{"report_id":"2d5fc9d1-4589-475a-8be5-4ab21bbe14f7","version":6,"status":"done","tags":[],"date":"2026-02-13T03:14:56Z","url":{"schema":"http","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"title":"formeinsatz.de - Unterstützung, Beratung, Dienstleistung, Flexibilität, Zuverlässigkeit, Erfahrung, Formeinsatz","dom":{"size":111002,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7565)","md5":"defa952af201d45ade2cc3654d38cd9d","sha1":"f1d00fecc3336e07f851ff56eba9bbc86733f6a7","sha256":"29fec68c696224381a93f1bda6415d02eec0f6c7a5c5fae115dcaa31d17349bb","sha512":"d11057dc797b84f22b87803f6dcf331cc5d7536f5406541ba3c68199150d1664e94fd1add8e2b07dfc365448ac14aba8e351137713e8493c8ab278813bf40d9f","ssdeep":"3072:AvLW3k6SHGoMpWAFQ9JweArf7YQh/3vr0k0Q0pwLwWpdWuh:AvLW3k6SHGoMpWAFQ9JweArf8Qh/3vr5","tlshash":"26b33b6521832035e356b0a1fe5ece4ef9b9509b32c98448a29dd6b13c5ccfbc72693d","dom_hash":"domhash5c5d08d664bfe12110832cd616fd2a62","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-20T03:14:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.formeinsatz.de","ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-13T03:14:57.513836Z","last_seen":"2026-02-13T03:14:57.513836Z","alert_count":0,"request_count":10,"received_data":591911,"sent_data":4720,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.25.3.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"cdn.billiger.com","ip":{"addr":"104.20.37.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1999-01-14","domain_rank":1988102,"first_seen":"2013-04-18T12:22:37Z","last_seen":"2026-02-08T08:07:05.865038Z","alert_count":0,"request_count":6,"received_data":28816,"sent_data":3468,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"s.cdn-fileserver.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-08","domain_rank":1473336,"first_seen":"2025-04-11T18:11:28.393379Z","last_seen":"2026-02-09T02:20:42.751184Z","alert_count":4,"request_count":2,"received_data":58993,"sent_data":1062,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"media.averdo.com","ip":{"addr":"144.76.36.66","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2000-05-04","domain_rank":0,"first_seen":"2024-03-21T10:59:00Z","last_seen":"2026-02-12T02:25:47.841116Z","alert_count":0,"request_count":2,"received_data":118708,"sent_data":960,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"kwserving.com","ip":{"addr":"172.67.140.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-03","domain_rank":0,"first_seen":"2026-01-15T00:52:10.156341Z","last_seen":"2026-02-06T03:06:52.396704Z","alert_count":0,"request_count":2,"received_data":203411,"sent_data":1320,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba946809e73bded12594bacc7ecf4110","sha1":"4422049063038bef25db305db08a2e481ef79f12","sha256":"0379aeda59ffd744d373a47f164e80abac4ae7ef490eba95a919eb6bb5984cfd","sha512":"3221ce1e8b2fcd76c4a84e7d7e17088880786b042962ffc98bb9164d177390e60e3c7ab7ef55745225bfe63bd2cbf67e3e879662fdab6e5a50b64539abf9b90d","ssdeep":"","tlshash":"38b002130407844474a121f6577efeb4771e216a21d499007add85346f762d7da64ed0","size":119,"data":"","first_seen":"2026-01-13T01:25:30.945069Z","last_seen":"2026-05-27T13:13:31.423121Z","times_seen":477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5289d1a2dd9f0c7fb1d36f2c49d71314","sha1":"1d3bb1d3f60e656e8cba0358f927ec3008fa2124","sha256":"e3aa534522c4c5658b4887df51912ccea10a2952b9b10d26c62b07b28557e01d","sha512":"0964ec809397e316fe4205b582d0d152508d85ce7c8ad9a2f5aa6faf4e248ef2494c67a233abd104c8a51a96a37f776b00bb03582a5abf5fff290211dba2bb09","ssdeep":"","tlshash":"cef09757b06b0ab508bf58d063ef524c391da60b1800c002b50c9a426f32e4a0aba6ec","size":465,"data":"","first_seen":"2025-03-23T01:08:28.984097Z","last_seen":"2026-05-27T13:13:31.42446Z","times_seen":649,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kwserving.com/sr/754870121/SAFEFRAME.html?ule=386\u0026\u0026kkdd=HA%7CH%7Cn9A*\u0026Xe=WBB2UcfaBnVf2*UVVnW\u0026~3Gu=2\u00266mGR=2\u0026Nm(G=2\u0026T3X=WVna\u0026PmT)=gWWnU\u0026Te3=VKLB2I.W7\u0026TGT3=6L4VpLiU!p!fu0fUkP-6t~%3D%3D\u0026Tue3=BcV2af*Bf\u0026me0)=UB2Hfc2\u0026TT=Ol\u0026mT=2n\u0026u)E4uk=(PPGm%3A%2F%2FNNNh-Ju6)eQmRP0h3)%2F\u0026Qm)=c\u00264~3=a\u0026kW(JmP=MNm)uXeQ~hTJ6\u0026eN=WfV2\u0026NkmPG=W\u00266T-=nfVan\u0026G~e3=G2WafcWnBVUaPf2f*2fWn2nWa\u0026G~e3m=W\u0026(P6kmuT=W\u0026sflct=7625942\u0026ure=1#\u0026startTime=1770952473484\u0026l1ch=0\u0026l2type=scs_newfl\u0026sttm=1770952473495\u0026upk=1770952473.22617\u0026hvsid=00001770952473495028899290081799\u0026verid=9121199\u0026tdAdd[]=%257C%2540%257Csde%253D1%257C%2540%257Cadepth%253D1%257C%2540%257Cddepth%253D1\u0026kbbq=%2526sde%253D1%2526adepth%253D1%2526ddepth%253D1\u0026lp=%257B%2522wlstp%2522%253A1%252C%2522mcf%2522%253A%252232843%2522%257D\u0026pvl=%257B%2522l1cdv%2522%253A%25221834%2522%252C%2522l1rpth%2522%253A%2522%252Fdm.js%2522%252C%2522lbt%2522%253A77%252C%2522pgids%2522%253A1%257D\u0026tchkpts=%7B%22l1s%22%3A1770952473484%2C%22prel2%22%3A1770952473500%7D\u0026vgd_wshp=0\u0026vgd_l1rhst=kwserving.com\u0026vgd_sc=03\u0026vgd_uspa=0\u0026vgd_isiolc=1\u0026l3d=%257B%2522bidparams%2522%253A%257B%257D%252C%2522l1btm%2522%253A%255B%255D%252C%2522clkIdQs%2522%253A%2522%2522%252C%2522l2host%2522%253A%2522https%253A%252F%252Fkwserving.com%2522%252C%2522fgbr%2522%253A%2522%2522%252C%2522kClkUP%2522%253A%2522%2522%252C%2522bid%2522%253A%2522%2522%252C%2522cntrdt%2522%253A%2522AS%257CDIV-758042672%257CDIV%2522%252C%2522pgid%2522%253A%2522p01425137894t202602130314%2522%257D","fqdn":"kwserving.com","domain":"kwserving.com","tld":"com"},"ip":{"addr":"172.67.140.