{"report_id":"1cce9da3-cefe-4ad4-9cee-281503f2a5c8","version":6,"status":"done","tags":[],"date":"2025-09-28T15:33:52Z","url":{"schema":"http","addr":"buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","fqdn":"buffstreamz.shop","domain":"buffstreamz.shop","tld":"shop"},"ip":{"addr":"104.21.57.98","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","fqdn":"buffstreamz.shop","domain":"buffstreamz.shop","tld":"shop"},"title":"Köln vs Stuttgart – BUFFSTREAM"},"submit":{"url":{"schema":"http","addr":"buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","fqdn":"buffstreamz.shop","domain":"buffstreamz.shop","tld":"shop"},"ip":{"addr":"104.21.57.98","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-02T15:33:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-09-21T22:11:31.071214Z","alert_count":0,"request_count":2,"received_data":694549,"sent_data":872,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"buffstreamz.shop","ip":{"addr":"104.21.57.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-08-23T18:38:27.107663Z","last_seen":"2025-09-13T03:25:04.054211Z","alert_count":0,"request_count":11,"received_data":1222220,"sent_data":5757,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Site Kit:1.158.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"WordPress:6.8.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-21T22:11:31.014241Z","alert_count":0,"request_count":3,"received_data":111757,"sent_data":1686,"comment":"","tags":null,"fingerprints":null},{"fqdn":"adexchangeclear.com","ip":{"addr":"104.21.78.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-04-27","domain_rank":24943,"first_seen":"2025-07-16T08:40:02.47428Z","last_seen":"2025-09-21T22:52:46.470147Z","alert_count":1,"request_count":1,"received_data":1692,"sent_data":862,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"acscdn.com","ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-05-05","domain_rank":18769,"first_seen":"2020-05-06T08:07:13Z","last_seen":"2025-09-22T00:23:56.257463Z","alert_count":2,"request_count":2,"received_data":245379,"sent_data":829,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-21T22:11:31.798564Z","alert_count":0,"request_count":1,"received_data":7552,"sent_data":506,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"buffstreamz.shop/m8ez/?id=GT-TBZBP5PW\u0026cx=c\u0026gtm=4e59n2","fqdn":"buffstreamz.shop","domain":"buffstreamz.shop","tld":"shop"},"ip":{"addr":"104.21.57.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2186cf3c81f207e6e1996d4d487c0cf","sha1":"164b732b06847953d23713cefcf9942a30658c90","sha256":"41cb60e5d9e40dd56f6ee21d22f0802ea1a415944535e45b42b002a112d617db","sha512":"9291f6c2b0223a4b73d4f43ff0ac0543ca0cc8ea9173f7dff6990bf14bc5ad20974995d1bf539a50c6ddfdea2039e8343cfebcefa23f84032569d64c9dc15fe8","ssdeep":"6144:PBS8u1pmM2fRNpvYqkD1g1DHG1SvuVcH9+23WBc:5+3mLxYlyD9wk","tlshash":"3e940ace73d674265396b478903f018ba5bb28a2f44cc899f189dce42d74a9a4137f7c","size":445290,"data":"","first_seen":"2025-09-28T15:33:55.316481Z","last_seen":"2025-09-28T15:33:55.316481Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","fqdn":"buffstreamz.shop","domain":"buffstreamz.shop","tld":"shop"},"ip":{"addr":"104.21.57.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"39103f22f55cc858879c9fbee7354d60","sha1":"bb48e391d19fd70812c7073ea5144e3dc8b03d6b","sha256":"c12c715d3975efd983c66571865bad01e237563b4b366eea7cd53eca349ebf0c","sha512":"be481652da20176b0f693333b70365f7c4c7b0e2209336184912fd714dd744a22f9e4dda94109d2a5a6a5f086ad7e6a2cb8b04e07b5086675321fbd447e9b066","ssdeep":"","tlshash":"d5b02b603062313124831072103769090d931040120c04344360416d9d7e34f0d4b4cc","size":128,"data":"","first_seen":"2025-08-23T18:38:34.495262Z","last_seen":"2025-11-01T22:03:48.295466Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/aclib.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da82194a183686cf8d7399280ca1a82a","sha1":"a17b2662e49c8d8e47701735ef1e6acf9f5fff07","sha256":"3cb42a90fd07560b095613a310becac597581e2f0b9ab54dde764802be0609cc","sha512":"92e73fcf130ed28ede95ad1f78b28264b1a152b7a07e836a858d116639d7e3b0429449e833d56f5b5582a6ba35965f3be796ace256b9eea649a0ca2f8edfb69d","ssdeep":"3072:G068+RhI8FvQeXO0AFQM4MmMnTQXvS1kKeq/h:B6phN1DF/SW4h","tlshash":"5ee3e849bad2b0f867e261e4942f9646e1371624740e98d5f6fac5d1a879ecf0033e3c","size":146805,"data":"","first_seen":"2025-09-11T10:47:57.345998Z","last_seen":"2025-10-21T05:38:51.00741Z","times_seen":595,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buffstreamz.shop/m8ez/","fqdn":"buffstreamz.shop","domain":"buffstreamz.shop","tld":"shop"},"ip":{"addr":"104.21.57.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e41694b090fbaf7295ae2fcf6a6e763","sha1":"c5d95db9c51136c1a2e0e055571f6708b11f0c3f","sha256":"e61f5106d238659fe40fc7c409cd878ce48970b2be8db74d9852c7c1707f8f71","sha512":"11f3edc066c601d4310b13a2d7a958c5f762d0a12082fad8cdaa39024553751a924691d3dc6322f966430da5993bc5a336282f342f4bf03d6f1ab66c426764dd","ssdeep":"3072:BQb8u1u/D62GmMAZgpl0RP18YqkLPW8RthKUfgHiUXB/G1SvuV8fUtO6e:08u1pmMAZgpBYqkD1ghG1SvuVcke","tlshash":"e954e6cdb7d6b46283a36478503f114bf17b6992f44cc894e186d8d42eb4aaa4237f7c","size":299210,"data":"","first_seen":"2025-09-28T15:33:55.311764Z","last_seen":"2025-09-28T15:33:55.311764Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","fqdn":"buffstreamz.shop","domain":"buffstreamz.shop","tld":"shop"},"ip":{"addr":"104.21.57.