{"report_id":"1807f924-ccab-4eff-a753-8d7fcc3863df","version":6,"status":"done","tags":[],"date":"2026-01-09T02:57:07Z","url":{"schema":"http","addr":"xn--elvasdajooks-bjba0g.ee","fqdn":"xn--elvasdajooks-bjba0g.ee","domain":"xn--elvasdajooks-bjba0g.ee","tld":"ee"},"ip":{"addr":"65.21.209.106","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"final":{"url":{"schema":"https","addr":"xn--elvasdajooks-bjba0g.ee/","fqdn":"xn--elvasdajooks-bjba0g.ee","domain":"xn--elvasdajooks-bjba0g.ee","tld":"ee"},"title":"Elva Südaööjooks","dom":{"size":272474,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64271)","md5":"d069dacb570bb93ff732e8570be05d14","sha1":"744e13865f810b8766c61f3bd0ce973c72efccd5","sha256":"291904f38c9034f3501f45f50b82a6288e5d5ffbca1426d66a56b83f03566d74","sha512":"4d12cf24ad1bbeac0c35619ad91a8d7a1a8391c16ee8af735eac84b16aedcd12ce7ebcbfdf79c83319035be1b95021ace3644026c52d0bd807c12ed7050a6a6d","ssdeep":"6144:G8QZSeZ9tLG2NJlD2u18QZSeZ9tLG2NJlD2uH:G8QZSePR18QZSePRH","tlshash":"da44a7335601120cf71be9a1bbe66b9a5225c023e60726f995922878c7cfb840577bdf","dom_hash":"domhash78b99c56a448a6e8c821c4b20c3dee0d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xn--elvasdajooks-bjba0g.ee","fqdn":"xn--elvasdajooks-bjba0g.ee","domain":"xn--elvasdajooks-bjba0g.ee","tld":"ee"},"ip":{"addr":"65.21.209.106","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-13T02:57:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"xn--elvasdajooks-bjba0g.ee","ip":{"addr":"65.21.209.106","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2020-01-30","domain_rank":0,"first_seen":"2026-01-09T02:57:08.832894Z","last_seen":"2026-01-09T02:57:08.832894Z","alert_count":0,"request_count":7,"received_data":1369467,"sent_data":3781,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-04T22:14:09.841371Z","alert_count":0,"request_count":1,"received_data":33552,"sent_data":549,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xn--elvasdajooks-bjba0g.ee/","fqdn":"xn--elvasdajooks-bjba0g.ee","domain":"xn--elvasdajooks-bjba0g.ee","tld":"ee"},"ip":{"addr":"65.21.209.106","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"f85f6e015b41b0b876d704495125c1a9","sha1":"49e8a3dc702013b2ebdf1c5918831428383c6871","sha256":"717128e2e92f96af6a83285f150abc5ae4e9a9262febed6f32fe1e2e6c708cea","sha512":"7bcffcc31cb577ae44696dac4c4f64357848d6e4e1311f0da09659219ea68cab0b3ebf524d4cd7471221863c335d5d304568338435c933427935395547436aee","ssdeep":"","tlshash":"18b012178f616d5c039006c8c12d2dfd88d364759a55e59d5205fc5801ca46818d13d8","size":105,"data":"","first_seen":"2026-01-09T02:57:12.710304Z","last_seen":"2026-01-09T02:57:12.710304Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--elvasdajooks-bjba0g.ee/","fqdn":"xn--elvasdajooks-bjba0g.ee","domain":"xn--elvasdajooks-bjba0g.ee","tld":"ee"},"ip":{"addr":"65.21.209.106","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"e80e622d829066e62f1f9d034f2cdc34","sha1":"e90da22aaad63d73f9c6de6b68960d9e358047dc","sha256":"043e2dd3e1ce9db8cb6e38bd7fec3e9a8b2cdaf90f1633c5b31d6e32a4c1e2ad","sha512":"8a6a31f58b1566123b4019c25c17fbe950b84899b1d861dd6d50e0ce63e63d26c0efcb46836d1cb511a250b79468afafd5841b5733f204591e5ae685534b6382","ssdeep":"","tlshash":"acd0c21e5c6a9131ab5814d98624d55c5044387e990dc41180cccd3cf46cfd618f315d","size":277,"data":"","first_seen":"2026-01-09T02:57:12.712608Z","last_seen":"2026-01-09T02:57:12.712608Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--elvasdajooks-bjba0g.ee/","fqdn":"xn--elvasdajooks-bjba0g.ee","domain":"xn--elvasdajooks-bjba0g.ee","tld":"ee"},"ip":{"addr":"65.21.209.106","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"158665914f78d90cb0982d9173e37fe0","sha1":"8a3b663fe3cd2cbf9639c650c83a26836c792b6e","sha256":"6e7d791350271420bb794dc4db20bfb1dcd32db1d4b0f53345fb6e1733605e56","sha512":"3ad91589ebee90f7e2b2de64219c0f1bbd3fa9d684ca725920c564bba389ad85b8eb783258219e3ffff2bfb1fe21928c7fd43f37bfd08c754d332d5161cbb10b","ssdeep":"","tlshash":"2bb092f6a108d892066d0546ab1b6768b83328ea284b9c03d6085ba2706412e9aa6d68","size":116,"data":"","first_seen":"2026-01-09T02:57:12.714927Z","last_seen":"2026-05-19T12:13:33.41123Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--elvasdajooks-bjba0g.ee/","fqdn":"xn--elvasdajooks-bjba0g.ee","domain":"xn--elvasdajooks-bjba0g.ee","tld":"ee"},"ip":{"addr":"65.21.209.106","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c327432e511236d5677ec9d407f1512","sha1":"39fb64f87923f7d04685e506251cd517ee21968e","sha256":"f2df3bdeb2e800bb33138450cf89cf18f91840ebd85437f0f3bbc041d0c15d21","sha512":"26f66526e28f939c63049d8c89c7ef3ea0824b653b80dfb2995b7cad023f6a1e8041104883313b0adb337f601f5770dc3b5f640901d8940ee8531212eaefe3ec","ssdeep":"","tlshash":"04d05e872c5bcd23a879c415140cf52876abd0329e644bf4c9540caeee292ab6b85b4d","size":266,"data":"","first_seen":"2024-11-29T16:23:18.820928Z","last_seen":"2026-05-14T16:34:03.149183Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--elvasdajooks-bjba0g.ee/tmp/js/elva_sydaoojooks_c7b8b34124dc61943df7a0e37c7f175d_2712.js","fqdn":"xn--elvasdajooks-bjba0g.ee","domain":"xn--elvasdajooks-bjba0g.ee","tld":"ee"},"ip":{"addr":"65.21.209.106","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6e9ec818b6a52c48cd2447b4158ff8d","sha1":"0887c564e002db3a0f74d33045979ea33c0d0654","sha256":"8e1212ec059940bfb9ea8303436ef0c5156a3e6af21deaf55811bacaf179551a","sha512":"8fe4f848a300b51496ea821e5a20908be8168abd1916decae8f0ae8b99a231efdb4c5c64516072663cb05009ba3d44063b9b37ea68543d7b4c9239476f831eaa","ssdeep":"12288:Z3fw4mDiTFyA6TVfMAKNZU92jOTFYs6KoyXL4GoXSGX5ZDrFL:Fw4mDiTFyA6TVfMAeU92jOTF/6VeSZn1","tlshash":"24f41ad9b34d212e42773265983f124eb23ed175a60144adbc5d89ec28a8c1852fffbd","size":734145,"data":"","first_seen":"2026-01-09T02:57:12.683083Z","last_seen":"2026-01-09T02:57:12.683083Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"xn--elvasdajooks-bjba0g.ee/tmp/js/elva_sydaoojooks_c7b8b34124dc61943df7a0e37c7f175d_2712.js","fqdn":"xn--elvasdajooks-bjba0g.ee","domain":"xn--elvasdajooks-bjba0g.ee","tld":"ee"},"ip":{"addr":"65.21.209.106","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--elvasdajooks-bjba0g.ee/","date":"2026-01-09T02:56:45.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--elvasdajooks-bjba0g.ee","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 08:22:17 GMT","end":"Sun, 22 Feb 2026 08:22:16 GMT"},"fingerprint":{"sha1":"FF:CC:9A:B1:EF:07:C4:B4:02:3C:40:A1:34:26:21:FB:64:28:EF:29","sha256":"69:14:99:61:75:6A:0A:43:C4:24:2C:DC:DF:95:89:16:DF:CB:48:87:24:D4:B3:61:77:A0:B6:63:08:5C:7A:92"}}},"request":{"raw":"GET /tmp/js/elva_sydaoojooks_c7b8b34124dc61943df7a0e37c7f175d_2712.js HTTP/1.1\r\nHost: xn--elvasdajooks-bjba0g.