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe43622b86a9293f7d94436142bdfdc6","sha1":"01ef22d8f3292bea2b0cfa63e49be5ee758899eb","sha256":"f06061820c8cc9e6d88231bddef898d9ce4a8326f6e00e30e0aca3f924ad3dd4","sha512":"a8cf2feaa0a396472300a52b5d37f123be2249d274c947da255ba4f99a644139d92e010b65461b9575a4e63cddb1e717a085282c435d182186b0e51885f654d5","ssdeep":"","tlshash":"3e70008880202a0000e0080c030323b0238080a88cc28000822ea0033080e030288a8a","size":24,"data":"","first_seen":"2025-03-08T00:25:13.703666Z","last_seen":"2026-06-25T02:13:10.95613Z","times_seen":198517,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd01e33b63239a4999854e2bab0b9f36","sha1":"4127acfddc8f851225955cffee1d0e5c34f3156f","sha256":"726146dbb466bb69bdcedfad6f7080d728918b9742026a3a5ee7986515de0b88","sha512":"4f7dd75f6fe52adaedcfdc935cbfe691c4a508f1f690767dc80e125a8ed27a042aee12f4ee0427b0661e7e8a49cbb85103305197cc2011bde11bd0476d7dd42b","ssdeep":"","tlshash":"b611c8573d720f3685e7e959079b9a4931337087d540c91c3a7ec6145f7298898727e8","size":1015,"data":"","first_seen":"2025-09-21T14:45:40.514671Z","last_seen":"2026-05-27T13:13:31.425226Z","times_seen":624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"7c1a59a159411074e1a74616d833052c","sha1":"e34ab1bdc718a5593cba9ac133da30f6c2be3429","sha256":"bedd6f2f893dca45e6b5bf164f8261c4be8379f22601c8b6b97cbefebd79a716","sha512":"171b469d4fa9071035b48ef9ae74ba0822ea906d6c045f01524642433c7c5e724ed417d6143b421e7dc56b52e7cd145cf47a98ca2b8c685456919882fec9bb66","ssdeep":"","tlshash":"97e017171846802a70a222f51f3ffab07b1b65ab21c499007fccc6303f7a2e79660ec0","size":378,"data":"","first_seen":"2026-01-13T01:25:30.947872Z","last_seen":"2026-05-27T13:13:31.425768Z","times_seen":477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b65284a8fd4acb5b6185de57d2336ed","sha1":"0c97ce3f512c9a80b5291083da4167cf26e5200b","sha256":"47324f7987163538988da3bdd6fc59c5c6e0bf9869f314c40087a4e563021e95","sha512":"ad6502923b2d3f43ca83dba78654e8986a5b9f46d0a0179dfdcca4bcd8882af84c58cec035079178f686d75822451c25dadb35fd2d0fb04722360100adfed25d","ssdeep":"","tlshash":"5501db13c7531e5b86e30175154ead7882c9424fdc979e897a7ce20a4fe580a9365cac","size":794,"data":"","first_seen":"2026-01-13T01:25:30.94933Z","last_seen":"2026-05-27T13:13:31.42658Z","times_seen":474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b65284a8fd4acb5b6185de57d2336ed","sha1":"0c97ce3f512c9a80b5291083da4167cf26e5200b","sha256":"47324f7987163538988da3bdd6fc59c5c6e0bf9869f314c40087a4e563021e95","sha512":"ad6502923b2d3f43ca83dba78654e8986a5b9f46d0a0179dfdcca4bcd8882af84c58cec035079178f686d75822451c25dadb35fd2d0fb04722360100adfed25d","ssdeep":"","tlshash":"5501db13c7531e5b86e30175154ead7882c9424fdc979e897a7ce20a4fe580a9365cac","size":794,"data":"","first_seen":"2026-01-13T01:25:30.94933Z","last_seen":"2026-05-27T13:13:31.42658Z","times_seen":474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"b6fd7a8ae383a0b05078b62296f1cb31","sha1":"2f71fcf236a0277d22dfd9ba34ce0e0fae72852b","sha256":"3e49dfa8c15e4adccbb9c11a40a65c2b32f30862a46a19e514badf6979f2beb0","sha512":"c1a8828a67830610e2c2cd9eeb991e81ad6223ffd7808069483e6b6f0131a8f0fafcb659a753dd46652eea7dd97aeb2c59e169fe8e26623e97d5397f3308b78a","ssdeep":"","tlshash":"a9f08b94e7799d611917410d0b53a5ce089e24472047cf1e3f5ed16d8f7dc408cd4e97","