{"report_id":"0873bdfc-890c-49d5-9b8c-c8730a8096f5","version":6,"status":"done","tags":[],"date":"2026-02-06T11:59:33Z","url":{"schema":"http","addr":"www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"title":".co.de Domain Registrierungsstelle - freie Domains zu: mailercheck","dom":{"size":42295,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (355)","md5":"9312d1dfb11183de0c8201d4ba1f6a2c","sha1":"9eb7fc2a8e68ac96f9956991dcddb862604d5f63","sha256":"236e0f10d43c86e5e9d25d2b82b6d9e8a542f41ee3ac495cc0bce534f1ca9b5d","sha512":"29b72231fd7beced6415c025225c66084f8bfff300b44cb260b7897ead5f43bea7b29883e9648981e67176fa3f0121206e7fbdbdc0b8e0be1254ef091a58d0ca","ssdeep":"768:kPBeJjDuVXGLzo+SxOidi7fi78i7Hi72i7Vi7Ri7hi7Oi7Li7Bi77i74i7Ii7Ai3:4eJegpidSJIhoGqX+uQPX7hM","tlshash":"4713632622f210574293d2e1f9a1ef7ede9ac247c64bdc9e73ac42866fc6c514d43358","dom_hash":"domhashcd8895c3ac7bbf04d1ef10b3f34841ea","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-13T11:59:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"www.nic.co.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.nic.co.de","ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":5102739,"first_seen":"2025-08-16T13:17:44.198983Z","last_seen":"2026-01-06T10:24:29.996482Z","alert_count":18,"request_count":18,"received_data":784551,"sent_data":21139,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"fonts.bunny.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"1999-11-22","domain_rank":56787,"first_seen":"2022-03-21T07:38:02Z","last_seen":"2026-02-02T01:50:12.715647Z","alert_count":0,"request_count":4,"received_data":42112,"sent_data":2047,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-02-01T23:21:11.670157Z","alert_count":0,"request_count":2,"received_data":94659,"sent_data":853,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-01T22:17:46.954894Z","alert_count":0,"request_count":1,"received_data":8267,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-02-01T22:25:39.559997Z","alert_count":0,"request_count":2,"received_data":211084,"sent_data":1027,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"82e7a0557b6c44490076c8dc6b27ecf3","sha1":"ae97e9c0f1efbadab0776451fd79394a8ffedb61","sha256":"e5956c27af2b1d84ff54afa6bdd11a3a7cbd43aab41174f2379865bff84c9f3c","sha512":"d5760d43c0c0bcdf99933d2acf58566a343d1eda77d825a0939a179f2096812ce23536cdb231e998b2a7b90d6981179dab78413da0a2a84f956b9fc63db06d73","ssdeep":"","tlshash":"f961a02b71e2143b44f729e66bd74b857e290403808ac5263d7ecf491f52a80a473bee","size":3172,"data":"","first_seen":"2025-08-29T08:18:17.138343Z","last_seen":"2026-04-12T09:02:37.07271Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/build/assets/app-BnamtF72.js","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"68eaa7a1fb4e292983d686a8e3a27bc7","sha1":"e0a6822ea32aaee94bdf16659f1663d3d4043f02","sha256":"98bed9b003fe68ed62addbbecbff41350a03d24705228e090e103bc431a3cb32","sha512":"f23ca9d46684dc6387317d724587473622fce92f296f163c36e8f647745ad4a79d1e421ffc9ee3c174aec7b36a0546fe559bbff434e84857a1b3d507ec2be3f0","ssdeep":"1536:d7VtH5IRiebHXxhbrnaPNBHGblh5I5SszS3XB7fC:d7V4R7bD7aPNBQlh5I5SjHB76","tlshash":"c973f6ea72d6b03283ea11f250bf4606f3396954784e4464f528ecda383648d56f3fb9","size":79554,"data":"","first_seen":"2025-08-29T08:18:17.08973Z","last_seen":"2026-04-12T09:02:37.057791Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f53c06f93ae095221ff718c3a158a93","sha1":"9572c80b2918c796eea3c16eba905ef835aeb41b","sha256":"899842782a7fd16fcc2d7a7c877ff9ec159394044c87b158b2ef132786606932","sha512":"d9ac61274b8de67808c2bc86fbdfa5b45d9c9858285a5bbf6a1ad21db09d4159e66bfe2c2fa2a8759591c17b224667b559e82fc71e6343b2df8d26a0375abe9e","ssdeep":"768:gDWpHFKOT9onx0mD+zcyLAE+7jNb+mQmPl7cQqDTvmtfbYxeE3X5K:iWG1h+cMAE25+mQ+LqOf8p5K","tlshash":"dc23f8e97396b53283ef01b180bb460af33d2990550e5468f769d8da383948d41f3fba","size":46632,"data":"","first_seen":"2026-02-03T15:27:32.411372Z","last_seen":"2026-04-10T00:27:52.845621Z","times_seen":949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.nic.co.de/flags/en.png","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","date":"2026-02-06T11:59:10.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 07:37:39 GMT","end":"Sun, 15 Mar 2026 07:37:38 GMT"},"fingerprint":{"sha1":"DA:A2:D4:53:88:8A:C9:69:96:39:EC:78:7A:75:CF:EB:13:35:67:50","sha256":"FF:C3:D4:61:EC:21:B8:8D:CD:58:66:E5:31:1F:F2:A7:3E:17:EE:06:07:F3:B8:08:A9:F8:39:11:A2:78:93:21"}}},"request":{"raw":"GET /flags/en.png HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYUjZuZzM1ajhPb1dCblZLb0VzWXc9PSIsInZhbHVlIjoicnhpcllsMm02aHRZYVVvT2lOOU1aZUVWWUw3cTdpNDVGU3IzczZCV2UwSDJrbmhyejJQbE1CWG9KdXJSeHpGWUJ6VVEyNjd6WEErMUVGZW5haGJDRTA3MXBVZU1nbnpsL0JoYmdvQS81RU1VYStvanhHaU1waSt0QkVoby9SaG8iLCJtYWMiOiIxNjM2ZTJjODhlYTgyYzQzMjZmZWMyOTdjM2Q4NjkwODYxOWRlY2I2ODA1MzAwMjViNDQ4N2FjMDUyYjgwN2I0IiwidGFnIjoiIn0%3D; code_session=eyJpdiI6Im12TXBGZVpkcEpVVnFvYThzelNtT3c9PSIsInZhbHVlIjoiNTY0SEZYT3JzTlN2Mnk1MFFkWC8zaFhXVGRvajNHeXhXYU5OLzdsdnNCczFLZU5DVm8vT2pRYzNhcVJ5ZXQrWW1KYWdUaGp2SEQ3TXlzVVp1MzhOVUlXSFZvSXZZTHU2eTNQUVZkUnBiK1pXdHhGTUdCWVV4cUdpM0pFT3ZaZUYiLCJtYWMiOiI1Yjc3NTdiYjNjYjExZTA2NTYzY2NiZTlkY2IxMzQyODNlNzkyZjYyYzM5ZmZlZTk2Y2RhZGE4NzNjZWVlZGYzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.1\r\ndate: Fri, 06 Feb 2026 11:59:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 2513\r\nlast-modified: Tue, 27 May 2025 14:40:38 GMT\r\netag: \"6835cee6-9d1\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2513,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"089119e303f24c89121dd856ab4f7059","sha1":"d50e258af19ad3c3f71c8c5a1fe76e795fcc7895","sha256":"04e4444cd4022d40e048c4c629ca976e61cb17cdf77bbfe1a3fb6f6f07e8d223","sha512":"248b11035ac52561bec35aeb010789bbd2de807c1c2fa6903f50e17be4c7eaf67cf71c6ca61e4eb01a198a07b9a8a8a71dc5af3b2ab3fa54417e5429f35988c9","ssdeep":"","tlshash":"7b51ba9a6c5312d3dd8d71459ded3de4c5735e88c88192c679e2dc530d40491be7728b","first_seen":"2025-08-29T08:18:17.126435Z","last_seen":"2026-04-12T09:02:37.064934Z","times_seen":19,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"www.nic.co.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/registrar_logos/101domain.png","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","date":"2026-02-06T11:59:10.