{"report_id":"1a1688ba-e37d-4217-b25f-d050d19cf6ce","version":6,"status":"done","tags":[],"date":"2026-01-04T15:39:40Z","url":{"schema":"http","addr":"dhlexpress.ee","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":0,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"final":{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"title":"DHL EXPRESS | Ekspress saadetis välismaale, online saatmise arvutamine","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-06T01:59:37.875155Z","times_seen":1035507,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dhlexpress.ee","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":0,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-08T15:39:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.cookielaw.org","ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-06-20","domain_rank":2972,"first_seen":"2013-12-28T13:20:36Z","last_seen":"2025-12-29T00:25:11.248156Z","alert_count":0,"request_count":11,"received_data":648402,"sent_data":5360,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dhlexpress.ee","ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"domain_registered":"2020-12-04","domain_rank":0,"first_seen":"2025-11-26T15:22:18.575267Z","last_seen":"2025-12-09T10:21:20.868649Z","alert_count":98,"request_count":49,"received_data":2839675,"sent_data":56630,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Stimulus","description":"A modest JavaScript framework for the HTML you already have.","website":"https://stimulusjs.org/","common_platform_enumeration":"","icon":"Stimulus.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"geolocation.onetrust.com","ip":{"addr":"172.64.155.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-01-12","domain_rank":4022,"first_seen":"2018-02-07T11:23:41Z","last_seen":"2025-12-29T00:06:52.443255Z","alert_count":0,"request_count":1,"received_data":461,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-28T22:17:36.419718Z","alert_count":0,"request_count":2,"received_data":999137,"sent_data":882,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"139f8fa4fba253896e0f8b2a6b8d1e09","sha1":"f69eef1b425ceb3c02bd69a3c9fbc3a095eea351","sha256":"86aab0107a8721f1cd228577877575dedf97ee7c256f20b2d1383b437d51fb9a","sha512":"27110119123d42eb24e6701f2f69e057fedb401960c6da7b1bf26c3229be7783309bd8fcbdc42caa9d386ebc69968857f7d5def616c5290ceae4d77e2857f6bb","ssdeep":"","tlshash":"e7d0122df39894e4498ef3e71037a715ad0395e78967405ccd180bf5c534fc16129b95","size":206,"data":"","first_seen":"2025-11-26T15:22:25.089959Z","last_seen":"2026-07-04T16:37:58.900771Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"29f124f5a6c5f15913e3e1abd8f0a58a","sha1":"6ef7e0afdd92e725cf64e9e3925b7eae7a82d878","sha256":"8c45bb6afb51d189848f7beb8aaa8b2d2793dfa3957fa87598bf165d06e23864","sha512":"fff91a102aa28f4db26288e83500b7c699ed906e84a7b74d156a4620475981b9d98c215aec705467f8d7cfc3fe65b9966c5e05a86dad590694b7b7746c582bf7","ssdeep":"","tlshash":"8ad0122df39894e5498ef3e71037a715ad0395e78967405ccd580bf4c534fc16129b95","size":206,"data":"","first_seen":"2025-11-26T15:22:25.035525Z","last_seen":"2026-07-04T16:37:58.888279Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b6654c3c10566778d1a5050c9946ccf","sha1":"0ca0cb6651454577fe69dbed7e55dacff0a45f57","sha256":"3d3feca7be5ede2fc8b8f3bc00dcd15eca878385f0a1b824acc0a4bba932807b","sha512":"76b5bbb3b216479988563957a198bbc3080e870ccc91c8b1857a72e3cf0b83548c9d8b3f3244806ccb2f189fd3e56467d1f53199cf41008b12a1645245d4791a","ssdeep":"","tlshash":"d0b0123e74416c3d405a3c942637801f3473289955011422808c04480c34b08889743c","size":93,"data":"","first_seen":"2023-03-08T13:18:30Z","last_seen":"2026-08-02T21:37:43.98983Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"345a1337f32ba2c535b2a425acdd65f5","sha1":"83d50681f252c1f8738856eaa7963071df450274","sha256":"ceb133ac4b65aed0ff26239ddf83fa112e818040593e4c9555aa6a0d1244235a","sha512":"91ef4f9a62c5a249263a9d0d97994f7837191d2e39caa8527c095811de06f28fe5f9c04e32840cbb9158a5d55b9c3e4f132bbebfce43b47a01cf8b3649d9aadf","ssdeep":"","tlshash":"96b09288f3130db40ae03b900e9db68570873528c1e2a4711faa310d722898663ac868","size":127,"data":"","first_seen":"2024-10-17T00:34:14.606404Z","last_seen":"2026-06-01T16:49:05.886578Z","times_seen":121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"012e0a58bd47221602641f5cace3ce4a","sha1":"dc8bbcc84bc2708f9f42a5dfcbec34165685eef3","sha256":"743f547ad0f650e653288c1766d1ad214c6585ef176808ff804b6974cdc3b12b","sha512":"fff6dd7dc5ec3bb9a8af70df8066e607a8f6dc8cece6a7422a43b860fe998fd9204ec7ab3a71359a3932972973c96013eaf1c8572ca8b6b33484a1f6c04067d7","ssdeep":"","tlshash":"23b0120fb59830937e866169002d4207b50f2ef747542484a2364ef43a552491179fd9","size":104,"data":"","first_seen":"2025-11-26T15:22:25.067578Z","last_seen":"2026-07-04T16:37:58.848877Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"71e9236b0a58d436cb068696352cc482","sha1":"152e7098b6337f572d41b1e4377504e601e63d7f","sha256":"9ee4205feb1dc493b31fc84cca8f3c1160edf3239ad39f3709b178f323d8b988","sha512":"d965308b66b1de1691288cca205e86672d9b5ece58bb52d80324b5f7981d4a1e7203630757c45e27fe789bbdb8bb9d4355fd392a54b5dcdf727850872f580d44","ssdeep":"","tlshash":"28d0122df39894e4498ab3e71037a715ec03a5e78967405ccd190bf4c534fc16125bd5","size":205,"data":"","first_seen":"2025-11-26T15:22:25.061178Z","last_seen":"2026-07-04T16:37:58.864701Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"c77313f113f41fb2c0e68ef3ca15f87b","sha1":"64acc5eaa55ff9c622b07483db7b87638a10b8f2","sha256":"bddd1d7d89cbab56dd3f41f3841ee520e0d3eea8078f75cc7b54aaed3c39590d","sha512":"533bf046a9405d8bc5c33cad0aa227263973376887e795157d9c36eca49d45db805c12109fffbbd151acb495deca55357b4eb3fbe3fa9cc72b4f33e5857d0adf","ssdeep":"","tlshash":"bbb0124fb59430937e466169003d4207b60f1ff7474c24c4e2364ef42a55249216dfd9","size":105,"data":"","first_seen":"2025-11-26T15:22:25.011272Z","last_seen":"2026-07-04T16:37:58.854539Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"814adeb4ef60d23249953caec379ad2d","sha1":"75caa57e47c9cc0c8778ef658fb1d177d2d18499","sha256":"d31ad67242798ad175c3f1e51a44fe7aab657a2215fa4224757d4f6d9279d7dc","sha512":"7a918e9fa7b06e130b27970c940f2a3348d24cc9f28f867cc98843abb517ae118d756001633f312183202681b5cd3bf1ebfc4a0be8c775cb5349530c15b068d1","ssdeep":"","tlshash":"3bb0120fb59430d37e56a16a243d4307b50f1ef7474424c4a2364ef42a5924d116dfd9","size":105,"data":"","first_seen":"2025-11-26T15:22:25.063069Z","last_seen":"2026-07-04T16:37:58.801919Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"0bd04d043d9784d532795fe03e4b8115","sha1":"95ccb4b120fd80eb49ea2c21222c09d943004594","sha256":"63d87326d0eb29e8f5217a7e7b17ae5d17bdbe0488f7768880a24837ddd389e8","sha512":"6c8e4003a9ef8095cb044f4509d88ff0fa6bfa85ff0c971fc708aa92bc289adf7fffd4724f54b34104a9a7e933037d727c337dd86b06731c38f4f2368a3bdcc0","ssdeep":"","tlshash":"21b0120fb99430d37e566169143d5207f50f1ef747543484a2364ef42e6924d116dfd9","size":105,"data":"","first_seen":"2025-11-26T15:22:25.017279Z","last_seen":"2026-07-04T16:37:58.909158Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"1787e28ed65bbaa73cf33450d8ab1bb8","sha1":"f6a4a461bf8746afcef77630615b19125ba12ffc","sha256":"37a4e88e5a840da594072f8a48e904f339bc15de85d2042a70ba20484ce2a8b0","sha512":"64360d36667dd54d0b918c215d860b8cc63163cceb322126e998e6ae87f837ab1f383e248854bb33de08e167b4734d90f923d40efe8159c4df5a8e7647a10efd","ssdeep":"","tlshash":"a4b0120fb59430937e466169003e4217b60f1ef7c7442484b2364ef42a55249116dfd9","size":105,"data":"","first_seen":"2025-11-26T15:22:25.082748Z","last_seen":"2026-07-04T16:37:58.925415Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"95a0f965260abe7e5d8e851798c8a047","sha1":"b3257cd844a6f081272094fef732c158a8815a1a","sha256":"e2e451192d4cfc12a3afd60312ab08ba9f67325be12a469d061abefe329a3905","sha512":"4566e9b7c7375703b05fc41a714f610d8e7a16a7719634f2d861f9bc68b103c52a4f83b4e0a47a3e4f744170c37b6f18cfa2211f6e02b49b718a73444901d62f","ssdeep":"","tlshash":"6cb09b9d55dabd754b033138141b91247505345145354d5045481491561e5d520ff962","size":118,"data":"","first_seen":"2023-05-21T16:39:27Z","last_seen":"2026-08-02T21:37:43.974315Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"7662a79dea58ab4517ada8a449b85dd1","sha1":"f5a01db8e5cd769801c08b89ca082bbd7313e1cb","sha256":"b38337582f84d5ef7adaa4ccef12170934b4e6eb32102537f6ba3899e12ba29e","sha512":"0aadb4df56cdeba94ed98886b3735c9d04f05d92cf0b9563c41773e84a35f4a47ef1a1f9e3a754911c8a0a7e7ebf76b6311620f5bf9e15db2a2ba88e3e0e8da2","ssdeep":"","tlshash":"efb0124fb59430937f466169003d4207b60f5ffb474424c4a2b64ef42a552492169fda","size":105,"data":"","first_seen":"2025-11-26T15:22:25.073599Z","last_seen":"2026-07-04T16:37:58.918827Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/otSDKStub.js?did=018dcfdf-a21a-784d-a821-158b9556eda7\u0026data-document-language=true","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7d5ec92092a6d24e4621faebcfc71be","sha1":"b2c9502d5804e854e5e17bfbf00dd116e138fade","sha256":"57e99ffdcaa5df268c115fed41ce45490d1bfe8607151738e561292a5e2e5ca7","sha512":"065c9da88b5617ac73258a74e20209db6d2f4ca1f1507a3404bf2c9597b826f4352d5b43c7189179dce5d873499c0683e5b6ed6bf3f51f1f987a0d92bf6f23bf","ssdeep":"384:F58KNPpfxrLWMABwX/Ny0rkB+r58eYxcCLn2cVKZ5Q8eFKJx6yzGq:bdxfxvlABwXVyvB+r5a+CDhCWq","tlshash":"d4c2e8ddb144ee3446d361dc9a3be26ab23a786d3485d064b864dce0247cc4f6533bb6","size":26070,"data":"","first_seen":"2025-12-08T05:57:37.270424Z","last_seen":"2026-06-06T11:35:15.838644Z","times_seen":11057,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"e8961527ee3fe5343e2557b2d07fa466","sha1":"77949bb9e9f198b29a96a7443536a04cabe969cd","sha256":"78c8bdc18839c26595506bc6df8831aa6cfc44eff13f25786502329ad5088af3","sha512":"2c03efb8ef68dee19fbaa800e3fd0c722838474899cc4d01c6e95de2f03462b04bd3c8ed3f5304fabc4920e345dbb5e153d1780c5b417c0a7bf4507e552ea0dc","ssdeep":"","tlshash":"6170008cb0c330208002282c003b000a232a0ac00a0a0002c20000822c220088032a8c","size":25,"data":"","first_seen":"2023-03-07T01:27:45Z","last_seen":"2026-08-05T23:20:40.090969Z","times_seen":15447,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2f35de98f9d56d7018f52b8d2819110","sha1":"f1199d759f98eccc764d740c7e5514bbbe5a08ea","sha256":"64bd8910e0bcf8d24ff2c86d8a84ba326d67a03206ebb1df40ed990c9ae837d9","sha512":"a3dae607a6ece39e682c64c8762ebfa5c563fdd997f5bd1bd13c809a030ae0fd71ed7176ba09310c3374c053997adfc4d4e4d47c5388c27457e07cdf57e50fc5","ssdeep":"","tlshash":"ba9002667dc8012a0597a61a1c5c59a4940f2ec7c960668822340ad5454a341164cf98","size":56,"data":"","first_seen":"2025-12-09T10:21:25.221768Z","last_seen":"2026-07-04T16:37:58.860613Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"36ddbf83a30bc36bef02a6c92e982c8d","sha1":"13bda1087ca382f62c6a289fef9a7736b4381340","sha256":"2c0ffd4ec6b3fd626b351db77a3c456eb093140165c6b7f4b2eedadad718ef78","sha512":"d2df727e1a48f88727e5a14d3446c11372972ec33ea7f518060c44db80bc6033dafd9b91227d2b7653ad951f0319d89ea84179bd4f423838dd9d264f8a0ed61b","ssdeep":"","tlshash":"add0122df39894e8498ab3e71437a725ac1395e78967405ccd180bf4c534fc16129b95","size":206,"data":"","first_seen":"2025-12-09T10:21:25.241841Z","last_seen":"2026-07-04T16:37:58.862683Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"4663231c5968e3673531b760d28a6f53","sha1":"042732056b5411cc144bde12a1f7f40e8e212f97","sha256":"94c72617418e0b788af4fb76b991bed174cf9237120f6a39385e690d1037e078","sha512":"c3e8eda1f4af3abc74a97b89ab864124eab514450d712cf4f3d2675ec1569b458ff69bb6925d42c32415759b82e6ec5fa3b114e521ed127be97a233614a05753","ssdeep":"","tlshash":"e6e0c0ee78110cb675f905f623b5a519b583260ca8092d63cefdc91439185d78c168cc","size":361,"data":"","first_seen":"2025-11-26T15:22:25.057194Z","last_seen":"2026-05-28T17:31:36.817286Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"911519917380d8b2e2d4e8e40db0b4ab","sha1":"1264f07f997c943215bf1b9e835ee9843d272b9d","sha256":"aa4caa194af7ed010335fdf6d9a6f5db276c9d5b151457e9e2a4ae87b61e85cd","sha512":"9cf444494af9ab08a8790648443e71d245d14b3725e8a5ce9005df42b52bfc43f3fec05e0277d154dd4e8d754fef8847108e13e6639df2b22c53107a76382df7","ssdeep":"","tlshash":"06d0122df39894e4498eb7e71037e715ad0395e78967405ccd180bf4c534fc17525b95","size":206,"data":"","first_seen":"2025-11-26T15:22:25.041288Z","last_seen":"2026-07-04T16:37:58.904952Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"b8c8ab88f7263006e0b0bb7a12c7aed2","sha1":"e8972407cb13272ca306590a9a05c3dd83528a4a","sha256":"3555c0d1c024d9c5d5daf0f5983bf97ee87f0deb46e37d0bbe8b9a949dc09b24","sha512":"f882b38aa4ec5f4d91a21de8422948ecb7afcf344e68bf387c2fba2f402bdf4d5dab5db8bbc84ba4235d573e06d56538309b8dc88cf4846f68a8a02d5793c03a","ssdeep":"","tlshash":"c5d0122df39895e4498ab3e71137a725ac0395e78967405ccd180bf4c534fc16125bd6","size":206,"data":"","first_seen":"2025-11-26T15:22:25.050043Z","last_seen":"2026-07-04T16:37:58.840345Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-ZXH7E3H54N\u0026cx=c\u0026gtm=4e5ca1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eaf8d5384f8fd627ac545983cef4e8c5","sha1":"335670b71867153fb1fc0ca76c12509a37081988","sha256":"7ded88b1dd45544abc8d728bffbe51d833190367d1df38ded961a0b59346f332","sha512":"22a49aa5577e6d6545f08d89fa2702b14c7080eaa005d7dd6f2bc6c2085590a86a100e613edb2059625d694b744291490363aea0c5c82f98e15485fe2cb1cedd","ssdeep":"6144:+MIe7ma2bulKYX61u99Yye5HDmHYmyBFzvnsDu6QWllEKPad4XEPPad:UC8bu7q1mcrns6WawEy","tlshash":"b1b4098e73c67426939af478502f02cba8bb29e2b45dc896b1c9ccf01d7459b4167f78","size":497268,"data":"","first_seen":"2026-01-04T15:39:49.481658Z","last_seen":"2026-01-04T15:39:49.481658Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