{"report_id":"2a982638-2cb4-4f39-8c07-1de3a6fe2d4c","version":0,"status":"done","tags":[],"date":"2026-09-20T12:53:14Z","url":{"schema":"http","addr":"chocolate65.beer/","fqdn":"chocolate65.beer","domain":"chocolate65.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":0,"asn":202412,"as":"Omegatech LTD","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"chocolate65.beer/","fqdn":"chocolate65.beer","domain":"chocolate65.beer","tld":"beer"},"title":"Меню — Шоколад","dom":{"size":49769,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8219)","md5":"173f7096ff3bdead972d65408949920c","sha1":"e8215bf1636da47d0db9e703b5129a2d15558952","sha256":"fd662cfd5e6a2b3a805fe745be59bf3b7ecea3c10fc17f543df238e0cbb48c8c","sha512":"e6bec612e98b3e9d96e2197bbbc924e35a00cac085b9df406b89f5a0f40a2b366156de3c5350852fdefc35f8495d85bfcdad7809e8b894cdb3d373becf9f97b5","ssdeep":"1536:3MiWulA6JkloKZlb4xabDk7KpJ4XuOBWEE2:3MY82","tlshash":"6723de2011b858771212a181ed56af0b7ec0e5bbda0b1a5037ad1bee2ff7c55c93b21d","dom_hash":"domhashfcc93c8b7550718a58c50cd0bae6143d","first_seen":"2026-09-20T12:44:27.470609Z","last_seen":"2026-09-20T12:53:16.693259Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"chocolate65.beer/","fqdn":"chocolate65.beer","domain":"chocolate65.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":0,"asn":202412,"as":"Omegatech LTD","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-25T12:53:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"chocolate65.beer","ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2026-09-16","domain_rank":0,"first_seen":"2026-09-20T12:44:23.151077Z","last_seen":"2026-09-20T12:44:23.151077Z","alert_count":32,"request_count":16,"received_data":1704067,"sent_data":9111,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":11,"received_data":282443,"sent_data":6102,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":1,"received_data":14400,"sent_data":565,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"chocolate65.beer/","fqdn":"chocolate65.beer","domain":"chocolate65.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"7fbff480a7a47bea08782df6d544f0b8","sha1":"4b320fd78b9a165f41359c1bce01bcdac7eadf13","sha256":"e0cce136b7552e7fc6e9ea81ae0f39ebabce7bb542cc97f1cf1c91e719eccc8f","sha512":"7a6ab0891fa12760736cf0b6fead23e2f0fe6322b52ed27f80cb4532b6da19698f80fecb0d7dccccf57dba241b12bacc9186997ab2a019843622a367d92a0d11","ssdeep":"192:A/xB0sANhtJMxl9/cm+K2WtGpQ+hntPed2gJumss2JsylUoIzy4AsckolSc96NcA:AvD0DJMJklo6htW8lNR2yyxzPydd4ykz","tlshash":"a022112155046cbea30a7b02fd17bf0a6ad821ff3d5a9ea1495e08ac7cf52798437748","size":10381,"data":"","first_seen":"2026-09-20T12:44:27.499444Z","last_seen":"2026-09-20T12:53:16.710911Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chocolate65.beer/assets/js/main.js","fqdn":"chocolate65.beer","domain":"chocolate65.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1475d7176f9bacd4b34aae4ce8103d3f","sha1":"2deb90a5f649c4412e2dd49948bfba0cbbec4cb6","sha256":"46912e0ac17731684597c3ff52ef27a0e3e007601f436696976ee8e416029f5e","sha512":"1edbf671548c8927bcfb0942b8e0fe53342f67109ae41ace4e79a9c8eee3a1c7cee6bfdb027517748718650bcbed298d0f75c31f65359e6f685a02a80e097aef","ssdeep":"192:vYwGkDVjUbj5NEbuSH4S7eZWtaQPCz+iUJL4w5wIwA+sEB6yf5ZIEXM3dO08uVw/:uZWaz+m/7Kw8OmOUAsego3","tlshash":"8192539d70bb083588eb727f578b6248362850037945ed85bfcc44a42fe1ea565fbbc8","size":21061,"data":"","first_seen":"2026-09-20T12:44:27.489329Z","last_seen":"2026-09-20T12:53:16.705628Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"chocolate65.beer/uploads/avatars/9706e079ba85cf5ccba2c083.jpg","fqdn":"chocolate65.beer","domain":"chocolate65.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chocolate65.beer/","date":"2026-09-20T12:52:45.248Z","timestamp":1789908765248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chocolate65.beer","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 09:40:28 GMT","end":"Tue, 15 Dec 2026 09:40:27 GMT"},"fingerprint":{"sha1":"66:4F:3F:E2:99:CD:31:9D:13:47:5F:19:09:95:F0:8A:8D:AF:4D:92","sha256":"D5:37:EE:CB:96:53:AA:4B:C1:2A:6C:7E:C1:A6:D3:F0:13:C2:82:90:2D:71:66:95:7A:37:70:A0:DF:D8:CA:7A"}}},"request":{"raw":"GET /uploads/avatars/9706e079ba85cf5ccba2c083.jpg HTTP/1.1\r\nHost: chocolate65.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chocolate65.beer/\r\nCookie: PHPSESSID=uo12mi53lehcea7k02l074k80g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 20 Sep 2026 12:52:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 16 Sep 2026 13:08:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaa94dd-25ea\"\r\nexpires: Tue, 20 Oct 2026 12:52:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9706,"size_decoded":7138,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 88\", baseline, precision 8, 320x320, components 3","md5":"bcc96537861ca633b5fe045a72281e60","sha1":"28e8fe1286c7cfbbe27082e00694e9de729b3bf8","sha256":"660ac3008277f77377afed673971dc037cd6e9cf49fa146313a1fbcf9113a307","sha512":"3d97ac69ab4a54c087db7b0066a5d84155fb6124cf6f5f59cc6683f9d429a554e23e835b286f2fb552854d77c82dd7932f1ce9cacc27f5b608f2cde2cabc1fde","ssdeep":"192:ikKZZE0rQ87glAgf8a1na1naBOdb1XGEswKX9RDTvsWs43hn/ctu:r90rQ6LiL1a1aIfXVswKX9db+43hn/Su","tlshash":"c7121863ee105e934961dbbdff1a0c7833ce552ea926bbed617a0fc12b501680cbb115","first_seen":"2026-09-20T12:44:27.490634Z","last_seen":"2026-09-20T12:53:16.694111Z","times_seen":2,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chocolate65.beer/","date":"2026-09-20T12:52:45.416Z","timestamp":1789908765416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://chocolate65.beer\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 10:29:44 GMT\r\nexpires: Sat, 18 Sep 2027 10:29:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 181381\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-09-20T14:53:12.700908Z","times_seen":54757,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":55,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chocolate65.beer/","date":"2026-09-20T12:52:45.420Z","timestamp":1789908765420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://chocolate65.beer\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 10:29:44 GMT\r\nexpires: Sat, 18 Sep 2027 10:29:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 181381\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-09-20T14:53:12.700908Z","times_seen":54757,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":63,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggmxSuXd.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chocolate65.beer/","date":"2026-09-20T12:52:45.424Z","timestamp":1789908765424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggmxSuXd.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://chocolate65.beer\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15120\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 06:53:06 GMT\r\nexpires: Fri, 17 Sep 2027 06:53:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 280779\r\nlast-modified: Thu, 04 Sep 2025 17:08:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15120,"size_decoded":15933,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15120, version 1.0","md5":"6d36d5bdedfabb5bbee2ab6b6ded3416","sha1":"1f62546fa0a051004f4faa3f40a4a8074a2e06ea","sha256":"3911b66d9f2e005a4b989223405d0e5032619c668597ba467cc76a23c8fffcfb","sha512":"21c425a24911d63daee9242105549805d53dbe91d463be1512949245d3c72769bd81b6a5617388776a204a45995a4365fb5dc0abc9b081f6abbb4018f36c2138","ssdeep":"384:BCX/6yjzk4RmmVzZQVIiSeYWsfTZW3xYuiM:BQ/2bm3QVd1YWB3X/","tlshash":"6162c0c2e4149ad6cea76175d373c84196d98ce0bdefa84098e32b414317b24bbdb7b4","first_seen":"2025-06-04T20:22:57.505569Z","last_seen":"2026-09-20T12:53:16.695486Z","times_seen":2836,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chocolate65.beer/uploads/menu/d6c88638e61881c38e9d21cb.jpg","fqdn":"chocolate65.beer","domain":"chocolate65.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://chocolate65.beer/","date":"2026-09-20T12:52:45.457Z","timestamp":1789908765457,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chocolate65.beer","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 09:40:28 GMT","end":"Tue, 15 Dec 2026 09:40:27 GMT"},"fingerprint":{"sha1":"66:4F:3F:E2:99:CD:31:9D:13:47:5F:19:09:95:F0:8A:8D:AF:4D:92","sha256":"D5:37:EE:CB:96:53:AA:4B:C1:2A:6C:7E:C1:A6:D3:F0:13:C2:82:90:2D:71:66:95:7A:37:70:A0:DF:D8:CA:7A"}}},"request":{"raw":"GET /uploads/menu/d6c88638e61881c38e9d21cb.jpg HTTP/1.1\r\nHost: chocolate65.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chocolate65.beer/\r\nCookie: PHPSESSID=uo12mi53lehcea7k02l074k80g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 20 Sep 2026 12:52:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 16 Sep 2026 11:23:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaa7c49-1c4e0\"\r\nexpires: Tue, 20 Oct 2026 12:52:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":115936,"size_decoded":116099,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 800x1066, components 3","md5":"9fd7fa79bc7e938caf4eaa50bec3db79","sha1":"a5b44b76be38213d075ddb8172c2b5bedb18c145","sha256":"68a3515bc44baeffcae75aec3219783293bd7e9b74022302cfd3e505283a3e3d","sha512":"a0149b19d29870a7c66952acc6f2cce81e67f97cb5ee2eb37ccafee6f6b5e4203cac48c5b5703930134396655d281b283079326be49f5e5808c5ecd99fe05d30","ssdeep":"3072:4OvwvP/EbHCo4t22dSOlSQ7w9n/UDmD8t/frFk1LZ5w4:4RP/2HCJ4s6/UKAt/frFr4","tlshash":"a7b312a4a1e4b3959c2a7d6d4f3fcc88d1f04edff159cab46aa0a25720cc1da035c66d","first_seen":"2026-09-20T12:44:27.494668Z","last_seen":"2026-09-20T12:53:16.696162Z","times_seen":2,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chocolate65.beer/","date":"2026-09-20T12:52:45.413Z","timestamp":1789908765413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://chocolate65.beer\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14500\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 12:47:56 GMT\r\nexpires: Sat, 18 Sep 2027 12:47:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 173089\r\nlast-modified: Thu, 04 Sep 2025 17:09:13 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14500,"size_decoded":15313,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14500, version 1.0","md5":"e58febde317b69ceb51690ea201850c9","sha1":"d8fc94bf7a39043a7759bd564a7e16b3ea080736","sha256":"c268b459a9329e59fecf39a17618efd44c71735532048d60b12aab76a8c14914","sha512":"af17f0a6913d974bd7d38a060549dacd158c667abb08f830d44d302c1a1cb4f8106eeeb772d2b4066be2c5a1e763d26042c707343770f5e84b0f5165cab9d96b","ssdeep":"384:4VvSHMmDtGjtHrBRvGjLWPSNRXZpyJ+kC18bZ:4VvSsmDt6LBROj1RXZ4J+318bZ","tlshash":"8a52b05ef04e86f0b51f2a7ece5c6a1153725e56134f2e50e967b0c8c75e82a1e27142","first_seen":"2025-06-05T11:45:07.756161Z","last_seen":"2026-09-20T12:53:16.696754Z","times_seen":4166,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":26,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofIMeaBXso.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chocolate65.beer/","date":"2026-09-20T12:52:45.415Z","timestamp":1789908765415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofIMeaBXso.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://chocolate65.beer\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:45:38 GMT\r\nexpires: Thu, 16 Sep 2027 10:45:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 353227\r\nlast-modified: Mon, 15 Sep 2025 17:03:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20776,"size_decoded":21589,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20776, version 1.0","md5":"fd4986b86093b8a3a9741457f6a37303","sha1":"c15c26d255937c0b1a47b6d641ee6a2de4392f6b","sha256":"63b14e3ef0966785438b8947380dfbcad178cbd3c6a5ed2172672ca0d8b839ac","sha512":"e2cbf9114b042c7818674b88b33d50d9aee1d5916fea130c45b9b3aaabd633ba47d0fedd9ccfd1d59bd846e0b5bd2734753532dca3002e3ac474aa60bec66482","ssdeep":"384:Yzb9yuV1JBCAg2k1UY3dpP7nqoJOEIeFdcZUqWZlAUuTqZgb2wc5KW+:YzbwJ1BvjnqoJOIGU1UUu+Ith7","tlshash":"a992d08400843fb9b1e492ff0954f77c3c5b5f446672cbe58aaca194ed09713aa91b2e","first_seen":"2025-09-17T11:10:44.166702Z","last_seen":"2026-09-20T14:40:29.81501Z","times_seen":1471,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":41,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chocolate65.beer/uploads/menu/f8edf5a4dd8b72b83e5a1334.jpg","fqdn":"chocolate65.beer","domain":"chocolate65.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://chocolate65.beer/","date":"2026-09-20T12:52:45.465Z","timestamp":1789908765465,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chocolate65.beer","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 09:40:28 GMT","end":"Tue, 15 Dec 2026 09:40:27 GMT"},"fingerprint":{"sha1":"66:4F:3F:E2:99:CD:31:9D:13:47:5F:19:09:95:F0:8A:8D:AF:4D:92","sha256":"D5:37:EE:CB:96:53:AA:4B:C1:2A:6C:7E:C1:A6:D3:F0:13:C2:82:90:2D:71:66:95:7A:37:70:A0:DF:D8:CA:7A"}}},"request":{"raw":"GET /uploads/menu/f8edf5a4dd8b72b83e5a1334.jpg HTTP/1.1\r\nHost: chocolate65.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chocolate65.beer/\r\nCookie: PHPSESSID=uo12mi53lehcea7k02l074k80g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 20 Sep 2026 12:52:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 16 Sep 2026 11:23:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaa7c49-16cac\"\r\nexpires: Tue, 20 Oct 2026 12:52:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93356,"size_decoded":93507,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 1066x800, components 3","md5":"2e07e8fd19946b64e63257994842eedd","sha1":"f3d2798e23a0bd8dad5b91ded2f4848bf00dfa7d","sha256":"a1db28f3c43ce6548acfd9e772ad582cc23ab7c31cf3595ee06befee7f25e8d7","sha512":"63ecbef9d0b2ed1716daf2fc4d45217c0c9fa5672621aa3fd1b21be01ea898411844f7dfc08302729f364ce132aaeb7fbecbff67a4ffc0ff41364d82a88731e4","ssdeep":"1536:gbWiO+xZ49Rqw9ixIEfhBdcmETWodbhuN/k8EHMOfI8pn7:mO0q9RQxIEfh8vTWodbkN/k8nz8pn7","tlshash":"6c9312c852b5315e442788cc6bc760deb8fb045c3f2e495e0d6adbb711dbacab68210c","first_seen":"2026-09-20T12:44:27.475321Z","last_seen":"2026-09-20T12:53:16.697814Z","times_seen":2,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chocolate65.beer/","fqdn":"chocolate65.beer","domain":"chocolate65.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T12:52:44.478Z","timestamp":1789908764478,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chocolate65.beer","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 09:40:28 GMT","end":"Tue, 15 Dec 2026 09:40:27 GMT"},"fingerprint":{"sha1":"66:4F:3F:E2:99:CD:31:9D:13:47:5F:19:09:95:F0:8A:8D:AF:4D:92","sha256":"D5:37:EE:CB:96:53:AA:4B:C1:2A:6C:7E:C1:A6:D3:F0:13:C2:82:90:2D:71:66:95:7A:37:70:A0:DF:D8:CA:7A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: chocolate65.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 20 Sep 2026 12:52:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=uo12mi53lehcea7k02l074k80g; path=/; HttpOnly; SameSite=Lax\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"uo12mi53lehcea7k02l074k80g","quoted":false,"path":"/","secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"PHPSESSID=uo12mi53lehcea7k02l074k80g; path=/; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":51528,"size_decoded":8856,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8219)","md5":"b31390aeb8ea6caf5ef801bf89b8a6ac","sha1":"509a9c2b4cf09cf40797ed8465cef387f2013c22","sha256":"b095bae2e5b44d3387fbeb01cb0c0520aa1aa5c84075e5806557829c6be0f188","sha512":"b73ec598853d32a2ebea8edab6e151c952376844c37a38f824fc39cd85d627989a8bf019399abb3c44d43d7ea27c8cc691747977b07063282ed8beb844862dc0","ssdeep":"1536:1Mif0lA6JkloKZlb4xabDk7KpJ4XuOBWEpl:1MRhl","tlshash":"7233ce2011b858771212a181ed566f0b7ec0e5bbea0b1a1037ad1bee2ff7c55d93b21d","first_seen":"2026-09-20T12:44:27.49793Z","last_seen":"2026-09-20T12:53:16.698416Z","times_seen":2,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":6,"connect":94,"send":0,"wait":100,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofIMeaBXso.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chocolate65.beer/","date":"2026-09-20T12:52:45.417Z","timestamp":1789908765417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofIMeaBXso.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://chocolate65.beer\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:45:38 GMT\r\nexpires: Thu, 16 Sep 2027 10:45:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 353227\r\nlast-modified: Mon, 15 Sep 2025 17:03:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20776,"size_decoded":21589,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20776, version 1.0","md5":"fd4986b86093b8a3a9741457f6a37303","sha1":"c15c26d255937c0b1a47b6d641ee6a2de4392f6b","sha256":"63b14e3ef0966785438b8947380dfbcad178cbd3c6a5ed2172672ca0d8b839ac","sha512":"e2cbf9114b042c7818674b88b33d50d9aee1d5916fea130c45b9b3aaabd633ba47d0fedd9ccfd1d59bd846e0b5bd2734753532dca3002e3ac474aa60bec66482","ssdeep":"384:Yzb9yuV1JBCAg2k1UY3dpP7nqoJOEIeFdcZUqWZlAUuTqZgb2wc5KW+:YzbwJ1BvjnqoJOIGU1UUu+Ith7","tlshash":"a992d08400843fb9b1e492ff0954f77c3c5b5f446672cbe58aaca194ed09713aa91b2e","first_seen":"2025-09-17T11:10:44.166702Z","last_seen":"2026-09-20T14:40:29.81501Z","times_seen":1471,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":51,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofIMeaBXso.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chocolate65.beer/","date":"2026-09-20T12:52:45.420Z","timestamp":1789908765420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofIMeaBXso.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://chocolate65.beer\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:45:38 GMT\r\nexpires: Thu, 16 Sep 2027 10:45:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 353227\r\nlast-modified: Mon, 15 Sep 2025 17:03:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20776,"size_decoded":21589,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20776, version 1.0","md5":"fd4986b86093b8a3a9741457f6a37303","sha1":"c15c26d255937c0b1a47b6d641ee6a2de4392f6b","sha256":"63b14e3ef0966785438b8947380dfbcad178cbd3c6a5ed2172672ca0d8b839ac","sha512":"e2cbf9114b042c7818674b88b33d50d9aee1d5916fea130c45b9b3aaabd633ba47d0fedd9ccfd1d59bd846e0b5bd2734753532dca3002e3ac474aa60bec66482","ssdeep":"384:Yzb9yuV1JBCAg2k1UY3dpP7nqoJOEIeFdcZUqWZlAUuTqZgb2wc5KW+:YzbwJ1BvjnqoJOIGU1UUu+Ith7","tlshash":"a992d08400843fb9b1e492ff0954f77c3c5b5f446672cbe58aaca194ed09713aa91b2e","first_seen":"2025-09-17T11:10:44.166702Z","last_seen":"2026-09-20T14:40:29.81501Z","times_seen":1471,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":55,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chocolate65.beer/","date":"2026-09-20T12:52:45.423Z","timestamp":1789908765423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://chocolate65.beer\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14500\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 12:47:56 GMT\r\nexpires: Sat, 18 Sep 2027 12:47:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 173089\r\nlast-modified: Thu, 04 Sep 2025 17:09:13 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14500,"size_decoded":15313,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14500, version 1.0","md5":"e58febde317b69ceb51690ea201850c9","sha1":"d8fc94bf7a39043a7759bd564a7e16b3ea080736","sha256":"c268b459a9329e59fecf39a17618efd44c71735532048d60b12aab76a8c14914","sha512":"af17f0a6913d974bd7d38a060549dacd158c667abb08f830d44d302c1a1cb4f8106eeeb772d2b4066be2c5a1e763d26042c707343770f5e84b0f5165cab9d96b","ssdeep":"384:4VvSHMmDtGjtHrBRvGjLWPSNRXZpyJ+kC18bZ:4VvSsmDt6LBROj1RXZ4J+318bZ","tlshash":"8a52b05ef04e86f0b51f2a7ece5c6a1153725e56134f2e50e967b0c8c75e82a1e27142","first_seen":"2025-06-05T11:45:07.756161Z","last_seen":"2026-09-20T12:53:16.696754Z","times_seen":4166,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":36,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chocolate65.beer/uploads/menu/ba083980837aef0b08ba6a59.jpg","fqdn":"chocolate65.beer","domain":"chocolate65.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://chocolate65.beer/","date":"2026-09-20T12:52:45.459Z","timestamp":1789908765459,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chocolate65.beer","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 09:40:28 GMT","end":"Tue, 15 Dec 2026 09:40:27 GMT"},"fingerprint":{"sha1":"66:4F:3F:E2:99:CD:31:9D:13:47:5F:19:09:95:F0:8A:8D:AF:4D:92","sha256":"D5:37:EE:CB:96:53:AA:4B:C1:2A:6C:7E:C1:A6:D3:F0:13:C2:82:90:2D:71:66:95:7A:37:70:A0:DF:D8:CA:7A"}}},"request":{"raw":"GET /uploads/menu/ba083980837aef0b08ba6a59.jpg HTTP/1.1\r\nHost: chocolate65.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chocolate65.beer/\r\nCookie: PHPSESSID=uo12mi53lehcea7k02l074k80g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 20 Sep 2026 12:52:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 16 Sep 2026 11:10:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaa7923-3e4a5\"\r\nexpires: Tue, 20 Oct 2026 12:52:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":255141,"size_decoded":255427,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 1573x800, components 3","md5":"21d0e852acd791c995b4eea2e3c61831","sha1":"aad71f48bfeaee92fef8880651b291f740b57baa","sha256":"1da1e7b7169393ce6a442d60a38ded413b7aa0d3fa59e2192212987a2c28dbac","sha512":"08edf58971fcc11e1e4a815489c31748d068abe352fc4a549690cd16b7df5dddd90b45210f4d6ff9446a2ee7737abbe42b31cd5d69b25c67a2fe4cc2eab95b5d","ssdeep":"6144:1Dv2RB/xQHeYZbizA9wK1urnRm+keX1qpuQeQ:8L++WuzaGR5kECuQeQ","tlshash":"c04423df2a8c5738c73c98a0c0c15d79e06468fc5bf24c96d23185d9e97a9e5b00ef28","first_seen":"2026-09-20T12:44:27.485462Z","last_seen":"2026-09-20T12:53:16.698992Z","times_seen":2,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chocolate65.beer/","date":"2026-09-20T12:52:45.410Z","timestamp":1789908765410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://chocolate65.beer\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 10:29:44 GMT\r\nexpires: Sat, 18 Sep 2027 10:29:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 181381\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-09-20T14:53:12.700908Z","times_seen":54757,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":47,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chocolate65.beer/","date":"2026-09-20T12:52:45.421Z","timestamp":1789908765421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://chocolate65.beer\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 20 Sep 2026 10:15:43 GMT\r\nexpires: Mon, 20 Sep 2027 10:15:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 