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ecb4bf678f70021bf06d4c8cfe3e3c16","sha1":"50f85dd1d70d411bd5e8506b0d826c80bf8debcb","sha256":"516de0b3500feb326a9f9a2d0a3336e5db7f1e0fd49def31aa93861dbe84bb58","sha512":"9dd905767d5dcbfdc11576f0a37bd70d4c4d4f0e75b860e01a8863d1e88feaa99be47dddd34ee1c97b061982f9808a3984fc8fe8670f725539320fcded9f09ea","ssdeep":"","tlshash":"f0e07dd8352535b961b62d3533ba82283153165c24080f72dffbdd456c24a5b4ce695c","size":335,"data":"","first_seen":"2025-08-23T18:38:34.497668Z","last_seen":"2025-11-01T22:03:48.297384Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=GT-TBZBP5PW","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"45ff1ebd065a8168bf64892090e3d8b9","sha1":"430d3a9d06494ba0beb8ca332a6bd7ec7b3c44c7","sha256":"78017fda4abf4957832d4e660246676f6f7afeb88edb8a17eb93dd5e1cb80b36","sha512":"21a1a974807e600e33461f63d1f1cc5d4d9097ccb721cf4ffdf9082ae8562a948919629dc2bda8b6edcdff53b151fb9cae272dc33e1a3fea117c691d83a74c4d","ssdeep":"6144:PBJpmM2/kNpvYqkD1g1/9G1SvuVcH9+23WBj:5zmLAYly/Lwr","tlshash":"049409ce73d674265396b478903f018ba5bb28a2f44cc899f189dce42d74a9a4137f7c","size":419244,"data":"","first_seen":"2025-09-28T15:33:55.30921Z","last_seen":"2025-09-28T15:33:55.30921Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","fqdn":"buffstreamz.shop","domain":"buffstreamz.shop","tld":"shop"},"ip":{"addr":"104.21.57.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2589e466ac65fefd3dc2e0e20f1f4e98","sha1":"6c0da60229b49cf4ce4fd4f7f6e1be795374872e","sha256":"78278be2de1df963b5bd49e052f3e07e5b8eac34753a6836af06cf9b8629b749","sha512":"da7a42b6d1b6bc668cb842555e1bf0cecd9064b7d0a6c99539b94845b3d06149eaafa546f16a95221578fa8fdc866098329f8912edc5cd5926129296cff71072","ssdeep":"","tlshash":"b6a002f5415db0265c61181c4e4c8d65aaeb0825cc015765638024958a601d46459083","size":62,"data":"","first_seen":"2025-09-13T03:25:06.288345Z","last_seen":"2025-11-01T22:03:48.30398Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KZRCCBBQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1af13eb4ed60d177e91389208191d5ce","sha1":"c5e37708dbca8d477dd0a7f636f7857f19ddea59","sha256":"d61093aa99dd2eae523712c625976fa9c91be66f3d7186d7367aab02bfe06646","sha512":"0c36b39a050f25e1b3305ae05f0e727693610cd432224dcd13579f23206c364a54f227e01178222d4d04c4b18cbda0d9166a9614c2919f1ecdbca65de1525bcd","ssdeep":"3072:B3qu/D62GmMgZgpl0RP18YqkLPW8RthKUfgHiUXB/G1SvuV8fUtO6y:opmMgZgpBYqkD1ghG1SvuVcky","tlshash":"094408cdb7d6b42283a36478503f114bb17b6992f84cc894f186d9d42e74aaa4237f7c","size":274052,"data":"","first_seen":"2025-09-28T15:33:55.328746Z","last_seen":"2025-09-28T15:33:55.328746Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","fqdn":"buffstreamz.shop","domain":"buffstreamz.shop","tld":"shop"},"ip":{"addr":"104.21.57.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb27c8c91112babb1c37b61cd9e803ba","sha1":"337d6fa675d93012b690ea3760ba7957c22c4bf3","sha256":"432256c54a85adb9afe178c8425d8e316b250711f37eef3bbd7f0ef7d69be709","sha512":"9d3be35ab4d1fced1f72bf83811f0d55fde25495245f351e48988acb5c6eff4036d2d0d9c120e4720937c264158731a636477b7dbc95eb275fcd57cdf620bcae","ssdeep":"","tlshash":"41e0c6da796108b270ed05f623b1a118b5832148a80a1c22cee9c9143818997881308c","size":335,"data":"","first_seen":"2025-09-13T03:25:06.293875Z","last_seen":"2025-10-05T19:45:22.87827Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","fqdn":"buffstreamz.shop","domain":"buffstreamz.shop","tld":"shop"},"ip":{"addr":"104.21.57.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1fbbf60285135152d151bf6211da07e1","sha1":"599186242dcbf37e83e5a2700643d4cad9a8a964","sha256":"99af3367ed01e76a4858a7a602e2d41f9e0f5dbcf3b2c3b8c463c10dba1f98fe","sha512":"bf2218071200eec1d677fee4c2422e114b205d41bf992d5b487f170e73e8ec2a537a78a2af0bcd6633b5fffe1b50562c5ab8f6d8371d2164127c05967531c3ff","ssdeep":"","tlshash":"3861b99e3775358b32b604d16a3f0e07fb7258361a88d034cab9e7141cb14a3d37ae5a","size":3387,"data":"","first_seen":"2025-08-23T18:38:34.507232Z","last_seen":"2025-09-28T15:33:55.345489Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","fqdn":"buffstreamz.shop","domain":"buffstreamz.shop","tld":"shop"},"ip":{"addr":"104.21.57.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"36314589c9c047b9ee0de6f424ea3a6a","sha1":"eade511cec9b920bdbf8f09673c2f986d4aad21a","sha256":"877cb32ef812b3fe2b8b6b296f20c586b107ab9da86f54a298d77834f82421ca","sha512":"5f96259592b11ebc310c80757b3e744e66cd30751717075fd3303cd4e8095fe5438086bf8ef6de76b71d49558cf2f49d69053a424c305ca8aecd78e0d87ab265","ssdeep":"","tlshash":"bd01477320810afbc9bab80257563b99375333ead6b8741049dc061434bfe17e0d4cc8","size":700,"data":"","first_seen":"2025-08-23T18:38:34.508538Z","last_seen":"2025-11-01T22:03:48.33561Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","fqdn":"buffstreamz.shop","domain":"buffstreamz.shop","tld":"shop"},"ip":{"addr":"104.21.57.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3cd3f3b470d5f0f6f0a55831894049a1","sha1":"9ceaf3fc26360f467e0970b0965e7ecad7db1f0b","sha256":"240a214568ed5e4be6e542cf49a0a6bc1b258d136ffa4f65d9548bdaff721e20","sha512":"c0075c56766084fbac9c704c394a480e82d81dd94113cb3e03ee48ad292161d9748154de197cdd2d9a5158e1347bf693a4719917f8155ce4e407e75f74048c97","ssdeep":"","tlshash":"5bc02beccb00f3848053d8240c2de0409328cd9135cd003735d020390244811c88375c","size":139,"data":"","first_seen":"2025-08-23T18:38:34.50985Z","last_seen":"2025-10-05T19:45:22.88982Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/suv5.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3271f15b2fa03cbfe804d891a4d1bea4","sha1":"ba0ebf448794037fa0cdc3f7d3a103e61894493e","sha256":"ec4add2cef8de7dcf48c93f7f83ecec842fee54b4e1ae3ae8ba67b1da1edfba8","sha512":"d6dfb9c2252f4a7dc3681f19e9c36ae5759a4ef08283d47493adc7f85bf76a092cc557a2a18cb13ac7af57626c4f9551833c53fd8ecddd86addc866cfac78b2a","ssdeep":"1536:LOFHKIV5GuKbOPNXN6ibR+6ry6j/IYOHSD/u/NNU48WQJFW4gkzwi/OsWVhL/Tyw:LYqmzIOVg6W6jUHSDm/NWu4hzihp","tlshash":"e293c649bad2f0e86be365e4842f5646e1772a24740d98d5fab6c5c19839ecf4033e3c","size":96855,"data":"","first_seen":"2025-09-11T10:47:57.233286Z","last_seen":"2025-10-21T05:38:50.883718Z","times_seen":518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=GT-TBZBP5PW","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","date":"2025-09-28T15:33:30.