{"report_id":"0c88f1fd-76d8-4d32-8bd8-0813086ddc23","version":6,"status":"done","tags":[],"date":"2025-02-25T20:08:03Z","url":{"schema":"https","addr":"onrtx22en.de","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"onrtx22en.de/enter/register","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"title":"onrtx22en.de/"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-05-06T20:08:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"onrtx22en.de","ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2024-05-11T20:10:48Z","last_seen":"2024-10-08T05:23:36Z","alert_count":0,"request_count":24,"received_data":3220327,"sent_data":16689,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"onrtx22en.de/js/chunk-vendors.819afc36.js","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0717bfd4341b74f7fb628b57ac370ec","sha1":"b16d7dac37c54559306ebc79de11e134d2e98dea","sha256":"915c1aa025e9b644117bce04e3239a970cc30a6a13938f3bc6bfe5a63736cd95","sha512":"b3b238e994d49885378c818d273bd5b9bff0a8156cb41e67f3e097e6cb59ec7c311b6e49fd8a05c59d339e552b16b3273e7869c9aabbab1b5c25abd7afd2a10d","ssdeep":"49152:mblpoEwwmJVlq1zXZWTFT9ETvCVMEhNJY/hpM0MvUM9d4E/tua1Ouobgjz0y4w99:mIn","tlshash":"bc85858072c07894134b5fbab71fb0e5f46f08ed3588488bd258bd94b9b671af9e1934","size":1789557,"data":"","first_seen":"2025-02-25T20:08:04.943024Z","last_seen":"2025-02-25T20:08:04.943024Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onrtx22en.de/js/app.37ba34b3.js","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5797f4177c439dab7c302333cd49a4cc","sha1":"198814de6f1b21453402b147e921b6cb8ca8dfa5","sha256":"b96e00ca4007222ea86acccd879ed161929f6f3020d5a5a7b86a30b21c7be826","sha512":"821f6d85701d811f5ed98e95325f7539d376c9a1c955d564b4b5be6d888696c213c03ec12329891953457365f2bee5a7f4ca5f94c19ae829c5ceb7413637af6f","ssdeep":"1536:hOjqd8Zrmuo5jByCwIlTwmfksPQIP0eDP1yhltwE+X63hj:YGvTzE+X2","tlshash":"e3838583b5e1e9ac030b8fba7e1ba8d8f41f09ad35844547d120fd64b5b961be5f4a30","size":87952,"data":"","first_seen":"2025-02-25T20:08:04.932645Z","last_seen":"2025-02-25T20:08:04.932645Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"87ae9658f053bdae7d9228628da131ab","sha1":"84f576e54afc2116a1a5a9db5004506c340e2396","sha256":"4267111ef761884490dc279bb659c5df299a2f3672e001d7fec358fc5a386b2f","sha512":"26afc65ab1990a160356c8926599919ffdcbc2eb15e45236e484389f72e32271d09257a5d586f0098586762a7bc80ef42ce9852ae86fad9c4db3c9e9c3129531","ssdeep":"","tlshash":"c2d097eb1c798d302388024e22f3d3a8222160506a20594081c9cc2b1b10fc340a2998","size":236,"data":"","first_seen":"2025-02-25T20:08:04.944163Z","last_seen":"2025-02-25T20:08:04.944163Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onrtx22en.de/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d123fd617d43745c174e5e22111f4ed8","sha1":"b70922fbce526ab5dbf183fa6eeb9a3b9a9a9c09","sha256":"64d538e4c5726ead92c1737e6c0178915d2fc31b0a394f7839a9f5c9bd049677","sha512":"0e2e659eabe3ef2777bd03309ff4933a16399229324ac4745511c0f71b5f79dd78984cb3645069c4421c364c405c1adc1ba58722b4a0db3effb31ee53650d243","ssdeep":"192:p62DQxM1wwA0gGyKV0KUFn6a/SxvIJimQmKIoft+HQ:p6gQuKLLaVQlhitBIoft+HQ","tlshash":"b602e7c5bb86784701733cfb654bb837791faf0628589c020112dee4ba3076495eee6b","size":8451,"data":"","first_seen":"2025-02-25T20:08:04.939652Z","last_seen":"2025-02-25T20:08:04.939652Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onrtx22en.de/js/303.6a3e06fa.js","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c140217071c5542e607cdda21cc0f546","sha1":"8e72d1599b5984e9c5cd7535f611576a5fdbceaa","sha256":"08efd8d808c651dfc48c373d01cd3b79c88897e16c8c69feee273cd11a881fc8","sha512":"f22778267b76cf79baf282de5bfd5353cb7517ee3807d96caf7fcd61282948b5be0f23e2f47e24c0983c4c33a730b18b56752f8473330472e6f3ddcf948ae1e4","ssdeep":"","tlshash":"9b5153567fb0acc9234b2e575e363dd9e85685113ac14046d024bce0bee2932c2e29b0","size":2721,"data":"","first_seen":"2025-02-25T20:08:04.938857Z","last_seen":"2025-02-25T20:08:04.938857Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onrtx22en.de/js/556.2b8a59de.js","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d857abb0826005664dc540a03682ac36","sha1":"c44b15e3cc1919f13bcbf37b74e5ba10155ccb2c","sha256":"a59adf9caa1dcffe7862803df39898a57c6135530a3231e44fad119141f83487","sha512":"53ed0266a0f46d6b1bcc420ab402b46af581f276ea3d80a3272a45af7dacdccc3335572a60df61bf2ae2a021b6c17135cf307accfc58f5afef5d893b18ff2720","ssdeep":"12288:fSs12SwNk1kUM7sOoL/QNSSoKB0GghidzEYxnaa54:asVUS+lf4","tlshash":"6bd4627467d17888036b6f7a321b78c2ec9e0debb49d4846e215fc9066b5707eee2470","size":612260,"data":"","first_seen":"2025-02-25T20:08:04.944887Z","last_seen":"2025-02-25T20:08:04.944887Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onrtx22en.de/","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ff0d9a29513703954d7f08b4f41f2d23","sha1":"c68cc6b608777b5d6a83eab87b3f77f7849c2cfd","sha256":"19e52c2b2b1108277369a0d017588c121437c5d9f03e33a6aecbd69fa8d62a5f","sha512":"08a485784d605ffa9f985c08d6681e23d1a022e602b03ab4f3755896ca9b030b606cc53b228f535bee4feed51a855ac589c0aaa752dbc9f5c3a94b4b85415210","ssdeep":"","tlshash":"f811d07a3a2a5534c685518b31bfe7a93e3250217e029084c36ccc255918e87149fcbe","size":923,"data":"","first_seen":"2025-02-25T20:08:04.945742Z","last_seen":"2025-02-25T20:08:04.945742Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"onrtx22en.de/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onrtx22en.de/","date":"2025-02-25T20:07:39.813Z","timestamp":1740514059813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onrtx22en.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 20:58:19 GMT","end":"Tue, 01 Apr 2025 21:56:46 GMT"},"fingerprint":{"sha1":"84:EC:80:36:8A:C7:4A:90:9E:09:EB:A9:97:D2:A1:53:2D:7D:B6:B2","sha256":"52:FB:5D:C1:67:04:09:5E:4D:B9:BF:AF:34:75:3B:78:88:7C:BE:D7:6B:E4:46:C4:F9:F1:4F:AF:DC:16:B8:0E"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: onrtx22en.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: inviteNumber=-1; username=; tier=0; password=; userId=-1; hasGuide=false\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Tue, 25 Feb 2025 20:07:39 GMT\r\ncontent-length: 0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sqMb6dn1YanJiUYhXhg8zoGSpJsyxk3LvQdnceux2rpRpXjENTMqxH1bMeXwAGCwNrRu%2FdZTYhdUFbSI40Bq99YfWacUvynEkkyyJyjnWRGBlbm22%2FwV92u8io3YqDI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/b0e4a89976ce/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncf-ray: 917a52a9dbe1b4f4-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T03:14:28.077578Z","times_seen":16698205,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onrtx22en.de/cdn-cgi/challenge-platform/h/b/jsd/r/0.08296040171429975:1740510739:pwqBseZCUTRmSougwKubeRLdDsjCICEOHTay3poKLX4/917a52a0bd4cb521","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onrtx22en.de/","date":"2025-02-25T20:07:39.994Z","timestamp":1740514059994,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onrtx22en.