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--elvasdajooks-bjba0g.ee/\r\nCookie: PHPSESSID=2u9q12ktthrjaiv3r4em5p8m4l\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 09 Jan 2026 02:56:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Jan 2026 02:54:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69606def-b33c5\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":734149,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"c6e9ec818b6a52c48cd2447b4158ff8d","sha1":"0887c564e002db3a0f74d33045979ea33c0d0654","sha256":"8e1212ec059940bfb9ea8303436ef0c5156a3e6af21deaf55811bacaf179551a","sha512":"8fe4f848a300b51496ea821e5a20908be8168abd1916decae8f0ae8b99a231efdb4c5c64516072663cb05009ba3d44063b9b37ea68543d7b4c9239476f831eaa","ssdeep":"12288:Z3fw4mDiTFyA6TVfMAKNZU92jOTFYs6KoyXL4GoXSGX5ZDrFL:Fw4mDiTFyA6TVfMAeU92jOTF/6VeSZn1","tlshash":"24f41ad9b34d212e42773265983f124eb23ed175a60144adbc5d89ec28a8c1852fffbd","first_seen":"2026-01-09T02:57:12.683083Z","last_seen":"2026-01-09T02:57:12.683083Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--elvasdajooks-bjba0g.ee/design/design/elva_sydaoojooks/common/img/elva_sydaoojooks_back.jpg","fqdn":"xn--elvasdajooks-bjba0g.ee","domain":"xn--elvasdajooks-bjba0g.ee","tld":"ee"},"ip":{"addr":"65.21.209.106","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--elvasdajooks-bjba0g.ee/","date":"2026-01-09T02:56:45.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--elvasdajooks-bjba0g.ee","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 08:22:17 GMT","end":"Sun, 22 Feb 2026 08:22:16 GMT"},"fingerprint":{"sha1":"FF:CC:9A:B1:EF:07:C4:B4:02:3C:40:A1:34:26:21:FB:64:28:EF:29","sha256":"69:14:99:61:75:6A:0A:43:C4:24:2C:DC:DF:95:89:16:DF:CB:48:87:24:D4:B3:61:77:A0:B6:63:08:5C:7A:92"}}},"request":{"raw":"GET /design/design/elva_sydaoojooks/common/img/elva_sydaoojooks_back.jpg HTTP/1.1\r\nHost: xn--elvasdajooks-bjba0g.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--elvasdajooks-bjba0g.ee/\r\nCookie: PHPSESSID=2u9q12ktthrjaiv3r4em5p8m4l\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 09 Jan 2026 02:56:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 289925\r\nlast-modified: Wed, 07 Oct 2020 11:04:54 GMT\r\netag: \"5f7da0d6-46c85\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":289925,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1112x840, components 3","md5":"cbb76230691f1e8092372fcc9afdcbd1","sha1":"1b54a67f6d2d85faee377632781ee2b693bafbe6","sha256":"e3db09fe981eacef8fa13ac3b429ba3fabd192a257fb3912229d2c5715013805","sha512":"d0d920b88bfed74f21c2e4cfe7d07423f5e8e199c877ac6891df802cf7a5d15a7d015d5b74807b908c27953fd7c68bfb8ed0b80a6ba4e539adba821577264588","ssdeep":"6144:3Z3QBg6XQSlWCGO528ZV7c+QSy7vUOW0jOtAE/dL8IkT0UUmYbF:3Z385CkHVYNSWUOlOtA8SIkAsYbF","tlshash":"7e5423a836e1e42cc6eecf34398ae122a9bb5c9fa48170c54b00d5131735ebddb5791a","first_seen":"2026-01-09T02:57:12.685579Z","last_seen":"2026-01-09T02:57:12.685579Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--elvasdajooks-bjba0g.ee/design/design/elva_sydaoojooks/common/img/icon_facebook.png","fqdn":"xn--elvasdajooks-bjba0g.ee","domain":"xn--elvasdajooks-bjba0g.ee","tld":"ee"},"ip":{"addr":"65.21.209.106","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--elvasdajooks-bjba0g.ee/","date":"2026-01-09T02:56:45.