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 07:37:39 GMT","end":"Sun, 15 Mar 2026 07:37:38 GMT"},"fingerprint":{"sha1":"DA:A2:D4:53:88:8A:C9:69:96:39:EC:78:7A:75:CF:EB:13:35:67:50","sha256":"FF:C3:D4:61:EC:21:B8:8D:CD:58:66:E5:31:1F:F2:A7:3E:17:EE:06:07:F3:B8:08:A9:F8:39:11:A2:78:93:21"}}},"request":{"raw":"GET /registrar_logos/101domain.png HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYUjZuZzM1ajhPb1dCblZLb0VzWXc9PSIsInZhbHVlIjoicnhpcllsMm02aHRZYVVvT2lOOU1aZUVWWUw3cTdpNDVGU3IzczZCV2UwSDJrbmhyejJQbE1CWG9KdXJSeHpGWUJ6VVEyNjd6WEErMUVGZW5haGJDRTA3MXBVZU1nbnpsL0JoYmdvQS81RU1VYStvanhHaU1waSt0QkVoby9SaG8iLCJtYWMiOiIxNjM2ZTJjODhlYTgyYzQzMjZmZWMyOTdjM2Q4NjkwODYxOWRlY2I2ODA1MzAwMjViNDQ4N2FjMDUyYjgwN2I0IiwidGFnIjoiIn0%3D; code_session=eyJpdiI6Im12TXBGZVpkcEpVVnFvYThzelNtT3c9PSIsInZhbHVlIjoiNTY0SEZYT3JzTlN2Mnk1MFFkWC8zaFhXVGRvajNHeXhXYU5OLzdsdnNCczFLZU5DVm8vT2pRYzNhcVJ5ZXQrWW1KYWdUaGp2SEQ3TXlzVVp1MzhOVUlXSFZvSXZZTHU2eTNQUVZkUnBiK1pXdHhGTUdCWVV4cUdpM0pFT3ZaZUYiLCJtYWMiOiI1Yjc3NTdiYjNjYjExZTA2NTYzY2NiZTlkY2IxMzQyODNlNzkyZjYyYzM5ZmZlZTk2Y2RhZGE4NzNjZWVlZGYzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.1\r\ndate: Fri, 06 Feb 2026 11:59:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 84395\r\nlast-modified: Tue, 10 Jun 2025 13:21:58 GMT\r\netag: \"68483176-149ab\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84395,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 450, 8-bit/color RGBA, non-interlaced","md5":"60c506a6b2d9b766a898c5a1a1807a2f","sha1":"77a4bc451786b209ece1956dc45c64e59e48a721","sha256":"a9658fcfd068b4d8e04ae2c59dca4eba93d9b1b173610687698088030502a474","sha512":"4c1e96ce6fd2e6e71aac61ce92cdd37587d8ed973dd1e553a6b9fccd890f10bf5911d3c1c1cd1b0837a29f1285eb38189b8ecf8f78fb9fa64960d921b1fa4c08","ssdeep":"1536:c3RT+OH7SsGrbWevXfd/YH2uOnJ6j2Pa2QyEz0htAyF/0P1ClGQ1:eRSOH7SsiHYH2u2PCyEz0hO00Y","tlshash":"aa830291e68490aedf3391fd32e97d92637c83e97b6cea8d8e900cb34ca1568d509214","first_seen":"2025-08-29T08:18:17.094407Z","last_seen":"2026-04-12T09:02:37.03831Z","times_seen":16,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"www.nic.co.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/figtree/files/figtree-latin-400-normal.woff2","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","date":"2026-02-06T11:59:11.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 02:01:50 GMT","end":"Sun, 19 Apr 2026 02:01:49 GMT"},"fingerprint":{"sha1":"AF:D0:3B:5F:AF:FF:6C:96:AD:F8:6B:3E:7D:E9:E1:85:05:FC:8D:65","sha256":"F6:DF:31:95:6F:E1:8F:D5:7B:34:46:9E:90:B9:CA:35:74:EE:F7:C9:5E:87:1E:41:AD:FA:D8:02:48:E7:A3:E5"}}},"request":{"raw":"GET /figtree/files/figtree-latin-400-normal.woff2 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.nic.co.de\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.bunny.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 11:59:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 11384\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"697d4edd-2c78\"\r\nlast-modified: Sat, 31 Jan 2026 00:37:49 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/05/2026 15:32:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 918d33a9be6f5dc0ab70f12631691f47\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":11384,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11384, version 1.0","md5":"7bfd10a3def31af4d402da24e37d21b1","sha1":"6f0c09bac74d5eaa63962309a305c097f06c6dab","sha256":"8f98dd642986f1fa39c45b89665a57372897c235b36028e0e4a136e43dc5f8ab","sha512":"2ab8b679319f9429adff476485facb4e33cfc5d938670d510fd3e2d650806a9873b9aaeb3a35d2f3bff8f68812cf3dfb3f639071acf3a2dadf093b57b8dfdb72","ssdeep":"192:fJ3wS/6q1YLYydZfdinMsfX+LpyglupLebs+pF7aJtALHH7g7ggqUfCANS59:fJwwyrdPEfngluuGJq7g7g8CZ","tlshash":"b432be616a9321a3e539ba70c3f5773f1aae9835afc0c609d71546461c0a7412cdbcab","first_seen":"2025-05-16T11:25:33.859224Z","last_seen":"2026-04-15T14:27:29.553163Z","times_seen":666,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":11,"dns":1,"connect":1,"send":0,"wait":4,"receive":1,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","date":"2026-02-06T11:59:10.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /alpinejs@3.x.x/dist/cdn.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 06 Feb 2026 11:59:10 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 47\r\ncf-ray: 9c9a7adccde05695-OSL\r\nlocation: /alpinejs@3.15.8/dist/cdn.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46632,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T21:38:41.569918Z","times_seen":13799339,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":44,"dns":30,"connect":1,"send":0,"wait":42,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/build/assets/app-BekVhub6.css","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","date":"2026-02-06T11:59:10.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 07:37:39 GMT","end":"Sun, 15 Mar 2026 07:37:38 GMT"},"fingerprint":{"sha1":"DA:A2:D4:53:88:8A:C9:69:96:39:EC:78:7A:75:CF:EB:13:35:67:50","sha256":"FF:C3:D4:61:EC:21:B8:8D:CD:58:66:E5:31:1F:F2:A7:3E:17:EE:06:07:F3:B8:08:A9:F8:39:11:A2:78:93:21"}}},"request":{"raw":"GET /build/assets/app-BekVhub6.css HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYUjZuZzM1ajhPb1dCblZLb0VzWXc9PSIsInZhbHVlIjoicnhpcllsMm02aHRZYVVvT2lOOU1aZUVWWUw3cTdpNDVGU3IzczZCV2UwSDJrbmhyejJQbE1CWG9KdXJSeHpGWUJ6VVEyNjd6WEErMUVGZW5haGJDRTA3MXBVZU1nbnpsL0JoYmdvQS81RU1VYStvanhHaU1waSt0QkVoby9SaG8iLCJtYWMiOiIxNjM2ZTJjODhlYTgyYzQzMjZmZWMyOTdjM2Q4NjkwODYxOWRlY2I2ODA1MzAwMjViNDQ4N2FjMDUyYjgwN2I0IiwidGFnIjoiIn0%3D; code_session=eyJpdiI6Im12TXBGZVpkcEpVVnFvYThzelNtT3c9PSIsInZhbHVlIjoiNTY0SEZYT3JzTlN2Mnk1MFFkWC8zaFhXVGRvajNHeXhXYU5OLzdsdnNCczFLZU5DVm8vT2pRYzNhcVJ5ZXQrWW1KYWdUaGp2SEQ3TXlzVVp1MzhOVUlXSFZvSXZZTHU2eTNQUVZkUnBiK1pXdHhGTUdCWVV4cUdpM0pFT3ZaZUYiLCJtYWMiOiI1Yjc3NTdiYjNjYjExZTA2NTYzY2NiZTlkY2IxMzQyODNlNzkyZjYyYzM5ZmZlZTk2Y2RhZGE4NzNjZWVlZGYzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.1\r\ndate: Fri, 06 Feb 2026 11:59:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 50435\r\nlast-modified: Fri, 23 Jan 2026 10:19:31 GMT\r\netag: \"69734b33-c503\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50435,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (50434)","md5":"091b4c182c0314038623efa32a33028c","sha1":"165e617245b2122438abd0fe4bb58ce3f2dbef20","sha256":"a5962134eaced3a3b0f0a2045280161baa593852635db7ca79041edebaa5917f","sha512":"f792e460738a47bbb74de5cd041b0dd888803c391d6684c0362d20b6f95a5a63370de394b56c39521c57bfd5f524d9a50dc72acd54512e157217ca703cc09ef7","ssdeep":"384:kgkKYaig6LKPY6I9GNRdlxy7Th/y/T/HZNUrluetyCId:lYaiRLKQ6BnZNUrke+","tlshash":"5f33422daa90003f7c5390f9d699b9adf61bb0c1df3e56eaec8211209bd63f64c57604","first_seen":"2026-01-21T01:35:43.774225Z","last_seen":"2026-04-12T09:02:37.043164Z","times_seen":18,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"www.nic.co.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","date":"2026-02-06T11:59:10.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:26 GMT","end":"Mon, 13 Apr 2026 08:38:25 GMT"},"fingerprint":{"sha1":"DF:42:37:13:35:8D:A4:42:F4:81:DF:D2:AF:04:C4:6D:23:27:5D:0B","sha256":"01:14:5B:59:48:97:DF:81:4B:BE:59:0B:AC:32:B6:15:AD:CE:47:D9:53:36:4E:AD:6E:7B:D0:45:0B:F3:10:96"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 06 Feb 2026 11:59:10 GMT\r\ndate: Fri, 06 Feb 2026 11:59:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7575ffd6532e96f3830de7bc9efc8544","sha1":"348ab893b08a4854b7715fcabf3843a26e15ed9e","sha256":"a10e7cf1445dc2d00971db17adcd20ec035a11211c982265f321e6658501b15b","sha512":"1fa9e882de10d071f440582aa2594802d406d9e2c484e1e6971e6b8ac3f02f81aedbe6e09689412296c7bf0d461bafbf223b09bd00227d84e6c003c23aa8adc6","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlx:vXuM0pR","tlshash":"e0f17792002ba400ab971dc223cf7f3aaece50896085d1b95ffd0dc59ceed66436876d","first_seen":"2025-09-11T07:42:16.456799Z","last_seen":"2026-04-15T21:21:59.852788Z","times_seen":4788,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":106,"dns":5,"connect":15,"send":0,"wait":34,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/flags/de.png","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","date":"2026-02-06T11:59:10.