9422\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":25647,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-09-20T14:11:21.625465Z","times_seen":47009,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":30,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito:wght@400;600;700;800\u0026family=Manrope:wght@600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chocolate65.beer/","date":"2026-09-20T12:52:45.237Z","timestamp":1789908765237,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=Nunito:wght@400;600;700;800\u0026family=Manrope:wght@600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chocolate65.beer/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 20 Sep 2026 12:52:45 GMT\r\ndate: Sun, 20 Sep 2026 12:52:45 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13716,"size_decoded":1524,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"24061b7b092318c7c35429b447c0a6cd","sha1":"26fbb7d03f5876ab97b6d489e7185ff5f5d436b1","sha256":"931d35c1ae3e8ec504ce88de6e07b899e87ec3119ba267b79eb3330455fa21fd","sha512":"6ebc226291a98d90f242e0651ce7f21bbfd172ae5b0ca80a48da5cc2c1a38a5752520c8e3efe6f88d028189649b90371301e42a86261be97d6fada8fb99a6a57","ssdeep":"192:VJlOV3MM8b/JGNV3TT80uJHYV3668h1H+yptkUkH0yXLkeLHbywkkdiHyy1RkoH:3E02EQIl6DPe9hV","tlshash":"c452da91002be400eb471cc277cf7e36ad4e61513454c5baabfe5898ecabd232324b1e","first_seen":"2026-09-20T12:44:27.479957Z","last_seen":"2026-09-20T12:53:16.70011Z","times_seen":2,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":36,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chocolate65.beer/","date":"2026-09-20T12:52:45.411Z","timestamp":1789908765411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://chocolate65.beer\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 20 Sep 2026 10:15:43 GMT\r\nexpires: Mon, 20 Sep 2027 10:15:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 9422\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":25647,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-09-20T14:11:21.625465Z","times_seen":47009,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":20,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chocolate65.beer/uploads/menu/5919a7d2388c99986630cf05.jpg","fqdn":"chocolate65.beer","domain":"chocolate65.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://chocolate65.beer/","date":"2026-09-20T12:52:45.453Z","timestamp":1789908765453,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chocolate65.beer","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 09:40:28 GMT","end":"Tue, 15 Dec 2026 09:40:27 GMT"},"fingerprint":{"sha1":"66:4F:3F:E2:99:CD:31:9D:13:47:5F:19:09:95:F0:8A:8D:AF:4D:92","sha256":"D5:37:EE:CB:96:53:AA:4B:C1:2A:6C:7E:C1:A6:D3:F0:13:C2:82:90:2D:71:66:95:7A:37:70:A0:DF:D8:CA:7A"}}},"request":{"raw":"GET /uploads/menu/5919a7d2388c99986630cf05.jpg HTTP/1.1\r\nHost: chocolate65.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chocolate65.beer/\r\nCookie: PHPSESSID=uo12mi53lehcea7k02l074k80g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 20 Sep 2026 12:52:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 16 Sep 2026 11:10:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaa7923-1dcd6\"\r\nexpires: Tue, 20 Oct 2026 12:52:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":122070,"size_decoded":122231,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 800x1066, components 3","md5":"b9169910fa5cfad656761d972892b181","sha1":"b4c0c01ec7fad2921bb3b69bfded8927ad88a30d","sha256":"04d135f6adfd0e5388dbbcacc500384d51e2ea71600454a6f1144da2e9ba7a0f","sha512":"27c77553f8cc8250777b43edbb95f573378f8c572ff94f9cd57f46eb9189f5358c20cb263efaa4a4f8dedc378323de380453f60b8fdc877120cb29b2c838aab4","ssdeep":"3072:Q+hECRXhgdlyC9ezCr7rL4uYS+4MMuSMHNcO7CRmU3FPycO5:VbRxgdlysezCr7rL4uYS+4DiNcdRmOt2","tlshash":"03c312558e136992452c7d3210210a1acf653eefcf016da8de1bbfd1f3d65d938848ea","first_seen":"2026-09-20T12:44:27.482797Z","last_seen":"2026-09-20T12:53:16.700666Z","times_seen":2,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chocolate65.beer/uploads/menu/1385647b61b6a401055b44ae.jpg","fqdn":"chocolate65.beer","domain":"chocolate65.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://chocolate65.beer/","date":"2026-09-20T12:52:45.461Z","timestamp":1789908765461,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chocolate65.beer","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 09:40:28 GMT","end":"Tue, 15 Dec 2026 09:40:27 GMT"},"fingerprint":{"sha1":"66:4F:3F:E2:99:CD:31:9D:13:47:5F:19:09:95:F0:8A:8D:AF:4D:92","sha256":"D5:37:EE:CB:96:53:AA:4B:C1:2A:6C:7E:C1:A6:D3:F0:13:C2:82:90:2D:71:66:95:7A:37:70:A0:DF:D8:CA:7A"}}},"request":{"raw":"GET /uploads/menu/1385647b61b6a401055b44ae.jpg HTTP/1.1\r\nHost: chocolate65.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chocolate65.beer/\r\nCookie: PHPSESSID=uo12mi53lehcea7k02l074k80g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 20 Sep 2026 12:52:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 16 Sep 2026 11:23:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaa7c4a-14fd1\"\r\nexpires: Tue, 20 Oct 2026 12:52:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85969,"size_decoded":85025,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 1201x800, components 3","md5":"f39c42b1762636ff049df8c2867dc9e8","sha1":"752b7d2ff8a2b099a97c447ce1613a427b12cbd1","sha256":"54d66c939935db5989149250f8c4d04b68341f5f7853122298efd53854e443c2","sha512":"45fc6760fe500f3f8be2f5a9222950816a08991c97fe325f1667968afd58392b6d9303e70017eb2e4c00f6e743806e553cee2a6641766e832688dcd67c55cc01","ssdeep":"1536:X4ztcBFNyHb4Azl42jHWldYS/3kK2yt+Wx9DskUAOeNvX06qtpnS05ORJh9O:oZcBbyHb4+m2jHWjYS/3gylCm39GpSsD","tlshash":"3d8312bf8c8bcb621519d7fdbea1eced1ac5554e68bc23c84131edae6d144738c9201a","first_seen":"2026-09-20T12:44:27.49195Z","last_seen":"2026-09-20T12:53:16.701243Z","times_seen":2,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chocolate65.beer/uploads/menu/7da90355812c752bf8a7ce79.jpg","fqdn":"chocolate65.beer","domain":"chocolate65.