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--elvasdajooks-bjba0g.ee","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 08:22:17 GMT","end":"Sun, 22 Feb 2026 08:22:16 GMT"},"fingerprint":{"sha1":"FF:CC:9A:B1:EF:07:C4:B4:02:3C:40:A1:34:26:21:FB:64:28:EF:29","sha256":"69:14:99:61:75:6A:0A:43:C4:24:2C:DC:DF:95:89:16:DF:CB:48:87:24:D4:B3:61:77:A0:B6:63:08:5C:7A:92"}}},"request":{"raw":"GET /design/design/elva_sydaoojooks/common/img/icon_facebook.png HTTP/1.1\r\nHost: xn--elvasdajooks-bjba0g.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--elvasdajooks-bjba0g.ee/\r\nCookie: PHPSESSID=2u9q12ktthrjaiv3r4em5p8m4l\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 09 Jan 2026 02:56:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 370\r\nlast-modified: Wed, 07 Oct 2020 12:11:47 GMT\r\netag: \"5f7db083-172\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":370,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 47 x 100, 8-bit colormap, non-interlaced","md5":"a7c8882933bafd0323891797fb653cd5","sha1":"a9e0d83beaef541c76ca92c12d19dd8305796725","sha256":"3052e47e013a141d8136cd54f2a524b1df228414059d63ae456b9c536cff3b07","sha512":"ba2190dc3404937f24c33ea30231b90212642ced959c74cb735a2fa3c78ca27be10cb66a450987aa32556fca1a61cc929abb9e5febad35c8f85db64c85653f7c","ssdeep":"","tlshash":"9fe026e2b0477d18afa5507aee5428fee8360d490c24462fd9e37022c834693b44699e","first_seen":"2026-01-09T02:57:12.688138Z","last_seen":"2026-01-09T02:57:12.688138Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--elvasdajooks-bjba0g.ee/design/design/common/icons/elva_sydaoojooks.ico","fqdn":"xn--elvasdajooks-bjba0g.ee","domain":"xn--elvasdajooks-bjba0g.ee","tld":"ee"},"ip":{"addr":"65.21.209.106","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--elvasdajooks-bjba0g.ee/","date":"2026-01-09T02:56:45.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--elvasdajooks-bjba0g.ee","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 08:22:17 GMT","end":"Sun, 22 Feb 2026 08:22:16 GMT"},"fingerprint":{"sha1":"FF:CC:9A:B1:EF:07:C4:B4:02:3C:40:A1:34:26:21:FB:64:28:EF:29","sha256":"69:14:99:61:75:6A:0A:43:C4:24:2C:DC:DF:95:89:16:DF:CB:48:87:24:D4:B3:61:77:A0:B6:63:08:5C:7A:92"}}},"request":{"raw":"GET /design/design/common/icons/elva_sydaoojooks.ico HTTP/1.1\r\nHost: xn--elvasdajooks-bjba0g.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--elvasdajooks-bjba0g.ee/\r\nCookie: PHPSESSID=2u9q12ktthrjaiv3r4em5p8m4l\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 09 Jan 2026 02:56:45 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1150\r\nlast-modified: Fri, 07 Nov 2025 10:05:05 GMT\r\netag: \"690dc451-47e\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"eb54334f600caa296c27e9d5d842aa4b","sha1":"0fde7f8d68eb58d80e6113c3529e2beda815605e","sha256":"eda8b344880fb92bf395b0179b70359a3110fcbb6d7e80246f21fc011a976a3e","sha512":"2136835785cfd9973b24367babd644b785c6e17f015a040b254b7f089460d00525270ca36709f154b16d25da2fa9b2c6d00a3efea9e92fde8bc646ce36e74ffe","ssdeep":"","tlshash":"fc21d85cf920746de45575326a055a9b98cc47c361958b02e41ac328ed7614731e613d","first_seen":"2026-01-09T02:57:12.690496Z","last_seen":"2026-01-09T02:57:12.690496Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--elvasdajooks-bjba0g.ee/design/design/elva_sydaoojooks/common/img/bestit.png","fqdn":"xn--elvasdajooks-bjba0g.ee","domain":"xn--elvasdajooks-bjba0g.ee","tld":"ee"},"ip":{"addr":"65.21.209.106","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--elvasdajooks-bjba0g.ee/","date":"2026-01-09T02:56:45.