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 07:37:39 GMT","end":"Sun, 15 Mar 2026 07:37:38 GMT"},"fingerprint":{"sha1":"DA:A2:D4:53:88:8A:C9:69:96:39:EC:78:7A:75:CF:EB:13:35:67:50","sha256":"FF:C3:D4:61:EC:21:B8:8D:CD:58:66:E5:31:1F:F2:A7:3E:17:EE:06:07:F3:B8:08:A9:F8:39:11:A2:78:93:21"}}},"request":{"raw":"GET /flags/de.png HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYUjZuZzM1ajhPb1dCblZLb0VzWXc9PSIsInZhbHVlIjoicnhpcllsMm02aHRZYVVvT2lOOU1aZUVWWUw3cTdpNDVGU3IzczZCV2UwSDJrbmhyejJQbE1CWG9KdXJSeHpGWUJ6VVEyNjd6WEErMUVGZW5haGJDRTA3MXBVZU1nbnpsL0JoYmdvQS81RU1VYStvanhHaU1waSt0QkVoby9SaG8iLCJtYWMiOiIxNjM2ZTJjODhlYTgyYzQzMjZmZWMyOTdjM2Q4NjkwODYxOWRlY2I2ODA1MzAwMjViNDQ4N2FjMDUyYjgwN2I0IiwidGFnIjoiIn0%3D; code_session=eyJpdiI6Im12TXBGZVpkcEpVVnFvYThzelNtT3c9PSIsInZhbHVlIjoiNTY0SEZYT3JzTlN2Mnk1MFFkWC8zaFhXVGRvajNHeXhXYU5OLzdsdnNCczFLZU5DVm8vT2pRYzNhcVJ5ZXQrWW1KYWdUaGp2SEQ3TXlzVVp1MzhOVUlXSFZvSXZZTHU2eTNQUVZkUnBiK1pXdHhGTUdCWVV4cUdpM0pFT3ZaZUYiLCJtYWMiOiI1Yjc3NTdiYjNjYjExZTA2NTYzY2NiZTlkY2IxMzQyODNlNzkyZjYyYzM5ZmZlZTk2Y2RhZGE4NzNjZWVlZGYzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.1\r\ndate: Fri, 06 Feb 2026 11:59:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 1459\r\nlast-modified: Tue, 27 May 2025 14:40:38 GMT\r\netag: \"6835cee6-5b3\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1459,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"17f433e40497e1d311cb9fbdb5c47466","sha1":"e9aef9fd7e6913bdcf7ff1ed8c1f809667430df8","sha256":"36cb4fb1116e88cc5982abc40a510526e28fd3a6f368008e79760d6684df17dc","sha512":"f5a6d7e1ad8fe8b6d7d0b36074dc762049f4d5cc9124bf9e25e03ba99dd046ac6d09e65762aed02d1742f1f2face4ad5e48b62331a21cb3b85260578bda9cda4","ssdeep":"","tlshash":"383115699ca312e39a8e76065cee3894c9339955cdc0518aece2cc770e415c16fb72c7","first_seen":"2025-08-29T08:18:17.132274Z","last_seen":"2026-04-12T09:02:37.065859Z","times_seen":19,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"www.nic.co.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/registrar_logos/abion.png","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","date":"2026-02-06T11:59:10.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 07:37:39 GMT","end":"Sun, 15 Mar 2026 07:37:38 GMT"},"fingerprint":{"sha1":"DA:A2:D4:53:88:8A:C9:69:96:39:EC:78:7A:75:CF:EB:13:35:67:50","sha256":"FF:C3:D4:61:EC:21:B8:8D:CD:58:66:E5:31:1F:F2:A7:3E:17:EE:06:07:F3:B8:08:A9:F8:39:11:A2:78:93:21"}}},"request":{"raw":"GET /registrar_logos/abion.png HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYUjZuZzM1ajhPb1dCblZLb0VzWXc9PSIsInZhbHVlIjoicnhpcllsMm02aHRZYVVvT2lOOU1aZUVWWUw3cTdpNDVGU3IzczZCV2UwSDJrbmhyejJQbE1CWG9KdXJSeHpGWUJ6VVEyNjd6WEErMUVGZW5haGJDRTA3MXBVZU1nbnpsL0JoYmdvQS81RU1VYStvanhHaU1waSt0QkVoby9SaG8iLCJtYWMiOiIxNjM2ZTJjODhlYTgyYzQzMjZmZWMyOTdjM2Q4NjkwODYxOWRlY2I2ODA1MzAwMjViNDQ4N2FjMDUyYjgwN2I0IiwidGFnIjoiIn0%3D; code_session=eyJpdiI6Im12TXBGZVpkcEpVVnFvYThzelNtT3c9PSIsInZhbHVlIjoiNTY0SEZYT3JzTlN2Mnk1MFFkWC8zaFhXVGRvajNHeXhXYU5OLzdsdnNCczFLZU5DVm8vT2pRYzNhcVJ5ZXQrWW1KYWdUaGp2SEQ3TXlzVVp1MzhOVUlXSFZvSXZZTHU2eTNQUVZkUnBiK1pXdHhGTUdCWVV4cUdpM0pFT3ZaZUYiLCJtYWMiOiI1Yjc3NTdiYjNjYjExZTA2NTYzY2NiZTlkY2IxMzQyODNlNzkyZjYyYzM5ZmZlZTk2Y2RhZGE4NzNjZWVlZGYzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.1\r\ndate: Fri, 06 Feb 2026 11:59:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 75624\r\nlast-modified: Tue, 10 Jun 2025 13:21:58 GMT\r\netag: \"68483176-12768\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75624,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 657 x 230, 8-bit/color RGBA, non-interlaced","md5":"069b0d32532db8b97d6497e0b48b6428","sha1":"12aee04c63ae29f3acdb66a54bb85931c4c6e620","sha256":"e762f306d99bf4355e4bb8647cad7b2a4dc98534738fb749ff38d4a0a6d3fabd","sha512":"38c5c4e9e6f76ef20ee00e7e5b4902d5bf2c706ba13d51a7e38ab43a7b2488da67ffcab0046812241e1afa82926d2100536790b6766016e9bcac04b526636f22","ssdeep":"1536:0+Tx3sH2RCjG8k7yvHm1fYyEDFTzZb9A5XE7RfCuiEEZOvXe3Tgzuey:0+Tt4jGP7gcQyEBY07Rf7iN+Key","tlshash":"e173026b94661cf77de8438c6c17cafaec78d2fc1000562e503a51602ec8ab3e9d57b6","first_seen":"2025-08-29T08:18:17.136847Z","last_seen":"2026-04-12T09:02:37.043993Z","times_seen":16,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"www.nic.co.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/figtree/files/figtree-latin-600-normal.woff2","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","date":"2026-02-06T11:59:11.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 02:01:50 GMT","end":"Sun, 19 Apr 2026 02:01:49 GMT"},"fingerprint":{"sha1":"AF:D0:3B:5F:AF:FF:6C:96:AD:F8:6B:3E:7D:E9:E1:85:05:FC:8D:65","sha256":"F6:DF:31:95:6F:E1:8F:D5:7B:34:46:9E:90:B9:CA:35:74:EE:F7:C9:5E:87:1E:41:AD:FA:D8:02:48:E7:A3:E5"}}},"request":{"raw":"GET /figtree/files/figtree-latin-600-normal.woff2 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.nic.co.de\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.bunny.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 11:59:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 11544\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"695a134e-2d18\"\r\nlast-modified: Sun, 04 Jan 2026 07:14:22 GMT\r\ncdn-storageserver: DE-633\r\ncdn-fileserver: 339\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/11/2026 10:18:29\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e983c8d537eb237b065ead467f94de29\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":11544,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11544, version 1.0","md5":"4376f5953b85ba06b1325423ae04ce03","sha1":"cdc20e286bd4c89290565d08c691693951f2df51","sha256":"367d713287918784702563518f59239989da815c80d3c7337686b9816635a08b","sha512":"b03f276330b4b8eae6a38f6132e76a291d14103dcbdcc57270c66a0e30554413039d96b003c2c8a63bbae6201399a66638e5f88737c2b28ae1c3227fbfe22849","ssdeep":"192:K8oh8QtcasqnFWlsABFCQK3DRE7pTAT16IomT4OI9C3Jnr5+uHGQ1P+1rpH1yIjR:oh/tcInafhwi79yU6/qY+iGaAr3ZQtDA","tlshash":"7932bfe11f59440fcad0a473b17726740ced296efb3a7ba529ae741b8c185d3c8490ea","first_seen":"2025-05-16T11:25:33.804118Z","last_seen":"2026-04-15T14:27:29.557007Z","times_seen":473,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/build/assets/app-BnamtF72.js","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","date":"2026-02-06T11:59:10.