","sha512":"7e2523e867c79af7dc8e6e87d5f9479acd9bacac87d793bacd23303a5d7d5815ef5162346858504f0767289fab6f70215ddd831552a53e6d1c16937c9a829256","ssdeep":"1536:gVJjNzmEcEb3votzMp0Rbd6nKqo9ZJxiYjrPaB86zyU49Xg:yj1mEcAAF7RbNqyJsuPz6zi9Q","tlshash":"117313a8ae33dfa890acfa7ca15846598385e815c9e99711ccdd5d7c2833f8d14fbc80","first_seen":"2025-03-13T21:45:43.00591Z","last_seen":"2026-09-21T09:48:38.817304Z","times_seen":2413,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":161,"receive":301,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/font/fonts/bootstrap-icons.woff2?dd67030699838ea613ee6dbda90effa6","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://willowfieldhouse.eu/","date":"2026-09-21T09:48:08.966Z","timestamp":1789984088966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.11.3/font/fonts/bootstrap-icons.woff2?dd67030699838ea613ee6dbda90effa6 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://willowfieldhouse.eu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/font/bootstrap-icons.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 130396\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 1.11.3\r\nx-jsd-version-type: version\r\netag: W/\"1fd5c-Agw8b5KAoxXoQl1/kuFbzQzdobI\"\r\naccept-ranges: bytes\r\ndate: Mon, 21 Sep 2026 09:48:09 GMT\r\nage: 343549\r\nx-served-by: cache-fra-eddf8230043-FRA, cache-bma-essb1270062-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":130396,"size_decoded":131123,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 130396, version 1.0","md5":"cc1e5eda776be5f0ff614285c31d4892","sha1":"020c3c6f9280a315e8425d7f92e15bcd0cdda1b2","sha256":"476adf42b40325098fcfa8b36ab3e769186bb4f6ce6a249753e2e1a9c22bf99e","sha512":"8ea88eb326ce57117a24f88abf9ef1740ff55a1cf6d09d8bc1e798132d44bf237aecff44253ef60c9eb3fce108cf4f7d8ea27e6a763a9338c7d6204247b2cc60","ssdeep":"3072:IBqhyg8Dr/UO5b2uP63F92P/ke/zjK9Ec5DGl0zdxxNSw1F:EsyH/uuOsP37j+NK0zdvNFj","tlshash":"b5d312e3ae1bd5965ccf2adb8431382d5e861ceadd039ff265b477ec579182028c025e","first_seen":"2024-01-04T23:06:55Z","last_seen":"2026-09-21T12:03:50.936366Z","times_seen":17473,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":47,"send":0,"wait":84,"receive":205,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"willowfieldhouse.eu/","fqdn":"willowfieldhouse.eu","domain":"willowfieldhouse.eu","tld":"eu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-21T09:48:06.790Z","timestamp":1789984086790,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: willowfieldhouse.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T12:48:33.167431Z","times_seen":18583610,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"willowfieldhouse.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"willowfieldhouse.eu/js/consent-mode.js?v=vbyn","fqdn":"willowfieldhouse.eu","domain":"willowfieldhouse.eu","tld":"eu"},"ip":{"addr":"195.54.174.251","port":80,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://willowfieldhouse.eu/","date":"2026-09-21T09:48:07.835Z","timestamp":1789984087835,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /js/consent-mode.js?v=vbyn HTTP/1.1\r\nHost: willowfieldhouse.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://willowfieldhouse.eu/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 21 Sep 2026 09:48:07 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 1052\r\nLast-Modified: Thu, 01 Jan 1970 00:00:00 GMT\r\nConnection: keep-alive\r\nETag: \"0-41c\"\r\nExpires: Mon, 28 Sep 2026 09:48:07 GMT\r\nCache-Control: max-age=604800, public, max-age=604800\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1052,"size_decoded":1407,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"23b2d02c33e06d626e34ba619b2ffd19","sha1":"bdb18f79bb57982b62a34ab0bd1b6372c192e269","sha256":"b36db3f5619ac826914aac9e5a1cf5f59cf365cf464107857d8849dab52dd3a1","sha512":"4bc7839eccaef48efa0290e3aca4a5472c4c2dbd7a05f81d19eca77fdd7c0e612df70a178215efc397266702de99480cc60291b09b219d28f2797b6a9e5c4dec","ssdeep":"","tlshash":"3611aded985618300a7b32e91abfbb0471710216a11ceaf00456028c2f68f7ad37acc9","first_seen":"2026-09-13T18:54:43.535555Z","last_seen":"2026-09-21T09:48:38.820813Z","times_seen":3,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":63,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"willowfieldhouse.