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 20:58:19 GMT","end":"Tue, 01 Apr 2025 21:56:46 GMT"},"fingerprint":{"sha1":"84:EC:80:36:8A:C7:4A:90:9E:09:EB:A9:97:D2:A1:53:2D:7D:B6:B2","sha256":"52:FB:5D:C1:67:04:09:5E:4D:B9:BF:AF:34:75:3B:78:88:7C:BE:D7:6B:E4:46:C4:F9:F1:4F:AF:DC:16:B8:0E"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/r/0.08296040171429975:1740510739:pwqBseZCUTRmSougwKubeRLdDsjCICEOHTay3poKLX4/917a52a0bd4cb521 HTTP/1.1\r\nHost: onrtx22en.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12068\r\nOrigin: https://onrtx22en.de\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onrtx22en.de/\r\nCookie: inviteNumber=-1; username=; tier=0; password=; userId=-1; hasGuide=false\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Feb 2025 20:07:40 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\nset-cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.onrtx22en.de; Priority=High; HttpOnly; Secure; SameSite=None\ncf_clearance=0B2wqPWzm9m4JggUteIP8l76tLzOgq35eJId3Wjgtbk-1740514060-1.2.1.1-9FSFedE.lx8tzhEuWakvx2NqIqa_E9HYnGhMzs0QmKvbnBnIT.WRr_dogucfy8xL21Xt6JNpJ3Yk8BA7AH1U1NBpoV4dRCTD0yVez_C3GfdiBe9bgPhCEVx9SHBO5Eioi1F5ZSUc5jY4FRldc1qUviOQLfrndEI_2I4TjZt1sbP.hTnDqmNOpSCOykaB_xbMs_7VWOoQniqf9tifFWInFHTCJhyt8PXRrBUsPYeONA3zd8aAoD8PadCd4lfgtpezSpgaQ69Kz4yNZpbq.73TjCCZpl6wWwyBUgFWvUd5N7o; Path=/; Expires=Wed, 25-Feb-26 20:07:40 GMT; Domain=.onrtx22en.de; Priority=High; HttpOnly; Secure; SameSite=None; Partitioned\r\ncf-ray: 917a52aafbe6b4f4-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sp3SrJCEE%2FvFEU5GikZXLKErfmK95tEWlfNQ1XA78nxJ9TgZ0UL89twCAy%2FGL67b%2FRER%2FUwJrL3tj7Uz%2B2eOCIZtb56bKprXO34LeSBjaYpPtMqSUSLlbSx3sSVWkC4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T03:14:28.077578Z","times_seen":16698205,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onrtx22en.de/js/app.37ba34b3.js","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onrtx22en.de/","date":"2025-02-25T20:07:38.838Z","timestamp":1740514058838,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onrtx22en.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 20:58:19 GMT","end":"Tue, 01 Apr 2025 21:56:46 GMT"},"fingerprint":{"sha1":"84:EC:80:36:8A:C7:4A:90:9E:09:EB:A9:97:D2:A1:53:2D:7D:B6:B2","sha256":"52:FB:5D:C1:67:04:09:5E:4D:B9:BF:AF:34:75:3B:78:88:7C:BE:D7:6B:E4:46:C4:F9:F1:4F:AF:DC:16:B8:0E"}}},"request":{"raw":"GET /js/app.37ba34b3.js HTTP/1.1\r\nHost: onrtx22en.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onrtx22en.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 25 Feb 2025 20:07:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 25 Feb 2025 18:50:00 GMT\r\netag: W/\"15790-1953e71ccb1\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=EwRM%2BLfQSi4La5bj5FDGohwYLgKEVtx2ODWHK1xTmNRpgY39EiZ97l2TsbWmnOIfflyqHkEq4B693o7cazaAbTVPDAxfhm6DW2vt438uOV5i8K%2FlsyZqyCgg7ypqa7A%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 917a52a3b9e0b521-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=546\u0026min_rtt=429\u0026rtt_var=35\u0026sent=108\u0026recv=75\u0026lost=0\u0026retrans=0\u0026sent_bytes=116741\u0026recv_bytes=1651\u0026delivery_rate=24180746\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=995e7b4a4e7c1cc4\u0026ts=676\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31456,"size_decoded":87952,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5797f4177c439dab7c302333cd49a4cc","sha1":"198814de6f1b21453402b147e921b6cb8ca8dfa5","sha256":"b96e00ca4007222ea86acccd879ed161929f6f3020d5a5a7b86a30b21c7be826","sha512":"821f6d85701d811f5ed98e95325f7539d376c9a1c955d564b4b5be6d888696c213c03ec12329891953457365f2bee5a7f4ca5f94c19ae829c5ceb7413637af6f","ssdeep":"1536:hOjqd8Zrmuo5jByCwIlTwmfksPQIP0eDP1yhltwE+X63hj:YGvTzE+X2","tlshash":"e3838583b5e1e9ac030b8fba7e1ba8d8f41f09ad35844547d120fd64b5b961be5f4a30","first_seen":"2025-02-25T20:08:04.932645Z","last_seen":"2025-02-25T20:08:04.932645Z","times_seen":1,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onrtx22en.de/css/app.bb42f935.css","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onrtx22en.de/","date":"2025-02-25T20:07:38.842Z","timestamp":1740514058842,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onrtx22en.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 20:58:19 GMT","end":"Tue, 01 Apr 2025 21:56:46 GMT"},"fingerprint":{"sha1":"84:EC:80:36:8A:C7:4A:90:9E:09:EB:A9:97:D2:A1:53:2D:7D:B6:B2","sha256":"52:FB:5D:C1:67:04:09:5E:4D:B9:BF:AF:34:75:3B:78:88:7C:BE:D7:6B:E4:46:C4:F9:F1:4F:AF:DC:16:B8:0E"}}},"request":{"raw":"GET /css/app.bb42f935.css HTTP/1.1\r\nHost: onrtx22en.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onrtx22en.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 25 Feb 2025 20:07:38 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 25 Feb 2025 18:47:35 GMT\r\netag: W/\"1142-1953e6f95a4\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fV5KIZr2j3G6wq3MViwG7P3dNnzZrOhl%2BtSwnq670Y1S5Vt3sf4DQ9fBmyQQHo2n7U44FYu6d8RbOb8bqvXa0bQJzO%2BLkixWP1cZOpy%2F3oF0eCHuxTCLptptbrmLbeM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 917a52a3b9e3b521-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1415\u0026min_rtt=478\u0026rtt_var=1844\u0026sent=25\u0026recv=28\u0026lost=0\u0026retrans=0\u0026sent_bytes=14491\u0026recv_bytes=1651\u0026delivery_rate=14675675\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=995e7b4a4e7c1cc4\u0026ts=577\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6585,"size_decoded":4418,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (4418), with no line terminators","md5":"e8cb3b0eedc315f3c79a7d7d9ba22443","sha1":"fbeae4821b84a7a6cf078eb80837285e974d7833","sha256":"0e6597bd3d98c1ebfa56760d2315115c3225fe8628e08bddafccf48faab4d88c","sha512":"6d834607ef869755170faa71757e5d813025dc5fd24090159defab5ecc47539ca0af210dc339224ac291cf6dd43dccff76209cbe816416e2810f9bbc48dfe194","ssdeep":"96:sQ1e9jhpQt3fxU4OqQ/AZDmT339L4tSpC:peBhpofbQ/A4T9L4t3","tlshash":"589178317a4c16287d3bc6b85c9322c8e215a6a3d9c30796ad83e131ce976e73d3934c","first_seen":"2025-02-25T20:08:04.933614Z","last_seen":"2025-02-25T20:08:04.933614Z","times_seen":1,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onrtx22en.de/enter/login","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onrtx22en.de/","date":"2025-02-25T20:07:39.787Z","timestamp":1740514059787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onrtx22en.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 20:58:19 GMT","end":"Tue, 01 Apr 2025 21:56:46 GMT"},"fingerprint":{"sha1":"84:EC:80:36:8A:C7:4A:90:9E:09:EB:A9:97:D2:A1:53:2D:7D:B6:B2","sha256":"52:FB:5D:C1:67:04:09:5E:4D:B9:BF:AF:34:75:3B:78:88:7C:BE:D7:6B:E4:46:C4:F9:F1:4F:AF:DC:16:B8:0E"}}},"request":{"raw":"POST /enter/login HTTP/1.1\r\nHost: onrtx22en.