"22d7b2e581190531f83e17ba24ba2ce7","sha1":"62b77aa13d80c6713e1617e4bb71f2cef5cc0b30","sha256":"f609f22e3188df44335fc7edef1780d52c57ee081da68cf91dcd061257b3d65b","sha512":"69615ce91814acf3159ff01def32d5f06dbfeaa1b97d791e5a730b6c343a581da77b4bf19404ed6eb47cc9dfec261b1bdaaa8b6b23e63d2dfa31ca3f21ebc453","ssdeep":"","tlshash":"81d0122df39894e4498ab3e71037eb15ad0395e7c967405ccd180bf4c534fc17525b95","size":206,"data":"","first_seen":"2025-11-26T15:22:25.012188Z","last_seen":"2026-07-04T16:37:58.856806Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f943c381b86927491cefb2899022a9c","sha1":"ec02de4d3689b7cc01c87953fec0e716b6eb647b","sha256":"82ddb1ae2b33a77d6910b7ad22e7b266909466adc3ca072c8ef2c828b669fdfb","sha512":"33cc306cc2f28745df10230f6713d4e66f8e9a5eea78c2f5873387f7fe1a97d9cc3bef04a24f4163c3e91657b2787742ed9052fd013e869bf3d261a9eff2ea17","ssdeep":"","tlshash":"66b09b9d55e9fd740a023138041f815475053451963a4d80454424a1552d5d520ef5a2","size":118,"data":"","first_seen":"2023-05-21T16:39:27Z","last_seen":"2026-08-02T21:37:43.985777Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"b5bbb5c0e346ff6d9f64dd06ffc66bbe","sha1":"3363087b16d23c644ed776f3fca6ea4db2dc3a47","sha256":"360b2bfaa6848d80794c1b631da95e7edd1149df959a3a310437e59997c42784","sha512":"a33f5496027dbe64a054f18ff759c17fe7a5ef71ad078824fbc849cb7176615b1cb9ec4accbf6ace2d70f6fdc9f060f18cd8795ce65aa245bb559c4a7b358269","ssdeep":"","tlshash":"c9b092b43264897e0a8a104c7668c3c43c3d0184f60238409a6c35891035d869845f88","size":127,"data":"","first_seen":"2023-03-08T13:18:30Z","last_seen":"2026-06-01T16:49:05.888487Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/public/@googlemaps/markerclustererplus/dist/index.min.js","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d72ff71a3a6b58244d7336469a0d479","sha1":"b2538a481ec947ff6e0ed7ef0a1d4cdfee196bcc","sha256":"cc0b14615ea7ed660d7a101035d077229c1fb59db3f2dab02e764bf82df1ee4a","sha512":"18ef9a5e47c5d49da82c16995cc5f0d55af197576ea8ab672303b03844184a579d94356134270aea7537b71a4f6bf146d5eb5f672312f85cc5fbab72b853d36c","ssdeep":"384:31roYQGOFI2gP5kag7uJf4UZ/Uo6m4Lga5Wy9tVjVCOjHxEBWd/T/vbm2cGyrOO7:lMMXkNUZ8o6ZrLVjMW2BI62gwpLogosE","tlshash":"e603d7c9f691b0604393b1f8013f0a8af33b5c59a86a81ecf655d0e16cb994e507bf39","size":40278,"data":"","first_seen":"2023-03-08T13:18:30Z","last_seen":"2026-08-02T21:37:43.942062Z","times_seen":1546,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"27f8a2745ef5edbdb903437f1ce3281b","sha1":"94febd4762ff8ca882ae5f6dfed69f8d10523787","sha256":"979cfea3a7f8e1220b7e1593ecab744091f8851b047241b4f02e629da170894c","sha512":"8de45c9454ef74a25dbe8595c6a7d4047acc4714a3c953191db968886b0f9bcb0f7fc6e6169db4b44fd2e42c8d8f3a564e3d3d49c3a1e1dbc6d45b4a6bb14dd5","ssdeep":"768:sWi+H8SvVwYvT1ptTYwinsqWhboMUd4Ce13q05aC:sa8SvVlvT9UwinsNb44/13q05aC","tlshash":"ceb39c966cb8de1d0abf10402cdab43d60be391fcb8a08a60789ef5814edd7c7571e59","size":109899,"data":"","first_seen":"2026-01-04T15:39:49.630165Z","last_seen":"2026-01-04T15:39:49.630165Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"84cedf93e75c14c27897d1d5c7675261","sha1":"ea7d8f24f5173b1fb575c175a382c647af68bb33","sha256":"7f43e7b4e9d75994d086991ae243f80209d1ecd6f4588d0772ab88e185e4e80e","sha512":"60e0b217bf924d813415e77dc4d6d66e05b2f244ecd0e023dd9c3575d943b650427ba595a6fbce48c254d1efa20d210b1032e65b7e949f5aaf9175795bed776c","ssdeep":"","tlshash":"c9b0120fb59430937e466169003e4207b60f5ef787442488b3364ef43a56249127dfd9","size":105,"data":"","first_seen":"2025-11-26T15:22:25.071265Z","last_seen":"2026-07-04T16:37:58.833302Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"c4c96c1519904b6e88a74054e44367cd","sha1":"2d29978fae76fbc7f6f8ae13737a6d43822f0ad5","sha256":"0a89ca0b08a34ec097cb8cdfa9aa2ceca4836cd97f6407bfb316785422fb4a56","sha512":"bb09572d8f4276a4ed4c2a498a17a1ccc8efe6287521672d9107cb5961d1e59a7de9cb885b4ccd7a1daafc29d6875eda477cdea22db64dd8a1d40c6d5567aaa8","ssdeep":"","tlshash":"17d0c92df39894e4498ab3a61136a715a80395e78967405ccd180be48524b816125b96","size":206,"data":"","first_seen":"2025-11-26T15:22:25.075632Z","last_seen":"2026-07-04T16:37:58.838406Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"08f712a6dde3a9deb7ade1a804b9dd77","sha1":"1c7e03fd4e37d7d45e293ce99ec12b93a2cb8cf0","sha256":"402b3b9e60b23a45e5f44dcd6e0e623bc589812a06fb45faca585937e07e4aec","sha512":"37c49f549354fdc36f9462f0d07189bb1b483343f86249f8fe15370929152b9056ef300d2faa5c9346c785bcdf6c904226ad638bcf66cb07bcb0d549912c457a","ssdeep":"","tlshash":"90b0120fb99430937e876169003d4607b50f1ef787442484a2364ef42a552491269feb","size":105,"data":"","first_seen":"2025-11-26T15:22:25.037136Z","last_seen":"2026-07-04T16:37:58.87639Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/public/dist/scripts/modules/application_es6.min.js?v1750161378","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"01ae31799923f81dfdae2216fbc57c9d","sha1":"3d0460b55fae47b253bb973bd28378b2dea3575d","sha256":"66f8e53411a8e9205e5cc3788486c517fdb30b11f1e9e20ab9205d828b3880fa","sha512":"e2a20c178e424ba3a250bc729a35e9384fb0956a0447e4dc7e92a1d7f79f66d477b3051751c49559f25addf6265261accd36d5a9ced14cf2b163522ef39e2f3e","ssdeep":"","tlshash":"6b3144b8f93c987305fd43aea14b65fa81a936ed6d06c018e15d4cc954a8086297593b","size":1601,"data":"","first_seen":"2025-04-04T11:12:55.685143Z","last_seen":"2026-08-02T21:37:43.929917Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"7893bfc82511281491ab8485a4c8facc","sha1":"cf19edd1e8549cdae1e2cfb746a24ae58794055b","sha256":"fead1b6afb9038bfe8b958bf876ce29aa66b292b6f84627e4944e29d8b472285","sha512":"2641ed6e6a8bc81de16f0873ac2354e3a2fff8c5986de6d28fb8dfdcb0694fd0c4f740d18d9055409167099e20af8488daa39d165d32208f5dc8a263286db833","ssdeep":"","tlshash":"a8d0122df39894e4898ab3e71437ab15ec03a5e78967405ccd180bf4c534fc16125b95","size":205,"data":"","first_seen":"2025-11-26T15:22:25.0808Z","last_seen":"2026-07-04T16:37:58.866943Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"caceb2cd31029e0055b35ea4f82debd7","sha1":"51c64315b057da65513400b0499b48606af4872f","sha256":"8f3008624e0264dca6d117f976cb7737be8691ed906ab109177254371f949ac0","sha512":"0797800184e4d5448c9e753da0f7cbc195d19ffdd221e35f36f0bfb08b9b1d156c1a5e62a59317f0bc8dfd21919f0feb808af75e2860982c0018a4a032dae676","ssdeep":"","tlshash":"52b0120fb5d430937f467579002d4207b50f2ef747442484a2364ef42a552491169fd9","size":104,"data":"","first_seen":"2025-11-26T15:22:25.059265Z","last_seen":"2026-07-04T16:37:58.885618Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"9ff108553b2899c23ebe0b619447a2b6","sha1":"8be4a20fb53c70a3266482a17eb54a43c85f8ed0","sha256":"e2eb8d0a54baa181cd60e90c471daa5ebb84220db0342c3bf8215ca70c45aeb9","sha512":"d0328e05b2d02f1f453cbaeaf12d43e337e8fdcbabf079bf98652241011a5e841e54438f33f231a2f7d4a9b260d55465597f8940cda6e65ebf82097a070de8fb","ssdeep":"","tlshash":"3fb0120fb69c70937e47a169003d420bb50f1ef747842494a2364ef42a953491169feb","size":105,"data":"","first_seen":"2025-11-26T15:22:25.04834Z","last_seen":"2026-07-04T16:37:58.921795Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"a47c9b12c1ab5d46c31d0d6f5cc0549b","sha1":"b33bd2198128ff50fd8d1e5a72bc3b16c2e3ebac","sha256":"01760cfaf24f20a613d727e9acc7fb1a5827169d3071b340960e422de119b8b2","sha512":"104a26b7e81f6d48bb839452f6b3ab2a515f698533339d6875f6b9ec09025bf10ca9520132007c148dafedff36564029484e1bc07663697106f105af0010d26e","ssdeep":"","tlshash":"11d0122df39894e4498ab3e71137a719ad0395e78967405ccd180bf4c534fc16135bd6","size":206,"data":"","first_seen":"2025-11-26T15:22:25.051676Z","last_seen":"2026-07-04T16:37:58.843544Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"f30068b6a52aefd7532a73835b75466e","sha1":"01de183b5d59d3d7a5800f17b72aad692fa94eb7","sha256":"e0c7b8cc0a1da3280ba46d8b29c9af3f2ee4ab0850f9037d1d794319d45e878c","sha512":"b55871d55024b2667520ef960d310033174e67eb358d38473ebf7d399a44a6f815a177322730c902f0693092757638dad4786440a77ec84549dbb8c1eb5b2851","ssdeep":"","tlshash":"eeb0120fb59430a37e47616a003d4207b50f1ef747842484a2364ef42a552495169ffb","size":105,"data":"","first_seen":"2025-11-26T15:22:25.084744Z","last_seen":"2026-07-04T16:37:58.892901Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"5d5bd734b68d4bc120bcd0e7c733f498","sha1":"4103926bfabf1ef7a77ea9d56a07cbead2bcd50e","sha256":"3bb04589d09e346b625fba07da4770e7b83891af2d1415708947f1caf841931e","sha512":"a2eaa6e6d4a62cf3ee67fc8c04341f19ec891117ca1ad787b881154409433272d91f1c26decdf3e90d8642e1973e0e6076a246ef0eda2566c9283774ae816cf8","ssdeep":"","tlshash":"75d0122ef39894e4498ab3e71437a715ac0395e78967405ccd180bf4c538fc16129b95","size":206,"data":"","first_seen":"2025-11-26T15:22:25.055319Z","last_seen":"2026-07-04T16:37:58.895401Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"413b7dc1caac04ab95e8a1b230b9b3ad","sha1":"2657fe2eb543ebc0b54eaa7d3aba3a75fb638630","sha256":"b62262aeb7ee1694f40152af828f0d72a6ac6572f9db8ffa1ab16784c7532878","sha512":"835049ca74deef336dde07bdb5e26143f145f4fa0fd3472ce4e052da605723434d315e939818671ec2fcc997ff538e9beb8b5e024a9c72ec7bd56aea4deca971","ssdeep":"","tlshash":"7f70008cb0c330000002202c003b000a222b0ac00a0c0000a20000822c200288a22aa8","size":25,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-08-05T20:06:48.850328Z","times_seen":21774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-MNMS78R","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cdd562ad91a44a040ca5542c4eeff2d5","sha1":"9f7b38b5972ab199d50643e21bcffdb1a2f44723","sha256":"7e52f44bf57e9265f39f75d89188acf5a09e21dcb7fc06c7262fc1da18b32271","sha512":"813d7dd7ec8a07b984e9540cd05594d871c92be28ecf97681972afd4dffbe4e88865c694f3c3d63092e5df7e323dba92edcb302545aa37322d044b068cf79702","ssdeep":"6144:14rh0eJK2bulKYXV1u99Yye5HDmHYmyBFz0nshFYWllOpRTea:14rq4bu7l1mcAnsIWmpx","tlshash":"9ab42bceb3c5743683d6a074903f114ba57b29e2b54c9895f0c9cce41e746aa1263fbd","size":500635,"data":"","first_seen":"2026-01-04T15:39:49.542603Z","last_seen":"2026-01-04T15:39:49.542603Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"dd69d4b0fd19bf5e6d8210f59337a1cc","sha1":"553da265a5c3048c6a3cb60092027fc935c37ec5","sha256":"88d913ac804faeffaf48f16ee5bd83eeb3143f2e9ae96af4ec74a6a44f0f53dd","sha512":"92cd5140ff5ed2f3c7c877d1c8c78064eb8ccbdf970542e018cd4bb729175cc1b4d293b83a2f1060bc1be87917580adde5af17441f1daf3916d2c0e543948039","ssdeep":"","tlshash":"ddb0124fb59430937f4a7179003d5207b70f1ff747442484a2364ef42a552492169fd9","size":105,"data":"","first_seen":"2025-11-26T15:22:25.013081Z","last_seen":"2026-07-04T16:37:58.871383Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"e8961527ee3fe5343e2557b2d07fa466","sha1":"77949bb9e9f198b29a96a7443536a04cabe969cd","sha256":"78c8bdc18839c26595506bc6df8831aa6cfc44eff13f25786502329ad5088af3","sha512":"2c03efb8ef68dee19fbaa800e3fd0c722838474899cc4d01c6e95de2f03462b04bd3c8ed3f5304fabc4920e345dbb5e153d1780c5b417c0a7bf4507e552ea0dc","ssdeep":"","tlshash":"6170008cb0c330208002282c003b000a232a0ac00a0a0002c20000822c220088032a8c","size":25,"data":"","first_seen":"2023-03-07T01:27:45Z","last_seen":"2026-08-05T23:20:40.090969Z","times_seen":15447,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"5362dbfba826e7fd276deb61f9e6d406","sha1":"16ce474eb1bb7312a2bd9d1a23b81f13d9c2600c","sha256":"eb85bf70757e0ffd5fa6f0b5e062e7698bc353e19ce499363b95331ea8fa6f35","sha512":"97bdb3e8a6b597041592d737c2f8dfc71411ae5dffaaa751455a89d1c3fb17a335ff5ee3669cfc090ec3a8eef17e94a1ecd3502697daad12e8c14ac594112a33","ssdeep":"","tlshash":"2db0120fb59430e37e56616a143d520bb50f1ef747842484e2364ef42a5924d116dfd9","size":105,"data":"","first_seen":"2025-12-09T10:21:25.242725Z","last_seen":"2026-07-04T16:37:58.804239Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/public/dist/scripts/vendor.min.js?v1762424813","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf1a57a2ae81fbc20dc7c54d00fb6ddf","sha1":"cc7a8089a7c78cbad84d596330fc3781d9f0bba4","sha256":"76b6f731dadd69a37d95610bf6878c062b7c4818442164e23d237a6b90062a2b","sha512":"aa5ea88e8e8042226cc32c831dc3e60993f77ee79073f27cc0af956695f7743864dae83fb6d533ef22030690034f1c1f3bf5bf5226f431085b41d8503e5f447c","ssdeep":"6144:VylqWsMOf9QRZ7TPlxUqKxN9l4LDpAnzz9nC0fOh3Oe:QxsB9nbN9l4LDpAn3HGOe","tlshash":"03842a8d7251b13202eb21aa51af45067336196d740e946cb0a8ccee6d7dd88237ffbd","size":393839,"data":"","first_seen":"2025-11-15T08:44:41.070527Z","last_seen":"2026-08-02T21:37:43.941165Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/public/dist/scripts/application.min.js?v1750161378","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1bc2f5a8b85b103a4b72203f60f9244e","sha1":"1e1c9250592505d77743c7d89ef737ec823b6ded","sha256":"211030d4ac9ac4e10d06d1101683822c69bc2d4f6145020b4fe7d83c17bdf06a","sha512":"f854ae1b647d5453182691f8d4224d27303f2a3488b7ee0c211853c7fb523f7b839e111b59e2af1283cba1f84b4ad13b8bbaa99986ed6005c07c1f7c2dcebc44","ssdeep":"768:IP7+tn/k8+DAjDfBEo4jDVxaMTd2qWVzHjo+O:Q7+tnM8A4DfuoUPWVD4","tlshash":"bae229d4726025e349f2a13ea4af63483132293676560588b9b985f52c78d8e7333fbd","size":34191,"data":"","first_seen":"2025-06-25T10:41:46.550387Z","last_seen":"2026-08-02T21:37:43.905482Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"fb58e1c7fc9b52f5b704352d6688278a","sha1":"77f5caba244bdaae6057f0c2bf3c6ca12075203e","sha256":"9fdf4eb9ae3488fd8c588da0d64cd9ccbc2115fe4f8dd5b2cfac50328babf1ae","sha512":"9ba1b903ae2f630d39b3d99d8c8522b151fca41d66d1e683f2220ff6636e3664b2ed3127eea8f74cc694323e115ba28267da30ddac1020bbd3aeb1c62c704d98","ssdeep":"","tlshash":"3cd0122df39994e4498eb3e71037a715ec03a5e78967405ccd180bf5c534fc16125b95","size":205,"data":"","first_seen":"2025-11-26T15:22:25.045237Z","last_seen":"2026-07-04T16:37:58.916679Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a41603cdaf83c2f6722af48fb9d09d1a","sha1":"998c3e57cc81a42465c142a073a78313a69c3d6f","sha256":"adbbee450d6181bc38062733f273acca2100bc71488a93370652c2bec6b7b07f","sha512":"b193d7c4d0fb1860884d52264f63f9c9333cd0407b65138a4e47dd69c1e53282db5b96a0df0e17843da3d0535c90a65b37923afc8db66a332742ec8378a245a8","ssdeep":"","tlshash":"dde02b5e3e0d356884ba76a6675f2025017186d391410c2b89089ce53f308ae1966a5a","size":399,"data":"","first_seen":"2023-03-07T12:02:56Z","last_seen":"2026-08-05T01:02:03.92283Z","times_seen":1877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"c27ae1607c61dc87144d835d39d19210","sha1":"7feb5b035ac30cde66ebde10e489781b315d86b6","sha256":"72363ff690358616f37cb79da8122ff096c6fc59fc9b4e6b2fdf82aab3e3a906","sha512":"31cf8d706cc90ecf8a94bfca00a148b771d1e6ccd1418ce6402831321f7025ef50243bbf086d290426ed24ef0f617cd5544e41413b6f052da5fb40279d975c23","ssdeep":"","tlshash":"d8d0222df38880e4088ab3e30037e711ac0395e78863005ccc080bf0c030fc13024b80","size":206,"data":"","first_seen":"2025-11-26T15:22:25.014712Z","last_seen":"2026-07-04T16:37:58.835501Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202402.1.0/otBannerSdk.