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtag/js?id=GT-TBZBP5PW HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buffstreamz.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 28 Sep 2025 15:33:30 GMT\r\nexpires: Sun, 28 Sep 2025 15:33:30 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 139851\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":419244,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"45ff1ebd065a8168bf64892090e3d8b9","sha1":"430d3a9d06494ba0beb8ca332a6bd7ec7b3c44c7","sha256":"78017fda4abf4957832d4e660246676f6f7afeb88edb8a17eb93dd5e1cb80b36","sha512":"21a1a974807e600e33461f63d1f1cc5d4d9097ccb721cf4ffdf9082ae8562a948919629dc2bda8b6edcdff53b151fb9cae272dc33e1a3fea117c691d83a74c4d","ssdeep":"6144:PBJpmM2/kNpvYqkD1g1/9G1SvuVcH9+23WBj:5zmLAYly/Lwr","tlshash":"049409ce73d674265396b478903f018ba5bb28a2f44cc899f189dce42d74a9a4137f7c","first_seen":"2025-09-28T15:33:55.30921Z","last_seen":"2025-09-28T15:33:55.30921Z","times_seen":1,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":99,"dns":0,"connect":16,"send":0,"wait":49,"receive":49,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buffstreamz.shop/m8ez/","fqdn":"buffstreamz.shop","domain":"buffstreamz.shop","tld":"shop"},"ip":{"addr":"104.21.57.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","date":"2025-09-28T15:33:30.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buffstreamz.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 13:18:38 GMT","end":"Thu, 06 Nov 2025 14:16:53 GMT"},"fingerprint":{"sha1":"0D:C0:A4:E2:DB:BB:B5:15:0C:21:3F:E3:57:0B:08:F8:2F:64:A1:80","sha256":"B0:15:32:46:52:A1:6E:67:EA:F5:38:36:35:88:12:3C:C8:D8:E1:E2:9E:0E:D5:D7:72:FC:29:3D:C7:F9:9E:84"}}},"request":{"raw":"GET /m8ez/ HTTP/1.1\r\nHost: buffstreamz.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 15:33:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncf-ray: 98644caf9800569a-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: private, max-age=900\r\ncontent-encoding: br\r\nexpires: Sun, 28 Sep 2025 15:33:30 GMT\r\nlast-modified: Sun, 28 Sep 2025 15:00:00 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: Cache-Control\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mgncpy7RrNcrle%2FQgkBvcsEvgwNbdyL7CYJL0zdqNoBB82yVkRnKGOcmvfgwOytEV%2Fnv1p5h%2FGmtcGkiRXEfay5oCzRqrSFOIClxxz0n\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":299210,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2879)","md5":"7e41694b090fbaf7295ae2fcf6a6e763","sha1":"c5d95db9c51136c1a2e0e055571f6708b11f0c3f","sha256":"e61f5106d238659fe40fc7c409cd878ce48970b2be8db74d9852c7c1707f8f71","sha512":"11f3edc066c601d4310b13a2d7a958c5f762d0a12082fad8cdaa39024553751a924691d3dc6322f966430da5993bc5a336282f342f4bf03d6f1ab66c426764dd","ssdeep":"3072:BQb8u1u/D62GmMAZgpl0RP18YqkLPW8RthKUfgHiUXB/G1SvuV8fUtO6e:08u1pmMAZgpBYqkD1ghG1SvuVcke","tlshash":"e954e6cdb7d6b46283a36478503f114bf17b6992f44cc894e186d8d42eb4aaa4237f7c","first_seen":"2025-09-28T15:33:55.311764Z","last_seen":"2025-09-28T15:33:55.311764Z","times_seen":1,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIbaomQNQcsA88c7O9yZ4KMCoOg4IA6-91aHEjcWuA_d0n9TR_V.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","date":"2025-09-28T15:33:30.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIbaomQNQcsA88c7O9yZ4KMCoOg4IA6-91aHEjcWuA_d0n9TR_V.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://buffstreamz.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12188\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Sep 2025 17:37:51 GMT\r\nexpires: Thu, 24 Sep 2026 17:37:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 338139\r\nlast-modified: Tue, 09 Sep 2025 18:33:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12188,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12188, version 1.0","md5":"79e62f3332cd59b418eaefaeacab09e5","sha1":"d012efbbfe11dd9255dab51a51bb58e3085317c8","sha256":"8872bb5c9111df9bd3162c2394aee6354d782b13408a4dd5bbf65c48207206e6","sha512":"f7b876ae6152bebd064901d3413aec626526d1972f143fd60b4e86ce5992a3595ac9bf8ce01b70d322b8dee35520770ed03dcee2fc1cc91e297a56d5445f922a","ssdeep":"192:q7G+Jfj8lmJzalNw5fLrsdK5re3GgnPimEjUVBSzGaQTkBr6MCcYDd4:cBjDJcEfLrfrMPPihYibQAtn0d4","tlshash":"1b42bf69a3f124f1d88c88b76d5f6215a96c1a5811e83e9c1af49938f2ccc9dfd4cd28","first_seen":"2025-06-06T18:00:02.650581Z","last_seen":"2026-04-05T04:44:06.002117Z","times_seen":809,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":74,"dns":1,"connect":15,"send":0,"wait":35,"receive":3,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/script/suurl5.php?r=10381794\u0026cbur=0.783293044455771\u0026cbiframe=0\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbtitle=K%C3%B6ln%20vs%20Stuttgart%20%E2%80%93%20BUFFSTREAM\u0026cbpage=https%3A%2F%2Fbuffstreamz.shop%2F2025%2F09%2F28%2Fkoln-vs-stuttgart%2F\u0026cbref=\u0026cbdescription=\u0026cbkeywords=\u0026cbcdn=acscdn.com\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown3224%20bits\u0026ts=1759073610317\u0026srs=ec0f5cd55f2e5f4e96a9c931fffcc5e6\u0026atv=69.0","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"104.21.78.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","date":"2025-09-28T15:33:30.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 17:58:51 GMT","end":"Sat, 08 Nov 2025 17:08:08 GMT"},"fingerprint":{"sha1":"EA:C4:03:00:5B:31:55:C6:59:67:78:25:B3:B7:46:0C:EC:DE:30:70","sha256":"D9:CD:23:32:1E:FF:B8:A4:2F:94:7E:6F:7B:49:CF:2A:8E:F8:87:04:44:A7:C7:E1:3C:53:1B:9F:D1:3A:94:D5"}}},"request":{"raw":"GET /script/suurl5.php?r=10381794\u0026cbur=0.783293044455771\u0026cbiframe=0\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbtitle=K%C3%B6ln%20vs%20Stuttgart%20%E2%80%93%20BUFFSTREAM\u0026cbpage=https%3A%2F%2Fbuffstreamz.shop%2F2025%2F09%2F28%2Fkoln-vs-stuttgart%2F\u0026cbref=\u0026cbdescription=\u0026cbkeywords=\u0026cbcdn=acscdn.com\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown3224%20bits\u0026ts=1759073610317\u0026srs=ec0f5cd55f2e5f4e96a9c931fffcc5e6\u0026atv=69.0 HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://buffstreamz.shop/\r\nOrigin: https://buffstreamz.