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 35\r\nOrigin: https://onrtx22en.de\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onrtx22en.de/\r\nCookie: inviteNumber=-1; username=; tier=0; password=; userId=-1; hasGuide=false\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Feb 2025 20:07:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 13\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4hRR8o5wUxp8zdKzqndobsMKWE8QOmPCZ2HXbzfOcCjFhny8DdwyrK31iWudY9QxDwvzMdMaMHC5LsIkNC%2BvfXF33kvtZfoTExmNoRZp6X2JqWvUsS4ys9qj5uLEBII%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-powered-by: Express\r\netag: W/\"d-XIR1laKGUFcPPOcM2tUhAkWIP6U\"\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 917a52a9abdbb4f4-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13,"size_decoded":13,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a47d447576dbe4e1240f43ad0a67e403","sha1":"5c847595a28650570f3ce70cdad5210245883fa5","sha256":"65876ed3df97ff161ca3b75013a7b8ab85b420bb06a8a4676db324521b3701e6","sha512":"06600b77afb4ec40c1890e99f2f1dedbf9b93c6b4547756112fabdefe5ea56299348007ff5fc7f78ff5ffdf2723847de3b8de68cad8f562307961fcf7bf0804d","ssdeep":"","tlshash":"a1600003000000c3000030000c3c0c00f0c3f000c000000cc00c00cccf0c00030c300c","first_seen":"2023-08-23T11:46:34Z","last_seen":"2026-06-20T12:16:25.798637Z","times_seen":88,"resource_available":true,"data":null}},"time_used":2473,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onrtx22en.de/enter/login","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onrtx22en.de/","date":"2025-02-25T20:07:39.787Z","timestamp":1740514059787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onrtx22en.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 20:58:19 GMT","end":"Tue, 01 Apr 2025 21:56:46 GMT"},"fingerprint":{"sha1":"84:EC:80:36:8A:C7:4A:90:9E:09:EB:A9:97:D2:A1:53:2D:7D:B6:B2","sha256":"52:FB:5D:C1:67:04:09:5E:4D:B9:BF:AF:34:75:3B:78:88:7C:BE:D7:6B:E4:46:C4:F9:F1:4F:AF:DC:16:B8:0E"}}},"request":{"raw":"POST /enter/login HTTP/1.1\r\nHost: onrtx22en.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 35\r\nOrigin: https://onrtx22en.de\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onrtx22en.de/\r\nCookie: inviteNumber=-1; username=; tier=0; password=; userId=-1; hasGuide=false\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Feb 2025 20:07:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 13\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vCdwp0uHpN%2FHA2SefXzaTv5eZgCjIKYzXP%2B8Hve50eUEYa9Tx3vCGTrkBw1%2F7JowYSlRmNO6xmxEqx1yUVa9GQmkaqunAF33Ej8LVQpyGlVShHGa059vM9vaSLIWy3M%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-powered-by: Express\r\netag: W/\"d-XIR1laKGUFcPPOcM2tUhAkWIP6U\"\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 917a52a9bbddb4f4-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13,"size_decoded":13,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a47d447576dbe4e1240f43ad0a67e403","sha1":"5c847595a28650570f3ce70cdad5210245883fa5","sha256":"65876ed3df97ff161ca3b75013a7b8ab85b420bb06a8a4676db324521b3701e6","sha512":"06600b77afb4ec40c1890e99f2f1dedbf9b93c6b4547756112fabdefe5ea56299348007ff5fc7f78ff5ffdf2723847de3b8de68cad8f562307961fcf7bf0804d","ssdeep":"","tlshash":"a1600003000000c3000030000c3c0c00f0c3f000c000000cc00c00cccf0c00030c300c","first_seen":"2023-08-23T11:46:34Z","last_seen":"2026-06-20T12:16:25.798637Z","times_seen":88,"resource_available":true,"data":null}},"time_used":2473,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onrtx22en.de/socket.io/?EIO=4\u0026transport=websocket","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-25T20:07:42.305874272Z","timestamp":1740514062305,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onrtx22en.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 20:58:19 GMT","end":"Tue, 01 Apr 2025 21:56:46 GMT"},"fingerprint":{"sha1":"84:EC:80:36:8A:C7:4A:90:9E:09:EB:A9:97:D2:A1:53:2D:7D:B6:B2","sha256":"52:FB:5D:C1:67:04:09:5E:4D:B9:BF:AF:34:75:3B:78:88:7C:BE:D7:6B:E4:46:C4:F9:F1:4F:AF:DC:16:B8:0E"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: onrtx22en.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://onrtx22en.de\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 7JZbbQZoN440GIK7Li26Cg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: inviteNumber=-1; username=; tier=0; password=; userId=-1; hasGuide=false\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nDate: Tue, 25 Feb 2025 20:07:42 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IPv%2B46Ga8x9RR7Ft0vEYLmau7SUX37LNbH417qoMV3b29fXOWusHUAHW8NZq1ogURozSbRuennCSxmRtH11SfkGlqwnws%2BTECg1F%2BrJfDkczhtG4eoGXVfD24Zti%2FhQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 917a52a9c84db503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=463\u0026min_rtt=422\u0026rtt_var=153\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3112\u0026recv_bytes=1270\u0026delivery_rate=7757142\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=7c656568e8692988\u0026ts=2518\u0026x=0\"\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":34,"size_decoded":34,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"476b7c8b2887034ee16ecc014edb8713","sha1":"4d57b9da42e9085bbfe11f4cf4dcfd19eef745a8","sha256":"6d1af412da7343deb6344ad9e3423335f8f56a6e2a534a16828ff02e5dad4870","sha512":"b9280b5f599d2bdbd375f67498e0ce5613ee04be0ed03dfee5696b10e229b9acfcb428355e2cc36266fd344426e03a7012a9fbe2d37c6fc8a799ea24ce27d132","ssdeep":"","tlshash":"908004d507443c5443031405344c1110007450f0744c10d30c1c055d4104d14400d155","first_seen":"2023-04-13T00:26:43Z","last_seen":"2026-02-28T16:46:54.235344Z","times_seen":281,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onrtx22en.de/img/icons/apple-touch-icon-152x152.png","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onrtx22en.de/","date":"2025-02-25T20:07:40.399Z","timestamp":1740514060399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onrtx22en.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 20:58:19 GMT","end":"Tue, 01 Apr 2025 21:56:46 GMT"},"fingerprint":{"sha1":"84:EC:80:36:8A:C7:4A:90:9E:09:EB:A9:97:D2:A1:53:2D:7D:B6:B2","sha256":"52:FB:5D:C1:67:04:09:5E:4D:B9:BF:AF:34:75:3B:78:88:7C:BE:D7:6B:E4:46:C4:F9:F1:4F:AF:DC:16:B8:0E"}}},"request":{"raw":"GET /img/icons/apple-touch-icon-152x152.png HTTP/1.1\r\nHost: onrtx22en.