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"willowfieldhouse.eu/images/pack.webp?v=vbyn","fqdn":"willowfieldhouse.eu","domain":"willowfieldhouse.eu","tld":"eu"},"ip":{"addr":"195.54.174.251","port":80,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://willowfieldhouse.eu/","date":"2026-09-21T09:48:07.854Z","timestamp":1789984087854,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/pack.webp?v=vbyn HTTP/1.1\r\nHost: willowfieldhouse.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://willowfieldhouse.eu/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 21 Sep 2026 09:48:08 GMT\r\nContent-Type: image/webp\r\nContent-Length: 28276\r\nLast-Modified: Thu, 01 Jan 1970 00:00:00 GMT\r\nConnection: keep-alive\r\nETag: \"0-6e74\"\r\nExpires: Mon, 28 Sep 2026 09:48:08 GMT\r\nCache-Control: max-age=604800, public, max-age=604800\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28276,"size_decoded":28606,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"55b5d09503264d04502c2e9ec3c00b67","sha1":"019f0c3b61fc98e198b78a9ba94caf66e6048874","sha256":"14399c2a446916242d9174367acdd2eea44178fe8f0ba91a389d868d7cd1d2d3","sha512":"7fa52f97f02f03e1b46277aaab5d8219378c662551783198d85e8cd1de294b7e8313acf3336418b041b3233f528fe702270d4f9921d96313c2b96ad5a606955c","ssdeep":"768:ZXqola16DLMpUK2XsCvlQVXA9wur2cM57VBoZzL+j:ZXqoLfXc9VXaVr2cMdzoZzKj","tlshash":"7fc202743e4f7714902290a1e299895d33a2197c67b0799d2e733f450cca36f568eed0","first_seen":"2026-09-21T09:48:38.821406Z","last_seen":"2026-09-21T09:48:38.821406Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1966,"timings":{"blocked":1015,"dns":0,"connect":0,"send":0,"wait":64,"receive":887,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"willowfieldhouse.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"willowfieldhouse.eu/images/pack-detail.webp?v=vbyn","fqdn":"willowfieldhouse.eu","domain":"willowfieldhouse.eu","tld":"eu"},"ip":{"addr":"195.54.174.251","port":80,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"http://willowfieldhouse.eu/","date":"2026-09-21T09:48:08.974Z","timestamp":1789984088974,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/pack-detail.webp?v=vbyn HTTP/1.1\r\nHost: willowfieldhouse.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://willowfieldhouse.eu/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 21 Sep 2026 09:48:09 GMT\r\nContent-Type: image/webp\r\nContent-Length: 29380\r\nLast-Modified: Thu, 01 Jan 1970 00:00:00 GMT\r\nConnection: keep-alive\r\nETag: \"0-72c4\"\r\nExpires: Mon, 28 Sep 2026 09:48:09 GMT\r\nCache-Control: max-age=604800, public, max-age=604800\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29380,"size_decoded":29710,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4cfc010f3c827c0f402e8acbd00d4024","sha1":"67efd7e3abc521a726c7cf53be5e9ef53aa92c96","sha256":"4cd659f4792f9b4c498b22f6e89dd397ebf690b9f836db7cea4c4694dbfcd2a9","sha512":"3929b9ea3161380d0e692c1a02c7817d27d2c1387feea61f488e0cfda79580e4a4dc3b09c0485cc96c4207e777568f88516d136f1a7a933400d8a39c57e68eeb","ssdeep":"768:Sta20zPOcOWggEElfYDq5DcZvMvOu8I5rpr7lAuYP4nH/h:Sta2sjkgEE2DqAvMvOu8+l2uYwh","tlshash":"18d2e1a105c6a69fff4863a438cc5c04c2355eb59c72a5e21cebebe7be2ab10452d074","first_seen":"2026-09-21T09:48:38.822711Z","last_seen":"2026-09-21T09:48:38.822711Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1165,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":1016,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"willowfieldhouse.