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"77897224c74905a48b78d28865cf415c","sha1":"42322ea8a206061beeaa4018242283eb48d3f79b","sha256":"e912efba4dd82b798fb061f872b0016687932d1648098f501dff644a7ad77a35","sha512":"130fd17f36f0bf0241fbe649caa3c3c770d4643ce3251c6797df021c95574e01718df0b53d6079ff49b8c8595bed68396e680a5e0806198562665dc5e451a193","ssdeep":"6144:/m1EuxkaXxsE7qo2q/I2KaciDBkXmMbgbnz+dWhql25+qEzLs:OnxkaXKE7qzmMWLXT","tlshash":"519419497550b93587eb52b9c02b424ab63434adac95806cb40cc5f90ff9f821e97fbb","size":440693,"data":"","first_seen":"2024-07-17T00:57:04Z","last_seen":"2026-08-06T01:04:44.765015Z","times_seen":5192,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"f5d3dcb2132a6cabc8cbe98c4a875a4e","sha1":"941fe1317179bc563841adfc99ac471e032b07bf","sha256":"67e09f596bc19dea9f9f2cf1b678c31024c339b75424b097ef9568622215c009","sha512":"7a3e84a43180b64d6c9ae69e8e72485f1cf0873abbdf52fe16c38dd460f04d9ee17a25a46be7a647f94cff06e4698235f333d1ab3423333073e376a96ec02368","ssdeep":"","tlshash":"cfd0122df39894e4498ab3e71137a715ad0395e78967409ccd190bf4c534fc16125bd6","size":206,"data":"","first_seen":"2025-11-26T15:22:25.016203Z","last_seen":"2026-07-04T16:37:58.79917Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"413b7dc1caac04ab95e8a1b230b9b3ad","sha1":"2657fe2eb543ebc0b54eaa7d3aba3a75fb638630","sha256":"b62262aeb7ee1694f40152af828f0d72a6ac6572f9db8ffa1ab16784c7532878","sha512":"835049ca74deef336dde07bdb5e26143f145f4fa0fd3472ce4e052da605723434d315e939818671ec2fcc997ff538e9beb8b5e024a9c72ec7bd56aea4deca971","ssdeep":"","tlshash":"7f70008cb0c330000002202c003b000a222b0ac00a0c0000a20000822c200288a22aa8","size":25,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-08-05T20:06:48.850328Z","times_seen":21774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"820eff9b563e5e9dd810c0fea8b73187","sha1":"5d770361677957d89027113611b7c68bd8135f3b","sha256":"c4cc31583230af8d869dd87f6fce6a4f67c7ecaa3edb09d2c18fca579a709430","sha512":"af2172ada1f7aad059f93c42d5a4357f7121b0669f3b0757d5ad9ea4a98b16a678c1f3132af14f52b14224798ff651c2a63c6ce809c15daebcca3442ec908b36","ssdeep":"","tlshash":"3b8000080028828e088000200880a000080b02bc80a008c02f08228c280300002aca80","size":26,"data":"","first_seen":"2023-03-08T13:18:30Z","last_seen":"2026-05-28T17:31:36.818866Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"a7a510d9c593eccbe12bb105d6e116d9","sha1":"7cb9e456a223f3ffd54eaf1d6e7940f3bdb2a250","sha256":"df5faacd0aa462319fe126de9c0366b6c0d4e8283409c08126368e9f6471cece","sha512":"ed2c259d29fd405a0a2997b53a667a455216a21587ba0dd82a0d9c39e4ada9dc71d62ddc88903486cda1f05896ea5d0cc69c4a01e0a0865bf610d74858e3b11f","ssdeep":"","tlshash":"5bb0120fb59430b37e46716a002d4207b50f2ef747842884a2364ef42a552891169fd9","size":104,"data":"","first_seen":"2025-11-26T15:22:25.034031Z","last_seen":"2026-07-04T16:37:58.869126Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.cookielaw.org/consent/018dcfdf-a21a-784d-a821-158b9556eda7/3b19c9ea-1d6a-4631-bd94-eeb824ac2be8/en.json","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:18.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:28:48 GMT","end":"Thu, 26 Feb 2026 22:28:43 GMT"},"fingerprint":{"sha1":"C3:C9:AC:2B:20:C7:9E:49:77:F1:51:31:B7:4C:39:2E:43:2B:5F:25","sha256":"20:8A:B7:93:3F:AF:7A:8B:F6:C2:F9:19:7D:AE:CE:51:31:2E:9F:71:36:0E:39:C1:74:41:8A:DC:1C:E3:CC:FB"}}},"request":{"raw":"GET /consent/018dcfdf-a21a-784d-a821-158b9556eda7/3b19c9ea-1d6a-4631-bd94-eeb824ac2be8/en.json HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/\r\nOrigin: https://dhlexpress.ee\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:39:18 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncf-ray: 9b8bd3f33ac35697-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: gzip\r\netag: 0x8DC3472984DFAFD\r\nexpires: Mon, 05 Jan 2026 15:39:18 GMT\r\nlast-modified: Fri, 23 Feb 2024 13:23:16 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding, X-OneTrust-IsBot\r\ncontent-md5: om3QkbRCL+ri1QeFL61ZcQ==\r\ncross-origin-resource-policy: cross-origin, cross-origin\r\nx-content-type-options: nosniff\r\nx-onetrust-isbot: false\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: 64f33adf-701e-0065-7618-3e22d7000000\r\nx-ms-version: 2009-09-19\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60365,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9c827041a0e390c87f60ca76e3af9edc","sha1":"a25729e1dfa080f60faf92860a9edc0545368fea","sha256":"4f2c43e1e6d660e1791794ac0a745a0ece07d0622553e2a26ed7d55eba7abf70","sha512":"16aceea0405e03dfea38ade86f6f5b6a21eecb2079eb15439a17a2d6a9c48ade5a26378a20804b195cc765a93f0cca8857da333feb5859f4f54bc267115c018f","ssdeep":"1536:AFyKCCXHCLCKB3mc5mOSlYRbxsRo0IY9I5m7B:6yKCCXCLC/9Y5xsRo0r9I5m7B","tlshash":"58432a1b720820bd47878761a16bbe4be33c2855b774c92cf7194a2813977f925b23db","first_seen":"2025-11-26T15:22:25.001009Z","last_seen":"2026-07-04T16:37:58.678806Z","times_seen":40,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/public/dist/styles/vendor.min.css?v1762424813","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /public/dist/styles/vendor.min.css?v1762424813 HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-type: text/css\r\ncontent-length: 26279\r\nlast-modified: Thu, 06 Nov 2025 10:26:53 GMT\r\netag: \"1a64a-642ea80efe68f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":108106,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65321)","md5":"b4f79f67401c796f7fd085134ce94608","sha1":"63d765628e06d23b87f9d98457e0779365ecd392","sha256":"dac64823b7d4e7e69fa9076b42062a95511bb442564d6c67b4310081e471be54","sha512":"661a9d73a7d6309088299376cacf488ac8fc6e43273e19caf5da22cf0a0a36ee8b79e0187c6d2295633a54fe6de14becf68502aa6cc3eedf7dcb02d02a0b483a","ssdeep":"1536:urMVMWMiMTMKtAX0HEbpNG2eLZy6lkA/erkhIHJDasg:QtAXkEfGc6ZWrk+HJDu","tlshash":"4ab32212ae84016bb01a8d3f78a5bf34a5f6eb199a920695b4709d40fdf18bc314f737","first_seen":"2025-11-15T08:44:41.075948Z","last_seen":"2026-08-02T21:37:43.930653Z","times_seen":92,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/public/dist/styles/application.min.css?v1764594745","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /public/dist/styles/application.min.css?v1764594745 HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 13:12:25 GMT\r\netag: \"cfb3b-644e3bb007be7-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":850747,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e699bff91f4cf84589b2d15848a93da3","sha1":"3bfed7ec41fe8bbc7d0f48861b39da272f01348c","sha256":"8d999afc19396de88900a17a891af50cb0cda57710b55311d298b032b134becb","sha512":"4d470b32c6f8c6b0586703a9ee15740de55a62d5997128ad6531dfd86de9308600e8dc0b4f996bfa41d0658fc74b249d14135de9121e8a74c041fac66cf5421f","ssdeep":"24576:rwzqEEeZMzc6Mek60emOdrkwyl8/YOAisO0iqy1EeMSg80mOPrkwy8ecY0qy2hdu:rwzpEeZMzc6Mek60emOdrkwyl8/YOAiU","tlshash":"b90542dcdd4ee0972f538c22b8dee65576172328ddb2aeaab01f147d40b404d21b36b9","first_seen":"2025-12-02T09:47:47.294448Z","last_seen":"2026-01-29T21:12:15.95676Z","times_seen":35,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/eb8/30eb8/135x105/MkHAcb_55x40xffffff_37df06ee957dc40f.jpg","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/eb8/30eb8/135x105/MkHAcb_55x40xffffff_37df06ee957dc40f.jpg HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1245\r\nlast-modified: Thu, 01 Jul 2021 10:22:50 GMT\r\netag: \"4dd-5c60d38995280\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1245,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 55x40, components 3","md5":"be15f91eb26ebed2e4d447dad3fd7fcb","sha1":"45cd4b87930429654a280860f65b4b9878af41e2","sha256":"eb0267b87384b1dd914633d5152c4eb7a636e1ef3dc9187602d54ce1276b0dc2","sha512":"18d29b8e9c4c36e9ecefe581123c0f51ff17c98d043393688733229238db4c77b467082c307539a0a4e74ef5a0ae02a989eba74e3ed5445a7e172088793d0471","ssdeep":"","tlshash":"ce21679a6392c10af93e173745655738e71acd037a235f8b1dd56e242f9e1d30c603b1","first_seen":"2025-07-01T15:46:19.772365Z","last_seen":"2026-08-02T21:37:43.934797Z","times_seen":23,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geolocation.onetrust.com/cookieconsentpub/v1/geo/location","fqdn":"geolocation.onetrust.com","domain":"onetrust.com","tld":"com"},"ip":{"addr":"172.64.155.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:18.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geolocation.onetrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 20:56:58 GMT","end":"Thu, 26 Feb 2026 21:56:54 GMT"},"fingerprint":{"sha1":"72:40:94:AD:74:7A:94:28:52:42:B3:BF:D9:FE:79:24:5E:BD:71:33","sha256":"36:66:D7:CB:F1:03:82:23:59:92:38:B0:AF:A0:12:71:63:49:13:A3:23:97:75:36:98:A3:85:A4:31:06:9C:E1"}}},"request":{"raw":"GET /cookieconsentpub/v1/geo/location HTTP/1.1\r\nHost: geolocation.onetrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/\r\nOrigin: https://dhlexpress.ee\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:39:18 GMT\r\ncontent-type: application/json\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, OPTIONS\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9b8bd3f2599a7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8d896eded71ee5fc863cf1ec1485da75","sha1":"b36c99cd02aa88e94a55b028381d9c5cb61cbbef","sha256":"3dddf5b1f3c0e76d359e7fe585b61f721980981a612e17d7ebfedfc3e6fc3b3d","sha512":"a216a2ec987ed8aa509d4bf88075844374819f15767190c2f9fc1b7dc05436cb33ac0fa3466bd207bd3104e455cd3c72fb8622dd0759ab64f197ac216850382e","ssdeep":"","tlshash":"3da0025864599d1d9dfd824a530e726a1244a309828751c6c6c9ed75c5812c9b05c480","first_seen":"2025-06-02T14:25:58.002399Z","last_seen":"2026-08-05T15:51:32.751617Z","times_seen":168440,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":18,"dns":3,"connect":1,"send":0,"wait":25,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/9d9/319d9/600x500/LsSJup_600x500_10e62127ad4cd5e6.webp","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/9d9/319d9/600x500/LsSJup_600x500_10e62127ad4cd5e6.webp HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-length: 7194\r\nlast-modified: Wed, 20 Apr 2022 09:37:30 GMT\r\netag: \"1c1a-5dd12bdfa4a80\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7194,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0c3cdb56ea0ec022cc18b8694df84e70","sha1":"2a08ae5e41aee7a63ce020a54ac6890b4f809b1b","sha256":"5493fcb7e189eab14c49d791e262b5c24217f5d3d401fa377cebe0870a1b6b58","sha512":"2e49778dade7c80bc6910f239375a089e3613620311520f46eb068c2141043c0f6d3ed24aa0c838c28078cfd61198144d19b400e1ff80c86cef2291fb6724f3d","ssdeep":"192:BFJXi1C+wuKXoeVBRJ4+iNqu4FCx2vYRKlGYwg:bJXSQXh3ik9FsuJwg","tlshash":"efe18cdb6ebc7b75d81458366a2060953ec0fca261260430a71fa4836bf4f3fa24e576","first_seen":"2025-12-09T10:21:25.189298Z","last_seen":"2026-08-02T21:37:43.907531Z","times_seen":12,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/public/dist/scripts/vendor.min.js?v1762424813","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /public/dist/scripts/vendor.min.js?v1762424813 HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 06 Nov 2025 10:26:53 GMT\r\netag: \"6026f-642ea80ef59f0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":393839,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"cf1a57a2ae81fbc20dc7c54d00fb6ddf","sha1":"cc7a8089a7c78cbad84d596330fc3781d9f0bba4","sha256":"76b6f731dadd69a37d95610bf6878c062b7c4818442164e23d237a6b90062a2b","sha512":"aa5ea88e8e8042226cc32c831dc3e60993f77ee79073f27cc0af956695f7743864dae83fb6d533ef22030690034f1c1f3bf5bf5226f431085b41d8503e5f447c","ssdeep":"6144:VylqWsMOf9QRZ7TPlxUqKxN9l4LDpAnzz9nC0fOh3Oe:QxsB9nbN9l4LDpAn3HGOe","tlshash":"03842a8d7251b13202eb21aa51af45067336196d740e946cb0a8ccee6d7dd88237ffbd","first_seen":"2025-11-15T08:44:41.070527Z","last_seen":"2026-08-02T21:37:43.941165Z","times_seen":92,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/public/dist/fonts/Delivery_W_Rg.woff2","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /public/dist/fonts/Delivery_W_Rg.woff2 HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dhlexpress.ee/public/dist/styles/application.min.css?v1764594745\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 33604\r\nlast-modified: Wed, 01 Feb 2023 13:52:46 GMT\r\netag: \"8344-5f3a3c362b3fa\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33604,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33604, version 1.66","md5":"0f529c4324291f642ef9918cc460e232","sha1":"c7b1c31b51d5df4a08fba5f2ae6b7ec2c6301eb0","sha256":"aad2e62bcbb49d968f8c6d59a0fa6d6bbf239bd508b5749997c9f89e2f67aaa4","sha512":"b93af2dfc2178adfb843410e636b8c1249076239fd9610a5694ca87cbf0b263e8da58e5eca3ab0bbb125d88f7876fda7e5a1d171a924ab79aa09ae2c0d634b33","ssdeep":"768:EDoxVVP6j4IstpRfP6Pl88NMb3yludj/4UA56MWH412xE:USzyj/stPU43y0drf7nH22+","tlshash":"78e2f161d6861e62be43f23dabf0c65ed1c12219cd2bcb81c0ec261e67863971f8751e","first_seen":"2023-05-03T03:15:09Z","last_seen":"2026-08-03T19:19:38.148743Z","times_seen":464,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/logos/9375bad7-f65e-4f8a-bc16-8254723bd66a/233dac18-317c-4c2c-9914-7fac4789526f/95b2bf3e-0ba5-4e38-8cfb-d19cfa4f5bf6/DHL_Logo.PNG","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:19.