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onrtx22en.de/\r\nCookie: inviteNumber=-1; username=; tier=0; password=; userId=-1; hasGuide=false; cf_clearance=0B2wqPWzm9m4JggUteIP8l76tLzOgq35eJId3Wjgtbk-1740514060-1.2.1.1-9FSFedE.lx8tzhEuWakvx2NqIqa_E9HYnGhMzs0QmKvbnBnIT.WRr_dogucfy8xL21Xt6JNpJ3Yk8BA7AH1U1NBpoV4dRCTD0yVez_C3GfdiBe9bgPhCEVx9SHBO5Eioi1F5ZSUc5jY4FRldc1qUviOQLfrndEI_2I4TjZt1sbP.hTnDqmNOpSCOykaB_xbMs_7VWOoQniqf9tifFWInFHTCJhyt8PXRrBUsPYeONA3zd8aAoD8PadCd4lfgtpezSpgaQ69Kz4yNZpbq.73TjCCZpl6wWwyBUgFWvUd5N7o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Feb 2025 20:07:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 4046\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BGvwIYlEfd4%2Fh4n0R8p%2BsFfp%2FKBWq93Npq5JJK9CS7k3dKvN5iWytZN%2BKEQtYmaDuROWtWyGR%2FD442QSo3WeojA0vBLx28LFtZDeJjB20fsLRML5FP8frhrNNKqgTqs%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-powered-by: Express\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 25 Feb 2025 16:54:51 GMT\r\netag: W/\"fce-1953e08627f\"\r\ncf-cache-status: EXPIRED\r\naccept-ranges: bytes\r\ncf-ray: 917a52ad8bf7b4f4-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4046,"size_decoded":4046,"mime_type":"image/png","magic":"PNG image data, 152 x 152, 8-bit/color RGB, non-interlaced","md5":"1a034e64d80905128113e5272a5ab95e","sha1":"92328e60f63d690f33cd4961b9934a539dc29b82","sha256":"4d9685d610c4411caadd8d36ce94d3303cf5b05c8e04d67fc232c16a4469a135","sha512":"663dccaa2273e1b381f202d9a47c850565289c7e663c511c3936e5609de51fcb61e1d088660ea9befce2609dbcd3ad6f815d043a87631b31fc596d0b14dfce86","ssdeep":"","tlshash":"e1816eddfa9cc6df85131d9b016f6185f83da0565efc3d06a4bb8d0a6822a601b017d5","first_seen":"2023-04-13T00:26:43Z","last_seen":"2026-06-25T03:57:38.991069Z","times_seen":1640,"resource_available":false,"data":null}},"time_used":3371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3370,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onrtx22en.de/socket.io/?EIO=4\u0026transport=websocket","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-25T20:07:44.95812973Z","timestamp":1740514064958,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onrtx22en.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 20:58:19 GMT","end":"Tue, 01 Apr 2025 21:56:46 GMT"},"fingerprint":{"sha1":"84:EC:80:36:8A:C7:4A:90:9E:09:EB:A9:97:D2:A1:53:2D:7D:B6:B2","sha256":"52:FB:5D:C1:67:04:09:5E:4D:B9:BF:AF:34:75:3B:78:88:7C:BE:D7:6B:E4:46:C4:F9:F1:4F:AF:DC:16:B8:0E"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: onrtx22en.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://onrtx22en.de\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: dGSzB0u8zN8H0zpD1P9IUQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: inviteNumber=0; username=; tier=-1; password=; userId=-1; hasGuide=false; cf_clearance=0B2wqPWzm9m4JggUteIP8l76tLzOgq35eJId3Wjgtbk-1740514060-1.2.1.1-9FSFedE.lx8tzhEuWakvx2NqIqa_E9HYnGhMzs0QmKvbnBnIT.WRr_dogucfy8xL21Xt6JNpJ3Yk8BA7AH1U1NBpoV4dRCTD0yVez_C3GfdiBe9bgPhCEVx9SHBO5Eioi1F5ZSUc5jY4FRldc1qUviOQLfrndEI_2I4TjZt1sbP.hTnDqmNOpSCOykaB_xbMs_7VWOoQniqf9tifFWInFHTCJhyt8PXRrBUsPYeONA3zd8aAoD8PadCd4lfgtpezSpgaQ69Kz4yNZpbq.73TjCCZpl6wWwyBUgFWvUd5N7o\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nDate: Tue, 25 Feb 2025 20:07:44 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RPpkj58JQUSrqD0t6VGhQ5%2Bw7MoojDlHLiXTrzKReKR%2FAvm6bNibJtbVC5Cdr029g7gvThzFiJifJyhEUT2CJslb0KE8Bm%2FxPss7u6bFhPDTjVZ9WkY8XR0OFjcGyUM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 917a52c11ca0b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=532\u0026min_rtt=477\u0026rtt_var=186\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3188\u0026recv_bytes=1769\u0026delivery_rate=6561933\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=6d9136806dfe4d8e\u0026ts=1437\u0026x=0\"\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":34,"size_decoded":34,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"476b7c8b2887034ee16ecc014edb8713","sha1":"4d57b9da42e9085bbfe11f4cf4dcfd19eef745a8","sha256":"6d1af412da7343deb6344ad9e3423335f8f56a6e2a534a16828ff02e5dad4870","sha512":"b9280b5f599d2bdbd375f67498e0ce5613ee04be0ed03dfee5696b10e229b9acfcb428355e2cc36266fd344426e03a7012a9fbe2d37c6fc8a799ea24ce27d132","ssdeep":"","tlshash":"908004d507443c5443031405344c1110007450f0744c10d30c1c055d4104d14400d155","first_seen":"2023-04-13T00:26:43Z","last_seen":"2026-02-28T16:46:54.235344Z","times_seen":281,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onrtx22en.de/","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-02-25T20:07:38.326Z","timestamp":1740514058326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onrtx22en.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 20:58:19 GMT","end":"Tue, 01 Apr 2025 21:56:46 GMT"},"fingerprint":{"sha1":"84:EC:80:36:8A:C7:4A:90:9E:09:EB:A9:97:D2:A1:53:2D:7D:B6:B2","sha256":"52:FB:5D:C1:67:04:09:5E:4D:B9:BF:AF:34:75:3B:78:88:7C:BE:D7:6B:E4:46:C4:F9:F1:4F:AF:DC:16:B8:0E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: onrtx22en.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 25 Feb 2025 20:07:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 25 Feb 2025 18:46:56 GMT\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=X%2BF7pZdcRfR3nSqupruQHZBnSXW99QMuN9SHEIAbI4jhh9oFAybfqObWCgz%2BOeyEljvbDDNsyaIdyBGV7m2U3yy1b%2FQpAZv6hHhnN87H7hpxwOUE%2FAF4FRz7%2BorAS0c%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 917a52a0bd4cb521-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5690\u0026min_rtt=486\u0026rtt_var=10415\u0026sent=8\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3274\u0026recv_bytes=1248\u0026delivery_rate=6621951\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=995e7b4a4e7c1cc4\u0026ts=114\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":544681,"size_decoded":6413,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (2174)","md5":"3b199f344964f09723776f27331f8ac7","sha1":"f02c7e00ae509a0e4d503eb123d4072ab8953321","sha256":"5156a9ebcd081d720ba534b55564f6b0b5aefa99f2bcb56dd58d874921be2302","sha512":"782ef49b3f78f249be5adb7e6f3f72dd636762e1269e0920fb89711e64423b227db334b910e7dd18ab9dd82976b32411c2fe58f0884595457ad92274936920f3","ssdeep":"192:uKr7ZcOSgfvriRRe9fE8iXHrfCPO9qnx/0:J/9nx/0","tlshash":"9ad177a395220b0d23064f68376fd6c4732098d38804e85477c6a3d34feba5654aaa9f","first_seen":"2025-02-25T20:08:04.936513Z","last_seen":"2025-02-25T20:08:04.936513Z","times_seen":1,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":23,"dns":1,"connect":1,"send":0,"wait":95,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onrtx22en.de/socket.io/?EIO=4\u0026transport=websocket","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-25T20:07:53.045376603Z","timestamp":1740514073045,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onrtx22en.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 20:58:19 GMT","end":"Tue, 01 Apr 2025 21:56:46 GMT"},"fingerprint":{"sha1":"84:EC:80:36:8A:C7:4A:90:9E:09:EB:A9:97:D2:A1:53:2D:7D:B6:B2","sha256":"52:FB:5D:C1:67:04:09:5E:4D:B9:BF:AF:34:75:3B:78:88:7C:BE:D7:6B:E4:46:C4:F9:F1:4F:AF:DC:16:B8:0E"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: onrtx22en.