{"report_id":"22353f2a-8a2f-44ed-9e8e-10c2ecc0e0d1","version":0,"status":"done","tags":[],"date":"2026-06-30T22:01:40Z","url":{"schema":"http","addr":"perdison.de/Kundenservice-Deutschland1/index.php","fqdn":"perdison.de","domain":"perdison.de","tld":"de"},"ip":{"addr":"185.30.32.240","port":0,"asn":48324,"as":"webgo GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"perdison.de/Kundenservice-Deutschland1/index.php","fqdn":"perdison.de","domain":"perdison.de","tld":"de"},"title":"my.cyon-Login","dom":{"size":20659,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"86832abba5aa851ff49bd811417485e1","sha1":"a3efe56faeb4d8a070d476289ae3250081f88616","sha256":"bfc037010bc25c280ed6e92a6eca6d63683e31ee3c1f80fbdab2272427824edb","sha512":"caaa4066b7e9ac486e88c5382ca979b2c2b95607ae453fe66da4944b58d7fd7938ab4597b22e2de8699b3f96af0d8d8a514c8e0b5fa79c465dccd0f468108f99","ssdeep":"192:YdnpoFeimex/YKAmiLs5xot+0q+P7SKVFyeQr9iw9urSMr+zqfxd6oX4zlKXJFk8:HP+FlZF4C+99CVPI9aKPI0tO","tlshash":"5292346635f7092ab447c9906b7527163a54d103c54bd9287afc17e89f83cc6dca33ac","dom_hash":"domhash9be533c745cfeb8a4a4e3c53c9a157fb","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"perdison.de/Kundenservice-Deutschland1/index.php","fqdn":"perdison.de","domain":"perdison.de","tld":"de"},"ip":{"addr":"185.30.32.240","port":0,"asn":48324,"as":"webgo GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-04T22:01:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"perdison.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"perdison.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"perdison.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"perdison.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"perdison.de","ip":{"addr":"185.30.32.240","port":443,"asn":48324,"as":"webgo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-30T18:14:03.883037Z","last_seen":"2026-06-30T18:14:03.883037Z","alert_count":12,"request_count":3,"received_data":26779,"sent_data":1657,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Joomla","description":"Joomla is a free and open-source content management system for publishing web content.","website":"https://www.joomla.org/","common_platform_enumeration":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","icon":"Joomla.svg","categories":["CMS"]}]},{"fqdn":"imagizer.imageshack.com","ip":{"addr":"23.36.76.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2002-08-11","domain_rank":255795,"first_seen":"2014-07-18T10:03:47Z","last_seen":"2026-06-30T04:48:39.104902Z","alert_count":0,"request_count":1,"received_data":4339,"sent_data":563,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx:1.2.8","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"perdison.de/favicon.ico","fqdn":"perdison.de","domain":"perdison.de","tld":"de"},"ip":{"addr":"185.30.32.240","port":443,"asn":48324,"as":"webgo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://perdison.de/Kundenservice-Deutschland1/index.php","date":"2026-06-30T22:01:17.511Z","timestamp":1782856877511,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"perdison.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 09:32:11 GMT","end":"Tue, 25 Aug 2026 09:32:10 GMT"},"fingerprint":{"sha1":"5B:10:52:83:FC:BB:19:8F:46:BE:BB:5B:B4:EE:65:A9:89:D4:FD:28","sha256":"98:0F:79:47:79:4E:82:71:DC:A6:E0:C2:3C:06:55:43:55:A9:7F:15:51:D8:B3:4D:1B:0D:24:0F:B0:4C:DA:4B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: perdison.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://perdison.de/Kundenservice-Deutschland1/index.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 303 \r\nserver: nginx\r\ndate: Tue, 30 Jun 2026 22:01:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 0\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nexpires: Wed, 17 Aug 2005 00:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nset-cookie: 3391bb6f3b359754bcc61911b8f1f5a6=874a0e4805a8f2090e7c481294f69db4; path=/; HttpOnly\r\nx-content-type-options: nosniff\r\nlocation: https://perdison.de/index.php\r\nlast-modified: Tue, 30 Jun 2026 22:01:17 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"303","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-02T10:08:17.312169Z","times_seen":16908850,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"perdison.