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 07:37:39 GMT","end":"Sun, 15 Mar 2026 07:37:38 GMT"},"fingerprint":{"sha1":"DA:A2:D4:53:88:8A:C9:69:96:39:EC:78:7A:75:CF:EB:13:35:67:50","sha256":"FF:C3:D4:61:EC:21:B8:8D:CD:58:66:E5:31:1F:F2:A7:3E:17:EE:06:07:F3:B8:08:A9:F8:39:11:A2:78:93:21"}}},"request":{"raw":"GET /build/assets/app-BnamtF72.js HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYUjZuZzM1ajhPb1dCblZLb0VzWXc9PSIsInZhbHVlIjoicnhpcllsMm02aHRZYVVvT2lOOU1aZUVWWUw3cTdpNDVGU3IzczZCV2UwSDJrbmhyejJQbE1CWG9KdXJSeHpGWUJ6VVEyNjd6WEErMUVGZW5haGJDRTA3MXBVZU1nbnpsL0JoYmdvQS81RU1VYStvanhHaU1waSt0QkVoby9SaG8iLCJtYWMiOiIxNjM2ZTJjODhlYTgyYzQzMjZmZWMyOTdjM2Q4NjkwODYxOWRlY2I2ODA1MzAwMjViNDQ4N2FjMDUyYjgwN2I0IiwidGFnIjoiIn0%3D; code_session=eyJpdiI6Im12TXBGZVpkcEpVVnFvYThzelNtT3c9PSIsInZhbHVlIjoiNTY0SEZYT3JzTlN2Mnk1MFFkWC8zaFhXVGRvajNHeXhXYU5OLzdsdnNCczFLZU5DVm8vT2pRYzNhcVJ5ZXQrWW1KYWdUaGp2SEQ3TXlzVVp1MzhOVUlXSFZvSXZZTHU2eTNQUVZkUnBiK1pXdHhGTUdCWVV4cUdpM0pFT3ZaZUYiLCJtYWMiOiI1Yjc3NTdiYjNjYjExZTA2NTYzY2NiZTlkY2IxMzQyODNlNzkyZjYyYzM5ZmZlZTk2Y2RhZGE4NzNjZWVlZGYzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.1\r\ndate: Fri, 06 Feb 2026 11:59:10 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 79554\r\nlast-modified: Fri, 23 Jan 2026 10:19:31 GMT\r\netag: \"69734b33-136c2\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":79554,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25171)","md5":"68eaa7a1fb4e292983d686a8e3a27bc7","sha1":"e0a6822ea32aaee94bdf16659f1663d3d4043f02","sha256":"98bed9b003fe68ed62addbbecbff41350a03d24705228e090e103bc431a3cb32","sha512":"f23ca9d46684dc6387317d724587473622fce92f296f163c36e8f647745ad4a79d1e421ffc9ee3c174aec7b36a0546fe559bbff434e84857a1b3d507ec2be3f0","ssdeep":"1536:d7VtH5IRiebHXxhbrnaPNBHGblh5I5SszS3XB7fC:d7V4R7bD7aPNBQlh5I5SjHB76","tlshash":"c973f6ea72d6b03283ea11f250bf4606f3396954784e4464f528ecda383648d56f3fb9","first_seen":"2025-08-29T08:18:17.08973Z","last_seen":"2026-04-12T09:02:37.057791Z","times_seen":20,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"www.nic.co.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/registrar_logos/connectreseller.png","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","date":"2026-02-06T11:59:10.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 07:37:39 GMT","end":"Sun, 15 Mar 2026 07:37:38 GMT"},"fingerprint":{"sha1":"DA:A2:D4:53:88:8A:C9:69:96:39:EC:78:7A:75:CF:EB:13:35:67:50","sha256":"FF:C3:D4:61:EC:21:B8:8D:CD:58:66:E5:31:1F:F2:A7:3E:17:EE:06:07:F3:B8:08:A9:F8:39:11:A2:78:93:21"}}},"request":{"raw":"GET /registrar_logos/connectreseller.png HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYUjZuZzM1ajhPb1dCblZLb0VzWXc9PSIsInZhbHVlIjoicnhpcllsMm02aHRZYVVvT2lOOU1aZUVWWUw3cTdpNDVGU3IzczZCV2UwSDJrbmhyejJQbE1CWG9KdXJSeHpGWUJ6VVEyNjd6WEErMUVGZW5haGJDRTA3MXBVZU1nbnpsL0JoYmdvQS81RU1VYStvanhHaU1waSt0QkVoby9SaG8iLCJtYWMiOiIxNjM2ZTJjODhlYTgyYzQzMjZmZWMyOTdjM2Q4NjkwODYxOWRlY2I2ODA1MzAwMjViNDQ4N2FjMDUyYjgwN2I0IiwidGFnIjoiIn0%3D; code_session=eyJpdiI6Im12TXBGZVpkcEpVVnFvYThzelNtT3c9PSIsInZhbHVlIjoiNTY0SEZYT3JzTlN2Mnk1MFFkWC8zaFhXVGRvajNHeXhXYU5OLzdsdnNCczFLZU5DVm8vT2pRYzNhcVJ5ZXQrWW1KYWdUaGp2SEQ3TXlzVVp1MzhOVUlXSFZvSXZZTHU2eTNQUVZkUnBiK1pXdHhGTUdCWVV4cUdpM0pFT3ZaZUYiLCJtYWMiOiI1Yjc3NTdiYjNjYjExZTA2NTYzY2NiZTlkY2IxMzQyODNlNzkyZjYyYzM5ZmZlZTk2Y2RhZGE4NzNjZWVlZGYzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.1\r\ndate: Fri, 06 Feb 2026 11:59:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 45859\r\nlast-modified: Fri, 23 Jan 2026 10:19:27 GMT\r\netag: \"69734b2f-b323\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45859,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2200 x 550, 8-bit/color RGBA, non-interlaced","md5":"9f7c411af833e583f9449377d5ce9e19","sha1":"9cc4fa41b9518b251ea2018068e4bc2ba1ccce8d","sha256":"d7adc4fa482410e2b0f1f5b9d638bc23bd4714fdc7bc90bd41c90d816fecaacb","sha512":"655ed70477db585d86d6133eacec65ac8f40bec9fa2c65536f11dfd35c646e6db0f1837c5094628235f5db1a38581539dd26e9f2fb7febeb7406d74daecbc202","ssdeep":"768:0c5OIzukl9Ep9btWcOkHw1t66D0nIh2VmgShop/l+Aku9jIPMCMn9M9S9:0c5OQ3SlxOkHP+0n8SN+Aku9j02S9S9","tlshash":"cf23e16f5c935c2adda063feca4c4c655e50045deea944eb3a7849322bac5c1c063bbb","first_seen":"2026-02-01T10:53:09.868373Z","last_seen":"2026-04-12T09:02:37.039427Z","times_seen":15,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"www.nic.co.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/css?family=figtree:400,500,600,700\u0026display=swap","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","date":"2026-02-06T11:59:10.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 02:01:50 GMT","end":"Sun, 19 Apr 2026 02:01:49 GMT"},"fingerprint":{"sha1":"AF:D0:3B:5F:AF:FF:6C:96:AD:F8:6B:3E:7D:E9:E1:85:05:FC:8D:65","sha256":"F6:DF:31:95:6F:E1:8F:D5:7B:34:46:9E:90:B9:CA:35:74:EE:F7:C9:5E:87:1E:41:AD:FA:D8:02:48:E7:A3:E5"}}},"request":{"raw":"GET /css?family=figtree:400,500,600,700\u0026display=swap HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 11:59:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/21/2026 21:37:00\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 162f9b00d70d2e42f375e524a67ce354\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4144,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"be20946b3ed97c87ddd8c867b87aee64","sha1":"a18328c615d807751a079393c8099d6b95f3f97c","sha256":"fb549f108f512829e764b8e9edfed41c1899b08d2e47b6c7d2478ed81cd0aa40","sha512":"7b46bcc484abe39d87375a9992508f9bfab005ec9047c3d8b7377be897127a019a4e011fa63424281e71ca6e1786ec2d24b0da8ab187e001176d1a6145045a24","ssdeep":"96:ROEba5+3POEbaECqIOXbaX+3POXbalINCqIOxMbaZ+3POxMbaICqIOpbab+3POpY:yM3wEDou3vlIND9s3+IDWi3lqDG","tlshash":"5f8101f14c9a308493871d7323c6bd035f1f611a60456675ae261cd84df8d3ac393bae","first_seen":"2025-06-28T13:51:45.639856Z","last_seen":"2026-04-12T09:02:37.063078Z","times_seen":25,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":59,"dns":62,"connect":1,"send":0,"wait":2,"receive":0,"ssl":4},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/registrar_logos/publicdomainregistry.webp","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","date":"2026-02-06T11:59:10.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 07:37:39 GMT","end":"Sun, 15 Mar 2026 07:37:38 GMT"},"fingerprint":{"sha1":"DA:A2:D4:53:88:8A:C9:69:96:39:EC:78:7A:75:CF:EB:13:35:67:50","sha256":"FF:C3:D4:61:EC:21:B8:8D:CD:58:66:E5:31:1F:F2:A7:3E:17:EE:06:07:F3:B8:08:A9:F8:39:11:A2:78:93:21"}}},"request":{"raw":"GET /registrar_logos/publicdomainregistry.webp HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYUjZuZzM1ajhPb1dCblZLb0VzWXc9PSIsInZhbHVlIjoicnhpcllsMm02aHRZYVVvT2lOOU1aZUVWWUw3cTdpNDVGU3IzczZCV2UwSDJrbmhyejJQbE1CWG9KdXJSeHpGWUJ6VVEyNjd6WEErMUVGZW5haGJDRTA3MXBVZU1nbnpsL0JoYmdvQS81RU1VYStvanhHaU1waSt0QkVoby9SaG8iLCJtYWMiOiIxNjM2ZTJjODhlYTgyYzQzMjZmZWMyOTdjM2Q4NjkwODYxOWRlY2I2ODA1MzAwMjViNDQ4N2FjMDUyYjgwN2I0IiwidGFnIjoiIn0%3D; code_session=eyJpdiI6Im12TXBGZVpkcEpVVnFvYThzelNtT3c9PSIsInZhbHVlIjoiNTY0SEZYT3JzTlN2Mnk1MFFkWC8zaFhXVGRvajNHeXhXYU5OLzdsdnNCczFLZU5DVm8vT2pRYzNhcVJ5ZXQrWW1KYWdUaGp2SEQ3TXlzVVp1MzhOVUlXSFZvSXZZTHU2eTNQUVZkUnBiK1pXdHhGTUdCWVV4cUdpM0pFT3ZaZUYiLCJtYWMiOiI1Yjc3NTdiYjNjYjExZTA2NTYzY2NiZTlkY2IxMzQyODNlNzkyZjYyYzM5ZmZlZTk2Y2RhZGE4NzNjZWVlZGYzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.1\r\ndate: Fri, 06 Feb 2026 11:59:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 50450\r\nlast-modified: Tue, 10 Jun 2025 13:21:58 GMT\r\netag: \"68483176-c512\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50450,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c15a7df3a1b47c2533d5ccdfd6b1c8cc","sha1":"07a589d475a9372ca770d2eeaeb1a6f46ac90bd7","sha256":"a6720ea1d131e3d120e7d2d1cc8c86098858f7120abbe016c52d6db9e5801d39","sha512":"c66e80a0e38d74faceb26971436bc0f5b8426638a87a66ccbce0aee2d624ca8eb77ddbfd017f5e7985184565a0c1269c02ccc29da059d915c856cdfdaa172a95","ssdeep":"768:evOikxXg/V47Vr6n3C/1cRgGwwv3uY+sYZ1PrE1ZKwFdpc9WoK3+WLeGk7U7:nlgoVqQ1cRhxvSRFr85dOE+QeT7c","tlshash":"af330232ac44d63d0a86de7303f5db7b2e858c4658e0e354466387ac845f2df6e19896","first_seen":"2025-08-29T08:18:17.128152Z","last_seen":"2026-04-12T09:02:37.070256Z","times_seen":16,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"www.nic.co.