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:28:48 GMT","end":"Thu, 26 Feb 2026 22:28:43 GMT"},"fingerprint":{"sha1":"C3:C9:AC:2B:20:C7:9E:49:77:F1:51:31:B7:4C:39:2E:43:2B:5F:25","sha256":"20:8A:B7:93:3F:AF:7A:8B:F6:C2:F9:19:7D:AE:CE:51:31:2E:9F:71:36:0E:39:C1:74:41:8A:DC:1C:E3:CC:FB"}}},"request":{"raw":"GET /logos/9375bad7-f65e-4f8a-bc16-8254723bd66a/233dac18-317c-4c2c-9914-7fac4789526f/95b2bf3e-0ba5-4e38-8cfb-d19cfa4f5bf6/DHL_Logo.PNG HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:39:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 1756\r\ncf-ray: 9b8bd3f51c9c5697-OSL\r\ncontent-md5: wRCBvSt9Nur+ueXF05bTVg==\r\nlast-modified: Wed, 30 Dec 2020 04:42:33 GMT\r\netag: 0x8D8AC7D53226189\r\nx-ms-request-id: d99d6aa7-701e-0047-07b2-1e4ce1000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nage: 42338\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1756,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 197 x 53, 8-bit/color RGBA, non-interlaced","md5":"c11081bd2b7d36eafeb9e5c5d396d356","sha1":"38b54ccb126e0b1f98b837bf0d086b44d8935b1b","sha256":"904b70e4997d2154d462c8514522e03846ba539466c01c3b310a824ea4418caa","sha512":"ecb26e035a4585f1f39246d157c62052f186114e5d91590949b0e88c74683df263a6a94eaf8b3560621685247cccd3d312fd499098d45bc217714ef12cf6b27c","ssdeep":"","tlshash":"2c312bc42a407d5c3e8b58cff0b927ab7c4613b7180ae0007970b9260a15db441c302a","first_seen":"2023-05-03T19:20:11Z","last_seen":"2026-08-04T18:17:25.029333Z","times_seen":871,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/175/31175/440x333/VyOzaW_440x333_476a20b383169832.webp","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/175/31175/440x333/VyOzaW_440x333_476a20b383169832.webp HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-length: 6938\r\nlast-modified: Mon, 13 Sep 2021 07:52:23 GMT\r\netag: \"1b1a-5cbdbbecdfbc0\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6938,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 440x333, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b934b3be4eac88a65e91ee9d6e25ccc6","sha1":"398dacb2b6006ba12e123ba3dc4cad8418e9ff0c","sha256":"219088bfcf506db666f1f155445d2524e55f116a9f74ac6b585c03a0b7136c6d","sha512":"add78bda19d8b9e717bec5874dec288ae9862109c0506e85486087f97c52f386adaa30cf3824308e16b8b109fbfa8f71a889e4ccf3f825d9606f8f96f870a643","ssdeep":"192:XopnJcg2PwFKPKKE7S5cF+l6kVsO+7Dn0:XMnJUPSN7SezjOOY","tlshash":"4de1c00a149ce45fdf3e47bf38ed019917392ab74aa8a7203d21046c504e1c56f58732","first_seen":"2025-12-23T18:52:31.401244Z","last_seen":"2026-07-04T16:37:58.676025Z","times_seen":6,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/9d7/319d7/600x500/gMoOxu_600x500_3c189bd4ffe58fca.webp","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/9d7/319d7/600x500/gMoOxu_600x500_3c189bd4ffe58fca.webp HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-length: 26084\r\nlast-modified: Wed, 20 Apr 2022 09:36:55 GMT\r\netag: \"65e4-5dd12bbe43bc0\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26084,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c074958001debe2a272e53cf412ca67e","sha1":"511e1f84e7d3cc538c80706fccec3ae2f0e838c6","sha256":"4495df42684dad8d68d6c395972bcde5783a245df25a10322220bce274fcf6f0","sha512":"0651fc019be12b3014600c48991d796d65779d693dd7dcd23ff19f570664d7653c0437f60011005ea26fc8a30b7e03e7a786d382c2f5357ad7096c8e7794c078","ssdeep":"384:19XmgrADsYsodP+t/aEYuXSwZ3gvyeG0qfrM0LKQLyEUK+f4SL8:agv4dP+AEbXX1gnztK5v","tlshash":"42c2e079fe02f154c44a759e640c25123a9f2f3c0761cbd28222eb9c7c15a2bfca9213","first_seen":"2025-12-09T10:21:25.215129Z","last_seen":"2026-08-02T21:37:43.886087Z","times_seen":12,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/public/dist/scripts/application.min.js?v1750161378","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /public/dist/scripts/application.min.js?v1750161378 HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 14217\r\nlast-modified: Tue, 17 Jun 2025 11:56:18 GMT\r\netag: \"858f-637c33345ecab-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34191,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34146)","md5":"1bc2f5a8b85b103a4b72203f60f9244e","sha1":"1e1c9250592505d77743c7d89ef737ec823b6ded","sha256":"211030d4ac9ac4e10d06d1101683822c69bc2d4f6145020b4fe7d83c17bdf06a","sha512":"f854ae1b647d5453182691f8d4224d27303f2a3488b7ee0c211853c7fb523f7b839e111b59e2af1283cba1f84b4ad13b8bbaa99986ed6005c07c1f7c2dcebc44","ssdeep":"768:IP7+tn/k8+DAjDfBEo4jDVxaMTd2qWVzHjo+O:Q7+tnM8A4DfuoUPWVD4","tlshash":"bae229d4726025e349f2a13ea4af63483132293676560588b9b985f52c78d8e7333fbd","first_seen":"2025-06-25T10:41:46.550387Z","last_seen":"2026-08-02T21:37:43.905482Z","times_seen":122,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/public/dist/fonts/Delivery_W_LtIt.woff2","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:18.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /public/dist/fonts/Delivery_W_LtIt.woff2 HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dhlexpress.ee/public/dist/styles/application.min.css?v1764594745\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:18 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35752\r\nlast-modified: Wed, 01 Feb 2023 13:52:46 GMT\r\netag: \"8ba8-5f3a3c3624696\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35752,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35752, version 1.66","md5":"2822acc1ce377199351eddb91754493c","sha1":"cdcb8c25e5af959bee520a76e9429b0b4747c376","sha256":"775468e3439c942161c839dabb35fa180adbf72ffaee21fc2644565d3ad0a868","sha512":"be6a025d81c8b6ce3d511474182178168961a79dcd9faaf90e40334eca12a520ca2b40ab009a305a5b176f88002487f198720ef3d7059f1b61bf153fbacdaea5","ssdeep":"768:IBJ8LXMsYDFqQg2+gpX8ayq0+oJV3xGb2jhi2:IQAJRqB2Ld8TVYb4H","tlshash":"99f2f110eb2b6a7297a154e8df91f307b2dd8bb2652cd38ebe0531305853fb4d18891c","first_seen":"2023-05-21T16:39:27Z","last_seen":"2026-07-11T03:53:25.270613Z","times_seen":100,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/public/dist/webfonts/fa-brands-400.woff2","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:18.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /public/dist/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dhlexpress.ee/public/dist/styles/vendor.min.css?v1762424813\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:18 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 06 Nov 2025 10:26:53 GMT\r\netag: \"18b68-642ea80eff62f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":101224,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 101224, version 897.256","md5":"523f833a8b5bdd6079b88981425e31a7","sha1":"ed94030ca212e1857a6014496e7a6a43e64789e4","sha256":"061dd5c333459ea42dba764617793fd6ea2d316b7ab644f157e4d2354dac02af","sha512":"0c6a56b1be865ce71fc57ad7115452fad8b5e72fcefd3b269d5fd58173430a197c24d23e7029371a34bacb82bd526f2f472b97c2436783e824509012b7fc1869","ssdeep":"3072:MCj7agu2zPb6tj6//Et9yfFqQHrPULB7OLU:X/b6M/Ak4B7O4","tlshash":"3fa3023f84b6000d2ecb3d16a5807364af23ffc5e9eb61e34d5ba47c2660716a814e5d","first_seen":"2025-10-03T11:13:32.663396Z","last_seen":"2026-08-05T21:00:02.819717Z","times_seen":1345,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/consent/018dcfdf-a21a-784d-a821-158b9556eda7/018dcfdf-a21a-784d-a821-158b9556eda7.json","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:18.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:28:48 GMT","end":"Thu, 26 Feb 2026 22:28:43 GMT"},"fingerprint":{"sha1":"C3:C9:AC:2B:20:C7:9E:49:77:F1:51:31:B7:4C:39:2E:43:2B:5F:25","sha256":"20:8A:B7:93:3F:AF:7A:8B:F6:C2:F9:19:7D:AE:CE:51:31:2E:9F:71:36:0E:39:C1:74:41:8A:DC:1C:E3:CC:FB"}}},"request":{"raw":"GET /consent/018dcfdf-a21a-784d-a821-158b9556eda7/018dcfdf-a21a-784d-a821-158b9556eda7.json HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/\r\nOrigin: https://dhlexpress.ee\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:39:18 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncf-ray: 9b8bd3f1791e5697-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: gzip\r\netag: 0x8DC34729183753E\r\nexpires: Mon, 05 Jan 2026 15:39:18 GMT\r\nlast-modified: Fri, 23 Feb 2024 13:23:05 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding, X-OneTrust-IsBot\r\ncontent-md5: UVsGEbL0H9kvuq7Rh0XEBA==\r\ncross-origin-resource-policy: cross-origin, cross-origin\r\nx-content-type-options: nosniff\r\nx-onetrust-isbot: false\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: 2790cffc-201e-0076-168c-381736000000\r\nx-ms-version: 2009-09-19\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4894,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e9bbb3979c008f643a081d34f54e050f","sha1":"580ab8e70b493c4dbe50390fc3cde527331bd3ea","sha256":"88196dcf21639f398cbe4766048684f18ed96f30d4bd041ee66d2d3cd146fbaa","sha512":"37a7bfe3f9e295ab22c1ff1789d9edc9a4c13ee662e0200244887253e244af397a05fb07a113b1454dcaba4fb47a6f16d440d1443bc2ea3b1ddcef490cfa9ddd","ssdeep":"96:npyIlN40wWaOCxCBKGa6Ay3wAbvNZZb3LYWj+jPsjJjeW5hPF:Flk5OCxn6vlbvZb3LYiqUJtP","tlshash":"eba154197b4d827ecf8d43c4d85dba0c4ede3431128abc18c98f4da81b97bb72886567","first_seen":"2025-11-26T15:22:24.977941Z","last_seen":"2026-07-04T16:37:58.786608Z","times_seen":40,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-ZXH7E3H54N\u0026cx=c\u0026gtm=4e5ca1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:19.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:40 GMT","end":"Wed, 25 Feb 2026 15:49:39 GMT"},"fingerprint":{"sha1":"A1:49:37:FE:E0:3E:26:88:A3:64:37:DC:04:D7:8D:D1:D3:F3:91:75","sha256":"BB:61:22:1A:6C:67:5D:C0:C8:A6:73:93:B9:53:82:98:95:54:B5:52:8B:33:FC:08:58:01:D2:3B:FF:E6:35:12"}}},"request":{"raw":"GET /gtag/js?id=G-ZXH7E3H54N\u0026cx=c\u0026gtm=4e5ca1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 04 Jan 2026 15:39:19 GMT\r\nexpires: Sun, 04 Jan 2026 15:39:19 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 158892\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":497268,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6922)","md5":"eaf8d5384f8fd627ac545983cef4e8c5","sha1":"335670b71867153fb1fc0ca76c12509a37081988","sha256":"7ded88b1dd45544abc8d728bffbe51d833190367d1df38ded961a0b59346f332","sha512":"22a49aa5577e6d6545f08d89fa2702b14c7080eaa005d7dd6f2bc6c2085590a86a100e613edb2059625d694b744291490363aea0c5c82f98e15485fe2cb1cedd","ssdeep":"6144:+MIe7ma2bulKYX61u99Yye5HDmHYmyBFzvnsDu6QWllEKPad4XEPPad:UC8bu7q1mcrns6WawEy","tlshash":"b1b4098e73c67426939af478502f02cba8bb29e2b45dc896b1c9ccf01d7459b4167f78","first_seen":"2026-01-04T15:39:49.481658Z","last_seen":"2026-01-04T15:39:49.481658Z","times_seen":1,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/9dd/349dd/700x394/31FbcA_600x338xc_e7435eb517771b2e.webp","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/9dd/349dd/700x394/31FbcA_600x338xc_e7435eb517771b2e.webp HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-length: 20414\r\nlast-modified: Wed, 03 Dec 2025 09:14:02 GMT\r\netag: \"4fbe-64508a21b0a80\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20414,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x338, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7fcb86100f9ed7783306d00a4f7321b8","sha1":"d58fa955ad4f6a2ce9b7d27a6156bf34c375dd3b","sha256":"37acd7c13a39135527164191121f155b5051806d79075abaa1f38adb9e01d0d8","sha512":"ac22efe5ccf3577994adb7aa5b665518e401ba2660b710d8fd724bd5c246c515f251e4fd51ea5c19b54baff7b71b8e3012dc99bca34e45fa7a8eb13b2f6db896","ssdeep":"384:2g2hEzf0vIpWhWZ7LnFPdDOJVYPZMGHrygKEdGdB49U3ExstL8mSqRIjmk2QS0t:lIQpTFPQJVGHrygxdn9U0uomSFI0t","tlshash":"9a92e102db69874e476107437d2f06ba0c2b781bc33578aefa2ef24796d4bb91718234","first_seen":"2025-12-09T10:21:25.188329Z","last_seen":"2026-01-04T15:39:49.484116Z","times_seen":3,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/f2f/30f2f/141x124/oeOtdp_55x40xffffff_377b3cc531a6342c.jpg","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/f2f/30f2f/141x124/oeOtdp_55x40xffffff_377b3cc531a6342c.jpg HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1191\r\nlast-modified: Sat, 10 Jul 2021 12:40:11 GMT\r\netag: \"4a7-5c6c4305f60c0\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1191,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 55x40, components 3","md5":"a7dd48bf264caa577e2a05af0f883233","sha1":"7fb020f7ab6b70ae0b43e5088c4ca2a09e06bcfe","sha256":"765dfb1ab37d090f4b3781b2bc246b3046cd0587eb732307ffe874991509036f","sha512":"289627552e0839dfa3dcb64b01de701ce716c8c1a57a6b7d96a23956e472b87c8130227e506d6cb7f96fbbba6f79b26dd7cce6473d0af2ffad512be184f4d279","ssdeep":"","tlshash":"ab2163a26b658803e83f54316a71d3559b05dca8b552ca435cd10d985b350e749c43fc","first_seen":"2025-07-01T15:46:19.785091Z","last_seen":"2026-08-02T21:37:43.953288Z","times_seen":23,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/9d6/319d6/600x500/4HkoCF_600x500_e1663a36abf366c6.webp","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/9d6/319d6/600x500/4HkoCF_600x500_e1663a36abf366c6.webp HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-length: 16590\r\nlast-modified: Wed, 20 Apr 2022 09:36:22 GMT\r\netag: \"40ce-5dd12b9ecb180\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16590,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"11b39e2e2a14c56060895e2dd2cc078a","sha1":"415bc564b3191577a230d4902ff3b1f431026923","sha256":"e09dc2872de2c62295621d5f844c76f59d09b018325e1ac0838b9f3083d07e3f","sha512":"9eeda86ce6cc0ebf977d4daa7234b3c4fbb72e3ffe3a0891dc89ae1385097a9751e1dadaa6c47b79c9ca1189da881efa7bd585337ff28d774b6bf73554fac81b","ssdeep":"384:sDQMg7g+LBL7KYOqCWgiRPhWZ+z2uX1V4ZEOaTnRgYtPfZyUnz0uv:sRo7KTqhRhWY2abOwLtnZl0uv","tlshash":"4d72d0756758b745a29217079f040276c6adba07237713f9c2b423ffa76a1c83c49c97","first_seen":"2025-12-09T10:21:25.184845Z","last_seen":"2026-08-02T21:37:43.888929Z","times_seen":12,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/public/dist/fonts/Delivery_W_Bd.woff2","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /public/dist/fonts/Delivery_W_Bd.woff2 HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dhlexpress.ee/public/dist/styles/application.min.css?v1764594745\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 33808\r\nlast-modified: Wed, 01 Feb 2023 13:52:46 GMT\r\netag: \"8410-5f3a3c36071c6\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33808,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33808, version 1.66","md5":"7637928007dc8ed18d0c789995aa2af2","sha1":"421ccda189112cb40cdf3fff8fb20f5f840e3dfc","sha256":"62cf91563ce604e4d98e2e0e479f636cb95f505eccae77e14da46bc28f8cedfc","sha512":"e96a77bfbf22cf933b38713a4916cef65866f15e2f01f32c780774f01195dd6a51c7c04efd082da13b8bb28fa3644274dee77f781bb5856cfdb92fb83b559cce","ssdeep":"768:lAJvYNQwoCAOdf/ECuBNZGSgwOx9wmNzQ32Fw3KUbzc37A5MHopL:lsvYNYCAq/EnpGSBOomtQ32FwE3dHop","tlshash":"a5e2f23cf3fe8c9327e815e706395a6a404072b2b961054eae37f153ea454183357d8b","first_seen":"2023-04-19T09:33:02Z","last_seen":"2026-08-02T21:37:43.917811Z","times_seen":354,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/public/dist/favicons/apple-touch-icon-1024x1024.png","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:18.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /public/dist/favicons/apple-touch-icon-1024x1024.png HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 25015\r\nlast-modified: Wed, 01 Feb 2023 13:52:46 GMT\r\netag: \"61b7-5f3a3c35ff4c1\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25015,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"d29f562ad57f45d9ea9e3c12a714e930","sha1":"15a02219dac2e24ad08c726f0d3a1fe3e8420bf6","sha256":"e3d7e5de8f71a59a9678cc7790b37898fc3ef50cfad4bc4a21dcf76ac063271d","sha512":"451353d3cbde2a4b1e9e2bafcc0d8649024bb07274272edffaa2aa00d8e37b1d443508a49b84b5c837cf46d672e2cf46d462e0b16124dbed44b549bbff8ff997","ssdeep":"384:MIiQnc1SknqAFAFrdJHtT8XtWASIZlxvPK9iuuoYCsrH9AI4Xfpb:DR0BqA8rbHh89lHeZWC0WI4Xxb","tlshash":"5fb2f705bc459dae981f09341c67124ab0f5ae78ce97e24d2ea859ececf1e304f5c49e","first_seen":"2023-05-21T16:39:27Z","last_seen":"2026-08-02T21:37:43.938023Z","times_seen":141,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/public/dist/images/qr-icon--red.svg","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /public/dist/images/qr-icon--red.svg HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 501\r\nlast-modified: Sat, 11 Nov 2023 10:18:16 GMT\r\netag: \"3d2-609ddc15c93a6-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":978,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"06b87344d4a3ab83c1475015489a3087","sha1":"2e894a8babfd75f1a058d48dc77020f6412b7c71","sha256":"e3cefb3ab2732545bee4004f42f0d8f9c629bc10282437aac805daf7e8900afe","sha512":"3faef6bfbbddc80dbdd5c5ec5c0e1f097d5a35e67de99562e25f24c8e28bd4e2c6b1c1b6d8b1e037f14278c095d68191ab49448f2c3076a58e9638fb40e11f74","ssdeep":"","tlshash":"0711786a8f20d6a0d6cc2b62b627394f7077159e0eb5c29b88d621f0b8598fc1059644","first_seen":"2024-10-17T00:34:14.544334Z","last_seen":"2026-08-02T21:37:43.955153Z","times_seen":85,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/otSDKStub.js?did=018dcfdf-a21a-784d-a821-158b9556eda7\u0026data-document-language=true","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:18.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:28:48 GMT","end":"Thu, 26 Feb 2026 22:28:43 GMT"},"fingerprint":{"sha1":"C3:C9:AC:2B:20:C7:9E:49:77:F1:51:31:B7:4C:39:2E:43:2B:5F:25","sha256":"20:8A:B7:93:3F:AF:7A:8B:F6:C2:F9:19:7D:AE:CE:51:31:2E:9F:71:36:0E:39:C1:74:41:8A:DC:1C:E3:CC:FB"}}},"request":{"raw":"GET /scripttemplates/otSDKStub.js?did=018dcfdf-a21a-784d-a821-158b9556eda7\u0026data-document-language=true HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:39:18 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 8589\r\ncf-ray: 9b8bd3f088345697-OSL\r\ncontent-encoding: gzip\r\ncontent-md5: qqCE/HnFtNEitzVUMh70Xg==\r\nlast-modified: Mon, 15 Dec 2025 03:16:11 GMT\r\netag: 0x8DE3B884C95CC69\r\nx-ms-request-id: 145c6678-c01e-0092-0da0-6d043c000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26070,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26069)","md5":"d7d5ec92092a6d24e4621faebcfc71be","sha1":"b2c9502d5804e854e5e17bfbf00dd116e138fade","sha256":"57e99ffdcaa5df268c115fed41ce45490d1bfe8607151738e561292a5e2e5ca7","sha512":"065c9da88b5617ac73258a74e20209db6d2f4ca1f1507a3404bf2c9597b826f4352d5b43c7189179dce5d873499c0683e5b6ed6bf3f51f1f987a0d92bf6f23bf","ssdeep":"384:F58KNPpfxrLWMABwX/Ny0rkB+r58eYxcCLn2cVKZ5Q8eFKJx6yzGq:bdxfxvlABwXVyvB+r5a+CDhCWq","tlshash":"d4c2e8ddb144ee3446d361dc9a3be26ab23a786d3485d064b864dce0247cc4f6533bb6","first_seen":"2025-12-08T05:57:37.270424Z","last_seen":"2026-06-06T11:35:15.838644Z","times_seen":11057,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":19,"dns":0,"connect":3,"send":0,"wait":70,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202402.1.0/assets/v2/otPcCenter.json","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:19.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:28:48 GMT","end":"Thu, 26 Feb 2026 22:28:43 GMT"},"fingerprint":{"sha1":"C3:C9:AC:2B:20:C7:9E:49:77:F1:51:31:B7:4C:39:2E:43:2B:5F:25","sha256":"20:8A:B7:93:3F:AF:7A:8B:F6:C2:F9:19:7D:AE:CE:51:31:2E:9F:71:36:0E:39:C1:74:41:8A:DC:1C:E3:CC:FB"}}},"request":{"raw":"GET /scripttemplates/202402.1.0/assets/v2/otPcCenter.json HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/\r\nOrigin: https://dhlexpress.ee\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:39:19 GMT\r\ncontent-type: application/json\r\ncontent-length: 12808\r\ncf-ray: 9b8bd3f40b8f5697-OSL\r\ncontent-encoding: gzip\r\ncontent-md5: JaQINgYe3a7s6zMdoyk38Q==\r\nlast-modified: Tue, 16 Jul 2024 21:31:57 GMT\r\netag: 0x8DCA5DEB83DC8A4\r\nx-ms-request-id: 10f2e3c0-701e-004c-1cec-285495000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63419,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e3d76f8bc5704e1e8e71bb22a91ed4fa","sha1":"032b1f5185419dbffb99b898b959a2eb3413a2ac","sha256":"f40f57620246d052ea666f8f9d25dc6fcd93a7bbd6314077a2eb7213e98a4b5a","sha512":"07c00b4a95c5c1ef435796df7a712bac43ee20ef330613f73ecff7015bca36dd9d3bffb5a88834e522941f90f86c3fac727e0ec3cd020bc7d2f0955a009e13b1","ssdeep":"768:/i2VpDUAEpBqbh7snupKWz1j18n6XrHoQ0hF:s/PMggFz1j18nMr0F","tlshash":"f453fa9b7ea0530afee38b19eb926de87124c80fbc335dedf1424678868d3e18d55509","first_seen":"2024-02-26T11:54:54Z","last_seen":"2026-08-06T01:04:44.74513Z","times_seen":10425,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202402.1.0/assets/otCommonStyles.css","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:19.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:28:48 GMT","end":"Thu, 26 Feb 2026 22:28:43 GMT"},"fingerprint":{"sha1":"C3:C9:AC:2B:20:C7:9E:49:77:F1:51:31:B7:4C:39:2E:43:2B:5F:25","sha256":"20:8A:B7:93:3F:AF:7A:8B:F6:C2:F9:19:7D:AE:CE:51:31:2E:9F:71:36:0E:39:C1:74:41:8A:DC:1C:E3:CC:FB"}}},"request":{"raw":"GET /scripttemplates/202402.1.0/assets/otCommonStyles.css HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/\r\nOrigin: https://dhlexpress.ee\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:39:19 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\ncontent-md5: c7xAZ9MSGAobGaTYg/Qtag==\r\nlast-modified: Tue, 16 Jul 2024 21:32:07 GMT\r\nx-ms-request-id: 7dc3027a-501e-0097-4827-f3f043000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\ncf-ray: 9b8bd3f41b925697-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21778,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21778), with no line terminators","md5":"73bc4067d312180a1b19a4d883f42d6a","sha1":"ad328a9a572fbea43f295e7769835ff08f6ff1fd","sha256":"d3f7b0ec4de079928a999641e781e80f33597a392a561bc460276dfb4efb6eec","sha512":"20b89462521684c258a8ce15e94da67182c66397b0de528357e01294ff06883c1ad96037a9d739e4575db8722b1a1967578709a0c844cd45a49e6a51e1b6479d","ssdeep":"384:+Z8C4hGoFjlCS7FGAVsq1nwGfg4xqsQMPNE:JmJ","tlshash":"e9a2439b38552b19dad7d31d992539827d11aceffd339ceee009a3784adc3e24c1424a","first_seen":"2023-08-24T18:35:57Z","last_seen":"2026-08-06T01:04:44.731507Z","times_seen":75164,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/et/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-04T15:39:16.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /et/ HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 43977\r\ncache-control: private, max-age=0, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: check=1767541156; expires=Fri, 03-Jan-2031 15:39:16 GMT; Max-Age=157679999; path=/; secure; HttpOnly\nsession0=check; path=/; secure; HttpOnly\nsession1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; path=/; secure; HttpOnly\nsession2=check; path=/; secure; HttpOnly\nsession3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; path=/; secure; HttpOnly\nsession4=check; path=/; secure; HttpOnly\nsession5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; path=/; secure; HttpOnly\nsession6=check; path=/; secure; HttpOnly\nsession7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ; path=/; secure; HttpOnly\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Stimulus","description":"A modest JavaScript framework for the HTML you already have.","website":"https://stimulusjs.org/","common_platform_enumeration":"","icon":"Stimulus.svg","categories":["JavaScript frameworks"]}],"data":{"size":358798,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (553), with CRLF, LF line terminators","md5":"6f59de655dfd19684eb5ee914a56b1d5","sha1":"d5a1a9a0d00c74bb396aa99644cb7e17086463af","sha256":"cf115a90be41444466e131b8e4512c7a9828f90ff355c33465de620068997edf","sha512":"52272b02eb512947cfcc6d9662f086c6d59fb92c80ff08fddc380a215ba358b8eca9c236a7b0cf0cfecc47cb23801a16b3d9059a34cb25b9a662a2993d1b395d","ssdeep":"3072:w40lLL7DRdvD6u/tnj+I8hXMYmfnt1605aSWZ0:w40lLL7DR96uNwXMnfny05aJZ0","tlshash":"5974125160a89d36056b50c128eb772920ef387ec6891426b7ffcf640aeec6c7e35d19","first_seen":"2026-01-04T15:39:49.507559Z","last_seen":"2026-01-04T15:39:49.507559Z","times_seen":1,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":330,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/ef7/30ef7/403x397/cDS2dU_55x40xffffff_bb772ee411eb0cdb.jpg","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/ef7/30ef7/403x397/cDS2dU_55x40xffffff_bb772ee411eb0cdb.jpg HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1108\r\nlast-modified: Thu, 08 Jul 2021 20:24:58 GMT\r\netag: \"454-5c6a272e27a80\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1108,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 55x40, components 3","md5":"34773ce3bac65b409b89f9130f5c1cf0","sha1":"dab56122a7c2033951a17e8b939d20bc2d594c8a","sha256":"36320d629a3c639f8d37c801336d4808e1db28d3af2c541e74a11f804e6c8895","sha512":"3e4ee1eca7c81236324e0158f67e34248ef4ab452c1a4f7f3a7185ee0295fde17a84d43b7552ebaa239505a6a37d81ff69af108cf8eb9bc6320ad4990e1e0790","ssdeep":"","tlshash":"ec11619a0b05c813f93e0a7986945b22a780ef2635456fce25b52e9c6f7f9908ca0352","first_seen":"2025-07-01T15:46:19.774569Z","last_seen":"2026-08-02T21:37:43.947322Z","times_seen":23,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/9d8/319d8/600x500/1PFNaH_600x500_4060c69be0618a5d.webp","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/9d8/319d8/600x500/1PFNaH_600x500_4060c69be0618a5d.webp HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-length: 18004\r\nlast-modified: Wed, 20 Apr 2022 09:37:14 GMT\r\netag: \"4654-5dd12bd062680\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18004,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fe5d2f7f96444364973cbcb45f226296","sha1":"6f120742f54c4c611f73fec6c62cb8a70adad72d","sha256":"5372d6f444356b7acb267c26df2eaf3c4da26a3cf0f9a273683e4701507ed9f9","sha512":"e0f6faf3ea9d28fcf01c85091f7ce9b70ae859ff830a86526d9a988924342f58400aa1df212a6cf19bfbd9107f4c5f7afa77dccfb0c73a4f5714ddda062d7503","ssdeep":"384:qTAhQtlq/++q3bdb1I9oWlJCCVO97ylzn8R4ZBOsGXGoimLoWgcMwd:KAaQhqke+rO97uTa4/g2oiu4w","tlshash":"1e82cf20797a3a8dbc525567bc80deb69bfa000809f17a7ac5192cab4a50a5ca74cb1c","first_seen":"2025-12-09T10:21:25.19855Z","last_seen":"2026-08-02T21:37:43.936485Z","times_seen":12,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/9dc/319dc/600x500/vwf7KA_600x500_39cd33f1f8063866.webp","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/9dc/319dc/600x500/vwf7KA_600x500_39cd33f1f8063866.webp HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-length: 15806\r\nlast-modified: Wed, 20 Apr 2022 09:38:35 GMT\r\netag: \"3dbe-5dd12c1da1cc0\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15806,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"076b8d00ce4198718e7ca6bfc1afd357","sha1":"2e0a2e4c43e4ca8704df6404d3f1e3e10937f4a4","sha256":"ba946e8f45d9c322c1af3a29f06413b725994ac77510f2188832dbb5508144f5","sha512":"b2100f7b306cd5b4a3b5c63365634c3b13b95b3abae22f6bb7a0cce6aad9c3c16eaf168e1dad289d66a13ec08c708a8f0d5d4f92584c130a90a69a2c6f0249b7","ssdeep":"192:piC007EXrFqeazPWeKyvJqvjDGjmcBGqnBBWSJ7eNkbdxsrh17SRgTWpkBZ1bwOO:n2jWA8PBWSJ7eOrSGRg6AufL2ZL","tlshash":"d962d0483131dd9ae6758270628f40eb32fea938fb66e2d890845b2ddca6c88d2c8515","first_seen":"2025-12-09T10:21:25.156031Z","last_seen":"2026-08-02T21:37:43.932219Z","times_seen":12,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/9dd/319dd/600x500/HOiBQr_600x500_1058ee77965cb2f6.webp","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/9dd/319dd/600x500/HOiBQr_600x500_1058ee77965cb2f6.webp HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-length: 12818\r\nlast-modified: Wed, 20 Apr 2022 09:39:00 GMT\r\netag: \"3212-5dd12c3579500\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12818,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f4985cfc6378ee77b2e65aa6d0d95d98","sha1":"e0e55c3e424cacd1ea6e90ddcaaa6bfab457983e","sha256":"14dfd58cfe45ae2631f02e5fd591d7a36c26619165583dadb79e7374acf40f25","sha512":"81219d95e8d1db8d2e17cf84d0d87d5d77a24721289842e5bc2c9a33df80907bbb9fdebee8a3a17eb6d76ee5802377a67f95f18658ccd90fd13b61f640cb455c","ssdeep":"384:LPZteqpyrPwZCaMpr9lzqvYNBfuC5n38Cln9cJVxl5:tteqpy0UaMV9lrPuM38sOFH","tlshash":"5f42cf29359449c0f983bc4bb60f7fe9a65901d3f145cae51e8b67eb1181a03df4f889","first_seen":"2025-12-09T10:21:25.17766Z","last_seen":"2026-08-02T21:37:43.946389Z","times_seen":12,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/66e/3266e/345x320/ya6BcN_345x320_f9ebcc80835eeb88.webp","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/66e/3266e/345x320/ya6BcN_345x320_f9ebcc80835eeb88.webp HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-length: 4024\r\nlast-modified: Tue, 10 Jan 2023 12:17:27 GMT\r\netag: \"fb8-5f1e7ddf343c0\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4024,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 345x320, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"57b69a8bf1b6a284c3e2b94601bb836c","sha1":"c31cd6364c64f86a4449710c4bd73529d93264f5","sha256":"e5906cbd6ea6c06d682a0c10380f1452465665ed6ee37d007d42b4edfd1f0fd1","sha512":"b20864ec26f5947658e26bc33851b4f7af28d08c7a6b50e076cec4b79ed86f7cd36b1349d0e633678fb1ec0c871cacdb13e5c31dd933659a92efd505c7ae2390","ssdeep":"","tlshash":"ae819ee719307b02badd658a8626dbc0242b2cd0fe44b19256d7ded648419c03e3bb45","first_seen":"2025-12-23T18:52:31.320741Z","last_seen":"2026-01-04T15:39:49.513482Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/public/dist/fonts/Delivery_W_CdBlk.woff2","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /public/dist/fonts/Delivery_W_CdBlk.woff2 HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dhlexpress.ee/public/dist/styles/application.min.css?v1764594745\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 36572\r\nlast-modified: Wed, 01 Feb 2023 13:52:46 GMT\r\netag: \"8edc-5f3a3c3611dac\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36572,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36572, version 1.66","md5":"3f092b734173a32343d60b6f28b61035","sha1":"f6f2636b459cb6c02122446b059d9abffd38f8ed","sha256":"18bb1b8c6e45a26f4ca654602eb72e82dbea37d4d0ab220691e10969219ec06b","sha512":"6ceaa56d9dab8913a0f02aaa82f597d98bc1ef437ec94b3d2301886d5bbc87ab9cb2fbb79a7562a7e69ff9618998ee978ef07b10a9fe4e33bbd0a070b46ede1c","ssdeep":"768:9yZPR5aiPpwU7K/bUtMD55JaWb+NbSvte/E/Vkgb5ii1d:9CTl97GUtMD55XCNbItF9kVib","tlshash":"31f2e12ca15b6d99d1ef10b68000ec187917e6f2d2b02dbdd10f1e1987ad9f4dd8f64a","first_seen":"2023-05-10T12:32:03Z","last_seen":"2026-08-03T19:19:38.136689Z","times_seen":420,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/eba/30eba/122x117/Bju2CU_55x40xffffff_42edc92dd3ff6c51.jpg","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/eba/30eba/122x117/Bju2CU_55x40xffffff_42edc92dd3ff6c51.jpg HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1173\r\nlast-modified: Thu, 01 Jul 2021 10:44:16 GMT\r\netag: \"495-5c60d85402000\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1173,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 55x40, components 3","md5":"079384f07b92271915d896f803e783d5","sha1":"f6dd28bee53971ded2bd91435ef0c099ab28c90a","sha256":"dfa000e473a360023d03d1036ed8aecc705315bf5b89d5f70107cebcec1d8a32","sha512":"40d97b551aadbd0f47557e6f9337bca07b0849b3e9597753dda7efad8fef69a03e4da29ada084183c36021b10db9323c7afd293598358903af5e603cfe1c5f5b","ssdeep":"","tlshash":"972182a26741ce03edbf0a314acd1b10f644de4ab1908feb21e6ae44332f0e894c10b6","first_seen":"2025-07-01T15:46:19.756641Z","last_seen":"2026-08-02T21:37:43.903644Z","times_seen":23,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/logos/static/powered_by_logo.svg","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:19.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:28:48 GMT","end":"Thu, 26 Feb 2026 22:28:43 GMT"},"fingerprint":{"sha1":"C3:C9:AC:2B:20:C7:9E:49:77:F1:51:31:B7:4C:39:2E:43:2B:5F:25","sha256":"20:8A:B7:93:3F:AF:7A:8B:F6:C2:F9:19:7D:AE:CE:51:31:2E:9F:71:36:0E:39:C1:74:41:8A:DC:1C:E3:CC:FB"}}},"request":{"raw":"GET /logos/static/powered_by_logo.svg HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:39:19 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\ncontent-md5: Y+c301RBZNK39PvKQWrIBw==\r\nlast-modified: Mon, 15 Dec 2025 03:16:19 GMT\r\nx-ms-request-id: 4c5210d0-101e-00df-448c-6dc2de000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nage: 33994\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\ncf-ray: 9b8bd3f51ca05697-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5194,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63e737d3544164d2b7f4fbca416ac807","sha1":"030370aa38715e4c41589633f69d0bfe8255d46c","sha256":"5fa00d047acd959697b9d7772c31dcd37bec33c70c6fbf80ab8316205d1d286d","sha512":"31ee1bb536c0e50f5568a415ea3308367bfcfd11d2a6f7dff1c8e3a982f7be790c240a603cd4c6e187672824b8e5d07646049a28c6a88a7b001eb9a0142f312b","ssdeep":"96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV","tlshash":"93b1a9f5aa45d29c391e8984ce37a964551fb4eb7bfe83d06192d332e40ede0f900c18","first_seen":"2023-05-04T19:47:29Z","last_seen":"2026-08-06T00:54:01.130371Z","times_seen":121148,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/public/dist/images/dhl_logo_transparent.svg","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /public/dist/images/dhl_logo_transparent.svg HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 530\r\nlast-modified: Wed, 01 Feb 2023 13:52:46 GMT\r\netag: \"3fc-5f3a3c362b3fa-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1020,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ad8a1b10f9beaee724e1902987f6e980","sha1":"4e4dc94956ff19adfd6a2df7aef8f8332bb27f5a","sha256":"5577646e7f7a2629cc090af4535356845ba87ead97bcd6a6e4915737f0ac1d56","sha512":"96cabe078ebef0bd6b697cffe4e5f41ac6fe975c70181a2289bd4464136f72134221b4ff380548b05c2cf431cc7c570c009152c35e8d59f0659a4463cb0304d6","ssdeep":"","tlshash":"5e1112b0c27faa58888b4300cd2d91712d3bc08a77c5a6d0f1c117b31f45c89c4a3db4","first_seen":"2023-05-21T16:39:27Z","last_seen":"2026-08-02T21:37:43.928429Z","times_seen":140,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/ebc/30ebc/150x125/wHARQk_55x40xffffff_5d1b252f7f5893f3.jpg","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/ebc/30ebc/150x125/wHARQk_55x40xffffff_5d1b252f7f5893f3.jpg HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1188\r\nlast-modified: Thu, 01 Jul 2021 10:49:21 GMT\r\netag: \"4a4-5c60d976e0e40\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1188,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 55x40, components 3","md5":"cc96e064a3e4d6829ddcceec82488d46","sha1":"5db20b43b09bfe61acaeb872b9bf4571f7eaf82a","sha256":"a9c94345cecc74cf0acfaa329f68e4d3389c88f0b20aee046613fb0a04b840fb","sha512":"c111a5b2bd3a34d2b3a586e3778efe7bba9996051896cfeb4a22a80be6301546ac15ecbf91ffe2bbd43d03b2f4a9037f3b60034fe8def8c224664ab3e87c8d52","ssdeep":"","tlshash":"4521b9431b9ae413e8bc9b3f66b0563163042f5962316ecf1c7d4c5823bb06c9ca42e5","first_seen":"2025-07-01T15:46:19.773154Z","last_seen":"2026-08-02T21:37:43.931393Z","times_seen":23,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/9f5/319f5/345x320/e4cSjG_345x320_6614fa6e7522d076.webp","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/9f5/319f5/345x320/e4cSjG_345x320_6614fa6e7522d076.webp HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-length: 11522\r\nlast-modified: Fri, 22 Apr 2022 08:23:04 GMT\r\netag: \"2d02-5dd39ef774a00\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11522,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 345x320, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f4cec55dae6814ac324e573b97f56097","sha1":"d0a6585715a1b467282d1679510cf54de3934935","sha256":"88860908ee2728541a784bfab990f3e04d84dcf8f24ce36744e4ce97babd504f","sha512":"7fafc42f745a91c30140819114281736f909601cefca21a8715000a8474407b87dcc51f5d0b925b6c0dd3120824c50b912cc0b73c1e6ca65719717586200e3ae","ssdeep":"192:u1H78l4mq7OOPhePJLmE+uV9RlOrGJU4nWhbbR21q4im3JWXaVcLCybNWVb9+D+C:28OmqCLhJUwWwgm3pECy0J+aC","tlshash":"ab32bfaac8ed236ab6c03c89e55cb90820ff74356ffc4935f289e9429287550c5b8453","first_seen":"2025-12-09T10:21:25.174418Z","last_seen":"2026-07-04T16:37:58.685615Z","times_seen":10,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/9d3/319d3/600x500/T3SQGJ_600x500_dfd0f340c43cf57f.webp","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/9d3/319d3/600x500/T3SQGJ_600x500_dfd0f340c43cf57f.webp HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-length: 10850\r\nlast-modified: Wed, 20 Apr 2022 09:34:39 GMT\r\netag: \"2a62-5dd12b3c909c0\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10850,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"beb9c84641cb4f818d7abe087cf7ce96","sha1":"e5c2bd6f757dfa07c7c065037e68e3a8716facc8","sha256":"581b0f1dbb563a0ef104f69486eb91fc9d73ae1192be7c30f328c17cf99bb61f","sha512":"981f805ca40d80b0af5b142fa00fc867cd12d0748054de79228ca1e86609fd6c458bdabe4fbcca125dbdfe61db9dea9a2c72634e9cd5816823703e1d713938fc","ssdeep":"192:j47qaO2LkrIrvHdRDGJLNLCW55tYQzcte9DDuRW5sc6hGZ1uaKKjYP6YSsVb:jGO20Irv9RD8LN2WDcodkajGGHu68PnH","tlshash":"3222bfb85ed2b4fad0a11fb096ad5e859f43c0f114108fd8ff8476207fa255f5ab6488","first_seen":"2025-12-09T10:21:25.204075Z","last_seen":"2026-08-02T21:37:43.911779Z","times_seen":12,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/public/@googlemaps/markerclustererplus/dist/index.min.js","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /public/@googlemaps/markerclustererplus/dist/index.min.js HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 15091\r\nlast-modified: Wed, 01 Feb 2023 13:52:40 GMT\r\netag: \"9d56-5f3a3c309f217-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40278,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (40207)","md5":"6d72ff71a3a6b58244d7336469a0d479","sha1":"b2538a481ec947ff6e0ed7ef0a1d4cdfee196bcc","sha256":"cc0b14615ea7ed660d7a101035d077229c1fb59db3f2dab02e764bf82df1ee4a","sha512":"18ef9a5e47c5d49da82c16995cc5f0d55af197576ea8ab672303b03844184a579d94356134270aea7537b71a4f6bf146d5eb5f672312f85cc5fbab72b853d36c","ssdeep":"384:31roYQGOFI2gP5kag7uJf4UZ/Uo6m4Lga5Wy9tVjVCOjHxEBWd/T/vbm2cGyrOO7:lMMXkNUZ8o6ZrLVjMW2BI62gwpLogosE","tlshash":"e603d7c9f691b0604393b1f8013f0a8af33b5c59a86a81ecf655d0e16cb994e507bf39","first_seen":"2023-03-08T13:18:30Z","last_seen":"2026-08-02T21:37:43.942062Z","times_seen":1546,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/f2d/30f2d/126x123/0mLqrM_55x40xffffff_74cc698d0059cd60.jpg","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/f2d/30f2d/126x123/0mLqrM_55x40xffffff_74cc698d0059cd60.jpg HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1208\r\nlast-modified: Sat, 10 Jul 2021 12:40:11 GMT\r\netag: \"4b8-5c6c4305f60c0\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1208,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 55x40, components 3","md5":"2ab50c6d4e2975f853cccd85f34ae7fe","sha1":"ce7f18911dcb26005b1125a069f44af2554b65c4","sha256":"d92ba3637947833a6b6096ae9b0c61e0c1b6b213cc85c809d4a0c5c49102ca9f","sha512":"cd451d52619c4cc32f34562461739778f8ce6732f9f509a7719888a7fcb46043c8d58730cabcd58467aba7259716eb8b4dd669b9ffa1d5476e8dbd9a653a9650","ssdeep":"","tlshash":"1b2186d2fbe0a463d82d9b33445c53f072d4ae4663420b5735a92560277e0da1fd0be9","first_seen":"2025-07-01T15:46:19.754561Z","last_seen":"2026-08-02T21:37:43.910875Z","times_seen":23,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/9d4/319d4/600x500/a8gWUu_600x500_241e3a11773eb249.webp","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/9d4/319d4/600x500/a8gWUu_600x500_241e3a11773eb249.webp HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-length: 17990\r\nlast-modified: Wed, 20 Apr 2022 09:35:36 GMT\r\netag: \"4646-5dd12b72eca00\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17990,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"68553ed87a6f3c55a21c4512af1fb519","sha1":"021f61946cf39291509151fa9bcf91435832f035","sha256":"a9b85b1da498ebae907d83b453fc38caf1e9210a67dd40798adaa7c75a6fc526","sha512":"dd21d6f9c94e950c0c9b9501d16b5699dad10b0aa0d991ddc09360122d83896bc548347fbd5fd9b46d4695211e26f1b22449ee2ca18f763990ac08ec33c02394","ssdeep":"384:cZ8vpnbupQE083+DDIf/QI//54m5TDMXUWtbWkFS68HLyTtb:JBbIV083G2TRphWtbrUItb","tlshash":"6f82d0c3e77f43a0d0566939a9980ce31bdd80c6c509ac2398b7a526a0ddce7cb0d9a5","first_seen":"2025-12-09T10:21:25.194799Z","last_seen":"2026-08-02T21:37:43.9357Z","times_seen":12,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/9f1/319f1/345x320/JsOpv5_345x320_634bf234c2f49851.webp","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/9f1/319f1/345x320/JsOpv5_345x320_634bf234c2f49851.webp HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-length: 8196\r\nlast-modified: Fri, 22 Apr 2022 07:53:52 GMT\r\netag: \"2004-5dd398709e400\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8196,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 345x320, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0b5562e5d4cb0af5a4d6d841543a53c9","sha1":"0c5a0b21cd7986182578c7da641f2afc532dded4","sha256":"6d315a6c320d7f543d10070a5e4b82bef8c19c0eb28dc59493c28edb94d50219","sha512":"5242e938bc1d606e04b5fe3f64eb5f07bc5d7d4f42e3eb71cf2ff009383c8db591d579027b0b53c4df44bbf77ec44940d3f2e11c8e26407926cb2ec63f8cd4a2","ssdeep":"192:iQLzjWLVxQ2gV6HfBjdCDkaW82F2VMmKivGcjs7c:iIQo2gV6/763k0GmgcI7c","tlshash":"c202aee02494b4e0db3641dc31b874672ad270e9a6465191a75fe4a8d84390c7c86ec3","first_seen":"2025-12-09T10:21:25.204969Z","last_seen":"2026-07-04T16:37:58.722938Z","times_seen":10,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/public/dist/webfonts/fa-solid-900.woff2","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /public/dist/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dhlexpress.ee/public/dist/styles/vendor.min.css?v1762424813\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 06 Nov 2025 10:26:53 GMT\r\netag: \"1ba00-642ea80f0250f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":113152,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 113152, version 897.256","md5":"9209428ae208e223b94b9172802e97a7","sha1":"49c2d746beabbaa5b1a58d660b217feb34272636","sha256":"bdd7887ef769948024a5cc37a018f19da6a9b355b4a09973836115e0d31ead55","sha512":"e9b4c9b779964d9c113909556b779bbd76e080684533f9b5aa0c1ea0184b6cbb1939da7d9c7deef86c2dda8019af4eabce3f97444d774fd6bded7d59bb319c70","ssdeep":"3072:61qFLgGf+tEq2a+ql8ktqmlAD2mEsiJCYY:61qF92aratrS2mQCT","tlshash":"98b302963dc0e22765ec01f25834ec7019723a4e7782c9774ad6fc826167a74648e9f7","first_seen":"2025-10-03T11:13:32.660211Z","last_seen":"2026-08-05T18:57:33.203286Z","times_seen":2112,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/public/dist/fonts/Delivery_W_CdLt.woff2","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /public/dist/fonts/Delivery_W_CdLt.woff2 HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dhlexpress.ee/public/dist/styles/application.min.css?v1764594745\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 33756\r\nlast-modified: Wed, 01 Feb 2023 13:52:46 GMT\r\netag: \"83dc-5f3a3c3616bce\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33756, version 1.66","md5":"073f912ebdec8b9c6091f5f7fd28fef4","sha1":"4ceca5bce590c592c7f4da11cfbc045a8f500227","sha256":"3287727c2dc7032a10fa3c90fe25860f5f838ece43ffee48f547c95dd6f22fb4","sha512":"5b1e5ba0df99e39c7463e800a271db99319e11c9c2927d3ac7c0c3f6987114f483a2c2940d150e5e61653f4f32d3ad7e95a33a5db21fea9588454936284e74fd","ssdeep":"768:XwqSpHnEM8WX7Tz+M3/suM4N17K5BIUg58VI7cRB4:XwqSRnlX7TH/T17K5BVS8yIRB4","tlshash":"f4e2f1447a3f9ba460a30f9702fee4a1d7186ed52a429e80ac920cc730753af97b51d6","first_seen":"2023-05-21T16:39:27Z","last_seen":"2026-08-03T19:19:38.127629Z","times_seen":259,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/consent/018dcfdf-a21a-784d-a821-158b9556eda7/OtAutoBlock.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:18.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:28:48 GMT","end":"Thu, 26 Feb 2026 22:28:43 GMT"},"fingerprint":{"sha1":"C3:C9:AC:2B:20:C7:9E:49:77:F1:51:31:B7:4C:39:2E:43:2B:5F:25","sha256":"20:8A:B7:93:3F:AF:7A:8B:F6:C2:F9:19:7D:AE:CE:51:31:2E:9F:71:36:0E:39:C1:74:41:8A:DC:1C:E3:CC:FB"}}},"request":{"raw":"GET /consent/018dcfdf-a21a-784d-a821-158b9556eda7/OtAutoBlock.js HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 04 Jan 2026 15:39:18 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\ncf-ray: 9b8bd3f088315697-OSL\r\ncf-cache-status: EXPIRED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nexpires: Mon, 05 Jan 2026 15:39:18 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding, X-OneTrust-IsBot\r\ncross-origin-resource-policy: cross-origin, cross-origin\r\nx-content-type-options: nosniff\r\nx-onetrust-isbot: false\r\nx-ms-request-id: 8e2a3ff5-601e-0053-6f90-7d8f85000000\r\nx-ms-version: 2009-09-19\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":215,"size_decoded":0,"mime_type":"application/javascript","magic":"XML 1.0 document, ASCII text","md5":"5c7c6f94bc6bfbec9b7850ccada17899","sha1":"ff7a6ccf3f6fa4af77266207a5b6317f59a9d5f1","sha256":"5e0ea02eca8f3df69b642782eceac77030b0ceed8e82638d3427f90ac8f15307","sha512":"ed55dad82b5ea9170ad5a6ead59a8b9c3af4eef7a9c15ee74356eda816ae2bda7989295126fc45fd80c922670ca26ed2614561364b35fdf6c0c9c345c1913390","ssdeep":"","tlshash":"05d022007315606adb80142eff3fb234a31032a322e086209ea64ac323c60d20f8a749","first_seen":"2026-01-04T15:39:49.538444Z","last_seen":"2026-01-04T15:39:49.538444Z","times_seen":1,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":21,"dns":3,"connect":1,"send":0,"wait":104,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-04T15:39:16.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nlocation: /et/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":358798,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T02:01:16.32267Z","times_seen":17734944,"resource_available":true,"data":null}},"time_used":581,"timings":{"blocked":266,"dns":204,"connect":26,"send":0,"wait":47,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/9d5/319d5/600x500/9Om7hn_600x500_6fcdae58603c017b.webp","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/9d5/319d5/600x500/9Om7hn_600x500_6fcdae58603c017b.webp HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-length: 11460\r\nlast-modified: Wed, 20 Apr 2022 09:35:53 GMT\r\netag: \"2cc4-5dd12b8323040\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11460,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d628becac41efe19949f3b126821276f","sha1":"20f5908d03162ae369d6d9ee098421695f6f457c","sha256":"11733c417aa714bcf478277d28198e5c26cc161816ae658def8ccbaa3a28cd9b","sha512":"20cac13c8d9e8b168775d7a5c46667b130a58db4aedcef7306c0ca2c69363621df4cca19a94b59a9db2ecde1379e18fc92830bcedd31dcf2b810b06c50a506e9","ssdeep":"192:VgIosGiL6ZSCQ2QPiWpr3WiCV8YkI6bukXOPrfioN6gvRJ5tjnffUIGOT9ut56/M:VosG2wRk3pr34dkI6CNP7i6RJ7fMtOMV","tlshash":"3832c0c525867245d0d05ffe34b51af0a933a86f2670ee85e1fa24fae12974904e7e11","first_seen":"2025-12-09T10:21:25.21411Z","last_seen":"2026-08-02T21:37:43.945553Z","times_seen":12,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-MNMS78R","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:40 GMT","end":"Wed, 25 Feb 2026 15:49:39 GMT"},"fingerprint":{"sha1":"A1:49:37:FE:E0:3E:26:88:A3:64:37:DC:04:D7:8D:D1:D3:F3:91:75","sha256":"BB:61:22:1A:6C:67:5D:C0:C8:A6:73:93:B9:53:82:98:95:54:B5:52:8B:33:FC:08:58:01:D2:3B:FF:E6:35:12"}}},"request":{"raw":"GET /gtm.js?id=GTM-MNMS78R HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\nexpires: Sun, 04 Jan 2026 15:39:17 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 04 Jan 2026 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 153654\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":500635,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (43284)","md5":"cdd562ad91a44a040ca5542c4eeff2d5","sha1":"9f7b38b5972ab199d50643e21bcffdb1a2f44723","sha256":"7e52f44bf57e9265f39f75d89188acf5a09e21dcb7fc06c7262fc1da18b32271","sha512":"813d7dd7ec8a07b984e9540cd05594d871c92be28ecf97681972afd4dffbe4e88865c694f3c3d63092e5df7e323dba92edcb302545aa37322d044b068cf79702","ssdeep":"6144:14rh0eJK2bulKYXV1u99Yye5HDmHYmyBFz0nshFYWllOpRTea:14rq4bu7l1mcAnsIWmpx","tlshash":"9ab42bceb3c5743683d6a074903f114ba57b29e2b54c9895f0c9cce41e746aa1263fbd","first_seen":"2026-01-04T15:39:49.542603Z","last_seen":"2026-01-04T15:39:49.542603Z","times_seen":1,"resource_available":true,"data":null}},"time_used":417,"timings":{"blocked":113,"dns":41,"connect":28,"send":0,"wait":68,"receive":82,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202402.1.0/assets/otFlat.json","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:19.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:28:48 GMT","end":"Thu, 26 Feb 2026 22:28:43 GMT"},"fingerprint":{"sha1":"C3:C9:AC:2B:20:C7:9E:49:77:F1:51:31:B7:4C:39:2E:43:2B:5F:25","sha256":"20:8A:B7:93:3F:AF:7A:8B:F6:C2:F9:19:7D:AE:CE:51:31:2E:9F:71:36:0E:39:C1:74:41:8A:DC:1C:E3:CC:FB"}}},"request":{"raw":"GET /scripttemplates/202402.1.0/assets/otFlat.json HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/\r\nOrigin: https://dhlexpress.ee\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:39:19 GMT\r\ncontent-type: application/json\r\ncontent-length: 3041\r\ncf-ray: 9b8bd3f40b8a5697-OSL\r\ncontent-encoding: gzip\r\ncontent-md5: Rtw1HeKUT+s7FdllH11+Yg==\r\nlast-modified: Tue, 16 Jul 2024 21:31:54 GMT\r\netag: 0x8DCA5DEB6E44F68\r\nx-ms-request-id: 1dbf54e6-701e-004c-7061-4f5495000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13614,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9b1f8ddf85fb0cbfd926faacb1fc0405","sha1":"ade7f952c70f07fd3497cd3e8656ca1f28c78633","sha256":"f4aaa18c55c90588c5e828e56dcc6b2cb0acf9a4280494c7d1a53fc5e3669112","sha512":"e4459b7442f642bab997bca930530d2353ed53e24ca0f7d7a6aded68cf6852693eedfbc4594feb4d80bba779f566ba8918d3462c690f70d277d3e2c155c02280","ssdeep":"384:7Iy0clDjbn42OXOw85csXf1NFyNg/OoH6iAHyPtJJAR:7Iy5F/i","tlshash":"7252bb513e204b29e1efcb995882b5d835327d8bfe3399cd924da7b483ad2f50d22705","first_seen":"2024-01-26T17:55:02Z","last_seen":"2026-08-05T22:54:23.47954Z","times_seen":15291,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/177/31177/406x332/OcpP9U_406x332_96eb687a203a06d0.webp","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/177/31177/406x332/OcpP9U_406x332_96eb687a203a06d0.webp HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-length: 7724\r\nlast-modified: Mon, 13 Sep 2021 07:54:05 GMT\r\netag: \"1e2c-5cbdbc4e26140\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7724,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 406x332, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fa81436d41462f28b7c6f3df86470ea8","sha1":"72ff87e3f4c8585ef5ea8ea692aed934578a1027","sha256":"dcf3f1f45df72fa76b9746c0a78f534e911f05ba3c5cf9dbdb14e238d8b2b676","sha512":"ef36b829b9d9a35fbebc2fe3765753872fe2644cbdbd3230c0dfa30274f298bc0961287e7f15539f036d16f766edde5f8f234674e76098f028f90c17af67475a","ssdeep":"192:76Tpok7Bv9ekNGpwp0QKCPnul6i0IWWpDqPLB:+Tz7BFeoa/CfulB0rWp+","tlshash":"98f1bf1c6bb5fbe332b5607d2c985dcb4671e5e8f162004192e0b4e98cb10ac98dbe18","first_seen":"2025-12-23T18:52:31.374244Z","last_seen":"2026-06-01T16:49:05.856989Z","times_seen":3,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/178/31178/444x332/eHxdK4_444x332_f2f4b07f697e0690.webp","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/178/31178/444x332/eHxdK4_444x332_f2f4b07f697e0690.webp HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-length: 7688\r\nlast-modified: Mon, 13 Sep 2021 07:55:35 GMT\r\netag: \"1e08-5cbdbca3fabc0\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 444x332, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"680f118909545ca2a651f6b84b2e8eb8","sha1":"02caee5875ae2c6dcfdafbd1818888e48e391a52","sha256":"ec9cb8e19726f229e305a80feb9edf3d7c991513f81e21a33da23ee88dd186f6","sha512":"c42d8d3c21486f43a0dc6d907e4d1c40aa753b1eca22be0bd33e2e0754fe384c774373eafb050f80a12d5c09fbc2a2417c6d618220a1703a65925a8752ec3c46","ssdeep":"192:c3///EjFB3M8LOnDDSvs0KDo2iS03itKaRKjp:cPm33M/nDDr02iSDtJ2p","tlshash":"0cf18e4917344faa5f3e51ab29308f34704c250b66acd487dfebd9bd1f28823402291f","first_seen":"2025-12-23T18:52:31.38098Z","last_seen":"2026-06-01T16:49:05.830952Z","times_seen":3,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/9de/319de/600x500/VFpHz4_600x500_2528f1c595dc28ca.webp","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/9de/319de/600x500/VFpHz4_600x500_2528f1c595dc28ca.webp HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-length: 9714\r\nlast-modified: Wed, 20 Apr 2022 09:39:14 GMT\r\netag: \"25f2-5dd12c42d3480\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9714,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cf1eb4a9215e75330e85bdf21c502731","sha1":"52df277b26b587d36e66f18adb8c515938c5d0c4","sha256":"cb22c35cc05debfe9630169c154cdeff4119b959cdf43c9993f73d860dffcbbe","sha512":"07dab05f1dae0a6ed4f093ce6ad36d041f7d311801364e3d10ba6c85d0c8f6a7b19bea3cf2fecdf78c45ff0996e0434574540f8ac4bb8596d40b82fcaf76bbf3","ssdeep":"192:MAtiMsoDNF8YIbg1OpXZdfnBEGP1hHlpEpbgPuLaiZyB4:MjMsoRF8ZgQpXjuGdJf4bTLaiw6","tlshash":"2912bf808723922eb206ba48873651ee4199bfb27443fa3c6713f39cf20471a395b847","first_seen":"2025-12-09T10:21:25.159875Z","last_seen":"2026-08-02T21:37:43.942909Z","times_seen":12,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/logos/static/ot_guard_logo.svg","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:19.