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"perdison.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"perdison.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"perdison.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"perdison.de/index.php","fqdn":"perdison.de","domain":"perdison.de","tld":"de"},"ip":{"addr":"185.30.32.240","port":443,"asn":48324,"as":"webgo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://perdison.de/Kundenservice-Deutschland1/index.php","date":"2026-06-30T22:01:18.073Z","timestamp":1782856878073,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"perdison.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 09:32:11 GMT","end":"Tue, 25 Aug 2026 09:32:10 GMT"},"fingerprint":{"sha1":"5B:10:52:83:FC:BB:19:8F:46:BE:BB:5B:B4:EE:65:A9:89:D4:FD:28","sha256":"98:0F:79:47:79:4E:82:71:DC:A6:E0:C2:3C:06:55:43:55:A9:7F:15:51:D8:B3:4D:1B:0D:24:0F:B0:4C:DA:4B"}}},"request":{"raw":"GET /index.php HTTP/1.1\r\nHost: perdison.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://perdison.de/Kundenservice-Deutschland1/index.php\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: 3391bb6f3b359754bcc61911b8f1f5a6=874a0e4805a8f2090e7c481294f69db4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 503 \r\nserver: nginx\r\ndate: Tue, 30 Jun 2026 22:01:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nexpires: Wed, 17 Aug 2005 00:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\nlast-modified: Tue, 30 Jun 2026 22:01:18 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"503","status_text":"","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Joomla","description":"Joomla is a free and open-source content management system for publishing web content.","website":"https://www.joomla.org/","common_platform_enumeration":"cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*","icon":"Joomla.svg","categories":["CMS"]}],"data":{"size":4899,"size_decoded":5362,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (393)","md5":"13903a115015f6d99b59dc5ce4e2a55a","sha1":"09b33395c6cb1f6055eb4a52f5a1d0d21618ea26","sha256":"59caba0e076a0b44ff719e04df6fb6780976b17f8ccb1e8aa50529810b23795e","sha512":"be5e667fce5a45a588064623c5ee5edbacdbd2befbf5621e6700f6b9039511e56a7b61ed28face734bd7feb7a93a20c7cb1fb454d65c48782fe752e56fef1203","ssdeep":"96:PJwKnc3wbkye3soCGow6DmoOmXzPAvTs/w:PJdFkye3sfGH6DmnozPAvTsY","tlshash":"38a1430044f06c251112a5b9bec879059eb5d943db052c41f2fc47d59fa7f844f2bd6e","first_seen":"2026-06-30T22:01:47.414676Z","last_seen":"2026-06-30T22:01:47.414676Z","times_seen":1,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"perdison.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"perdison.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"perdison.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"perdison.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"perdison.de/Kundenservice-Deutschland1/index.php","fqdn":"perdison.de","domain":"perdison.de","tld":"de"},"ip":{"addr":"185.30.32.240","port":443,"asn":48324,"as":"webgo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-30T22:01:16.427Z","timestamp":1782856876427,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"perdison.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 09:32:11 GMT","end":"Tue, 25 Aug 2026 09:32:10 GMT"},"fingerprint":{"sha1":"5B:10:52:83:FC:BB:19:8F:46:BE:BB:5B:B4:EE:65:A9:89:D4:FD:28","sha256":"98:0F:79:47:79:4E:82:71:DC:A6:E0:C2:3C:06:55:43:55:A9:7F:15:51:D8:B3:4D:1B:0D:24:0F:B0:4C:DA:4B"}}},"request":{"raw":"GET /Kundenservice-Deutschland1/index.php HTTP/1.1\r\nHost: perdison.