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","date":"2026-02-06T11:59:11.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0-beta3/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.nic.co.de\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 11:59:11 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 125064\r\ncf-ray: 9c9a7adddc7cb1b8-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"619c057b-1e888\"\r\nlast-modified: Mon, 22 Nov 2021 21:02:51 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1347438\r\nexpires: Wed, 27 Jan 2027 11:59:11 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OdkrU%2FbB9KPSTpQb07RNI%2FmRkpmk9lQIuYOZTleBNrOZTsslMtwfCFB%2F5O7YwJcFnTnC4bw90KV%2FrJ%2BzvxZni93zvgZjXynmSfXr6C2zmMtB740m%2F5xp6QdTgUx0pAemSMytjpcd\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":125064,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 125064, version 768.67","md5":"57b380d27f14f16e737bcca7e849cf79","sha1":"2e4280929d4d76fc0e31601c98f167f14630c209","sha256":"94e1bbc1c2a41ebc73fa5253fd563256c0035b4d69181e48f9aef9e474a11251","sha512":"88dd2321cc4711333411a24dab612daa68caf7cc31c892405bcbb9e89629ca15fcdd781bb26d7485f5819b5b48170ec8eaa2135701f4695cf94a1cb0c15bf649","ssdeep":"3072:W0ZXsLdN0s2s3suUQwuHn6XEedsYoDAEMUdAgofJ:W0OdNj10uHwsYoMHPg+J","tlshash":"b0c3122be28d689365654613aedd23ae1e795b7d8c4b6315c1bb3046f7ac7b83003b13","first_seen":"2023-04-09T08:23:50Z","last_seen":"2026-04-15T21:30:27.972053Z","times_seen":11788,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":10,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/co_de_favicon_32x32.ico","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","date":"2026-02-06T11:59:11.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 07:37:39 GMT","end":"Sun, 15 Mar 2026 07:37:38 GMT"},"fingerprint":{"sha1":"DA:A2:D4:53:88:8A:C9:69:96:39:EC:78:7A:75:CF:EB:13:35:67:50","sha256":"FF:C3:D4:61:EC:21:B8:8D:CD:58:66:E5:31:1F:F2:A7:3E:17:EE:06:07:F3:B8:08:A9:F8:39:11:A2:78:93:21"}}},"request":{"raw":"GET /co_de_favicon_32x32.ico HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYUjZuZzM1ajhPb1dCblZLb0VzWXc9PSIsInZhbHVlIjoicnhpcllsMm02aHRZYVVvT2lOOU1aZUVWWUw3cTdpNDVGU3IzczZCV2UwSDJrbmhyejJQbE1CWG9KdXJSeHpGWUJ6VVEyNjd6WEErMUVGZW5haGJDRTA3MXBVZU1nbnpsL0JoYmdvQS81RU1VYStvanhHaU1waSt0QkVoby9SaG8iLCJtYWMiOiIxNjM2ZTJjODhlYTgyYzQzMjZmZWMyOTdjM2Q4NjkwODYxOWRlY2I2ODA1MzAwMjViNDQ4N2FjMDUyYjgwN2I0IiwidGFnIjoiIn0%3D; code_session=eyJpdiI6Im12TXBGZVpkcEpVVnFvYThzelNtT3c9PSIsInZhbHVlIjoiNTY0SEZYT3JzTlN2Mnk1MFFkWC8zaFhXVGRvajNHeXhXYU5OLzdsdnNCczFLZU5DVm8vT2pRYzNhcVJ5ZXQrWW1KYWdUaGp2SEQ3TXlzVVp1MzhOVUlXSFZvSXZZTHU2eTNQUVZkUnBiK1pXdHhGTUdCWVV4cUdpM0pFT3ZaZUYiLCJtYWMiOiI1Yjc3NTdiYjNjYjExZTA2NTYzY2NiZTlkY2IxMzQyODNlNzkyZjYyYzM5ZmZlZTk2Y2RhZGE4NzNjZWVlZGYzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.1\r\ndate: Fri, 06 Feb 2026 11:59:11 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Mon, 02 Jun 2025 12:32:53 GMT\r\netag: \"683d99f5-10be\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"a5ee255c41fd6c22e911b3573eab8f4e","sha1":"c4511c795a7fbb3731924d5b64559f5b7ae8fcb4","sha256":"7635a117ffd7dddb92f480f939b50573a4577c76c709258c044d058af982811f","sha512":"ac74e1cc2c8b1434b4e8d6d984aef6941d43aacdb636e32512b83f6217fda45e816c5b2730ef845f7d25ad10ac793b81d309471a7ad8e82d01338c0e2f0c5e08","ssdeep":"48:dEIPYt+iCozlNvjImOax0Us+zFiPMFA+kf08mTbC12G7ox7ym8qu:dECgxCwvjBxDFiPMFAtf0DTO18xWm8l","tlshash":"fd91a8559f1fa88acccc597d800cb111221c3f8559f9e63a4e68399338617b81f91df8","first_seen":"2025-08-29T08:18:17.118851Z","last_seen":"2026-04-12T09:02:37.041496Z","times_seen":19,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"www.nic.co.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/logos/co_de_white.png","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","date":"2026-02-06T11:59:10.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 07:37:39 GMT","end":"Sun, 15 Mar 2026 07:37:38 GMT"},"fingerprint":{"sha1":"DA:A2:D4:53:88:8A:C9:69:96:39:EC:78:7A:75:CF:EB:13:35:67:50","sha256":"FF:C3:D4:61:EC:21:B8:8D:CD:58:66:E5:31:1F:F2:A7:3E:17:EE:06:07:F3:B8:08:A9:F8:39:11:A2:78:93:21"}}},"request":{"raw":"GET /logos/co_de_white.png HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYUjZuZzM1ajhPb1dCblZLb0VzWXc9PSIsInZhbHVlIjoicnhpcllsMm02aHRZYVVvT2lOOU1aZUVWWUw3cTdpNDVGU3IzczZCV2UwSDJrbmhyejJQbE1CWG9KdXJSeHpGWUJ6VVEyNjd6WEErMUVGZW5haGJDRTA3MXBVZU1nbnpsL0JoYmdvQS81RU1VYStvanhHaU1waSt0QkVoby9SaG8iLCJtYWMiOiIxNjM2ZTJjODhlYTgyYzQzMjZmZWMyOTdjM2Q4NjkwODYxOWRlY2I2ODA1MzAwMjViNDQ4N2FjMDUyYjgwN2I0IiwidGFnIjoiIn0%3D; code_session=eyJpdiI6Im12TXBGZVpkcEpVVnFvYThzelNtT3c9PSIsInZhbHVlIjoiNTY0SEZYT3JzTlN2Mnk1MFFkWC8zaFhXVGRvajNHeXhXYU5OLzdsdnNCczFLZU5DVm8vT2pRYzNhcVJ5ZXQrWW1KYWdUaGp2SEQ3TXlzVVp1MzhOVUlXSFZvSXZZTHU2eTNQUVZkUnBiK1pXdHhGTUdCWVV4cUdpM0pFT3ZaZUYiLCJtYWMiOiI1Yjc3NTdiYjNjYjExZTA2NTYzY2NiZTlkY2IxMzQyODNlNzkyZjYyYzM5ZmZlZTk2Y2RhZGE4NzNjZWVlZGYzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.1\r\ndate: Fri, 06 Feb 2026 11:59:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 52161\r\nlast-modified: Tue, 10 Jun 2025 13:21:58 GMT\r\netag: \"68483176-cbc1\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":52161,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 300, 8-bit/color RGBA, non-interlaced","md5":"eb6c7ea4f04c14313dcbaaba7a31ee3a","sha1":"6100d47a125e99a4f415e35a3650e5e4ced2db73","sha256":"52f28d3e2449145d92658e6632d2b6c197bbe0176e89bc8450c4979e8275e433","sha512":"38f43a6fc61c828dd535ff141d033d342345f0ee52711d2c6a2d5d39602ae2ef8b5ee7b4c1166ce62bcb251172cf54e287394ca6b0e0dc5661aa34125a9f6184","ssdeep":"768:QGsLT6z7Xnvd7IjoN40QYj5GVlidJ+arC4iVEsy2anYoKc9Os4P6xEyra+C:QGU6zpcjo+Sb9rC42ExYzN4m+C","tlshash":"0933f1d5ef7101320a306b92804eca6eef1533416e5a9618d4bdcacaeb23f2142dd973","first_seen":"2025-08-29T08:18:17.112768Z","last_seen":"2026-04-12T09:02:37.069376Z","times_seen":19,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"www.nic.co.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/registrar_logos/INWX.png","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","date":"2026-02-06T11:59:10.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 07:37:39 GMT","end":"Sun, 15 Mar 2026 07:37:38 GMT"},"fingerprint":{"sha1":"DA:A2:D4:53:88:8A:C9:69:96:39:EC:78:7A:75:CF:EB:13:35:67:50","sha256":"FF:C3:D4:61:EC:21:B8:8D:CD:58:66:E5:31:1F:F2:A7:3E:17:EE:06:07:F3:B8:08:A9:F8:39:11:A2:78:93:21"}}},"request":{"raw":"GET /registrar_logos/INWX.png HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYUjZuZzM1ajhPb1dCblZLb0VzWXc9PSIsInZhbHVlIjoicnhpcllsMm02aHRZYVVvT2lOOU1aZUVWWUw3cTdpNDVGU3IzczZCV2UwSDJrbmhyejJQbE1CWG9KdXJSeHpGWUJ6VVEyNjd6WEErMUVGZW5haGJDRTA3MXBVZU1nbnpsL0JoYmdvQS81RU1VYStvanhHaU1waSt0QkVoby9SaG8iLCJtYWMiOiIxNjM2ZTJjODhlYTgyYzQzMjZmZWMyOTdjM2Q4NjkwODYxOWRlY2I2ODA1MzAwMjViNDQ4N2FjMDUyYjgwN2I0IiwidGFnIjoiIn0%3D; code_session=eyJpdiI6Im12TXBGZVpkcEpVVnFvYThzelNtT3c9PSIsInZhbHVlIjoiNTY0SEZYT3JzTlN2Mnk1MFFkWC8zaFhXVGRvajNHeXhXYU5OLzdsdnNCczFLZU5DVm8vT2pRYzNhcVJ5ZXQrWW1KYWdUaGp2SEQ3TXlzVVp1MzhOVUlXSFZvSXZZTHU2eTNQUVZkUnBiK1pXdHhGTUdCWVV4cUdpM0pFT3ZaZUYiLCJtYWMiOiI1Yjc3NTdiYjNjYjExZTA2NTYzY2NiZTlkY2IxMzQyODNlNzkyZjYyYzM5ZmZlZTk2Y2RhZGE4NzNjZWVlZGYzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.1\r\ndate: Fri, 06 Feb 2026 11:59:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 9794\r\nlast-modified: Tue, 12 Aug 2025 09:14:39 GMT\r\netag: \"689b05ff-2642\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":9794,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 440 x 110, 8-bit/color RGBA, non-interlaced","md5":"caaf3a158df8a109e62c0b3fd85c74fb","sha1":"a8a2ef9d63cbc1443e0f895bddccd63a84df4fdd","sha256":"6b73a301993feeb7afa705a00a4b7651763c27ef3ffd95b71f66e05aefaf0a62","sha512":"2bb57bf972b0cce25662c9a7a36bc031d2d4e8734cc286dd4870976094a666708231c8c145587dfeaf89b553b41e076521cd94fd375ad36967b6adac08e6b907","ssdeep":"192:6IIHUCD4waDqi7tLueE7odwEFVfEyDM0gypF7izv:U0wyqi7hBsoOK+","tlshash":"a512af4a858ac948000f03ad79aea40e553ff6b4e665ed3d5cfad02ab331c656530977","first_seen":"2025-08-29T08:18:17.114955Z","last_seen":"2026-04-12T09:02:37.067569Z","times_seen":16,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"www.nic.co.