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://chocolate65.beer/","date":"2026-09-20T12:52:45.464Z","timestamp":1789908765464,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chocolate65.beer","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 09:40:28 GMT","end":"Tue, 15 Dec 2026 09:40:27 GMT"},"fingerprint":{"sha1":"66:4F:3F:E2:99:CD:31:9D:13:47:5F:19:09:95:F0:8A:8D:AF:4D:92","sha256":"D5:37:EE:CB:96:53:AA:4B:C1:2A:6C:7E:C1:A6:D3:F0:13:C2:82:90:2D:71:66:95:7A:37:70:A0:DF:D8:CA:7A"}}},"request":{"raw":"GET /uploads/menu/7da90355812c752bf8a7ce79.jpg HTTP/1.1\r\nHost: chocolate65.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chocolate65.beer/\r\nCookie: PHPSESSID=uo12mi53lehcea7k02l074k80g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 20 Sep 2026 12:52:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 16 Sep 2026 11:23:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaa7c49-1cbce\"\r\nexpires: Tue, 20 Oct 2026 12:52:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":117710,"size_decoded":117796,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 1066x800, components 3","md5":"0627f5408ceeff866df97f293477967c","sha1":"f33bf1f936641f908f68507c34998a3eefc5bc7e","sha256":"e5ad4a9cc575eebb40c56f735ec87c99bda0daddd7a3b6e4b12a9d2db7ebb7a9","sha512":"208c90f95224c567f49b8c255e9f6d6998a14589fed3319e592a3101995caf6f7aba6472f58403ebf070be2a73f1337c14cfc870fcd846907c06fcfd623ee780","ssdeep":"3072:I3GGfP/on0b5vt9oCAm9vG0L+J+K6/Yx6hdd:eGG3Qmpt9yx+nf","tlshash":"1bb312950bb789cb5fb35720f46930dd22720a7e9ca081c9bf99848a7bcea42514df0d","first_seen":"2026-09-20T12:44:27.493438Z","last_seen":"2026-09-20T12:53:16.701986Z","times_seen":2,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chocolate65.beer/uploads/menu/1d417419458ec37a34fc96b5.jpg","fqdn":"chocolate65.beer","domain":"chocolate65.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://chocolate65.beer/","date":"2026-09-20T12:52:45.454Z","timestamp":1789908765454,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chocolate65.beer","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 09:40:28 GMT","end":"Tue, 15 Dec 2026 09:40:27 GMT"},"fingerprint":{"sha1":"66:4F:3F:E2:99:CD:31:9D:13:47:5F:19:09:95:F0:8A:8D:AF:4D:92","sha256":"D5:37:EE:CB:96:53:AA:4B:C1:2A:6C:7E:C1:A6:D3:F0:13:C2:82:90:2D:71:66:95:7A:37:70:A0:DF:D8:CA:7A"}}},"request":{"raw":"GET /uploads/menu/1d417419458ec37a34fc96b5.jpg HTTP/1.1\r\nHost: chocolate65.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chocolate65.beer/\r\nCookie: PHPSESSID=uo12mi53lehcea7k02l074k80g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 20 Sep 2026 12:52:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 16 Sep 2026 11:10:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaa7923-1fed6\"\r\nexpires: Tue, 20 Oct 2026 12:52:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":130774,"size_decoded":130962,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 1111x800, components 3","md5":"3bbec92b39d8452f7a36c496cc42ee76","sha1":"09edc1e88250f8a8d19699da2b98fe70e28e493d","sha256":"92327f9193e182ce8ccf4463daedaef7554d81d68ee4e71a2e080b30cc9f603d","sha512":"ef3f89e6c618c3c80e7bd0bf15685b2e60b11403d3c460f6e083146cd1202d2064f26a08f49ee81e88b682e0307d78400d67edbd17977977aa496bf569e39348","ssdeep":"3072:WjR1VQWKwEOqskV8D6QMQWQncwyiOhsOXBw4MDAF16AvH:YVNKwEtvYcqOhsmBw4McF1VvH","tlshash":"92d3127f8cc9f1f08e186f18534497c9b80be3ad979b32d415608a1e8d531aac4ab1f8","first_seen":"2026-09-20T12:44:27.484118Z","last_seen":"2026-09-20T12:53:16.702805Z","times_seen":2,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chocolate65.beer/uploads/menu/c8800ee697bac403655748df.jpg","fqdn":"chocolate65.beer","domain":"chocolate65.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://chocolate65.beer/","date":"2026-09-20T12:52:45.455Z","timestamp":1789908765455,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chocolate65.beer","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 09:40:28 GMT","end":"Tue, 15 Dec 2026 09:40:27 GMT"},"fingerprint":{"sha1":"66:4F:3F:E2:99:CD:31:9D:13:47:5F:19:09:95:F0:8A:8D:AF:4D:92","sha256":"D5:37:EE:CB:96:53:AA:4B:C1:2A:6C:7E:C1:A6:D3:F0:13:C2:82:90:2D:71:66:95:7A:37:70:A0:DF:D8:CA:7A"}}},"request":{"raw":"GET /uploads/menu/c8800ee697bac403655748df.jpg HTTP/1.1\r\nHost: chocolate65.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chocolate65.beer/\r\nCookie: PHPSESSID=uo12mi53lehcea7k02l074k80g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 20 Sep 2026 12:52:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 16 Sep 2026 11:10:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaa7923-32f59\"\r\nexpires: Tue, 20 Oct 2026 12:52:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":208729,"size_decoded":208897,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 1032x800, components 3","md5":"a5bcda95e2e5cfcc030218d31f20eb1b","sha1":"7c76722ea3cdd80be3ed3aea72fb3c54e7f6980a","sha256":"69c337ea50cbb02f8c4be943dbc8ca52502347352be342b25dce591a4b0db152","sha512":"6b4aa2760de830d2babd9661560643474d2865a605939bca06777eafb4a4d1bab9ff5741b3ce2c1ae3d5b2e90dc989b0f233d5df447f1862024e55a088237896","ssdeep":"6144:vkg2dNjew1SVG5rK1nJ9+g4S1BGWpAKjYL:cBdNjB1SVP1nv+g4sBGWj8L","tlshash":"8d142224e3a96a0a0f95dc30e7c72f0bca30954f2316be925e77975137c44b2a1e96c7","first_seen":"2026-09-20T12:44:27.477744Z","last_seen":"2026-09-20T12:53:16.703801Z","times_seen":2,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chocolate65.beer/uploads/menu/b86689dd9c0036b6ffde16a3.jpg","fqdn":"chocolate65.beer","domain":"chocolate65.