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trk.ai-crm.team/t/fp","fqdn":"trk.ai-crm.team","domain":"ai-crm.team","tld":"team"},"ip":{"addr":"149.86.227.25","port":443,"asn":201814,"as":"MEVSPACE sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"http://willowfieldhouse.eu/","date":"2026-09-21T09:48:09.080Z","timestamp":1789984089080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trk.ai-crm.team","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 16:26:27 GMT","end":"Wed, 02 Dec 2026 16:26:26 GMT"},"fingerprint":{"sha1":"CF:A0:B9:9F:B8:93:A4:AB:92:F8:C0:77:8A:A4:98:39:E5:33:81:03","sha256":"F0:7E:6C:72:C2:54:7C:F4:28:81:C4:01:73:79:B8:E8:BB:A6:00:B8:C6:AC:2D:C0:15:83:08:72:92:48:F8:7A"}}},"request":{"raw":"POST /t/fp HTTP/1.1\r\nHost: trk.ai-crm.team\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 364\r\nSec-Fetch-Storage-Access: none\r\nOrigin: http://willowfieldhouse.eu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://willowfieldhouse.eu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' data:;form-action 'self';frame-ancestors 'none';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' 'unsafe-inline';upgrade-insecure-requests;connect-src 'self'\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Mon, 21 Sep 2026 09:48:09 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-ratelimit-limit: 30000\r\nx-ratelimit-remaining: 29999\r\nx-ratelimit-reset: 60\r\nx-xss-protection: 0\r\ncontent-length: 11\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":1787,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T12:48:33.167431Z","times_seen":18583610,"resource_available":true,"data":null}},"time_used":670,"timings":{"blocked":0,"dns":323,"connect":61,"send":0,"wait":183,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"willowfieldhouse.eu/favicon.png?v=vbyn","fqdn":"willowfieldhouse.eu","domain":"willowfieldhouse.eu","tld":"eu"},"ip":{"addr":"195.54.174.251","port":80,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://willowfieldhouse.eu/","date":"2026-09-21T09:48:09.920Z","timestamp":1789984089920,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.png?v=vbyn HTTP/1.1\r\nHost: willowfieldhouse.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://willowfieldhouse.eu/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 21 Sep 2026 09:48:09 GMT\r\nContent-Type: image/png\r\nContent-Length: 199913\r\nLast-Modified: Thu, 01 Jan 1970 00:00:00 GMT\r\nConnection: keep-alive\r\nETag: \"0-30ce9\"\r\nExpires: Mon, 28 Sep 2026 09:48:09 GMT\r\nCache-Control: max-age=604800, public, max-age=604800\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":199913,"size_decoded":200244,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"ece0b36834ef4b78fcf41ec6a4b313ce","sha1":"784e24a7659eca42c211c400d046e15c1b2b6381","sha256":"779d68cf096d9798dfc9d920d92a5a23b28d1245c4fbff46e97042759e37ba71","sha512":"89233c25013774d44332cdb88112a3655018a625ad8a8a6fbd39a6632743578f34b571634d3490cdeb035c51700dee6094bd685000ca6c7a5a74f66dde7946bb","ssdeep":"3072:Vn0HCScupPBJ88YUdYQ62aV7uQzruz2H3zrGJjxYyXh177dQX/PL3:VuUGY8YUaZPLH3+JVYyXhNA/j3","tlshash":"ad142383ef51b863cf95c478584c1cd5ee35b04adea8860427862bef28cde5254e4bed","first_seen":"2026-09-21T09:48:38.824159Z","last_seen":"2026-09-21T09:48:38.824159Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9338,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":476,"receive":8862,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"willowfieldhouse.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/bricolagegrotesque/v9/3y9K6as8bTXq_nANBjzKo3IeZx8z6up5BeSl9D4dj_x9PpZBMlGIInHWUSNIpvI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://willowfieldhouse.eu/","date":"2026-09-21T09:48:08.962Z","timestamp":1789984088962,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/bricolagegrotesque/v9/3y9K6as8bTXq_nANBjzKo3IeZx8z6up5BeSl9D4dj_x9PpZBMlGIInHWUSNIpvI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://willowfieldhouse.eu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 76708\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 19 Sep 2026 05:12:31 GMT\r\nexpires: Sun, 19 Sep 2027 05:12:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 189338\r\nlast-modified: Wed, 10 Sep 2025 16:56:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":76708,"size_decoded":77521,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76708, version 