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://onrtx22en.de\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 0mEsLcKp5SOCuaHx9YQgqQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: inviteNumber=0; username=; tier=-1; password=; userId=-1; hasGuide=false; cf_clearance=0B2wqPWzm9m4JggUteIP8l76tLzOgq35eJId3Wjgtbk-1740514060-1.2.1.1-9FSFedE.lx8tzhEuWakvx2NqIqa_E9HYnGhMzs0QmKvbnBnIT.WRr_dogucfy8xL21Xt6JNpJ3Yk8BA7AH1U1NBpoV4dRCTD0yVez_C3GfdiBe9bgPhCEVx9SHBO5Eioi1F5ZSUc5jY4FRldc1qUviOQLfrndEI_2I4TjZt1sbP.hTnDqmNOpSCOykaB_xbMs_7VWOoQniqf9tifFWInFHTCJhyt8PXRrBUsPYeONA3zd8aAoD8PadCd4lfgtpezSpgaQ69Kz4yNZpbq.73TjCCZpl6wWwyBUgFWvUd5N7o\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nDate: Tue, 25 Feb 2025 20:07:53 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BEpqfh2%2Fhrs2vC1KCEJHiPaZqYozNKHT5Znrk1wr3uPeFVCN0SCs7khRhPHMamIY7hmry7qV48y7fHewTn2AbqfNMc9RF5HVgp6B9hBVmApNAKPxcfBlmxqqVdLyxGA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 917a52f27f431c0e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=533\u0026min_rtt=472\u0026rtt_var=135\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3187\u0026recv_bytes=1769\u0026delivery_rate=8369942\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=1a33eca53edb048d\u0026ts=1626\u0026x=0\"\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":34,"size_decoded":34,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"476b7c8b2887034ee16ecc014edb8713","sha1":"4d57b9da42e9085bbfe11f4cf4dcfd19eef745a8","sha256":"6d1af412da7343deb6344ad9e3423335f8f56a6e2a534a16828ff02e5dad4870","sha512":"b9280b5f599d2bdbd375f67498e0ce5613ee04be0ed03dfee5696b10e229b9acfcb428355e2cc36266fd344426e03a7012a9fbe2d37c6fc8a799ea24ce27d132","ssdeep":"","tlshash":"908004d507443c5443031405344c1110007450f0744c10d30c1c055d4104d14400d155","first_seen":"2023-04-13T00:26:43Z","last_seen":"2026-02-28T16:46:54.235344Z","times_seen":281,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onrtx22en.de/getlog","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onrtx22en.de/","date":"2025-02-25T20:07:39.770Z","timestamp":1740514059770,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onrtx22en.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 20:58:19 GMT","end":"Tue, 01 Apr 2025 21:56:46 GMT"},"fingerprint":{"sha1":"84:EC:80:36:8A:C7:4A:90:9E:09:EB:A9:97:D2:A1:53:2D:7D:B6:B2","sha256":"52:FB:5D:C1:67:04:09:5E:4D:B9:BF:AF:34:75:3B:78:88:7C:BE:D7:6B:E4:46:C4:F9:F1:4F:AF:DC:16:B8:0E"}}},"request":{"raw":"POST /getlog HTTP/1.1\r\nHost: onrtx22en.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://onrtx22en.de\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onrtx22en.de/\r\nCookie: inviteNumber=-1; username=; tier=0; password=; userId=-1; hasGuide=false\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Feb 2025 20:07:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uONuXRHb%2FYbxzQTn65eLyhfLgafhtYfM2qAoHN5p%2F5yanafsin3NpjVUAlxJYC19SHPBOQc2uev64p0JZ9B6lKviKqyCxCfyodhAgtQzJ9pfSc8HquNXlXBbNK5XNds%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-powered-by: Express\r\netag: W/\"bde-2XLLmIsNosbmjjsi0lDEn+uqDb8\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 917a52a99bdab4f4-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":748,"size_decoded":3038,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"21f7bc0514702ab689163773fa8f7bd8","sha1":"d972cb988b0da2c6e68e3b22d250c49febaa0dbf","sha256":"ba34a286b46cfb76c1993c785405c9b3c4dffd01624907f0159f6f38467312cd","sha512":"e2ad453d64febe2f8130da705aa4d1e7af76334a4624364f50879cde3829f69a8647dc2b03158208a950e52e20c2838636213367e788e0eb438a4326e2d6788f","ssdeep":"","tlshash":"3951076cac836a4fb511c5572dd3680bc0dea0a6efc99dec43941e1e038799c2da70b7","first_seen":"2025-02-25T20:08:04.937146Z","last_seen":"2025-02-25T20:08:04.937146Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2483,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2483,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onrtx22en.de/css/556.b6eea75c.css","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onrtx22en.de/","date":"2025-02-25T20:07:39.807Z","timestamp":1740514059807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onrtx22en.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 20:58:19 GMT","end":"Tue, 01 Apr 2025 21:56:46 GMT"},"fingerprint":{"sha1":"84:EC:80:36:8A:C7:4A:90:9E:09:EB:A9:97:D2:A1:53:2D:7D:B6:B2","sha256":"52:FB:5D:C1:67:04:09:5E:4D:B9:BF:AF:34:75:3B:78:88:7C:BE:D7:6B:E4:46:C4:F9:F1:4F:AF:DC:16:B8:0E"}}},"request":{"raw":"GET /css/556.b6eea75c.css HTTP/1.1\r\nHost: onrtx22en.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onrtx22en.de/\r\nCookie: inviteNumber=-1; username=; tier=0; password=; userId=-1; hasGuide=false\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Feb 2025 20:07:43 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kFgW2FRH91UQ9N%2BqDNOE9ZDNtzMPQDdtySqtGqbMCxYtLnkk2y9siKc51JKwjPLMBcV8LSCyAtND%2FRGks7SkIbA8rfhXRpQDu%2FveGVMVECAu9q5WBVlI608%2BT3EhriM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-powered-by: Express\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 25 Feb 2025 18:47:08 GMT\r\netag: W/\"6b6-1953e6f2e7c\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\ncf-ray: 917a52a9cbdfb4f4-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1718,"size_decoded":1718,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1718), with no line terminators","md5":"e72da68b0b2e9857b9aaa3aeba5e8c61","sha1":"443f729676f42fdbd868e040c4b0fad54ece7abf","sha256":"73cb741bf32cd67816e150718277c7560389b0133ead284d1ee56c9a8bfead7f","sha512":"c5433026fb8741b034f23a244ecd7de855e323e7357e1d5d3f3ec9daafcce598b31d55d71c530d93b7e9b4885df3a34484c6f3a070afe307d0939312d3c84647","ssdeep":"","tlshash":"f2316892f948b314b43bc4ca1986aed47340ab12fa0357e0eed971f19ceb1d36352388","first_seen":"2025-02-24T23:35:01.236604Z","last_seen":"2025-03-02T07:53:12.054061Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3964,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3964,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onrtx22en.de/js/556.2b8a59de.js","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onrtx22en.de/","date":"2025-02-25T20:07:39.809Z","timestamp":1740514059809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onrtx22en.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 20:58:19 GMT","end":"Tue, 01 Apr 2025 21:56:46 GMT"},"fingerprint":{"sha1":"84:EC:80:36:8A:C7:4A:90:9E:09:EB:A9:97:D2:A1:53:2D:7D:B6:B2","sha256":"52:FB:5D:C1:67:04:09:5E:4D:B9:BF:AF:34:75:3B:78:88:7C:BE:D7:6B:E4:46:C4:F9:F1:4F:AF:DC:16:B8:0E"}}},"request":{"raw":"GET /js/556.2b8a59de.js HTTP/1.1\r\nHost: onrtx22en.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onrtx22en.de/\r\nCookie: inviteNumber=-1; username=; tier=0; password=; userId=-1; hasGuide=false\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Feb 2025 20:07:43 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Tsqw2T4L35a%2BZdEfycbG961CeGqZrAbaUyjWLGOPrzh%2BuBikD1OFIkBNGLa6VrBahEvxKa1rPx5WgOvHqYxHCONTg%2BBpHcd87SWGJf1T0XuUM%2F0TN1lsdeEV73sbt%2BU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-powered-by: Express\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 25 Feb 2025 18:50:37 GMT\r\netag: W/\"957a4-1953e725ca1\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\ncf-ray: 917a52a9cbe0b4f4-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":612260,"size_decoded":612260,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T03:14:28.077578Z","times_seen":16698205,"resource_available":true,"data":null}},"time_used":6024,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3971,"receive":2053,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"onrtx22en.de/socket.io/?EIO=4\u0026transport=websocket","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://onrtx22en.de/","date":"2025-02-25T20:07:51.414Z","timestamp":1740514071414,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onrtx22en.