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://chocolate65.beer/","date":"2026-09-20T12:52:45.460Z","timestamp":1789908765460,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chocolate65.beer","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 09:40:28 GMT","end":"Tue, 15 Dec 2026 09:40:27 GMT"},"fingerprint":{"sha1":"66:4F:3F:E2:99:CD:31:9D:13:47:5F:19:09:95:F0:8A:8D:AF:4D:92","sha256":"D5:37:EE:CB:96:53:AA:4B:C1:2A:6C:7E:C1:A6:D3:F0:13:C2:82:90:2D:71:66:95:7A:37:70:A0:DF:D8:CA:7A"}}},"request":{"raw":"GET /uploads/menu/b86689dd9c0036b6ffde16a3.jpg HTTP/1.1\r\nHost: chocolate65.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chocolate65.beer/\r\nCookie: PHPSESSID=uo12mi53lehcea7k02l074k80g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 20 Sep 2026 12:52:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 16 Sep 2026 11:23:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaa7c4a-26627\"\r\nexpires: Tue, 20 Oct 2026 12:52:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":157223,"size_decoded":157264,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 1200x800, components 3","md5":"c8560f24610ccf4578c44549c20487c0","sha1":"41ee1ed0a9156019d2e94fdebf407d029334a194","sha256":"1e5d4490415fc902556838d5965daea78b6091b738ee7505126fbd5c3bd7472e","sha512":"0279555e0109e2594f964ab2a4ccca164e1193ccf54dd0db9d2a45e531bb35e07f5a80a7f28d1b928ccc34c5599fbe40840b77ded65f85df13400f61897cc0aa","ssdeep":"3072:c+MBqfjzpc0QUMVSFZX1Qpllyt/hDztQX31pBWcP47mYImlGdXmA7YKKX:cRUGIESFZqplIHGX3RWcPwmYvyXmAM5","tlshash":"9ae312838f32eb59b1260b30ea80c6dff4a9138541c8ff05e674dad92d696db907187d","first_seen":"2026-09-20T12:44:27.487322Z","last_seen":"2026-09-20T12:53:16.704732Z","times_seen":2,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chocolate65.beer/assets/js/main.js","fqdn":"chocolate65.beer","domain":"chocolate65.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chocolate65.beer/","date":"2026-09-20T12:52:45.242Z","timestamp":1789908765242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chocolate65.beer","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 09:40:28 GMT","end":"Tue, 15 Dec 2026 09:40:27 GMT"},"fingerprint":{"sha1":"66:4F:3F:E2:99:CD:31:9D:13:47:5F:19:09:95:F0:8A:8D:AF:4D:92","sha256":"D5:37:EE:CB:96:53:AA:4B:C1:2A:6C:7E:C1:A6:D3:F0:13:C2:82:90:2D:71:66:95:7A:37:70:A0:DF:D8:CA:7A"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: chocolate65.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chocolate65.beer/\r\nCookie: PHPSESSID=uo12mi53lehcea7k02l074k80g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 20 Sep 2026 12:52:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 16 Sep 2026 12:30:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaa8be3-5245\"\r\nexpires: Mon, 21 Sep 2026 00:52:45 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21061,"size_decoded":5395,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"1475d7176f9bacd4b34aae4ce8103d3f","sha1":"2deb90a5f649c4412e2dd49948bfba0cbbec4cb6","sha256":"46912e0ac17731684597c3ff52ef27a0e3e007601f436696976ee8e416029f5e","sha512":"1edbf671548c8927bcfb0942b8e0fe53342f67109ae41ace4e79a9c8eee3a1c7cee6bfdb027517748718650bcbed298d0f75c31f65359e6f685a02a80e097aef","ssdeep":"192:vYwGkDVjUbj5NEbuSH4S7eZWtaQPCz+iUJL4w5wIwA+sEB6yf5ZIEXM3dO08uVw/:uZWaz+m/7Kw8OmOUAsego3","tlshash":"8192539d70bb083588eb727f578b6248362850037945ed85bfcc44a42fe1ea565fbbc8","first_seen":"2026-09-20T12:44:27.489329Z","last_seen":"2026-09-20T12:53:16.705628Z","times_seen":2,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chocolate65.beer/uploads/menu/99bf776f97eadf20c146363b.jpg","fqdn":"chocolate65.beer","domain":"chocolate65.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://chocolate65.beer/","date":"2026-09-20T12:52:45.458Z","timestamp":1789908765458,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chocolate65.beer","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 09:40:28 GMT","end":"Tue, 15 Dec 2026 09:40:27 GMT"},"fingerprint":{"sha1":"66:4F:3F:E2:99:CD:31:9D:13:47:5F:19:09:95:F0:8A:8D:AF:4D:92","sha256":"D5:37:EE:CB:96:53:AA:4B:C1:2A:6C:7E:C1:A6:D3:F0:13:C2:82:90:2D:71:66:95:7A:37:70:A0:DF:D8:CA:7A"}}},"request":{"raw":"GET /uploads/menu/99bf776f97eadf20c146363b.jpg HTTP/1.1\r\nHost: chocolate65.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chocolate65.beer/\r\nCookie: PHPSESSID=uo12mi53lehcea7k02l074k80g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 20 Sep 2026 12:52:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 16 Sep 2026 11:10:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaa7923-17758\"\r\nexpires: Tue, 20 Oct 2026 12:52:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96088,"size_decoded":93261,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 1066x800, components 3","md5":"df4ddb530d8cd8d3dd819da17964faab","sha1":"85dc3e5e88683bf6d18443dcc916e02e4e0f565b","sha256":"99ab19d535c8988a9c4b0f04318e3e5baff622e0ea96a147bc760e954b44a7e3","sha512":"47c32e1a79759df43cc096636cb75d4901b77d8c1af15baa6a6af1c123098aee8e719b404823da9067e704b50b294e1b6a0605a85d99324743cf551d70132934","ssdeep":"1536:gyr//ngdkQPBXFoa/CCpMFhO7zUPwIskuvwbmicPMiN3rfQg3Vq85/cGD:d/ngd5PpFoa/CCahOOwIs3MyPMuVmS","tlshash":"7b93f1075a9e4b4a603d5cd76db31f9e2f083f28e8812dff14121b933a71169691e46e","first_seen":"2026-09-20T12:44:27.474133Z","last_seen":"2026-09-20T12:53:16.706587Z","times_seen":2,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chocolate65.beer/uploads/menu/c7ae64d772c89a0b809a1ada.jpg","fqdn":"chocolate65.beer","domain":"chocolate65.