1.0","md5":"e4fb7cb2cabbdbaeb698e9107c10995b","sha1":"6fcd8fb90adf70483ab37cd1055dd21f577c2ddf","sha256":"37d43e1615cd7f5c6e41d0da9a45253b89c06837026ff7caed07519bf9493e05","sha512":"7e2523e867c79af7dc8e6e87d5f9479acd9bacac87d793bacd23303a5d7d5815ef5162346858504f0767289fab6f70215ddd831552a53e6d1c16937c9a829256","ssdeep":"1536:gVJjNzmEcEb3votzMp0Rbd6nKqo9ZJxiYjrPaB86zyU49Xg:yj1mEcAAF7RbNqyJsuPz6zi9Q","tlshash":"117313a8ae33dfa890acfa7ca15846598385e815c9e99711ccdd5d7c2833f8d14fbc80","first_seen":"2025-03-13T21:45:43.00591Z","last_seen":"2026-09-21T09:48:38.817304Z","times_seen":2413,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":137,"receive":277,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"willowfieldhouse.eu/","fqdn":"willowfieldhouse.eu","domain":"willowfieldhouse.eu","tld":"eu"},"ip":{"addr":"195.54.174.251","port":80,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-21T09:48:07.236Z","timestamp":1789984087236,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: willowfieldhouse.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 21 Sep 2026 09:48:07 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: _tsid=4uJCWT.CSQD3g.nd1ylL.gJFcHf; expires=Wed, 21 Oct 2026 09:48:07 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=Lax\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"_tsid","value":"4uJCWT.CSQD3g.nd1ylL.gJFcHf","quoted":false,"path":"/","expires":"2026-10-21T09:48:07Z","raw_expires":"Wed, 21 Oct 2026 09:48:07 GMT","max_age":2592000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"_tsid=4uJCWT.CSQD3g.nd1ylL.gJFcHf; expires=Wed, 21 Oct 2026 09:48:07 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30170,"size_decoded":10303,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1482)","md5":"ab67f098a3eaa0405f6d9e4006c5ff43","sha1":"2399f24c2120fd49cf755b5fe360176184e42e76","sha256":"6a6d6738c596c3494fc993d8179cb6cc82a7c6a388e2341e15ffb48940aef310","sha512":"2445d7fe4d7e5d82e8b7e215261f54ef2995ac6715cbc6bb2088214c5695d05be410ebbb2689cd5c41a2ade97c248885efa3ec927aee79987c1d2cbb81070e65","ssdeep":"768:o4WuJZIIwC84T7iORtHjpRrzpweuDpX63:TZII4kTRqdX63","tlshash":"e0d2d666b044273301d742e1f5566b2bbaa2c217cfa6264032fc066d9bf9c936e3754f","first_seen":"2026-09-21T09:48:38.825489Z","last_seen":"2026-09-21T09:48:38.825489Z","times_seen":1,"resource_available":true,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":36,"connect":64,"send":0,"wait":243,"receive":274,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"willowfieldhouse.eu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"willowfieldhouse.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/font/bootstrap-icons.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://willowfieldhouse.eu/","date":"2026-09-21T09:48:07.839Z","timestamp":1789984087839,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.11.3/font/bootstrap-icons.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://willowfieldhouse.eu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.11.3\r\nx-jsd-version-type: version\r\netag: W/\"14f73-BDozLk9VXMC/015FG+lVtLk5ZqA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 21 Sep 2026 09:48:07 GMT\r\nage: 990134\r\nx-served-by: cache-fra-eddf8230034-FRA, cache-bma-essb1270037-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 13383\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85875,"size_decoded":14164,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65354)","md5":"5605c44f8b24ea5de37a959955b71eb6","sha1":"043a332e4f555cc0bfd35e451be955b4b93966a0","sha256":"f643d6fe7e679f9de3e16311600c5ef5cd6b098f7a3a8828fcc29255d2b33e62","sha512":"74f5d8703b9bfda79bd3c73ade346afe4e8668a71c976e7a250cbf0273aaec2027119f45cd22fdc126dc664329e11dbabc1b0c2c5607e2443aeff6db57c5da09","ssdeep":"768:ZPcr8JUkZrpULKt4bDcf3oQpeqfZs0BWeUz5+XIHx5qkgwTz:hrpEKt4moUeqfZbc5+XIHZz","tlshash":"9383fbe8e58d05e8f372c48faf42775e31aafa3cd5811c68f14a111d5ac26650ac7fb8","first_seen":"2024-01-11T04:35:50Z","last_seen":"2026-09-21T12:03:50.938987Z","times_seen":11085,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":35,"connect":42,"send":0,"wait":42,"receive":5,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}