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 15:33:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YA5tT8OEq3T6l8LnaCpTrRhTGSqzz5pV4tSWKNaDA6LaL1UOQFBqJiEed9%2F%2BQWibowsPvNR1MyDh%2FGEkjZ6WoqHylGhtHyYHDWABKzYYM8CALpc%3D\"}]}\r\ncf-ray: 98644cb0ed324c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":972,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"107c25c4ebe4b664011682e31d0190a4","sha1":"fe0ceddaf6eba5d3a1825ebfa7914e4e61ac782d","sha256":"a2e0cc5dde0ceeef5241b7c70f7b940e902658b7570ba9b19037ac78937ea432","sha512":"26f8570cae585876d932ec31fd9d3cda7c5298ed77dd82806ec05dcdf50fe7e205498bf306e7780143445e8827bfa76a02f3d67be2b76294ac5d48871c31ca7c","ssdeep":"","tlshash":"a81198639dd89e17939c10c52ea3e6f40c53e0126f70bc0789daa86187149d81b5bc51","first_seen":"2025-09-28T15:33:55.314271Z","last_seen":"2025-09-28T15:33:55.314271Z","times_seen":1,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":65,"dns":4,"connect":2,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buffstreamz.shop/m8ez/?id=GT-TBZBP5PW\u0026cx=c\u0026gtm=4e59n2","fqdn":"buffstreamz.shop","domain":"buffstreamz.shop","tld":"shop"},"ip":{"addr":"104.21.57.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","date":"2025-09-28T15:33:30.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buffstreamz.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 13:18:38 GMT","end":"Thu, 06 Nov 2025 14:16:53 GMT"},"fingerprint":{"sha1":"0D:C0:A4:E2:DB:BB:B5:15:0C:21:3F:E3:57:0B:08:F8:2F:64:A1:80","sha256":"B0:15:32:46:52:A1:6E:67:EA:F5:38:36:35:88:12:3C:C8:D8:E1:E2:9E:0E:D5:D7:72:FC:29:3D:C7:F9:9E:84"}}},"request":{"raw":"GET /m8ez/?id=GT-TBZBP5PW\u0026cx=c\u0026gtm=4e59n2 HTTP/1.1\r\nHost: buffstreamz.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UHQ6%2BhoBnC3ZLt0c%2FNiQUF2hJTYJDjjOl2et2v0d2o91qzcDapXXcQtyCapdkTTprdpzfRRrO3d5WiddykwL9qEIZNK71z7Hqc%2BiPqhg\"}]}\r\ndate: Sun, 28 Sep 2025 15:33:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98644cb0bd3a5694-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: private, max-age=900\r\ncontent-encoding: br\r\nexpires: Sun, 28 Sep 2025 15:33:30 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: Cache-Control\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":445290,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"d2186cf3c81f207e6e1996d4d487c0cf","sha1":"164b732b06847953d23713cefcf9942a30658c90","sha256":"41cb60e5d9e40dd56f6ee21d22f0802ea1a415944535e45b42b002a112d617db","sha512":"9291f6c2b0223a4b73d4f43ff0ac0543ca0cc8ea9173f7dff6990bf14bc5ad20974995d1bf539a50c6ddfdea2039e8343cfebcefa23f84032569d64c9dc15fe8","ssdeep":"6144:PBS8u1pmM2fRNpvYqkD1g1DHG1SvuVcH9+23WBc:5+3mLxYlyD9wk","tlshash":"3e940ace73d674265396b478903f018ba5bb28a2f44cc899f189dce42d74a9a4137f7c","first_seen":"2025-09-28T15:33:55.316481Z","last_seen":"2025-09-28T15:33:55.316481Z","times_seen":1,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","fqdn":"buffstreamz.shop","domain":"buffstreamz.shop","tld":"shop"},"ip":{"addr":"104.21.57.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-28T15:33:29.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buffstreamz.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 13:18:38 GMT","end":"Thu, 06 Nov 2025 14:16:53 GMT"},"fingerprint":{"sha1":"0D:C0:A4:E2:DB:BB:B5:15:0C:21:3F:E3:57:0B:08:F8:2F:64:A1:80","sha256":"B0:15:32:46:52:A1:6E:67:EA:F5:38:36:35:88:12:3C:C8:D8:E1:E2:9E:0E:D5:D7:72:FC:29:3D:C7:F9:9E:84"}}},"request":{"raw":"GET /2025/09/28/koln-vs-stuttgart/ HTTP/1.1\r\nHost: buffstreamz.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 15:33:30 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: 98644caced21569a-OSL\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nlink: \u003chttps://buffstreamz.shop/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://buffstreamz.shop/wp-json/wp/v2/posts/4000\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://buffstreamz.shop/?p=4000\u003e; rel=shortlink\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-pingback: https://buffstreamz.shop/xmlrpc.php\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vglXZHESfpFExr%2FcVyE7rLZOy0wDnr92wJf4j%2Fg2SQ3jcSmYfL3%2BNim9PRdNMoP%2BsA62RqTlmCTNKQ0mcZC6aOG4CW0Tzw7Ty9xfLApL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Site Kit:1.158.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"WordPress:6.8.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":210491,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (55742)","md5":"b700f70ebc7b5bf84f1955d451d8e995","sha1":"36862e02a1002f3d92819d7fc4ee53eabca5c530","sha256":"79b2bf61edd36ff39799160a83138d42bfded916f8b6081c4f33d82d696dcde9","sha512":"c86f1990415ec7b93a468334f53e70309722649089b56f8d30453cc2cddf0f9e995777c8bfa2e96ce274c5d88d6c73cdceaeb00aa986099fd701b379ea91ab0d","ssdeep":"6144:1Xb3+CDD44ofF5ppxZTXF3ft17CKgs90w6mo:1Xb33DD44Mjpp156mo","tlshash":"b1241be0bb6019361a7b537df46bb60575798a33da4e51e2f4adc0684ac9f9300f270e","first_seen":"2025-09-28T15:33:55.318326Z","last_seen":"2025-09-28T15:33:55.318326Z","times_seen":1,"resource_available":false,"data":null}},"time_used":723,"timings":{"blocked":200,"dns":0,"connect":2,"send":0,"wait":323,"receive":0,"ssl":197},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/aclib.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","date":"2025-09-28T15:33:30.