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/registrar_logos/marcaria.png","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","date":"2026-02-06T11:59:10.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 07:37:39 GMT","end":"Sun, 15 Mar 2026 07:37:38 GMT"},"fingerprint":{"sha1":"DA:A2:D4:53:88:8A:C9:69:96:39:EC:78:7A:75:CF:EB:13:35:67:50","sha256":"FF:C3:D4:61:EC:21:B8:8D:CD:58:66:E5:31:1F:F2:A7:3E:17:EE:06:07:F3:B8:08:A9:F8:39:11:A2:78:93:21"}}},"request":{"raw":"GET /registrar_logos/marcaria.png HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYUjZuZzM1ajhPb1dCblZLb0VzWXc9PSIsInZhbHVlIjoicnhpcllsMm02aHRZYVVvT2lOOU1aZUVWWUw3cTdpNDVGU3IzczZCV2UwSDJrbmhyejJQbE1CWG9KdXJSeHpGWUJ6VVEyNjd6WEErMUVGZW5haGJDRTA3MXBVZU1nbnpsL0JoYmdvQS81RU1VYStvanhHaU1waSt0QkVoby9SaG8iLCJtYWMiOiIxNjM2ZTJjODhlYTgyYzQzMjZmZWMyOTdjM2Q4NjkwODYxOWRlY2I2ODA1MzAwMjViNDQ4N2FjMDUyYjgwN2I0IiwidGFnIjoiIn0%3D; code_session=eyJpdiI6Im12TXBGZVpkcEpVVnFvYThzelNtT3c9PSIsInZhbHVlIjoiNTY0SEZYT3JzTlN2Mnk1MFFkWC8zaFhXVGRvajNHeXhXYU5OLzdsdnNCczFLZU5DVm8vT2pRYzNhcVJ5ZXQrWW1KYWdUaGp2SEQ3TXlzVVp1MzhOVUlXSFZvSXZZTHU2eTNQUVZkUnBiK1pXdHhGTUdCWVV4cUdpM0pFT3ZaZUYiLCJtYWMiOiI1Yjc3NTdiYjNjYjExZTA2NTYzY2NiZTlkY2IxMzQyODNlNzkyZjYyYzM5ZmZlZTk2Y2RhZGE4NzNjZWVlZGYzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.1\r\ndate: Fri, 06 Feb 2026 11:59:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 82792\r\nlast-modified: Tue, 10 Jun 2025 13:21:58 GMT\r\netag: \"68483176-14368\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":82792,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 218, 8-bit/color RGBA, non-interlaced","md5":"787cfea47fd34c86fbe20d1c2999bc62","sha1":"5907b2aeaec14142398d99119825ea6ee558f2cf","sha256":"d2c268d78ed68fd3d4b0d8b2f5a8e8f0c174c109a8a081abfc74163ac19d1653","sha512":"d6e60fc41d8e41ab2b69255c07ec1078999cffb38f02398c9bbb19ca37404317349e7704ca19bb0416be239ee57fc94cb9ea2f7e66b13f27331af79ff846cfda","ssdeep":"1536:uJfNChPzQECDLngpMFIa+5v7afnViwgio0Sfg2zk4bpw/qiPP:+C6tkpYSv7eAgFogCSX","tlshash":"358302008a6afad25b1f9875bdc2eff44b44907351fae46081889f9d5c32f56732a71c","first_seen":"2025-08-29T08:18:17.097543Z","last_seen":"2026-04-12T09:02:37.064016Z","times_seen":16,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"www.nic.co.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/alpinejs@3.15.8/dist/cdn.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","date":"2026-02-06T11:59:10.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /alpinejs@3.15.8/dist/cdn.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.nic.co.de/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 11:59:10 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9c9a7add48127130-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 57265\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 06 Feb 2027 11:59:10 GMT\r\nlast-modified: Mon, 02 Feb 2026 22:39:25 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:iZhCeCp/0W/MLXp8h3/57BWTlARMh7FYsu8TJ4ZgaTI=:\r\nfly-request-id: 01KGG85F910RCR0K4EZKY7SQMS-arn\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46632,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (41221)","md5":"7f53c06f93ae095221ff718c3a158a93","sha1":"9572c80b2918c796eea3c16eba905ef835aeb41b","sha256":"899842782a7fd16fcc2d7a7c877ff9ec159394044c87b158b2ef132786606932","sha512":"d9ac61274b8de67808c2bc86fbdfa5b45d9c9858285a5bbf6a1ad21db09d4159e66bfe2c2fa2a8759591c17b224667b559e82fc71e6343b2df8d26a0375abe9e","ssdeep":"768:gDWpHFKOT9onx0mD+zcyLAE+7jNb+mQmPl7cQqDTvmtfbYxeE3X5K:iWG1h+cMAE25+mQ+LqOf8p5K","tlshash":"dc23f8e97396b53283ef01b180bb460af33d2990550e5468f769d8da383948d41f3fba","first_seen":"2026-02-03T15:27:32.411372Z","last_seen":"2026-04-10T00:27:52.845621Z","times_seen":949,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/apple-touch-icon.png","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","date":"2026-02-06T11:59:11.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 07:37:39 GMT","end":"Sun, 15 Mar 2026 07:37:38 GMT"},"fingerprint":{"sha1":"DA:A2:D4:53:88:8A:C9:69:96:39:EC:78:7A:75:CF:EB:13:35:67:50","sha256":"FF:C3:D4:61:EC:21:B8:8D:CD:58:66:E5:31:1F:F2:A7:3E:17:EE:06:07:F3:B8:08:A9:F8:39:11:A2:78:93:21"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYUjZuZzM1ajhPb1dCblZLb0VzWXc9PSIsInZhbHVlIjoicnhpcllsMm02aHRZYVVvT2lOOU1aZUVWWUw3cTdpNDVGU3IzczZCV2UwSDJrbmhyejJQbE1CWG9KdXJSeHpGWUJ6VVEyNjd6WEErMUVGZW5haGJDRTA3MXBVZU1nbnpsL0JoYmdvQS81RU1VYStvanhHaU1waSt0QkVoby9SaG8iLCJtYWMiOiIxNjM2ZTJjODhlYTgyYzQzMjZmZWMyOTdjM2Q4NjkwODYxOWRlY2I2ODA1MzAwMjViNDQ4N2FjMDUyYjgwN2I0IiwidGFnIjoiIn0%3D; code_session=eyJpdiI6Im12TXBGZVpkcEpVVnFvYThzelNtT3c9PSIsInZhbHVlIjoiNTY0SEZYT3JzTlN2Mnk1MFFkWC8zaFhXVGRvajNHeXhXYU5OLzdsdnNCczFLZU5DVm8vT2pRYzNhcVJ5ZXQrWW1KYWdUaGp2SEQ3TXlzVVp1MzhOVUlXSFZvSXZZTHU2eTNQUVZkUnBiK1pXdHhGTUdCWVV4cUdpM0pFT3ZaZUYiLCJtYWMiOiI1Yjc3NTdiYjNjYjExZTA2NTYzY2NiZTlkY2IxMzQyODNlNzkyZjYyYzM5ZmZlZTk2Y2RhZGE4NzNjZWVlZGYzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: openresty/1.27.1.1\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Fri, 06 Feb 2026 11:59:11 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6603,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5391)","md5":"543ac81966d87ac815e08eb0e436d719","sha1":"e35bb4e32ccf08c11a3935084b50660feb835350","sha256":"8cbc10ee9755ef972000f666711a5c4d0e025d3cedf53079ba3bfd8f2b19a968","sha512":"0c6a8f7948f93d4d00b5fbb98f487d7e2ee15d104acd83dfbc884ef9b77826dc7daa27b906640572977750a00cb7ef590ed5cd93e2f40ef4def88b9ff92f1dc3","ssdeep":"96:/J/SNi/FLQVTLKCGWz5NN5PXy0jRdoMCX4SZTdI5:/pV2RKCxnNByTMCX4SZT0","tlshash":"aed1871eeac5101e60d785b7e8d4e64c8916aac3de238bdfb54f7915cf8038719a321c","first_seen":"2023-04-06T17:05:03Z","last_seen":"2026-04-15T12:35:38.518519Z","times_seen":6964,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"www.nic.co.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-06T11:59:10.