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://chocolate65.beer/","date":"2026-09-20T12:52:45.463Z","timestamp":1789908765463,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chocolate65.beer","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 09:40:28 GMT","end":"Tue, 15 Dec 2026 09:40:27 GMT"},"fingerprint":{"sha1":"66:4F:3F:E2:99:CD:31:9D:13:47:5F:19:09:95:F0:8A:8D:AF:4D:92","sha256":"D5:37:EE:CB:96:53:AA:4B:C1:2A:6C:7E:C1:A6:D3:F0:13:C2:82:90:2D:71:66:95:7A:37:70:A0:DF:D8:CA:7A"}}},"request":{"raw":"GET /uploads/menu/c7ae64d772c89a0b809a1ada.jpg HTTP/1.1\r\nHost: chocolate65.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chocolate65.beer/\r\nCookie: PHPSESSID=uo12mi53lehcea7k02l074k80g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 20 Sep 2026 12:52:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 16 Sep 2026 11:10:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaa7923-1f488\"\r\nexpires: Tue, 20 Oct 2026 12:52:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":128136,"size_decoded":128351,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 800x813, components 3","md5":"ba73371d6a4314df12ea81de04fed836","sha1":"651929bd2fd88881a8a73d32bee1382ef40499bb","sha256":"88c4f247b197e68d6c3538d572c497cdcbe67f484bd5c27b59cd300e4e266dd4","sha512":"87b52b9e302a7113563218a288ab17b1abd35c0ed2e029d0c0ff95282d8440524c1bc36cd1e1cfb49d370549c0d3d258fc74775a70ed8f945638bcf98c75cf99","ssdeep":"3072:nceKoorWGcDu1nOV7JBjwW0OPOEkm8O8/oHBsr2aKK:nctBrlcDuc9H0OPOEkm0/EsrFKK","tlshash":"a4c3125b00938f8a588ee47fe05dd3c9208ce7f63361e627dae44732a2259f78466d5c","first_seen":"2026-09-20T12:44:27.496049Z","last_seen":"2026-09-20T12:53:16.708085Z","times_seen":2,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chocolate65.beer/uploads/menu/03b2b6566a8b2052d65c6d1a.jpg","fqdn":"chocolate65.beer","domain":"chocolate65.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://chocolate65.beer/","date":"2026-09-20T12:52:45.467Z","timestamp":1789908765467,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chocolate65.beer","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 09:40:28 GMT","end":"Tue, 15 Dec 2026 09:40:27 GMT"},"fingerprint":{"sha1":"66:4F:3F:E2:99:CD:31:9D:13:47:5F:19:09:95:F0:8A:8D:AF:4D:92","sha256":"D5:37:EE:CB:96:53:AA:4B:C1:2A:6C:7E:C1:A6:D3:F0:13:C2:82:90:2D:71:66:95:7A:37:70:A0:DF:D8:CA:7A"}}},"request":{"raw":"GET /uploads/menu/03b2b6566a8b2052d65c6d1a.jpg HTTP/1.1\r\nHost: chocolate65.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chocolate65.beer/\r\nCookie: PHPSESSID=uo12mi53lehcea7k02l074k80g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 20 Sep 2026 12:52:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 16 Sep 2026 11:23:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaa7c49-12d76\"\r\nexpires: Tue, 20 Oct 2026 12:52:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77174,"size_decoded":74486,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 800x820, components 3","md5":"6e1e935266db72846efb96625e6e0e21","sha1":"8d376556566acf6419de6e97a76a187eb2503a55","sha256":"6373a1eb9c91e70b5b10b7c0507ba49362588404cf35af89695e7c10f07339ee","sha512":"d1412ae833cf25d35e11a52b03885e672fd6c5e7aba05a0860870c69887a702723ce391e355a2cf06c2dc4b0f002f3b7bba4e246c5c6105952d829cb39f62e2b","ssdeep":"1536:Tk+NxunhTajFoiTp4ky9hJteAmQMGcK9bHGpAgYov1jDVT8TmR:bxuIpoyp3wX+rG1bHGpArSJRITmR","tlshash":"6473f2a3d9229eb3a8e4096e3d1b2f3056059a0c651477ea1d39dccb3e251f02e195fc","first_seen":"2026-09-20T12:44:27.472908Z","last_seen":"2026-09-20T12:53:16.709019Z","times_seen":2,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chocolate65.beer/assets/css/style.css","fqdn":"chocolate65.beer","domain":"chocolate65.beer","tld":"beer"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chocolate65.beer/","date":"2026-09-20T12:52:45.240Z","timestamp":1789908765240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chocolate65.beer","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 09:40:28 GMT","end":"Tue, 15 Dec 2026 09:40:27 GMT"},"fingerprint":{"sha1":"66:4F:3F:E2:99:CD:31:9D:13:47:5F:19:09:95:F0:8A:8D:AF:4D:92","sha256":"D5:37:EE:CB:96:53:AA:4B:C1:2A:6C:7E:C1:A6:D3:F0:13:C2:82:90:2D:71:66:95:7A:37:70:A0:DF:D8:CA:7A"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: chocolate65.beer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chocolate65.beer/\r\nCookie: PHPSESSID=uo12mi53lehcea7k02l074k80g\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 20 Sep 2026 12:52:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 16 Sep 2026 12:57:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aaa9226-6ca9\"\r\nexpires: Mon, 21 Sep 2026 00:52:45 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27817,"size_decoded":6507,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"fee2ff79b6b8bfbbb7fed267b301f3bd","sha1":"3ecba5d445a27782c61845ec6fc241de8361e0cd","sha256":"bb8c7d7ef8b8075abe0f3b2f85df110117f363c558597dbd1f533c588ed8a54e","sha512":"bebd8d16091aebff760cbfca8ebf70a7c26ddb45f171fc78a9fbb4a9575edf9fb414c46b3b4d5caa51eb56e56932c5ec309b3634b4177f95fce379ec20fc6f98","ssdeep":"768:tnar4V7BSHiVkcDHwUsKlkFyNax2B/q7J8Hutnop:M4xBSHukAK+kF5x2B/ouOtnop","tlshash":"65c25f0727181124f957f5147e939bdeb328a103d209e6bdaee6540cc6ce7f845bab88","first_seen":"2026-09-20T12:44:27.481545Z","last_seen":"2026-09-20T12:53:16.710034Z","times_seen":2,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"chocolate65.beer","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}