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 20:58:19 GMT","end":"Tue, 01 Apr 2025 21:56:46 GMT"},"fingerprint":{"sha1":"84:EC:80:36:8A:C7:4A:90:9E:09:EB:A9:97:D2:A1:53:2D:7D:B6:B2","sha256":"52:FB:5D:C1:67:04:09:5E:4D:B9:BF:AF:34:75:3B:78:88:7C:BE:D7:6B:E4:46:C4:F9:F1:4F:AF:DC:16:B8:0E"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: onrtx22en.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://onrtx22en.de\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 0mEsLcKp5SOCuaHx9YQgqQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: inviteNumber=0; username=; tier=-1; password=; userId=-1; hasGuide=false; cf_clearance=0B2wqPWzm9m4JggUteIP8l76tLzOgq35eJId3Wjgtbk-1740514060-1.2.1.1-9FSFedE.lx8tzhEuWakvx2NqIqa_E9HYnGhMzs0QmKvbnBnIT.WRr_dogucfy8xL21Xt6JNpJ3Yk8BA7AH1U1NBpoV4dRCTD0yVez_C3GfdiBe9bgPhCEVx9SHBO5Eioi1F5ZSUc5jY4FRldc1qUviOQLfrndEI_2I4TjZt1sbP.hTnDqmNOpSCOykaB_xbMs_7VWOoQniqf9tifFWInFHTCJhyt8PXRrBUsPYeONA3zd8aAoD8PadCd4lfgtpezSpgaQ69Kz4yNZpbq.73TjCCZpl6wWwyBUgFWvUd5N7o\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nDate: Tue, 25 Feb 2025 20:07:53 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BEpqfh2%2Fhrs2vC1KCEJHiPaZqYozNKHT5Znrk1wr3uPeFVCN0SCs7khRhPHMamIY7hmry7qV48y7fHewTn2AbqfNMc9RF5HVgp6B9hBVmApNAKPxcfBlmxqqVdLyxGA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 917a52f27f431c0e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=533\u0026min_rtt=472\u0026rtt_var=135\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3187\u0026recv_bytes=1769\u0026delivery_rate=8369942\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=1a33eca53edb048d\u0026ts=1626\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T03:14:28.077578Z","times_seen":16698205,"resource_available":true,"data":null}},"time_used":1631,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":1615,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onrtx22en.de/js/303.6a3e06fa.js","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onrtx22en.de/","date":"2025-02-25T20:07:39.803Z","timestamp":1740514059803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onrtx22en.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 20:58:19 GMT","end":"Tue, 01 Apr 2025 21:56:46 GMT"},"fingerprint":{"sha1":"84:EC:80:36:8A:C7:4A:90:9E:09:EB:A9:97:D2:A1:53:2D:7D:B6:B2","sha256":"52:FB:5D:C1:67:04:09:5E:4D:B9:BF:AF:34:75:3B:78:88:7C:BE:D7:6B:E4:46:C4:F9:F1:4F:AF:DC:16:B8:0E"}}},"request":{"raw":"GET /js/303.6a3e06fa.js HTTP/1.1\r\nHost: onrtx22en.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onrtx22en.de/\r\nCookie: inviteNumber=-1; username=; tier=0; password=; userId=-1; hasGuide=false\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Feb 2025 20:07:43 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=w%2FyCkfH0V69hxO%2FDgC1Izpmb46WVcTtG0nJC0nJODHkxb1Fdk37PofJdM3ZIK%2FfIOhZeiKuhgoNnQ9rvM7cDlLzEgMhMGxajfkZpRUFATURn5zP7Ihqawr3nYcMW3i4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-powered-by: Express\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 25 Feb 2025 18:47:57 GMT\r\netag: W/\"aa1-1953e6feb8d\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\ncf-ray: 917a52a9bbdeb4f4-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2721,"size_decoded":2721,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2721), with no line terminators","md5":"c140217071c5542e607cdda21cc0f546","sha1":"8e72d1599b5984e9c5cd7535f611576a5fdbceaa","sha256":"08efd8d808c651dfc48c373d01cd3b79c88897e16c8c69feee273cd11a881fc8","sha512":"f22778267b76cf79baf282de5bfd5353cb7517ee3807d96caf7fcd61282948b5be0f23e2f47e24c0983c4c33a730b18b56752f8473330472e6f3ddcf948ae1e4","ssdeep":"","tlshash":"765164567fb0accd234b2e575e363dd9e85785113ac14046d024bce0bee2932c3e29b0","first_seen":"2025-02-25T20:08:04.938857Z","last_seen":"2025-02-25T20:08:04.938857Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3972,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3972,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"onrtx22en.de/socket.io/?EIO=4\u0026transport=websocket","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://onrtx22en.de/","date":"2025-02-25T20:07:39.763Z","timestamp":1740514059763,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onrtx22en.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 20:58:19 GMT","end":"Tue, 01 Apr 2025 21:56:46 GMT"},"fingerprint":{"sha1":"84:EC:80:36:8A:C7:4A:90:9E:09:EB:A9:97:D2:A1:53:2D:7D:B6:B2","sha256":"52:FB:5D:C1:67:04:09:5E:4D:B9:BF:AF:34:75:3B:78:88:7C:BE:D7:6B:E4:46:C4:F9:F1:4F:AF:DC:16:B8:0E"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: onrtx22en.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://onrtx22en.de\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 7JZbbQZoN440GIK7Li26Cg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: inviteNumber=-1; username=; tier=0; password=; userId=-1; hasGuide=false\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nDate: Tue, 25 Feb 2025 20:07:42 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IPv%2B46Ga8x9RR7Ft0vEYLmau7SUX37LNbH417qoMV3b29fXOWusHUAHW8NZq1ogURozSbRuennCSxmRtH11SfkGlqwnws%2BTECg1F%2BrJfDkczhtG4eoGXVfD24Zti%2FhQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 917a52a9c84db503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=463\u0026min_rtt=422\u0026rtt_var=153\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3112\u0026recv_bytes=1270\u0026delivery_rate=7757142\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=7c656568e8692988\u0026ts=2518\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T03:14:28.077578Z","times_seen":16698205,"resource_available":true,"data":null}},"time_used":2564,"timings":{"blocked":0,"dns":21,"connect":22,"send":0,"wait":2498,"receive":1,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onrtx22en.de/cdn-cgi/challenge-platform/h/b/scripts/jsd/b0e4a89976ce/main.js?","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onrtx22en.de/","date":"2025-02-25T20:07:39.832Z","timestamp":1740514059832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onrtx22en.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 20:58:19 GMT","end":"Tue, 01 Apr 2025 21:56:46 GMT"},"fingerprint":{"sha1":"84:EC:80:36:8A:C7:4A:90:9E:09:EB:A9:97:D2:A1:53:2D:7D:B6:B2","sha256":"52:FB:5D:C1:67:04:09:5E:4D:B9:BF:AF:34:75:3B:78:88:7C:BE:D7:6B:E4:46:C4:F9:F1:4F:AF:DC:16:B8:0E"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/b0e4a89976ce/main.js? HTTP/1.1\r\nHost: onrtx22en.