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 30 Jun 2026 22:01:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20590,"size_decoded":3321,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9c3f9ace7658b37b1913989364e64195","sha1":"64159819ab761c76d3836fb117457f7e1b75c6b5","sha256":"8952902b2d3e8211b30186c3332596de8db267966c7ffa7a7a5b84a008c37436","sha512":"be908c50b7c16ed1ecdba7306e7899b8ea3cc23e94ae4b4a3e84ade49ec9e0eea6b0c4dc864a678253ca1c73c8ec80a3cfeb720a5469308af7b2e2efd20c90e2","ssdeep":"192:iWnpoFeimex/YKAmiLs5xot+0q+P7SKVFyeQr9iw9urSMr+zqfxd6oX4zlKXJFkF:yP+FlZF8rc9Gr8oIvavoIx3j","tlshash":"2092346625f7082ab447c890ab6537163a68d103c54bd9247afc17e85f87ccadcb33ac","first_seen":"2026-06-19T11:02:16.82486Z","last_seen":"2026-06-30T22:54:51.526851Z","times_seen":5,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":62,"connect":27,"send":0,"wait":37,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"perdison.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"perdison.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"perdison.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"perdison.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imagizer.imageshack.com/v2/180x180q70/r/922/4CuToh.png","fqdn":"imagizer.imageshack.com","domain":"imageshack.com","tld":"com"},"ip":{"addr":"23.36.76.203","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://perdison.de/Kundenservice-Deutschland1/index.php","date":"2026-06-30T22:01:17.191Z","timestamp":1782856877191,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagizer.imageshack.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Jun 2026 06:24:06 GMT","end":"Thu, 03 Sep 2026 06:24:05 GMT"},"fingerprint":{"sha1":"AE:3C:C6:64:C7:06:43:E3:AB:F2:01:4C:F0:58:F7:2D:B2:4F:8B:DE","sha256":"5C:72:9E:DE:88:AB:C5:C6:65:B8:90:06:63:FF:97:82:B3:FF:28:F5:11:92:34:7F:21:2F:4B:FB:6F:CC:42:B5"}}},"request":{"raw":"GET /v2/180x180q70/r/922/4CuToh.png HTTP/1.1\r\nHost: imagizer.imageshack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://perdison.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.2.8\r\ncontent-type: image/webp\r\ncontent-length: 3282\r\nx-original-response-code: 200\r\nx-original-filesize: 5238\r\nx-origin-fetch-time: 64\r\nx-original-resolution: 180x180\r\nx-imagizer-host: imageshack.imagizer.com\r\nxkey: imageshack.imagizer.com\r\netag: c4ca4238a0b923820dcc509a6f75849b\r\nx-ops: {\"quality\":70,\"width\":180,\"height\":180}\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nx-varnish: 2523160596 2298574255\r\nx-varnish-hits: 566\r\nx-varnish-ip: 38.99.77.32\r\nx-varnish-port: 17001\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Authorization,Content-Type,Accept,Origin,User-Agent,DNT,Cache-Control,X-Mx-ReqToken,Keep-Alive,X-Requested-With,If-Modified-Since\r\naccess-control-expose-headers: Authorization,Content-Type,Accept,Origin,User-Agent,DNT,Cache-Control,X-Mx-ReqToken,Keep-Alive,X-Requested-With,If-Modified-Since\r\ncache-control: public, max-age=1158000\r\ndate: Tue, 30 Jun 2026 22:01:17 GMT\r\nakamai-cache-status: Hit from child\r\nx-webp: true\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx:1.2.8","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3282,"size_decoded":4339,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cac4552715e67ae3d76be1770f1dfd83","sha1":"78c83eee44170f8324a0e951167e53428e16ac47","sha256":"1ee123b887eb31bf03aca34915eea7a43b2414739aad94dda2777747f4915afb","sha512":"2d7c316eb4e85a5e52c9cb64cee94c551d1c75d279ca835c2c4e1de9c358d2f927c7547e1c58c021ba875f4e17020624c62dfb3419e1dd6594c719741fd83da0","ssdeep":"","tlshash":"7d613c9a11914d51c046317c7cda1b5ccb0ac4e148acdbfbb65006c68eedb92f8f16ec","first_seen":"2026-05-26T19:31:40.412145Z","last_seen":"2026-06-30T22:54:51.527575Z","times_seen":6,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":179,"connect":2,"send":0,"wait":6,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}