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--elvasdajooks-bjba0g.ee","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 08:22:17 GMT","end":"Sun, 22 Feb 2026 08:22:16 GMT"},"fingerprint":{"sha1":"FF:CC:9A:B1:EF:07:C4:B4:02:3C:40:A1:34:26:21:FB:64:28:EF:29","sha256":"69:14:99:61:75:6A:0A:43:C4:24:2C:DC:DF:95:89:16:DF:CB:48:87:24:D4:B3:61:77:A0:B6:63:08:5C:7A:92"}}},"request":{"raw":"GET /design/design/elva_sydaoojooks/common/img/bestit.png HTTP/1.1\r\nHost: xn--elvasdajooks-bjba0g.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--elvasdajooks-bjba0g.ee/\r\nCookie: PHPSESSID=2u9q12ktthrjaiv3r4em5p8m4l\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 09 Jan 2026 02:56:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 755\r\nlast-modified: Wed, 07 Oct 2020 12:18:31 GMT\r\netag: \"5f7db217-2f3\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":755,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 77 x 25, 8-bit colormap, non-interlaced","md5":"5230c885c1f39bc363ef539d80c4c5d9","sha1":"33e7a6b7f5e7d57b355b60cd95c834b0d4913d71","sha256":"3d68608a4fb6660e7bebc7ec8ecf588bc1e1279e6596c9f4e79f746d4544ee4f","sha512":"b59a81c58014cb60e8d4816f48ed65e792ed559961bde944f2ac505c231e9c1df6c590567c31386e0646bee1095351cdfb3c334ba647ec3475d1baddde087a71","ssdeep":"","tlshash":"1d014432168a9e66b79e50303c1513d4bd8e395a4dae50a6647b1e17931b22ca30cb76","first_seen":"2026-01-09T02:57:12.692436Z","last_seen":"2026-01-09T02:57:12.692436Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/abel/v18/MwQ5bhbm2POE6Vg.ttf","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xn--elvasdajooks-bjba0g.ee/","date":"2026-01-09T02:56:45.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/abel/v18/MwQ5bhbm2POE6Vg.ttf HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xn--elvasdajooks-bjba0g.ee\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--elvasdajooks-bjba0g.ee/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14920\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 10:51:38 GMT\r\nexpires: Sun, 03 Jan 2027 10:51:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 489907\r\nlast-modified: Tue, 19 Apr 2022 18:25:39 GMT\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32672,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 13 tables, 1st \"OS/2\", 8 names, Microsoft, language 0x409, Copyright (c) 2011, Matthew Desmond (http://www.madtype.com | mattdesmond@gmail.com), with Reser","md5":"8832a388515d95a652e59c8f5b07f19e","sha1":"260d7d8387b6ef09074921f5ea66a5c68be48956","sha256":"093228fe43f67196e7ef40dca4e4815c258ca8dd13356ecad14f8f4d8f08b636","sha512":"2770dfd51cabdc725ceb11ad315833c09ef2c126ffaacfd80c826baff15ddfc98cdbdd65dea3890c3e377e8b9a83446c8731655b10cbe4723e941fd50068fdba","ssdeep":"384:r3+qvsLkSq6BJJeQvq3cKtGHtIWjx93cAz/ETc1AIG8PvG9xP7qecMq1i1+J3Dt4:BvgkjcNZIKeArrPD0yo3jPZ","tlshash":"3ae23a166b6339639172127542ea70943d25f1b2834e871b244ec63718d30f6bedefda","first_seen":"2025-02-16T07:40:55.982662Z","last_seen":"2026-05-04T04:54:00.398204Z","times_seen":4,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":103,"dns":1,"connect":20,"send":0,"wait":21,"receive":5,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--elvasdajooks-bjba0g.ee/","fqdn":"xn--elvasdajooks-bjba0g.ee","domain":"xn--elvasdajooks-bjba0g.ee","tld":"ee"},"ip":{"addr":"65.21.209.106","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-09T02:56:45.