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acscdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 21:39:20 GMT","end":"Sun, 07 Dec 2025 22:39:07 GMT"},"fingerprint":{"sha1":"97:5E:85:70:5C:6F:7D:F5:DB:22:A2:2D:88:C5:E3:69:E8:15:5A:F4","sha256":"AE:9E:71:84:C0:24:A8:E6:55:FE:84:6C:3B:AA:4F:74:9F:76:47:83:B6:3D:D6:4D:0A:0A:74:54:1D:14:B3:EE"}}},"request":{"raw":"GET /script/aclib.js HTTP/1.1\r\nHost: acscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buffstreamz.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 15:33:30 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\nx-guploader-uploadid: ABgVH8-nZlZQUeYALtJGazOSSFGC7E3IAH1BXWj-jf7a2EYo8eDoNcNSA1H4RfCh_AiUhmpk\r\nexpires: Sun, 28 Sep 2025 16:33:30 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Thu, 11 Sep 2025 07:25:42 GMT\r\netag: W/\"da82194a183686cf8d7399280ca1a82a\"\r\nx-goog-generation: 1757575542484354\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 146805\r\nx-goog-hash: crc32c=awnbLw==, md5=2oIZShg2hs+Nc5koDKGoKg==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 2946\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98644cafefa2712d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146805,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65499), with no line terminators","md5":"da82194a183686cf8d7399280ca1a82a","sha1":"a17b2662e49c8d8e47701735ef1e6acf9f5fff07","sha256":"3cb42a90fd07560b095613a310becac597581e2f0b9ab54dde764802be0609cc","sha512":"92e73fcf130ed28ede95ad1f78b28264b1a152b7a07e836a858d116639d7e3b0429449e833d56f5b5582a6ba35965f3be796ace256b9eea649a0ca2f8edfb69d","ssdeep":"3072:G068+RhI8FvQeXO0AFQM4MmMnTQXvS1kKeq/h:B6phN1DF/SW4h","tlshash":"5ee3e849bad2b0f867e261e4942f9646e1371624740e98d5f6fac5d1a879ecf0033e3c","first_seen":"2025-09-11T10:47:57.345998Z","last_seen":"2025-10-21T05:38:51.00741Z","times_seen":595,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":51,"dns":4,"connect":2,"send":0,"wait":36,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buffstreamz.shop/wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.11.7","fqdn":"buffstreamz.shop","domain":"buffstreamz.shop","tld":"shop"},"ip":{"addr":"104.21.57.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","date":"2025-09-28T15:33:30.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buffstreamz.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 13:18:38 GMT","end":"Thu, 06 Nov 2025 14:16:53 GMT"},"fingerprint":{"sha1":"0D:C0:A4:E2:DB:BB:B5:15:0C:21:3F:E3:57:0B:08:F8:2F:64:A1:80","sha256":"B0:15:32:46:52:A1:6E:67:EA:F5:38:36:35:88:12:3C:C8:D8:E1:E2:9E:0E:D5:D7:72:FC:29:3D:C7:F9:9E:84"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.11.7 HTTP/1.1\r\nHost: buffstreamz.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 15:33:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 8478\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 30 Sep 2025 15:43:50 GMT\r\nlast-modified: Sat, 26 Jul 2025 14:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 431380\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b0B5DDErDq%2FdHE068hIehNji56QjprPqCKI1xO4%2Bof%2FFhIRi1238EpWbr4%2ByRTbHfQDO5MZm91LCGbH%2Fkt1dqynOM2cSaaLxOCE%2B8jX3\"}]}\r\ncf-ray: 98644caf9ff7569a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":45738,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (43556)","md5":"e3cf31865be82dbd46e9109e63fa05e9","sha1":"3d40bdf5f18284e508dded6b97bd628bfa13b7fe","sha256":"f86c6f1d09bc548e9822454ece11650ff787904a8cd143fb32c2717488ca62ed","sha512":"4f12d23a347cc95cb51b516898855a56e3f6160a8a66fd7762d3ddd55facae12ed1f528b4f6476258b5bb9561c33fdde6278e876a9598555d1a77dc0b2892e62","ssdeep":"768:mRwOrk1rhDYollnk+FHkqYCzxdvN3JR2/WLmiyCFS7OHQtBU5PT1enhm2a7ZAR2s:mqVY+tHQtBU5PTwDuaP","tlshash":"ed23e86057d035391233873efad6bd082a694313d74f26e6f8ab8668c9c57c71a72a4c","first_seen":"2025-05-21T02:05:06.740969Z","last_seen":"2026-04-05T07:28:30.000102Z","times_seen":3312,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buffstreamz.shop/wp-includes/css/dist/block-library/style.min.css?ver=6.8.2","fqdn":"buffstreamz.shop","domain":"buffstreamz.shop","tld":"shop"},"ip":{"addr":"104.21.57.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","date":"2025-09-28T15:33:30.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buffstreamz.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 13:18:38 GMT","end":"Thu, 06 Nov 2025 14:16:53 GMT"},"fingerprint":{"sha1":"0D:C0:A4:E2:DB:BB:B5:15:0C:21:3F:E3:57:0B:08:F8:2F:64:A1:80","sha256":"B0:15:32:46:52:A1:6E:67:EA:F5:38:36:35:88:12:3C:C8:D8:E1:E2:9E:0E:D5:D7:72:FC:29:3D:C7:F9:9E:84"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.8.2 HTTP/1.1\r\nHost: buffstreamz.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 15:33:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 14360\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Oct 2025 18:38:21 GMT\r\nlast-modified: Tue, 08 Jul 2025 08:02:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 248108\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dJN6WG1wQMQjnQBSnnVWbKZCYIHdkxDaE8woAyg49lKGwZB6vDanq7dI6N5ZiMZC1ug2mMZfXGbbBXAFMRnMOs8FmvPTOyHJcx2%2FfbNX\"}]}\r\ncf-ray: 98644caf9ffa569a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116345,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55654)","md5":"a06b3af98203ddc303997e0e0caaff83","sha1":"04c3e7de74a890d18014588c4e1f077a52d79acc","sha256":"838ede31a58a3cdb411d6dd7f13cbe65d4a26193d9fa31882854e63938f12bac","sha512":"4ce1079b8dc07043b0201dc74f5888b50aa530a4e604eecd7673e225946de62c421b290a707014ddaf4366591f8c4767737b5689bc44d57eb0a11aef905cead9","ssdeep":"3072:seeJu1iQg5MG7x+qehvP0x2pck2qkA3Pu:b1iQg5MG7x+qehvP0x2pck2lA2","tlshash":"34b3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-07-15T17:03:07.843749Z","last_seen":"2026-04-05T08:37:15.734243Z","times_seen":164327,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buffstreamz.shop/wp-content/plugins/wp-post-disclaimer/assets/css/fontawesome/all.min.css?ver=1.0.2","fqdn":"buffstreamz.shop","domain":"buffstreamz.shop","tld":"shop"},"ip":{"addr":"104.21.57.