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:28:48 GMT","end":"Thu, 26 Feb 2026 22:28:43 GMT"},"fingerprint":{"sha1":"C3:C9:AC:2B:20:C7:9E:49:77:F1:51:31:B7:4C:39:2E:43:2B:5F:25","sha256":"20:8A:B7:93:3F:AF:7A:8B:F6:C2:F9:19:7D:AE:CE:51:31:2E:9F:71:36:0E:39:C1:74:41:8A:DC:1C:E3:CC:FB"}}},"request":{"raw":"GET /logos/static/ot_guard_logo.svg HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/\r\nOrigin: https://dhlexpress.ee\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:39:19 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\ncontent-md5: tXyZydHjxQshFMbbBT1/8A==\r\nlast-modified: Mon, 15 Dec 2025 03:16:17 GMT\r\nx-ms-request-id: 5462aa4f-c01e-00dd-6087-6dc024000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\ncf-ray: 9b8bd3f51cb45697-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":497,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b57c99c9d1e3c50b2114c6db053d7ff0","sha1":"ada8abfed92ba8a545bbd9d299d74d5972cc4ae8","sha256":"691dcdb24853a0f5ce4e6597e5713dea66799b57ffe2c2a10f28f98e0b569b19","sha512":"0dab6d06f386d922fb28f70f2590d4f9c361e7f4e5d5e581b98e59aac12b266cba596ffccd87203b4330673ee4ec1d459a1abdfc4b066d243a43b2bf7909f0ee","ssdeep":"","tlshash":"2ef0d4d91906a6adb6822e7cdd3c56e04c2c7ce274dc22c894cce094d4489bc9705855","first_seen":"2023-05-07T20:46:54Z","last_seen":"2026-08-06T01:57:16.245935Z","times_seen":177555,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/edf/32edf/816x116/rugRtf_800x113_7cf9d931843ff5e7.png","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/edf/32edf/816x116/rugRtf_800x113_7cf9d931843ff5e7.png HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 13386\r\nlast-modified: Tue, 18 Jul 2023 09:01:35 GMT\r\netag: \"344a-600bf297bd9c0\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13386,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 113, 8-bit colormap, non-interlaced","md5":"6bd7b6093e24fbd2250828565ba6404a","sha1":"4507d6afc6465414419724d8e86092702418982d","sha256":"f0de816e2032f6b62710c7ebb8fe5d6e4cac9d598dbc699a8843aa9180add8e0","sha512":"9547c9771ebebd27f6a98c945c2f2086ccd4d0fbb48e58f2cf866072754f540f195d265465acea5cff6e6d216b1fe75a5a270a181496a09b5a5881f4e7a5d705","ssdeep":"384:02OHD/7A4z52n13tAAbSU7ke9vsH5yxJz3BKIbC:0Rz9YdAk7kkvvx53QsC","tlshash":"ec52cf43d1785a1f237c5c3c4e58e6ec067434eea882848a940ae98b2db4417b3f2a64","first_seen":"2025-12-09T10:21:25.183968Z","last_seen":"2026-01-04T15:39:49.554094Z","times_seen":3,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/9f0/319f0/345x320/sefOyv_345x320_29317888014dc1e1.webp","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/9f0/319f0/345x320/sefOyv_345x320_29317888014dc1e1.webp HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-length: 3290\r\nlast-modified: Fri, 22 Apr 2022 07:53:43 GMT\r\netag: \"cda-5dd3986808fc0\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3290,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 345x320, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"91edd46d678bb242fd931fa0842c9559","sha1":"22ce8c71e0730826f5ceb6d2a90906a75bc38877","sha256":"5379f0228ea048ab02e29a3ea591556fddf8b95a950619f3dbf6ebebde3557b7","sha512":"8bce1ec54376651debfb5425d53b13efcf9fb00af52139394255603e36e6b30454237a9cd1a3795aaff3303eb9662324c14cb6302e30e15102d317998b7d384c","ssdeep":"","tlshash":"38616d92c1022a423837b35a418df602eca1151870261057247780eb6fa721bf3f38fd","first_seen":"2025-12-09T10:21:25.216077Z","last_seen":"2026-05-19T02:45:00.081252Z","times_seen":7,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/public/dist/scripts/modules/application_es6.min.js?v1750161378","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /public/dist/scripts/modules/application_es6.min.js?v1750161378 HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 750\r\nlast-modified: Tue, 17 Jun 2025 11:56:18 GMT\r\netag: \"641-637c33346f64b-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1601,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1556)","md5":"01ae31799923f81dfdae2216fbc57c9d","sha1":"3d0460b55fae47b253bb973bd28378b2dea3575d","sha256":"66f8e53411a8e9205e5cc3788486c517fdb30b11f1e9e20ab9205d828b3880fa","sha512":"e2a20c178e424ba3a250bc729a35e9384fb0956a0447e4dc7e92a1d7f79f66d477b3051751c49559f25addf6265261accd36d5a9ced14cf2b163522ef39e2f3e","ssdeep":"","tlshash":"6b3144b8f93c987305fd43aea14b65fa81a936ed6d06c018e15d4cc954a8086297593b","first_seen":"2025-04-04T11:12:55.685143Z","last_seen":"2026-08-02T21:37:43.929917Z","times_seen":133,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202402.1.0/otBannerSdk.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:18.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 21:28:48 GMT","end":"Thu, 26 Feb 2026 22:28:43 GMT"},"fingerprint":{"sha1":"C3:C9:AC:2B:20:C7:9E:49:77:F1:51:31:B7:4C:39:2E:43:2B:5F:25","sha256":"20:8A:B7:93:3F:AF:7A:8B:F6:C2:F9:19:7D:AE:CE:51:31:2E:9F:71:36:0E:39:C1:74:41:8A:DC:1C:E3:CC:FB"}}},"request":{"raw":"GET /scripttemplates/202402.1.0/otBannerSdk.js HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:39:18 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 106948\r\ncf-ray: 9b8bd3f2ba605697-OSL\r\ncontent-encoding: gzip\r\ncontent-md5: XwXx/WxMZ+UJJ5CmkZRGfQ==\r\nlast-modified: Tue, 16 Jul 2024 21:32:03 GMT\r\netag: 0x8DCA5DEBBF484DE\r\nx-ms-request-id: 32ab0716-601e-003e-7d0d-e025ab000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nage: 31963\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":440693,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"77897224c74905a48b78d28865cf415c","sha1":"42322ea8a206061beeaa4018242283eb48d3f79b","sha256":"e912efba4dd82b798fb061f872b0016687932d1648098f501dff644a7ad77a35","sha512":"130fd17f36f0bf0241fbe649caa3c3c770d4643ce3251c6797df021c95574e01718df0b53d6079ff49b8c8595bed68396e680a5e0806198562665dc5e451a193","ssdeep":"6144:/m1EuxkaXxsE7qo2q/I2KaciDBkXmMbgbnz+dWhql25+qEzLs:OnxkaXKE7qzmMWLXT","tlshash":"519419497550b93587eb52b9c02b424ab63434adac95806cb40cc5f90ff9f821e97fbb","first_seen":"2024-07-17T00:57:04Z","last_seen":"2026-08-06T01:04:44.765015Z","times_seen":5192,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/eb7/30eb7/131x98/UIPGeS_55x40xffffff_0da7c656a2c6d7f1.jpg","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/eb7/30eb7/131x98/UIPGeS_55x40xffffff_0da7c656a2c6d7f1.jpg HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1364\r\nlast-modified: Thu, 01 Jul 2021 10:21:21 GMT\r\netag: \"554-5c60d334b4a40\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1364,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 55x40, components 3","md5":"ea7b62235bf80bd2efd7d430ab0aac79","sha1":"da20be29bae89cd28417670a341a01e054e3a770","sha256":"01741844de205979ec24f328b87ec77b01a371aeccc7d7473f330bff961ae557","sha512":"e4f7249c2b1dd722b083b1a7932a0857fe09d657dac5027e6bb58f294a02dfbe1efb569bae2a6201be9857f39dd76d3e72d16d99fdff90f29f78a15943b35eb9","ssdeep":"","tlshash":"a32195085791a518e92ea73388b523a5b92cfa017a1b1dc711922c08077b0a44ce06c9","first_seen":"2025-07-01T15:46:19.778142Z","last_seen":"2026-08-02T21:37:43.948269Z","times_seen":23,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/public/dist/favicons/favicon-16x16.png","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:18.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /public/dist/favicons/favicon-16x16.png HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 215\r\nlast-modified: Wed, 01 Feb 2023 13:52:46 GMT\r\netag: \"d7-5f3a3c3601402\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":215,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"077346fd1d70b3d028423a82b6d46b52","sha1":"76ab7fa95f5bdf543a4ed85019cc335d09194013","sha256":"368bbca9b449e27f8fc75866e5e69bd7de4ebf31378ecd7e83958602a8902ded","sha512":"bbb38e4b5c46a816890ed324a5dd3b4a066fa9c72c3f9114492f95d6d954e4198575413369e815c77f280ea9f4afd0afeecf6518afeb6f6b3294cd39919d9ff2","ssdeep":"","tlshash":"6ad023d5a2145433cd6314a3ce052c148c53417859d51c59049be4eb9f55ad6b1661de","first_seen":"2023-05-21T16:39:27Z","last_seen":"2026-08-02T21:37:43.956888Z","times_seen":141,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/f2e/30f2e/122x112/4rbNQO_55x40xffffff_1eee359d754c3ea3.jpg","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/f2e/30f2e/122x112/4rbNQO_55x40xffffff_1eee359d754c3ea3.jpg HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1175\r\nlast-modified: Sat, 10 Jul 2021 12:40:11 GMT\r\netag: \"497-5c6c4305f60c0\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1175,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 55x40, components 3","md5":"f88d88aab9799a77dfa3fd8c74af2de0","sha1":"44e859a81abf2385f5d8f1d3aaf3a8dac134d1ac","sha256":"4dcf55ab022392d2e2b2dc71fd55eb5de7b36bc5d34f03a132abff2c4d82f864","sha512":"5a7b7f14d8a44bfae74aae0139b54277bc1c7c4e502ee2c98c2195fd023ef0fc661824f6b13d1fe7b4ce6268ba99fdf74621d1b1107475e8930455ba4556429d","ssdeep":"","tlshash":"b121b9556763c826de2f6a7145b40223f764df84b8547bef24cb7918172b1b804d11d5","first_seen":"2025-07-01T15:46:19.767695Z","last_seen":"2026-08-02T21:37:43.940403Z","times_seen":23,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/176/31176/424x331/s0EOcq_424x331_0b6a27dba306e11b.webp","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/176/31176/424x331/s0EOcq_424x331_0b6a27dba306e11b.webp HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-length: 5262\r\nlast-modified: Mon, 13 Sep 2021 07:53:32 GMT\r\netag: \"148e-5cbdbc2ead700\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5262,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 424x331, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e1979d2acba9e0ec9d705de577e0133d","sha1":"760602e0a5a6d2b205771bc231536a6c0a4e07f6","sha256":"8dc844e1fca29666669ef47ac37cbb8efc0556704e13666767fb516c35f0d82a","sha512":"de6a16913e6e93b496c168dbd74933fce41e71fa29c694059c57dab2326261fb426749675dec0a29018000740c1e6d5922bde3812d5d29ed9c21d5f587da3a85","ssdeep":"96:UuU9zkfG64jPdPvTMg/0cxuf0AXKsCIALjXXXC6786WgCo2K:UuAkfG64Tzuf0AXsJXHS671eK","tlshash":"d8b17d2806f41e01e968ba3363ed4d3f991d6d9b6447760139c5dce25bac0e157e9f04","first_seen":"2025-12-23T18:52:31.379021Z","last_seen":"2026-07-04T16:37:58.768394Z","times_seen":6,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/9da/319da/600x500/F7C09I_600x500_5028a95476885dfb.webp","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/9da/319da/600x500/F7C09I_600x500_5028a95476885dfb.webp HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-length: 9678\r\nlast-modified: Wed, 20 Apr 2022 09:37:46 GMT\r\netag: \"25ce-5dd12beee6e80\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9678,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9b87e921975317bba6550b2771c5a5c0","sha1":"4cc7aab59a1dfeb9d0dc99c5357606fccdb7c25d","sha256":"d8b57c64475c884f28e08565c070e3169d9afead309bd6773a44c577fdd24383","sha512":"b28b90ad866185c2312d8e6636b27f5b3ed4123f236f59596c39ee109f263ccbfd0643fa6c69b3891f9dd9c9228fecb693b9f81db9ba9245b908714296bf80e2","ssdeep":"192:GbR01/LPWUKZ3zC2uTTOlKxxxnENHbatdR82FHqq62ebNjMqC7iztBH:GF01Tu3Z+ssrtEW6r2c7JnH","tlshash":"7412b0f2d2da3997f07f4065e2ba64215e0883254f542c863c242c85352ef992bc653f","first_seen":"2025-12-09T10:21:25.21108Z","last_seen":"2026-08-02T21:37:43.912524Z","times_seen":12,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlexpress.ee/i/77/77/9db/319db/600x500/oBagON_600x500_f6d3ae9965b8f6d2.webp","fqdn":"dhlexpress.ee","domain":"dhlexpress.ee","tld":"ee"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlexpress.ee/et/","date":"2026-01-04T15:39:17.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlexpressestonia.ee","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 23:37:27 GMT","end":"Fri, 06 Mar 2026 23:37:26 GMT"},"fingerprint":{"sha1":"FB:4F:67:5F:00:72:AC:0F:EB:86:96:09:90:B6:41:FF:5B:08:13:CF","sha256":"B7:61:34:CD:75:C2:FA:FB:7B:5A:CB:D3:52:C5:6C:90:E8:12:75:8E:10:BE:F1:E9:CE:29:92:AA:43:B3:06:4D"}}},"request":{"raw":"GET /i/77/77/9db/319db/600x500/oBagON_600x500_f6d3ae9965b8f6d2.webp HTTP/1.1\r\nHost: dhlexpress.ee\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlexpress.ee/et/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1767541156; session0=check; session1=9f1cb0f7333acc5eR3GKQATmx1yordhSxESgcESM5JkEEyhvGZ1t01eltTHbLmfd3a5tiUC7hhkXIt9lbaiBg6uvgYgAA1Sl3EPEEH3IjwiwQ0Q7BNc8RkEEjauhnKaD5oxbREEQ5lYLwSkKYhX7WNURAEQEQ; session2=check; session3=06b1f1e812c6a921R3GKQATmx1yordhSxESgcESM41Ndfo5UZnEEfOSpoh0FWAOi3k57F8HbyvOukFKebCv4QEQEQ; session4=check; session5=639a5c404b4eb637R8Fw0HESCfIbRkAs8oi8rMcEEopeuXeEPgJNgG3nlLjaTwUGIUUnf0Iim4kfAaC5tTn4ZgG3g2AWGqJ7kESXl4ylUGBESXAZxncEPYDMGSBrESfoJm4AaVzmj96ybKehLr6e3pfnQEQEQ; session6=check; session7=f9435686ea1e40e8R2ad9G6mu5ChXnqZ7OP41lhxcarulNUjwD2BzEET6EP1QFGz46EPmxWJhLOHy8e6vG5PKTcdA4X9A81tIV6lmiadHsDBESChhfXEPkOF7yC5swxh7Yj13JESmj5EP1z8nt7dHR66AEQEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:39:17 GMT\r\ncontent-length: 11356\r\nlast-modified: Wed, 20 Apr 2022 09:38:19 GMT\r\netag: \"2c5c-5dd12c0e5f8c0\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11356,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"41816e0096a6d18ad3471510bb968ab5","sha1":"38d8fde554d39d993a489b714ccb41639d7f8e1d","sha256":"e2f0491b70c5314f09357e9d809143d4a575b1f803ad1e53b6f89cbf5801702d","sha512":"e6581fbaa4792135593277c999926aa779a8f3550ab2111e8abf115682831cec3c66abf464bb707de1366ffe06272764e3cf55e5c193951192cede00cab24aa6","ssdeep":"192:r80v+ge0T3bTK9gcaGJnXQeYrDuCri4E4/skDdCxpfMLRQRMkYRlHn55pG:rdheT0GJnge0DuCFEQsJxxOQ0lI","tlshash":"4032c006b3ad2946cfa3cced259d8ddce120ffdc8ae6d1223028675251c2f59e5f2925","first_seen":"2025-12-09T10:21:25.206473Z","last_seen":"2026-08-02T21:37:43.887424Z","times_seen":12,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dhlexpress.ee","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}