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--elvasdajooks-bjba0g.ee","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 08:22:17 GMT","end":"Sun, 22 Feb 2026 08:22:16 GMT"},"fingerprint":{"sha1":"FF:CC:9A:B1:EF:07:C4:B4:02:3C:40:A1:34:26:21:FB:64:28:EF:29","sha256":"69:14:99:61:75:6A:0A:43:C4:24:2C:DC:DF:95:89:16:DF:CB:48:87:24:D4:B3:61:77:A0:B6:63:08:5C:7A:92"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xn--elvasdajooks-bjba0g.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 09 Jan 2026 02:56:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=2u9q12ktthrjaiv3r4em5p8m4l; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":272808,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64180), with CRLF, LF line terminators","md5":"ad69628dc36e0ba5cd13f8d3eb26a467","sha1":"1f788aaa96a98fd52fb3b3bedd82c1ccb5a66667","sha256":"cee1a06f1aa582d3c269e5236d8db63426d061f462af734037d2b16cf2103c7e","sha512":"9cdc88cc213f65b9df60203509559935f95a69410e567a164085411d0f06a7020336c7f07e830b0500f633c97a9ffae998c7a97e0938e669bceda860a87a6f28","ssdeep":"6144:z8QZSeZ9tLG2NJlD2u18QZSeZ9tLG2NJlD2uS:z8QZSePR18QZSePRS","tlshash":"0544a8335601120cf71be9a1bbe66b9a5225c023e60726f9a5922878c7cff8405777df","first_seen":"2026-01-09T02:57:12.696886Z","last_seen":"2026-01-09T02:57:12.696886Z","times_seen":1,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":58,"dns":21,"connect":14,"send":0,"wait":58,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--elvasdajooks-bjba0g.ee/tmp/css/elva_sydaoojooks_8751f5fd8999bd7f37bb7d80cbd54e56.css","fqdn":"xn--elvasdajooks-bjba0g.ee","domain":"xn--elvasdajooks-bjba0g.ee","tld":"ee"},"ip":{"addr":"65.21.209.106","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--elvasdajooks-bjba0g.ee/","date":"2026-01-09T02:56:45.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--elvasdajooks-bjba0g.ee","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 08:22:17 GMT","end":"Sun, 22 Feb 2026 08:22:16 GMT"},"fingerprint":{"sha1":"FF:CC:9A:B1:EF:07:C4:B4:02:3C:40:A1:34:26:21:FB:64:28:EF:29","sha256":"69:14:99:61:75:6A:0A:43:C4:24:2C:DC:DF:95:89:16:DF:CB:48:87:24:D4:B3:61:77:A0:B6:63:08:5C:7A:92"}}},"request":{"raw":"GET /tmp/css/elva_sydaoojooks_8751f5fd8999bd7f37bb7d80cbd54e56.css HTTP/1.1\r\nHost: xn--elvasdajooks-bjba0g.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--elvasdajooks-bjba0g.ee/\r\nCookie: PHPSESSID=2u9q12ktthrjaiv3r4em5p8m4l\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 09 Jan 2026 02:56:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 09 Jan 2026 02:54:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69606def-10be2\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68578,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13719), with CRLF, LF line terminators","md5":"901da37d4c40da210338a149bd62ee42","sha1":"479c4d95280d2aff2670a5aa6ef3300aa8d0a873","sha256":"eb100c8bd0ad5ca3e8289d82b7a1530a0e4663bd16e9a31a43fb8d57c77303dd","sha512":"ba142f85273d98d9b9be1d0b49ac5ebfa5bf80328fa0ffbb6327cca6d4286d1c86c1d5c135a7b0ab3a74a936bfd268a393c1c84f9a9bf87fd6e38cbeeed74cf4","ssdeep":"768:+MznURC6G/zD8Bh7OGP76DS2Fvq9a7yT5Q05:ozBhrCS2Bqt","tlshash":"8c6352316983311dfa27d56062d50ff2923f5242ed272ebfa09a7958c3c59e480bf6b1","first_seen":"2026-01-09T02:57:12.707767Z","last_seen":"2026-01-09T02:57:12.707767Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}