size":643,"data":"","first_seen":"2025-09-21T14:45:40.518971Z","last_seen":"2026-05-27T13:13:31.427329Z","times_seen":569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b65284a8fd4acb5b6185de57d2336ed","sha1":"0c97ce3f512c9a80b5291083da4167cf26e5200b","sha256":"47324f7987163538988da3bdd6fc59c5c6e0bf9869f314c40087a4e563021e95","sha512":"ad6502923b2d3f43ca83dba78654e8986a5b9f46d0a0179dfdcca4bcd8882af84c58cec035079178f686d75822451c25dadb35fd2d0fb04722360100adfed25d","ssdeep":"","tlshash":"5501db13c7531e5b86e30175154ead7882c9424fdc979e897a7ce20a4fe580a9365cac","size":794,"data":"","first_seen":"2026-01-13T01:25:30.94933Z","last_seen":"2026-05-27T13:13:31.42658Z","times_seen":474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b65284a8fd4acb5b6185de57d2336ed","sha1":"0c97ce3f512c9a80b5291083da4167cf26e5200b","sha256":"47324f7987163538988da3bdd6fc59c5c6e0bf9869f314c40087a4e563021e95","sha512":"ad6502923b2d3f43ca83dba78654e8986a5b9f46d0a0179dfdcca4bcd8882af84c58cec035079178f686d75822451c25dadb35fd2d0fb04722360100adfed25d","ssdeep":"","tlshash":"5501db13c7531e5b86e30175154ead7882c9424fdc979e897a7ce20a4fe580a9365cac","size":794,"data":"","first_seen":"2026-01-13T01:25:30.94933Z","last_seen":"2026-05-27T13:13:31.42658Z","times_seen":474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b65284a8fd4acb5b6185de57d2336ed","sha1":"0c97ce3f512c9a80b5291083da4167cf26e5200b","sha256":"47324f7987163538988da3bdd6fc59c5c6e0bf9869f314c40087a4e563021e95","sha512":"ad6502923b2d3f43ca83dba78654e8986a5b9f46d0a0179dfdcca4bcd8882af84c58cec035079178f686d75822451c25dadb35fd2d0fb04722360100adfed25d","ssdeep":"","tlshash":"5501db13c7531e5b86e30175154ead7882c9424fdc979e897a7ce20a4fe580a9365cac","size":794,"data":"","first_seen":"2026-01-13T01:25:30.94933Z","last_seen":"2026-05-27T13:13:31.42658Z","times_seen":474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kwserving.com/dm.js?cid=8CU70BJ1S","fqdn":"kwserving.com","domain":"kwserving.com","tld":"com"},"ip":{"addr":"172.67.140.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a8781098b0adc9e98da25229c76b45a","sha1":"444359d80686f18ba1967bb0c920fce695bda5da","sha256":"6ef3df97797b9832a4cc4bda983b1d8fd75f4df165f7336e6a0a7cacef922e18","sha512":"8db371f3147baee6d47193a486ab7b331f8857f02fa86a6c7b5b8521024ef4bd0a343ba754af4131fa8302ce88f39b640ce247b206630ffe3cebdde3e6f38005","ssdeep":"3072:B/5koK//74ExuQGFYad4RYBO/MlCz+3m8LxQ+:pOoK/3TEOFz+3m8LxZ","tlshash":"aac380a572c13039c347f0b19d8fcd09f22ab99922cb5405aa1c95f4bc288bdd776e9d","size":123447,"data":"","first_seen":"2026-02-10T06:55:55.376156Z","last_seen":"2026-02-14T03:07:47.240914Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b65284a8fd4acb5b6185de57d2336ed","sha1":"0c97ce3f512c9a80b5291083da4167cf26e5200b","sha256":"47324f7987163538988da3bdd6fc59c5c6e0bf9869f314c40087a4e563021e95","sha512":"ad6502923b2d3f43ca83dba78654e8986a5b9f46d0a0179dfdcca4bcd8882af84c58cec035079178f686d75822451c25dadb35fd2d0fb04722360100adfed25d","ssdeep":"","tlshash":"5501db13c7531e5b86e30175154ead7882c9424fdc979e897a7ce20a4fe580a9365cac","size":794,"data":"","first_seen":"2026-01-13T01:25:30.94933Z","last_seen":"2026-05-27T13:13:31.42658Z","times_seen":474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b65284a8fd4acb5b6185de57d2336ed","sha1":"0c97ce3f512c9a80b5291083da4167cf26e5200b","sha256":"47324f7987163538988da3bdd6fc59c5c6e0bf9869f314c40087a4e563021e95","sha512":"ad6502923b2d3f43ca83dba78654e8986a5b9f46d0a0179dfdcca4bcd8882af84c58cec035079178f686d75822451c25dadb35fd2d0fb04722360100adfed25d","ssdeep":"","tlshash":"5501db13c7531e5b86e30175154ead7882c9424fdc979e897a7ce20a4fe580a9365cac","size":794,"data":"","first_seen":"2026-01-13T01:25:30.94933Z","last_seen":"2026-05-27T13:13:31.42658Z","times_seen":474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kwserving.com/sr/754870121/SAFEFRAME.html?ule=386\u0026\u0026kkdd=HA%7CH%7Cn9A*\u0026Xe=WBB2UcfaBnVf2*UVVnW\u0026~3Gu=2\u00266mGR=2\u0026Nm(G=2\u0026T3X=WVna\u0026PmT)=gWWnU\u0026Te3=VKLB2I.W7\u0026TGT3=6L4VpLiU!p!fu0fUkP-6t~%3D%3D\u0026Tue3=BcV2af*Bf\u0026me0)=UB2Hfc2\u0026TT=Ol\u0026mT=2n\u0026u)E4uk=(PPGm%3A%2F%2FNNNh-Ju6)eQmRP0h3)%2F\u0026Qm)=c\u00264~3=a\u0026kW(JmP=MNm)uXeQ~hTJ6\u0026eN=WfV2\u0026NkmPG=W\u00266T-=nfVan\u0026G~e3=G2WafcWnBVUaPf2f*2fWn2nWa\u0026G~e3m=W\u0026(P6kmuT=W\u0026sflct=7625942\u0026ure=1#\u0026startTime=1770952473484\u0026l1ch=0\u0026l2type=scs_newfl\u0026sttm=1770952473495\u0026upk=1770952473.22617\u0026hvsid=00001770952473495028899290081799\u0026verid=9121199\u0026tdAdd[]=%257C%2540%257Csde%253D1%257C%2540%257Cadepth%253D1%257C%2540%257Cddepth%253D1\u0026kbbq=%2526sde%253D1%2526adepth%253D1%2526ddepth%253D1\u0026lp=%257B%2522wlstp%2522%253A1%252C%2522mcf%2522%253A%252232843%2522%257D\u0026pvl=%257B%2522l1cdv%2522%253A%25221834%2522%252C%2522l1rpth%2522%253A%2522%252Fdm.js%2522%252C%2522lbt%2522%253A77%252C%2522pgids%2522%253A1%257D\u0026tchkpts=%7B%22l1s%22%3A1770952473484%2C%22prel2%22%3A1770952473500%7D\u0026vgd_wshp=0\u0026vgd_l1rhst=kwserving.com\u0026vgd_sc=03\u0026vgd_uspa=0\u0026vgd_isiolc=1\u0026l3d=%257B%2522bidparams%2522%253A%257B%257D%252C%2522l1btm%2522%253A%255B%255D%252C%2522clkIdQs%2522%253A%2522%2522%252C%2522l2host%2522%253A%2522https%253A%252F%252Fkwserving.com%2522%252C%2522fgbr%2522%253A%2522%2522%252C%2522kClkUP%2522%253A%2522%2522%252C%2522bid%2522%253A%2522%2522%252C%2522cntrdt%2522%253A%2522AS%257CDIV-758042672%257CDIV%2522%252C%2522pgid%2522%253A%2522p01425137894t202602130314%2522%257D","fqdn":"kwserving.com","domain":"kwserving.com","tld":"com"},"ip":{"addr":"172.67.140.