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: inviteNumber=-1; username=; tier=0; password=; userId=-1; hasGuide=false\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Feb 2025 20:07:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dfb6Sb0HixrTeWyoWrMeAEV6Puhyv9YUVmLIdd3JvsB3zXy04fn3t4KEURusOIxGIXRVMS%2BjJ3OG2OiTTcjJEnUwPhJ9mZA334rnT5T%2FHRsah73MmNUi01rZLdzX4gs%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: 917a52a9fbe2b4f4-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8451,"size_decoded":8451,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8451), with no line terminators","md5":"d123fd617d43745c174e5e22111f4ed8","sha1":"b70922fbce526ab5dbf183fa6eeb9a3b9a9a9c09","sha256":"64d538e4c5726ead92c1737e6c0178915d2fc31b0a394f7839a9f5c9bd049677","sha512":"0e2e659eabe3ef2777bd03309ff4933a16399229324ac4745511c0f71b5f79dd78984cb3645069c4421c364c405c1adc1ba58722b4a0db3effb31ee53650d243","ssdeep":"192:J62DQxM1wwA0gGyKV0KUFn6a/SxvIJimQmKIoft+HG:J6gQuKLLaVQlhitBIoft+HG","tlshash":"e902e7c5bb86784701733cfb654bb837791faf0628589c020112dee4ba3076495eee6b","first_seen":"2025-02-25T20:08:04.939652Z","last_seen":"2025-02-25T20:08:04.939652Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onrtx22en.de/js/chunk-vendors.819afc36.js","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onrtx22en.de/","date":"2025-02-25T20:07:38.837Z","timestamp":1740514058837,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onrtx22en.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 20:58:19 GMT","end":"Tue, 01 Apr 2025 21:56:46 GMT"},"fingerprint":{"sha1":"84:EC:80:36:8A:C7:4A:90:9E:09:EB:A9:97:D2:A1:53:2D:7D:B6:B2","sha256":"52:FB:5D:C1:67:04:09:5E:4D:B9:BF:AF:34:75:3B:78:88:7C:BE:D7:6B:E4:46:C4:F9:F1:4F:AF:DC:16:B8:0E"}}},"request":{"raw":"GET /js/chunk-vendors.819afc36.js HTTP/1.1\r\nHost: onrtx22en.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onrtx22en.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 25 Feb 2025 20:07:38 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 25 Feb 2025 18:52:10 GMT\r\netag: W/\"1b4e75-1953e73c85d\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xHEoF8lY75Evtj7pCiQVYJP%2FSSXZarWobNOIDmaF30cbClhvuzMyg38ls2WiupQfgRD%2BFjq5Eyb6%2F9IteswkV2mZY6dh6YiCazRjESGYXenKNcKL64zIbMeN1reXy7M%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 917a52a3b9dab521-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3186\u0026min_rtt=486\u0026rtt_var=5312\u0026sent=17\u0026recv=20\u0026lost=0\u0026retrans=0\u0026sent_bytes=6033\u0026recv_bytes=1651\u0026delivery_rate=11455696\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=995e7b4a4e7c1cc4\u0026ts=555\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1789557,"size_decoded":1789557,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T03:14:28.077578Z","times_seen":16698205,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onrtx22en.de/css/chunk-vendors.31596dce.css","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onrtx22en.de/","date":"2025-02-25T20:07:38.840Z","timestamp":1740514058840,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onrtx22en.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 20:58:19 GMT","end":"Tue, 01 Apr 2025 21:56:46 GMT"},"fingerprint":{"sha1":"84:EC:80:36:8A:C7:4A:90:9E:09:EB:A9:97:D2:A1:53:2D:7D:B6:B2","sha256":"52:FB:5D:C1:67:04:09:5E:4D:B9:BF:AF:34:75:3B:78:88:7C:BE:D7:6B:E4:46:C4:F9:F1:4F:AF:DC:16:B8:0E"}}},"request":{"raw":"GET /css/chunk-vendors.31596dce.css HTTP/1.1\r\nHost: onrtx22en.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onrtx22en.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 25 Feb 2025 20:07:38 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 25 Feb 2025 18:47:49 GMT\r\netag: W/\"2f45f-1953e6fce74\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BfQ%2FARZ8nsXB0w54Ndx94QplYujmv328XLmn7mOdxCenZ37S%2FQcerbyWtLk%2FNfE1K4d8fSlB3ttqaYHfX3q6uxLfJ%2FE5pRS86gH5d3MMJpp1V7aUzOKu4JUDcAuj58A%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 917a52a3b9e2b521-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1092\u0026min_rtt=429\u0026rtt_var=1265\u0026sent=28\u0026recv=31\u0026lost=0\u0026retrans=0\u0026sent_bytes=16291\u0026recv_bytes=1651\u0026delivery_rate=14675675\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=995e7b4a4e7c1cc4\u0026ts=586\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":193631,"size_decoded":193631,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f9429e9c998efd94a4ba16244fe6140d","sha1":"599a6cbc6b2883576df9056b0b0aa9cc8c03761c","sha256":"ce5a56b7937775db11faaeb9286d6af232e930c33d67e767c4a7fd8f9292b36f","sha512":"e50ace021d5d213727c0a3117a52f15e9e22bbd5ab159e4a36a4ee6d46a0bb42ea1413a495f867e25b889d4a4128cabec521717951a03024ef9f96642a7beda0","ssdeep":"1536:HsN5J+jOkiHcplpVwwsgiOz4x0PQM/XrARpaIzCIhVcVbYyd9o:Hj5w9szqxEIBydW","tlshash":"d91483a9ea90a17dbf17f1759b8796dcf13cf960ed01caa4f10091684ec7bf10623626","first_seen":"2023-05-21T21:56:04Z","last_seen":"2025-04-10T00:24:48.537602Z","times_seen":54,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"onrtx22en.de/socket.io/?EIO=4\u0026transport=websocket","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://onrtx22en.de/","date":"2025-02-25T20:07:43.515Z","timestamp":1740514063515,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onrtx22en.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 20:58:19 GMT","end":"Tue, 01 Apr 2025 21:56:46 GMT"},"fingerprint":{"sha1":"84:EC:80:36:8A:C7:4A:90:9E:09:EB:A9:97:D2:A1:53:2D:7D:B6:B2","sha256":"52:FB:5D:C1:67:04:09:5E:4D:B9:BF:AF:34:75:3B:78:88:7C:BE:D7:6B:E4:46:C4:F9:F1:4F:AF:DC:16:B8:0E"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: onrtx22en.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://onrtx22en.de\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: dGSzB0u8zN8H0zpD1P9IUQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: inviteNumber=0; username=; tier=-1; password=; userId=-1; hasGuide=false; cf_clearance=0B2wqPWzm9m4JggUteIP8l76tLzOgq35eJId3Wjgtbk-1740514060-1.2.1.1-9FSFedE.lx8tzhEuWakvx2NqIqa_E9HYnGhMzs0QmKvbnBnIT.WRr_dogucfy8xL21Xt6JNpJ3Yk8BA7AH1U1NBpoV4dRCTD0yVez_C3GfdiBe9bgPhCEVx9SHBO5Eioi1F5ZSUc5jY4FRldc1qUviOQLfrndEI_2I4TjZt1sbP.hTnDqmNOpSCOykaB_xbMs_7VWOoQniqf9tifFWInFHTCJhyt8PXRrBUsPYeONA3zd8aAoD8PadCd4lfgtpezSpgaQ69Kz4yNZpbq.73TjCCZpl6wWwyBUgFWvUd5N7o\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nDate: Tue, 25 Feb 2025 20:07:44 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RPpkj58JQUSrqD0t6VGhQ5%2Bw7MoojDlHLiXTrzKReKR%2FAvm6bNibJtbVC5Cdr029g7gvThzFiJifJyhEUT2CJslb0KE8Bm%2FxPss7u6bFhPDTjVZ9WkY8XR0OFjcGyUM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 917a52c11ca0b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=532\u0026min_rtt=477\u0026rtt_var=186\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3188\u0026recv_bytes=1769\u0026delivery_rate=6561933\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=6d9136806dfe4d8e\u0026ts=1437\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T03:14:28.077578Z","times_seen":16698205,"resource_available":true,"data":null}},"time_used":1442,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":1420,"receive":1,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onrtx22en.de/img/icons/favicon.svg","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onrtx22en.de/","date":"2025-02-25T20:07:40.402Z","timestamp":1740514060402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onrtx22en.