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","date":"2025-09-28T15:33:30.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buffstreamz.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 13:18:38 GMT","end":"Thu, 06 Nov 2025 14:16:53 GMT"},"fingerprint":{"sha1":"0D:C0:A4:E2:DB:BB:B5:15:0C:21:3F:E3:57:0B:08:F8:2F:64:A1:80","sha256":"B0:15:32:46:52:A1:6E:67:EA:F5:38:36:35:88:12:3C:C8:D8:E1:E2:9E:0E:D5:D7:72:FC:29:3D:C7:F9:9E:84"}}},"request":{"raw":"GET /wp-content/plugins/wp-post-disclaimer/assets/css/fontawesome/all.min.css?ver=1.0.2 HTTP/1.1\r\nHost: buffstreamz.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 15:33:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 11926\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 30 Sep 2025 13:50:59 GMT\r\nlast-modified: Sat, 26 Jul 2025 16:15:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 438150\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0wUtF51ifsijPXlH56vJy68B5aY%2BVQn%2FuZH1fOTqPUBlCrB2winc9GXNEA6IEfXpaGfjnFafavR3XyyMJQfMiyshLIqi23wsnYk5awzx\"}]}\r\ncf-ray: 98644caf9ffb569a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":57130,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (56940), with CRLF line terminators","md5":"bcb9e231e1ebad9486a058f51e48ecad","sha1":"bd8bd96843a052a7595982b851ce09b8dd528ce2","sha256":"86b597d2da16afee245ca58f1c95f132655e3c57835d9ac939e23c20925fba96","sha512":"1c52bcc26be651d6f1510f6d4ec06866bed12f229b7de7dc3f074a60b7f704859f9f2a20058d6de6026a72f3080dbbc5ccf306a91857cbbd8745c4a8782cc94f","ssdeep":"768:2YC319PizNq4/xBo8UHJikQ2R/oMQyYJrX75CthZQzB:2YkPUE4/3uHEB2Wfd7stA9","tlshash":"1b430cb8e54c01c9a732c44fbf82b2bc61b6f73de5914d95f00e591c2ad26a811c5fba","first_seen":"2023-04-07T00:54:13Z","last_seen":"2026-04-05T08:58:52.955765Z","times_seen":1987,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buffstreamz.shop/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.11.7","fqdn":"buffstreamz.shop","domain":"buffstreamz.shop","tld":"shop"},"ip":{"addr":"104.21.57.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","date":"2025-09-28T15:33:30.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buffstreamz.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 13:18:38 GMT","end":"Thu, 06 Nov 2025 14:16:53 GMT"},"fingerprint":{"sha1":"0D:C0:A4:E2:DB:BB:B5:15:0C:21:3F:E3:57:0B:08:F8:2F:64:A1:80","sha256":"B0:15:32:46:52:A1:6E:67:EA:F5:38:36:35:88:12:3C:C8:D8:E1:E2:9E:0E:D5:D7:72:FC:29:3D:C7:F9:9E:84"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.11.7 HTTP/1.1\r\nHost: buffstreamz.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 15:33:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 5764\r\nlast-modified: Sat, 26 Jul 2025 14:16:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 1334\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zj62O9cgdme25eQpxudedjJ%2FpYN1tPQIS77JeeQzt80OfHM6jfH%2BiqKbXAWqEftMDaj1ijdsy8tvOvMQV1ZO%2FNBFQgu6b%2FvskYMjclWt\"}]}\r\ncf-ray: 98644caf9ffe569a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":25251,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (25251), with no line terminators","md5":"42dfaf20c4322681d422b8c5e056e97e","sha1":"080df67c0eb40fc266bad50d084244694da30c53","sha256":"7d2ab708e20477dbf59da120fbfd80937a43d9b03b649c5b619d91ce65e44c65","sha512":"375406309624f2c45c5f61ae157123df862cd3c593d2935b4e7ced4db153970d83b31d3999735b6877008e5b032b0e2bea55584664ee394e481f580700fa6a63","ssdeep":"768:uYEPx60obcFDTHjVrobo/os37AfR0GLltXmxPEq2V2YiNMt6VzSy0tnzQ6AuNdqv:uYEPx6ah73cfRbllmxPE5H4dSVVNdI/v","tlshash":"4fb271a623002a3604fe17e7f5daabc4767110affe0944155879cc2e19a8fd352f1af9","first_seen":"2025-07-01T11:25:11.52877Z","last_seen":"2026-04-04T16:09:19.209678Z","times_seen":1343,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","date":"2025-09-28T15:33:30.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://buffstreamz.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Sep 2025 17:22:06 GMT\r\nexpires: Thu, 24 Sep 2026 17:22:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 339084\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-05T08:48:19.132957Z","times_seen":133818,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":14,"receive":20,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buffstreamz.shop/wp-content/uploads/2025/08/cropped-Screenshot_20250808-200625-192x192.jpg","fqdn":"buffstreamz.shop","domain":"buffstreamz.shop","tld":"shop"},"ip":{"addr":"104.21.57.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","date":"2025-09-28T15:33:32.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buffstreamz.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 13:18:38 GMT","end":"Thu, 06 Nov 2025 14:16:53 GMT"},"fingerprint":{"sha1":"0D:C0:A4:E2:DB:BB:B5:15:0C:21:3F:E3:57:0B:08:F8:2F:64:A1:80","sha256":"B0:15:32:46:52:A1:6E:67:EA:F5:38:36:35:88:12:3C:C8:D8:E1:E2:9E:0E:D5:D7:72:FC:29:3D:C7:F9:9E:84"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/cropped-Screenshot_20250808-200625-192x192.jpg HTTP/1.1\r\nHost: buffstreamz.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/\r\nCookie: _ga_WJYNFG861H=GS2.1.s1759073610$o1$g0$t1759073610$j60$l0$h0; _ga=GA1.1.1045979343.1759073610\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 15:33:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7242\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Oct 2025 18:38:34 GMT\r\nlast-modified: Sat, 09 Aug 2025 11:27:47 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 248097\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xwNGBj4Fub%2FY6wfa9LTOtOy5TEvx3sRpj%2FtwGYydyRXNLyk3N%2Fj2rgGe5zOGqAWjSdqmD7St6luq4RPEGM5SRnH%2FjGPTSyjQm9FQexXZ\"}]}\r\nvary: accept-encoding\r\ncf-ray: 98644cbd7e225694-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7242,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 192x192, components 3","md5":"bdaeba940decd1c274cc82d3b93d9339","sha1":"f0b2708132fdfbaa444c0edb50d09e0683ee88b9","sha256":"92f94be4b04d89768dfe0edbc633685873bd4e446a6944135c42751177bdde7a","sha512":"4fc0bd76733456505da24d7caec98cc635166658b9f77ad5cf5159f9600d5193948e25cd2f9a8652bb5435488e212ab3c900c30da8cecb6024955cf3de799b8e","ssdeep":"192:/PGWFHlV1auzUDmAv5LHNSj4+eMGYP1Olq:3EuoDj+3GYPYq","tlshash":"0be19e9bdb0cc141808f8d5f963539a3b848b394d9618f96a732c0a6c3447faef4c715","first_seen":"2025-08-23T18:38:34.462805Z","last_seen":"2025-11-01T22:03:48.260604Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Inter%3A400%2C600%7CPlus+Jakarta+Sans%3A600\u0026display=fallback\u0026ver=4.11.7","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","date":"2025-09-28T15:33:30.