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 07:37:39 GMT","end":"Sun, 15 Mar 2026 07:37:38 GMT"},"fingerprint":{"sha1":"DA:A2:D4:53:88:8A:C9:69:96:39:EC:78:7A:75:CF:EB:13:35:67:50","sha256":"FF:C3:D4:61:EC:21:B8:8D:CD:58:66:E5:31:1F:F2:A7:3E:17:EE:06:07:F3:B8:08:A9:F8:39:11:A2:78:93:21"}}},"request":{"raw":"GET /domain/search/mailercheck.co.de?source=catchall HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.1\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Fri, 06 Feb 2026 11:59:10 GMT\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImJYUjZuZzM1ajhPb1dCblZLb0VzWXc9PSIsInZhbHVlIjoicnhpcllsMm02aHRZYVVvT2lOOU1aZUVWWUw3cTdpNDVGU3IzczZCV2UwSDJrbmhyejJQbE1CWG9KdXJSeHpGWUJ6VVEyNjd6WEErMUVGZW5haGJDRTA3MXBVZU1nbnpsL0JoYmdvQS81RU1VYStvanhHaU1waSt0QkVoby9SaG8iLCJtYWMiOiIxNjM2ZTJjODhlYTgyYzQzMjZmZWMyOTdjM2Q4NjkwODYxOWRlY2I2ODA1MzAwMjViNDQ4N2FjMDUyYjgwN2I0IiwidGFnIjoiIn0%3D; expires=Fri, 06 Feb 2026 13:59:10 GMT; Max-Age=7200; path=/; secure; samesite=lax\ncode_session=eyJpdiI6Im12TXBGZVpkcEpVVnFvYThzelNtT3c9PSIsInZhbHVlIjoiNTY0SEZYT3JzTlN2Mnk1MFFkWC8zaFhXVGRvajNHeXhXYU5OLzdsdnNCczFLZU5DVm8vT2pRYzNhcVJ5ZXQrWW1KYWdUaGp2SEQ3TXlzVVp1MzhOVUlXSFZvSXZZTHU2eTNQUVZkUnBiK1pXdHhGTUdCWVV4cUdpM0pFT3ZaZUYiLCJtYWMiOiI1Yjc3NTdiYjNjYjExZTA2NTYzY2NiZTlkY2IxMzQyODNlNzkyZjYyYzM5ZmZlZTk2Y2RhZGE4NzNjZWVlZGYzIiwidGFnIjoiIn0%3D; expires=Fri, 06 Feb 2026 13:59:10 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":44511,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (361)","md5":"39cb85406493a2646ab57dff808c8150","sha1":"6fab28364641e45e8fb129eda555582aa1ee0caa","sha256":"755b8976371ace67359dbf77f816abeae11baee9b2aea927f3906a64b46922e7","sha512":"571cc0bde77d7ce6fdc39371efc5c599e3b50f12b6eb998429da81faa6c6f1d12ff637e470bd3740f34767967b68e6b6e62591fd401b30b584b88517cc397093","ssdeep":"768:GdOeJADg1PgrzC+SzVS7i7Zi74i7di72i7fi7Xi7bi7Si7li7Hi7Vi7Ui7Qi7Eic:TeJZmqS7C7IHoyCpeCQ95xhp","tlshash":"4113532522f200964297d2f5b9b2eb7ede9ac347c54bdc9e73bc42866f86c504d83358","first_seen":"2026-02-06T11:59:35.873935Z","last_seen":"2026-02-06T11:59:35.873935Z","times_seen":1,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":103,"dns":43,"connect":24,"send":0,"wait":160,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"www.nic.co.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/registrar_logos/bb-online.png","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","date":"2026-02-06T11:59:10.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 07:37:39 GMT","end":"Sun, 15 Mar 2026 07:37:38 GMT"},"fingerprint":{"sha1":"DA:A2:D4:53:88:8A:C9:69:96:39:EC:78:7A:75:CF:EB:13:35:67:50","sha256":"FF:C3:D4:61:EC:21:B8:8D:CD:58:66:E5:31:1F:F2:A7:3E:17:EE:06:07:F3:B8:08:A9:F8:39:11:A2:78:93:21"}}},"request":{"raw":"GET /registrar_logos/bb-online.png HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYUjZuZzM1ajhPb1dCblZLb0VzWXc9PSIsInZhbHVlIjoicnhpcllsMm02aHRZYVVvT2lOOU1aZUVWWUw3cTdpNDVGU3IzczZCV2UwSDJrbmhyejJQbE1CWG9KdXJSeHpGWUJ6VVEyNjd6WEErMUVGZW5haGJDRTA3MXBVZU1nbnpsL0JoYmdvQS81RU1VYStvanhHaU1waSt0QkVoby9SaG8iLCJtYWMiOiIxNjM2ZTJjODhlYTgyYzQzMjZmZWMyOTdjM2Q4NjkwODYxOWRlY2I2ODA1MzAwMjViNDQ4N2FjMDUyYjgwN2I0IiwidGFnIjoiIn0%3D; code_session=eyJpdiI6Im12TXBGZVpkcEpVVnFvYThzelNtT3c9PSIsInZhbHVlIjoiNTY0SEZYT3JzTlN2Mnk1MFFkWC8zaFhXVGRvajNHeXhXYU5OLzdsdnNCczFLZU5DVm8vT2pRYzNhcVJ5ZXQrWW1KYWdUaGp2SEQ3TXlzVVp1MzhOVUlXSFZvSXZZTHU2eTNQUVZkUnBiK1pXdHhGTUdCWVV4cUdpM0pFT3ZaZUYiLCJtYWMiOiI1Yjc3NTdiYjNjYjExZTA2NTYzY2NiZTlkY2IxMzQyODNlNzkyZjYyYzM5ZmZlZTk2Y2RhZGE4NzNjZWVlZGYzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.1\r\ndate: Fri, 06 Feb 2026 11:59:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 20115\r\nlast-modified: Tue, 10 Jun 2025 13:21:58 GMT\r\netag: \"68483176-4e93\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20115,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 340 x 80, 8-bit/color RGBA, non-interlaced","md5":"449f1a05bb6557dd84af85e32b50af45","sha1":"e6be43d53a07a47e34173ebe167a02a602e03ad0","sha256":"aa71b7cc348efe89c33ae1b85c430ea849565287429966c66b2295b12ca345ea","sha512":"8f0c618ff444be261b2b61b9f6324360f4e6db831800f7a328afafac36dded7650a6018da898a6209b8087ec24345e7c2471dd8f1cd3e6ebd363414fe237f9f1","ssdeep":"384:h/PXzO/3UOULe6tWNXM9ipYj4NsytMt3fkwG6ixE/YWWrYoqvN:djGr9Wj4Nzt03vixEwSN","tlshash":"e992cfc668f65cdbb61352e1c415f1520285d6f70a8f6f26b0d4ca26c38ab9ec5b04dc","first_seen":"2025-08-29T08:18:17.133611Z","last_seen":"2026-04-12T09:02:37.058919Z","times_seen":16,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"www.nic.co.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/registrar_logos/eurodns.png","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","date":"2026-02-06T11:59:10.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 07:37:39 GMT","end":"Sun, 15 Mar 2026 07:37:38 GMT"},"fingerprint":{"sha1":"DA:A2:D4:53:88:8A:C9:69:96:39:EC:78:7A:75:CF:EB:13:35:67:50","sha256":"FF:C3:D4:61:EC:21:B8:8D:CD:58:66:E5:31:1F:F2:A7:3E:17:EE:06:07:F3:B8:08:A9:F8:39:11:A2:78:93:21"}}},"request":{"raw":"GET /registrar_logos/eurodns.png HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYUjZuZzM1ajhPb1dCblZLb0VzWXc9PSIsInZhbHVlIjoicnhpcllsMm02aHRZYVVvT2lOOU1aZUVWWUw3cTdpNDVGU3IzczZCV2UwSDJrbmhyejJQbE1CWG9KdXJSeHpGWUJ6VVEyNjd6WEErMUVGZW5haGJDRTA3MXBVZU1nbnpsL0JoYmdvQS81RU1VYStvanhHaU1waSt0QkVoby9SaG8iLCJtYWMiOiIxNjM2ZTJjODhlYTgyYzQzMjZmZWMyOTdjM2Q4NjkwODYxOWRlY2I2ODA1MzAwMjViNDQ4N2FjMDUyYjgwN2I0IiwidGFnIjoiIn0%3D; code_session=eyJpdiI6Im12TXBGZVpkcEpVVnFvYThzelNtT3c9PSIsInZhbHVlIjoiNTY0SEZYT3JzTlN2Mnk1MFFkWC8zaFhXVGRvajNHeXhXYU5OLzdsdnNCczFLZU5DVm8vT2pRYzNhcVJ5ZXQrWW1KYWdUaGp2SEQ3TXlzVVp1MzhOVUlXSFZvSXZZTHU2eTNQUVZkUnBiK1pXdHhGTUdCWVV4cUdpM0pFT3ZaZUYiLCJtYWMiOiI1Yjc3NTdiYjNjYjExZTA2NTYzY2NiZTlkY2IxMzQyODNlNzkyZjYyYzM5ZmZlZTk2Y2RhZGE4NzNjZWVlZGYzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.1\r\ndate: Fri, 06 Feb 2026 11:59:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 42959\r\nlast-modified: Tue, 10 Jun 2025 13:21:58 GMT\r\netag: \"68483176-a7cf\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":42959,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 941 x 242, 8-bit/color RGBA, non-interlaced","md5":"bb6a1741889971ec687ca97f5718140b","sha1":"0926175700ac8e16d109a2beb07d1cdf298d7c92","sha256":"4417a3394c908ddd13c0456acee7cf37017879364ff16fe18c9510e0c36508fc","sha512":"d94578cf7c462acf98e1b2a022d28efa58bd536ae2f5264d2e50cc0e572bacae36dc951bd3ea772789371b2296d794708b80e74ec0cfc77ef5cef1de8cee58dc","ssdeep":"768:NugL/Y66Df71r0ZyE5AnlkK46l1mPO4llk4d1iDURszZNuS4/3c:NugrY6Y90YE5ZKr1mWMd0gsOs","tlshash":"df13e0349eca6c3f9c7b5c726c869766be24ad00a8e627b3c55d35bd3521ef20d0b442","first_seen":"2025-08-29T08:18:17.102815Z","last_seen":"2026-04-12T09:02:37.066701Z","times_seen":16,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"www.nic.co.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/logos/co_de.png","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","date":"2026-02-06T11:59:10.