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 20:58:19 GMT","end":"Tue, 01 Apr 2025 21:56:46 GMT"},"fingerprint":{"sha1":"84:EC:80:36:8A:C7:4A:90:9E:09:EB:A9:97:D2:A1:53:2D:7D:B6:B2","sha256":"52:FB:5D:C1:67:04:09:5E:4D:B9:BF:AF:34:75:3B:78:88:7C:BE:D7:6B:E4:46:C4:F9:F1:4F:AF:DC:16:B8:0E"}}},"request":{"raw":"GET /img/icons/favicon.svg HTTP/1.1\r\nHost: onrtx22en.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onrtx22en.de/\r\nCookie: inviteNumber=-1; username=; tier=0; password=; userId=-1; hasGuide=false; cf_clearance=0B2wqPWzm9m4JggUteIP8l76tLzOgq35eJId3Wjgtbk-1740514060-1.2.1.1-9FSFedE.lx8tzhEuWakvx2NqIqa_E9HYnGhMzs0QmKvbnBnIT.WRr_dogucfy8xL21Xt6JNpJ3Yk8BA7AH1U1NBpoV4dRCTD0yVez_C3GfdiBe9bgPhCEVx9SHBO5Eioi1F5ZSUc5jY4FRldc1qUviOQLfrndEI_2I4TjZt1sbP.hTnDqmNOpSCOykaB_xbMs_7VWOoQniqf9tifFWInFHTCJhyt8PXRrBUsPYeONA3zd8aAoD8PadCd4lfgtpezSpgaQ69Kz4yNZpbq.73TjCCZpl6wWwyBUgFWvUd5N7o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Feb 2025 20:07:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BeoS6LbiIUzxsCoblCtA0bk7g6wFOzWBSuabZU7GSLRBhRdh9eNeleQuviodhv8AHkrJqh8HqWleANNMAIYWmBqmC8%2FfMfdd%2FwR%2FlWr7v4YZ5R%2F6Gnr8uP2o3VhcfIA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-powered-by: Express\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 25 Feb 2025 18:46:56 GMT\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\ncf-ray: 917a52ad8bf8b4f4-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5475,"size_decoded":5475,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5794), with no line terminators","md5":"745a65ff470039b7476952134668b4b3","sha1":"e521209ff5581257540c5bbb83df9e537f0ba65e","sha256":"360d3017f586d20fedf21b4d3cdffe494a91b9ed05c8272fa0d214a11d93ddfc","sha512":"2ea943384d67799460c1334a217beb14bcca7a3b9fea89b5ada714838146157f584282536a167da3d09e75d7b6439d8ec4522f4e635cfd91edcd842d2c6f1327","ssdeep":"96:QHM7hR+43nSsPYEYZ3AjbP1vw5pSWfqv1JkN79g:R73+43SaDYZ3QP1o5p+9W9g","tlshash":"f0c13357bd00437e23028fa527df95e4a374f884482062687ac6a3db8fff6d9445927b","first_seen":"2025-02-25T20:08:04.942041Z","last_seen":"2025-02-25T20:08:04.942041Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"onrtx22en.de/socket.io/?EIO=4\u0026transport=websocket","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://onrtx22en.de/","date":"2025-02-25T20:07:46.218Z","timestamp":1740514066218,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onrtx22en.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 20:58:19 GMT","end":"Tue, 01 Apr 2025 21:56:46 GMT"},"fingerprint":{"sha1":"84:EC:80:36:8A:C7:4A:90:9E:09:EB:A9:97:D2:A1:53:2D:7D:B6:B2","sha256":"52:FB:5D:C1:67:04:09:5E:4D:B9:BF:AF:34:75:3B:78:88:7C:BE:D7:6B:E4:46:C4:F9:F1:4F:AF:DC:16:B8:0E"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: onrtx22en.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://onrtx22en.de\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: TEOINLK9NOrusAyM/i+xEA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: inviteNumber=0; username=; tier=-1; password=; userId=-1; hasGuide=false; cf_clearance=0B2wqPWzm9m4JggUteIP8l76tLzOgq35eJId3Wjgtbk-1740514060-1.2.1.1-9FSFedE.lx8tzhEuWakvx2NqIqa_E9HYnGhMzs0QmKvbnBnIT.WRr_dogucfy8xL21Xt6JNpJ3Yk8BA7AH1U1NBpoV4dRCTD0yVez_C3GfdiBe9bgPhCEVx9SHBO5Eioi1F5ZSUc5jY4FRldc1qUviOQLfrndEI_2I4TjZt1sbP.hTnDqmNOpSCOykaB_xbMs_7VWOoQniqf9tifFWInFHTCJhyt8PXRrBUsPYeONA3zd8aAoD8PadCd4lfgtpezSpgaQ69Kz4yNZpbq.73TjCCZpl6wWwyBUgFWvUd5N7o\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nDate: Tue, 25 Feb 2025 20:07:46 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Ee6x7s1zuZ%2Bljl7EvfOvQdk4Yk7EXvbvKwkpWrs5jhbM4qylLufcsMEv1QddRJM7afxrzv3pxLfOf5uu%2FpERPp6iNHyM%2BgUxFB9irY7eQFm%2BtS3EnYvu35wBpY8df9g%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 917a52d208b756c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=477\u0026min_rtt=423\u0026rtt_var=173\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3187\u0026recv_bytes=1769\u0026delivery_rate=7192052\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=797fb0cc44e58e17\u0026ts=166\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T03:14:28.077578Z","times_seen":16698205,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":146,"receive":16,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"onrtx22en.de/socket.io/?EIO=4\u0026transport=websocket","fqdn":"onrtx22en.de","domain":"onrtx22en.de","tld":"de"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://onrtx22en.de/","date":"2025-02-25T20:07:58.056Z","timestamp":1740514078056,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onrtx22en.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 20:58:19 GMT","end":"Tue, 01 Apr 2025 21:56:46 GMT"},"fingerprint":{"sha1":"84:EC:80:36:8A:C7:4A:90:9E:09:EB:A9:97:D2:A1:53:2D:7D:B6:B2","sha256":"52:FB:5D:C1:67:04:09:5E:4D:B9:BF:AF:34:75:3B:78:88:7C:BE:D7:6B:E4:46:C4:F9:F1:4F:AF:DC:16:B8:0E"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: onrtx22en.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://onrtx22en.de\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: G50BcbKnDtgXjkWzS/6zyg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: inviteNumber=0; username=; tier=-1; password=; userId=-1; hasGuide=false; cf_clearance=0B2wqPWzm9m4JggUteIP8l76tLzOgq35eJId3Wjgtbk-1740514060-1.2.1.1-9FSFedE.lx8tzhEuWakvx2NqIqa_E9HYnGhMzs0QmKvbnBnIT.WRr_dogucfy8xL21Xt6JNpJ3Yk8BA7AH1U1NBpoV4dRCTD0yVez_C3GfdiBe9bgPhCEVx9SHBO5Eioi1F5ZSUc5jY4FRldc1qUviOQLfrndEI_2I4TjZt1sbP.hTnDqmNOpSCOykaB_xbMs_7VWOoQniqf9tifFWInFHTCJhyt8PXRrBUsPYeONA3zd8aAoD8PadCd4lfgtpezSpgaQ69Kz4yNZpbq.73TjCCZpl6wWwyBUgFWvUd5N7o\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nDate: Tue, 25 Feb 2025 20:07:58 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=q8kNo4eRpGSH%2BmeHdFjgiHu69aoQwj0ilSD91F6hpuaxL6%2FXQ9J17i03IwmgxNmG2oPo4bfPplsBCVRYLHwxdgOkSMldoZcJENwaLi1f4GQtsx9X4hPAWmy%2FAWeyuwM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 917a531c0a1e7129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1168\u0026min_rtt=625\u0026rtt_var=685\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3187\u0026recv_bytes=1769\u0026delivery_rate=6787500\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=4a269a81a6f29cb6\u0026ts=87\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T03:14:28.077578Z","times_seen":16698205,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":1,"connect":2,"send":0,"wait":63,"receive":2,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}