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css?family=Inter%3A400%2C600%7CPlus+Jakarta+Sans%3A600\u0026display=fallback\u0026ver=4.11.7 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buffstreamz.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 28 Sep 2025 15:33:30 GMT\r\ndate: Sun, 28 Sep 2025 15:33:30 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6866,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5a4e35de8adaab1bcda1108fc0efabeb","sha1":"dd7eb9f7567ed2db483b06872ebe7a6f699179d6","sha256":"41cbc15c1d7e6ff94a392dc82f2a11fb931c96af6dfadcf5353d69b7e0324254","sha512":"762192c1edc63e5aab42248f7e153319bf1cfaa213557f03c4967a5430649412d385f06099037550c1cbb44a2cf6f9a25603dd95352e6454ffc577fc9d33b528","ssdeep":"96:aOEPNqOEPXFZHOEPmOEPO3vOEPBOEPBJc+uTOEPNcNDOxMPNqOxMPXFZHOxMPmOF:ANwFUO3VTxuwNGXqO3nBxYdwO8+lg","tlshash":"67e1fc82042ba400ab931dc763cf7f36bece50856089d1a95ffd0d899ceac7a1364b5d","first_seen":"2025-09-13T03:25:06.224931Z","last_seen":"2026-04-05T05:53:03.37169Z","times_seen":732,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":132,"dns":0,"connect":15,"send":0,"wait":36,"receive":0,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buffstreamz.shop/wp-content/plugins/wp-post-disclaimer/assets/css/styles.min.css?ver=1.0.2","fqdn":"buffstreamz.shop","domain":"buffstreamz.shop","tld":"shop"},"ip":{"addr":"104.21.57.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","date":"2025-09-28T15:33:30.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buffstreamz.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 13:18:38 GMT","end":"Thu, 06 Nov 2025 14:16:53 GMT"},"fingerprint":{"sha1":"0D:C0:A4:E2:DB:BB:B5:15:0C:21:3F:E3:57:0B:08:F8:2F:64:A1:80","sha256":"B0:15:32:46:52:A1:6E:67:EA:F5:38:36:35:88:12:3C:C8:D8:E1:E2:9E:0E:D5:D7:72:FC:29:3D:C7:F9:9E:84"}}},"request":{"raw":"GET /wp-content/plugins/wp-post-disclaimer/assets/css/styles.min.css?ver=1.0.2 HTTP/1.1\r\nHost: buffstreamz.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 15:33:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 520\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Oct 2025 17:08:47 GMT\r\nlast-modified: Sat, 26 Jul 2025 16:15:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 167082\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xvv6HVZ08j%2FhXcJUDRLAjBPz4kjVRuoDy%2BfJB79eKtRR88pRUKesh4HWJSjYetPEUwTSTwnnOMhPb6Y9tK60ztfCea1eWtyOQxX6aR2m\"}]}\r\ncf-ray: 98644caf9ffc569a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3064,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3064), with no line terminators","md5":"232bcebc98dc30d086882e6d8bd8ac1f","sha1":"221743d4bd0cd374e77b3c5f6de2136025e11817","sha256":"0b5bcd7e312c1a4ac8d38d15ab6e2190b5101ae1feb155be9102149f03f44181","sha512":"1841dd320c175a4fdcdb613dac1b2c766bcf66ae43419a90fdd2df724d01b1281d484dc6b888e2233db8a4744eb584f167b17a80e2b280896754144079c40b19","ssdeep":"","tlshash":"ae5134993b712234b4f68f1dd1c1fb167f2a96a3ce4e5bb92cb5e17bc0ad2019112b11","first_seen":"2024-08-29T18:01:25.3164Z","last_seen":"2026-03-22T03:00:05.166097Z","times_seen":50,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buffstreamz.shop/wp-includes/js/comment-reply.min.js?ver=6.8.2","fqdn":"buffstreamz.shop","domain":"buffstreamz.shop","tld":"shop"},"ip":{"addr":"104.21.57.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","date":"2025-09-28T15:33:30.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buffstreamz.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 13:18:38 GMT","end":"Thu, 06 Nov 2025 14:16:53 GMT"},"fingerprint":{"sha1":"0D:C0:A4:E2:DB:BB:B5:15:0C:21:3F:E3:57:0B:08:F8:2F:64:A1:80","sha256":"B0:15:32:46:52:A1:6E:67:EA:F5:38:36:35:88:12:3C:C8:D8:E1:E2:9E:0E:D5:D7:72:FC:29:3D:C7:F9:9E:84"}}},"request":{"raw":"GET /wp-includes/js/comment-reply.min.js?ver=6.8.2 HTTP/1.1\r\nHost: buffstreamz.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 15:33:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1247\r\nlast-modified: Thu, 06 Feb 2025 12:27:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 1333\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eXGFYmBgF6Y%2B4t1UMcs8IrvcYbxzV9uIqrvVq0qIhfxGrKiEbhJepDdGOxEvFC6YDx8stI65Kb0GqD%2FXacCOB4Abq6awEkpzRJ6snHR6\"}]}\r\ncf-ray: 98644caf9ffd569a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3026,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2991)","md5":"e4a49df71f8b98c1d9f9d8fce74d89e8","sha1":"b95fcda0c8c26305ad94e80343d0cfca8a048a10","sha256":"9d4687a19cab8f7442a3bda40c45be4d10e42488e091ddd706c3caed83c3ee1f","sha512":"42cd5f854779886f24c43ed14617380110c946d1b430b454060c3b391de6fbae6d0ed8ab7cdd7cfdc9726b2d6142a4e01c4448e36088dfcee7fdd00b60909f89","ssdeep":"","tlshash":"5051a7d437c95d762a83b3395efe930271712709a50805608826c86931bcfea63b67fe","first_seen":"2024-11-13T06:33:24.856382Z","last_seen":"2026-04-05T08:49:37.042746Z","times_seen":57212,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/suv5.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","date":"2025-09-28T15:33:30.