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 07:37:39 GMT","end":"Sun, 15 Mar 2026 07:37:38 GMT"},"fingerprint":{"sha1":"DA:A2:D4:53:88:8A:C9:69:96:39:EC:78:7A:75:CF:EB:13:35:67:50","sha256":"FF:C3:D4:61:EC:21:B8:8D:CD:58:66:E5:31:1F:F2:A7:3E:17:EE:06:07:F3:B8:08:A9:F8:39:11:A2:78:93:21"}}},"request":{"raw":"GET /logos/co_de.png HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYUjZuZzM1ajhPb1dCblZLb0VzWXc9PSIsInZhbHVlIjoicnhpcllsMm02aHRZYVVvT2lOOU1aZUVWWUw3cTdpNDVGU3IzczZCV2UwSDJrbmhyejJQbE1CWG9KdXJSeHpGWUJ6VVEyNjd6WEErMUVGZW5haGJDRTA3MXBVZU1nbnpsL0JoYmdvQS81RU1VYStvanhHaU1waSt0QkVoby9SaG8iLCJtYWMiOiIxNjM2ZTJjODhlYTgyYzQzMjZmZWMyOTdjM2Q4NjkwODYxOWRlY2I2ODA1MzAwMjViNDQ4N2FjMDUyYjgwN2I0IiwidGFnIjoiIn0%3D; code_session=eyJpdiI6Im12TXBGZVpkcEpVVnFvYThzelNtT3c9PSIsInZhbHVlIjoiNTY0SEZYT3JzTlN2Mnk1MFFkWC8zaFhXVGRvajNHeXhXYU5OLzdsdnNCczFLZU5DVm8vT2pRYzNhcVJ5ZXQrWW1KYWdUaGp2SEQ3TXlzVVp1MzhOVUlXSFZvSXZZTHU2eTNQUVZkUnBiK1pXdHhGTUdCWVV4cUdpM0pFT3ZaZUYiLCJtYWMiOiI1Yjc3NTdiYjNjYjExZTA2NTYzY2NiZTlkY2IxMzQyODNlNzkyZjYyYzM5ZmZlZTk2Y2RhZGE4NzNjZWVlZGYzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.1\r\ndate: Fri, 06 Feb 2026 11:59:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 75492\r\nlast-modified: Mon, 02 Jun 2025 13:04:01 GMT\r\netag: \"683da141-126e4\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75492,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 300, 8-bit/color RGBA, non-interlaced","md5":"84f961b31aa57c8151271457a212de98","sha1":"9c878dbc238dd7f0e084532c3fd00101c29180c5","sha256":"672dadb10d04d4e47cc67406b44e79d77f475ea005334e54ed1ab344dbf2c7d0","sha512":"f48dc50e1b86081df434c5ffbbe9351f3e142cf091445a5fa0b1b5fc23be7585567ea9ca733d2b7d8627cb2187b486dd5408d035cbd169141fcd4e28528f4a1a","ssdeep":"1536:e/pJNuxstzUjYVT4G0BNQMJOnlPUajS7Y4QiRucaNy3eLtyYZ:yNBojNYv2qiRufNy3eLsYZ","tlshash":"cd730164b8fdb15113c45534be8a796567a2b70481edc0e006ce01b3bdee8e89dffa24","first_seen":"2025-08-29T08:18:17.100589Z","last_seen":"2026-04-12T09:02:37.032511Z","times_seen":19,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"www.nic.co.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/figtree/files/figtree-latin-700-normal.woff2","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","date":"2026-02-06T11:59:11.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 02:01:50 GMT","end":"Sun, 19 Apr 2026 02:01:49 GMT"},"fingerprint":{"sha1":"AF:D0:3B:5F:AF:FF:6C:96:AD:F8:6B:3E:7D:E9:E1:85:05:FC:8D:65","sha256":"F6:DF:31:95:6F:E1:8F:D5:7B:34:46:9E:90:B9:CA:35:74:EE:F7:C9:5E:87:1E:41:AD:FA:D8:02:48:E7:A3:E5"}}},"request":{"raw":"GET /figtree/files/figtree-latin-700-normal.woff2 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.nic.co.de\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.bunny.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 11:59:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 11376\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"695a12a6-2c70\"\r\nlast-modified: Sun, 04 Jan 2026 07:11:34 GMT\r\ncdn-storageserver: DE-633\r\ncdn-fileserver: 659\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/11/2026 12:56:26\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f037070badc496742238ed8f348db4e7\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":11376,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11376, version 1.0","md5":"70aaa6879de54ba5c8a8beee4a096c4d","sha1":"32c1002f58b613e1e2d2533c7fd273a82267b132","sha256":"7ec4f08d09f91d349917dd6592f6aaae66d8fe1bbd58fa24707961e79236616e","sha512":"578faf483a202e56bb604cc7a84283259b0351e9b1f4078a630e31b76922ad8900bb2e72ba91047e00b598d082b2f5c1e539278ce39ad51eabfa1015ded9a3bc","ssdeep":"192:W8RYCzrjFQBYLKPoy0rfe681FFf66jqjM/Wtj/nC8Q8PEiCn5PVZCTjcmwy9kej:9zrjFQmgovbeZfpKM/2nC+EiCn1iQmwO","tlshash":"3932c08d90042484a75e307bf45e3346b7d823bcc6d1610aafc24e866ef813cc6b6c9b","first_seen":"2025-06-07T22:56:35.157873Z","last_seen":"2026-04-12T09:02:37.034939Z","times_seen":86,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","date":"2026-02-06T11:59:10.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 11:59:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 14850\r\ncf-ray: 9c9a7adc8ab30731-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"619c057b-3a02\"\r\nlast-modified: Mon, 22 Nov 2021 21:02:51 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1336603\r\nexpires: Wed, 27 Jan 2027 11:59:10 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9OQzDYXj1FeDOBO4EV%2FvqlveIrEnxG%2Ffx29iEDKZExWKd9LrpIVd0Xx6q%2B83glYi2iSWKi2VwpiIjrjsUyEMYPTVBY8quQfb8MhZtsY5XbWRmW7eDPHMk%2FW8gSfED4VYZMJfU9Y%2F\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83981,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65311)","md5":"3d5ef2bf867c4054a2f336cdbad9e1dc","sha1":"07228d1fa3245ee156a27a353f45758a3207849f","sha256":"a361e7885c36bacb3fd9cb068da207c3b9329962cac022d06e28923939f575e8","sha512":"168deb96b663fe4eee8d39c78380864760fb912b34bf82cb6a7c36aa4b18b91944ccefad71a10f428810d0a6a818ddbaff3ae7db42264750dfb8b5a73a8eda04","ssdeep":"1536:YlMVM6MVM9MVMKMVMRsVMNdhwJHQ9Kll3ITRUHrt+z:sdhgw9kITRULt+z","tlshash":"458376e8e44c05d56732c44baf55b378a1b6f73cd5810da9f02f590c29d26a822c6f7a","first_seen":"2023-04-09T08:23:50Z","last_seen":"2026-04-15T21:30:28.002818Z","times_seen":16552,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":7,"dns":1,"connect":1,"send":0,"wait":13,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/registrar_logos/alldomains.png","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall","date":"2026-02-06T11:59:10.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 07:37:39 GMT","end":"Sun, 15 Mar 2026 07:37:38 GMT"},"fingerprint":{"sha1":"DA:A2:D4:53:88:8A:C9:69:96:39:EC:78:7A:75:CF:EB:13:35:67:50","sha256":"FF:C3:D4:61:EC:21:B8:8D:CD:58:66:E5:31:1F:F2:A7:3E:17:EE:06:07:F3:B8:08:A9:F8:39:11:A2:78:93:21"}}},"request":{"raw":"GET /registrar_logos/alldomains.png HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/mailercheck.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYUjZuZzM1ajhPb1dCblZLb0VzWXc9PSIsInZhbHVlIjoicnhpcllsMm02aHRZYVVvT2lOOU1aZUVWWUw3cTdpNDVGU3IzczZCV2UwSDJrbmhyejJQbE1CWG9KdXJSeHpGWUJ6VVEyNjd6WEErMUVGZW5haGJDRTA3MXBVZU1nbnpsL0JoYmdvQS81RU1VYStvanhHaU1waSt0QkVoby9SaG8iLCJtYWMiOiIxNjM2ZTJjODhlYTgyYzQzMjZmZWMyOTdjM2Q4NjkwODYxOWRlY2I2ODA1MzAwMjViNDQ4N2FjMDUyYjgwN2I0IiwidGFnIjoiIn0%3D; code_session=eyJpdiI6Im12TXBGZVpkcEpVVnFvYThzelNtT3c9PSIsInZhbHVlIjoiNTY0SEZYT3JzTlN2Mnk1MFFkWC8zaFhXVGRvajNHeXhXYU5OLzdsdnNCczFLZU5DVm8vT2pRYzNhcVJ5ZXQrWW1KYWdUaGp2SEQ3TXlzVVp1MzhOVUlXSFZvSXZZTHU2eTNQUVZkUnBiK1pXdHhGTUdCWVV4cUdpM0pFT3ZaZUYiLCJtYWMiOiI1Yjc3NTdiYjNjYjExZTA2NTYzY2NiZTlkY2IxMzQyODNlNzkyZjYyYzM5ZmZlZTk2Y2RhZGE4NzNjZWVlZGYzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.27.1.1\r\ndate: Fri, 06 Feb 2026 11:59:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 50420\r\nlast-modified: Tue, 25 Nov 2025 13:19:25 GMT\r\netag: \"6925acdd-c4f4\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50420,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2468 x 604, 8-bit/color RGBA, non-interlaced","md5":"3131d8f5cc969dc3d6cf40573beb546e","sha1":"43150401d514527f496cf3cf86b3e2bcf2479d89","sha256":"463a315b4cd8c407ca72c4080cd0f699ee3d19ade1ef248b47629fba57352d92","sha512":"6d08e00fb81db0570c6b7d28bf7e97d053fe65eabc86d09173d754fee17a518cd9dd8fa20000448376325fc78564f18ff914375068e3f20559a9d0a29afc8f68","ssdeep":"1536:wZmaqk80+AS7uTpPwNO6fOdeqEKKmahzgIzV4MY:wMaqm+AS76VwNO6fOdeqELBg7t","tlshash":"ff33f1a15bae0d85dd1c60315832ae38bb574b85187ac56f12da8fb28cf4f51e36311d","first_seen":"2026-02-01T10:53:09.869559Z","last_seen":"2026-04-12T09:02:37.059993Z","times_seen":15,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-06","alert":"Phishing Block","trigger":"www.nic.co.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}