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acscdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 21:39:20 GMT","end":"Sun, 07 Dec 2025 22:39:07 GMT"},"fingerprint":{"sha1":"97:5E:85:70:5C:6F:7D:F5:DB:22:A2:2D:88:C5:E3:69:E8:15:5A:F4","sha256":"AE:9E:71:84:C0:24:A8:E6:55:FE:84:6C:3B:AA:4F:74:9F:76:47:83:B6:3D:D6:4D:0A:0A:74:54:1D:14:B3:EE"}}},"request":{"raw":"GET /script/suv5.js HTTP/1.1\r\nHost: acscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buffstreamz.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 15:33:30 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\nx-guploader-uploadid: ABgVH8-9c4pjta0Y-8RNJduhwu8SsqGu1HECSebUbnHzJiiyFvVWMsCxsSPtzwdr45PAPUNV\r\nx-goog-generation: 1757575972251993\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 96855\r\nx-goog-hash: crc32c=5NFa/Q==, md5=MnHxWy+gPL/oBNiRpNG+pA==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nexpires: Sun, 28 Sep 2025 16:33:30 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Thu, 11 Sep 2025 07:32:52 GMT\r\netag: W/\"3271f15b2fa03cbfe804d891a4d1bea4\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 2826\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98644cb05fef712d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96855,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65493), with no line terminators","md5":"3271f15b2fa03cbfe804d891a4d1bea4","sha1":"ba0ebf448794037fa0cdc3f7d3a103e61894493e","sha256":"ec4add2cef8de7dcf48c93f7f83ecec842fee54b4e1ae3ae8ba67b1da1edfba8","sha512":"d6dfb9c2252f4a7dc3681f19e9c36ae5759a4ef08283d47493adc7f85bf76a092cc557a2a18cb13ac7af57626c4f9551833c53fd8ecddd86addc866cfac78b2a","ssdeep":"1536:LOFHKIV5GuKbOPNXN6ibR+6ry6j/IYOHSD/u/NNU48WQJFW4gkzwi/OsWVhL/Tyw:LYqmzIOVg6W6jUHSDm/NWu4hzihp","tlshash":"e293c649bad2f0e86be365e4842f5646e1772a24740d98d5fab6c5c19839ecf4033e3c","first_seen":"2025-09-11T10:47:57.233286Z","last_seen":"2025-10-21T05:38:50.883718Z","times_seen":518,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","date":"2025-09-28T15:33:30.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://buffstreamz.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Sep 2025 17:22:06 GMT\r\nexpires: Thu, 24 Sep 2026 17:22:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 339084\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-05T08:48:19.132957Z","times_seen":133818,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":141,"dns":0,"connect":15,"send":0,"wait":14,"receive":8,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KZRCCBBQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","date":"2025-09-28T15:33:30.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtm.js?id=GTM-KZRCCBBQ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buffstreamz.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 28 Sep 2025 15:33:30 GMT\r\nexpires: Sun, 28 Sep 2025 15:33:30 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 28 Sep 2025 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 96154\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":274052,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2848)","md5":"1af13eb4ed60d177e91389208191d5ce","sha1":"c5e37708dbca8d477dd0a7f636f7857f19ddea59","sha256":"d61093aa99dd2eae523712c625976fa9c91be66f3d7186d7367aab02bfe06646","sha512":"0c36b39a050f25e1b3305ae05f0e727693610cd432224dcd13579f23206c364a54f227e01178222d4d04c4b18cbda0d9166a9614c2919f1ecdbca65de1525bcd","ssdeep":"3072:B3qu/D62GmMgZgpl0RP18YqkLPW8RthKUfgHiUXB/G1SvuV8fUtO6y:opmMgZgpBYqkD1ghG1SvuVcky","tlshash":"094408cdb7d6b42283a36478503f114bb17b6992f84cc894f186d9d42e74aaa4237f7c","first_seen":"2025-09-28T15:33:55.328746Z","last_seen":"2025-09-28T15:33:55.328746Z","times_seen":1,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buffstreamz.shop/wp-content/uploads/2025/08/cropped-Screenshot_20250808-200625-32x32.jpg","fqdn":"buffstreamz.shop","domain":"buffstreamz.shop","tld":"shop"},"ip":{"addr":"104.21.57.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/","date":"2025-09-28T15:33:32.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"buffstreamz.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 13:18:38 GMT","end":"Thu, 06 Nov 2025 14:16:53 GMT"},"fingerprint":{"sha1":"0D:C0:A4:E2:DB:BB:B5:15:0C:21:3F:E3:57:0B:08:F8:2F:64:A1:80","sha256":"B0:15:32:46:52:A1:6E:67:EA:F5:38:36:35:88:12:3C:C8:D8:E1:E2:9E:0E:D5:D7:72:FC:29:3D:C7:F9:9E:84"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/cropped-Screenshot_20250808-200625-32x32.jpg HTTP/1.1\r\nHost: buffstreamz.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://buffstreamz.shop/2025/09/28/koln-vs-stuttgart/\r\nCookie: _ga_WJYNFG861H=GS2.1.s1759073610$o1$g0$t1759073610$j60$l0$h0; _ga=GA1.1.1045979343.1759073610\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 15:33:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1199\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 15:33:32 GMT\r\nlast-modified: Sat, 09 Aug 2025 11:27:47 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2F0C6iI8DCFzqXv6PuFwgzIigB2rhxix85Go26IVtMm2neaEONnJRYL9f5%2FLcbEhHsYQikSq33cN%2B3seb%2F9Wmq6Z02L%2FwWeOwHitG6k2\"}]}\r\nvary: accept-encoding\r\ncf-ray: 98644cbd7e235694-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1199,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 32x32, components 3","md5":"3cb007d88772890ffa9f4370d4a3c4c3","sha1":"b6b1d893505d22eae40c81049b6bd50efc5aadd1","sha256":"fff35984cee620c43dc9439a69c933287a4cd880d3ed852ad662ced4a63024a1","sha512":"60fcf62e4e2cfd972f4e7b68eb8580cfb0e6ed5f9c39e8326499ca9c99c4192024c3fd558d98ba644bf6ba9feb1505c5d3794184d0ab0fef91424f9e2b526347","ssdeep":"","tlshash":"372163bba70603d1ce165cbe49a5636ae2cb6d807c69e6803b32d1aad9209cd504568e","first_seen":"2025-08-23T18:38:34.490227Z","last_seen":"2025-11-01T22:03:48.281437Z","times_seen":9,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}