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d470ea0b1943b97148cd8ce2f2a7dbad","sha1":"e7762fd413c3cb66da8bc16c8694f9f1061f9d7e","sha256":"b2813fec22a047f21cb9542cf62216e31cc0671a7c5883a90e4d0deb33b98481","sha512":"4747fa7873a25d2af587595981773dcec7205abc5084b380c9e9954524315249c15f2e07c123a6e073c3dffe2d0fbf9caa68e255cf7bbcc0e30f6cbfbe8866d9","ssdeep":"192:ThTPwBmIemWceo/valQFB+zTXkkRkURSHGoMpWAFQ9JweAdhf7v0:FTPwBvLuH3kURSHGoMpWAFQ9JweAdhfI","tlshash":"cfe19349846a8ab005bd60acbc385e8f68d5388c74ccf15fea93edd59c1f9b5ee0060d","size":7072,"data":"","first_seen":"2026-02-13T03:15:02.711928Z","last_seen":"2026-02-13T03:15:02.711928Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b65284a8fd4acb5b6185de57d2336ed","sha1":"0c97ce3f512c9a80b5291083da4167cf26e5200b","sha256":"47324f7987163538988da3bdd6fc59c5c6e0bf9869f314c40087a4e563021e95","sha512":"ad6502923b2d3f43ca83dba78654e8986a5b9f46d0a0179dfdcca4bcd8882af84c58cec035079178f686d75822451c25dadb35fd2d0fb04722360100adfed25d","ssdeep":"","tlshash":"5501db13c7531e5b86e30175154ead7882c9424fdc979e897a7ce20a4fe580a9365cac","size":794,"data":"","first_seen":"2026-01-13T01:25:30.94933Z","last_seen":"2026-05-27T13:13:31.42658Z","times_seen":474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b65284a8fd4acb5b6185de57d2336ed","sha1":"0c97ce3f512c9a80b5291083da4167cf26e5200b","sha256":"47324f7987163538988da3bdd6fc59c5c6e0bf9869f314c40087a4e563021e95","sha512":"ad6502923b2d3f43ca83dba78654e8986a5b9f46d0a0179dfdcca4bcd8882af84c58cec035079178f686d75822451c25dadb35fd2d0fb04722360100adfed25d","ssdeep":"","tlshash":"5501db13c7531e5b86e30175154ead7882c9424fdc979e897a7ce20a4fe580a9365cac","size":794,"data":"","first_seen":"2026-01-13T01:25:30.94933Z","last_seen":"2026-05-27T13:13:31.42658Z","times_seen":474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/js/htmx.min.js","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"48e021f096c4eebe52326397e031c75d","sha1":"13dcd355b9ee9b169ddc7afea6683877be30920c","sha256":"e1746d9759ec0d43c5c284452333a310bb5fd7285ebac4b2dc9bf44d72b5a887","sha512":"89103e0c98032d428f93ea6a1a900cdfec120de3b988a4246171ad22fe3e100f2825637599ec0c243ee4582f611c2c944dd7b2f5b432a40871e8f0125928633b","ssdeep":"768:mGHffLGa3LQ4oPHKFha5y0OJCofjURdQvkS+dYrPM6Y6pzRTuPbotGqeIqMIMv1K:PH5NL6WZ53NR+n2JL0IqKtM","tlshash":"c523c6ca33c2317787fe24f995bb1106f37598d2784a8150e058b89b3c75a4a86b7f6c","size":49567,"data":"","first_seen":"2024-09-28T07:12:36.6106Z","last_seen":"2026-06-22T19:57:31.439924Z","times_seen":882,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kwserving.com/sr/754870121/SAFEFRAME.html?ule=386\u0026\u0026kkdd=HA%7CH%7Cn9A*\u0026Xe=WBB2UcfaBnVf2*UVVnW\u0026~3Gu=2\u00266mGR=2\u0026Nm(G=2\u0026T3X=WVna\u0026PmT)=gWWnU\u0026Te3=VKLB2I.W7\u0026TGT3=6L4VpLiU!p!fu0fUkP-6t~%3D%3D\u0026Tue3=BcV2af*Bf\u0026me0)=UB2Hfc2\u0026TT=Ol\u0026mT=2n\u0026u)E4uk=(PPGm%3A%2F%2FNNNh-Ju6)eQmRP0h3)%2F\u0026Qm)=c\u00264~3=a\u0026kW(JmP=MNm)uXeQ~hTJ6\u0026eN=WfV2\u0026NkmPG=W\u00266T-=nfVan\u0026G~e3=G2WafcWnBVUaPf2f*2fWn2nWa\u0026G~e3m=W\u0026(P6kmuT=W\u0026sflct=7625942\u0026ure=1#\u0026startTime=1770952473484\u0026l1ch=0\u0026l2type=scs_newfl\u0026sttm=1770952473495\u0026upk=1770952473.22617\u0026hvsid=00001770952473495028899290081799\u0026verid=9121199\u0026tdAdd[]=%257C%2540%257Csde%253D1%257C%2540%257Cadepth%253D1%257C%2540%257Cddepth%253D1\u0026kbbq=%2526sde%253D1%2526adepth%253D1%2526ddepth%253D1\u0026lp=%257B%2522wlstp%2522%253A1%252C%2522mcf%2522%253A%252232843%2522%257D\u0026pvl=%257B%2522l1cdv%2522%253A%25221834%2522%252C%2522l1rpth%2522%253A%2522%252Fdm.js%2522%252C%2522lbt%2522%253A77%252C%2522pgids%2522%253A1%257D\u0026tchkpts=%7B%22l1s%22%3A1770952473484%2C%22prel2%22%3A1770952473500%7D\u0026vgd_wshp=0\u0026vgd_l1rhst=kwserving.com\u0026vgd_sc=03\u0026vgd_uspa=0\u0026vgd_isiolc=1\u0026l3d=%257B%2522bidparams%2522%253A%257B%257D%252C%2522l1btm%2522%253A%255B%255D%252C%2522clkIdQs%2522%253A%2522%2522%252C%2522l2host%2522%253A%2522https%253A%252F%252Fkwserving.com%2522%252C%2522fgbr%2522%253A%2522%2522%252C%2522kClkUP%2522%253A%2522%2522%252C%2522bid%2522%253A%2522%2522%252C%2522cntrdt%2522%253A%2522AS%257CDIV-758042672%257CDIV%2522%252C%2522pgid%2522%253A%2522p01425137894t202602130314%2522%257D","fqdn":"kwserving.com","domain":"kwserving.com","tld":"com"},"ip":{"addr":"172.67.140.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e4e1e10f73b901b0a350beb4aac97ab","sha1":"380c08f52e11572feef83b103d60679b98b28bc6","sha256":"814528a7bd7c2241960bd9500eac0278dc82919df2365035b7d239a811362b4c","sha512":"f8770520cabd303942941641d8a1c161861a186a87da7150192506f50fa86d592e08a99806e089165400be30b712c8d13ded5741983bc3f7c72a2eae18fc82b6","ssdeep":"768:Z6URd90oG47m4nEX5iRSNEeLT1SvVXgleAE5zh9Ey89CsBcb6rL9TqYj4Zbml2sM:2MzB5xbop2Bmwyt7WxLb0g","tlshash":"7833a39531c334359387b062de5fdd09f1b666a413c68804899ca9a5bc2cdfec772c9d","size":52315,"data":"","first_seen":"2026-02-12T01:51:56.398949Z","last_seen":"2026-02-13T03:15:02.713061Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b65284a8fd4acb5b6185de57d2336ed","sha1":"0c97ce3f512c9a80b5291083da4167cf26e5200b","sha256":"47324f7987163538988da3bdd6fc59c5c6e0bf9869f314c40087a4e563021e95","sha512":"ad6502923b2d3f43ca83dba78654e8986a5b9f46d0a0179dfdcca4bcd8882af84c58cec035079178f686d75822451c25dadb35fd2d0fb04722360100adfed25d","ssdeep":"","tlshash":"5501db13c7531e5b86e30175154ead7882c9424fdc979e897a7ce20a4fe580a9365cac","size":794,"data":"","first_seen":"2026-01-13T01:25:30.94933Z","last_seen":"2026-05-27T13:13:31.42658Z","times_seen":474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b65284a8fd4acb5b6185de57d2336ed","sha1":"0c97ce3f512c9a80b5291083da4167cf26e5200b","sha256":"47324f7987163538988da3bdd6fc59c5c6e0bf9869f314c40087a4e563021e95","sha512":"ad6502923b2d3f43ca83dba78654e8986a5b9f46d0a0179dfdcca4bcd8882af84c58cec035079178f686d75822451c25dadb35fd2d0fb04722360100adfed25d","ssdeep":"","tlshash":"5501db13c7531e5b86e30175154ead7882c9424fdc979e897a7ce20a4fe580a9365cac","size":794,"data":"","first_seen":"2026-01-13T01:25:30.94933Z","last_seen":"2026-05-27T13:13:31.42658Z","times_seen":474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b65284a8fd4acb5b6185de57d2336ed","sha1":"0c97ce3f512c9a80b5291083da4167cf26e5200b","sha256":"47324f7987163538988da3bdd6fc59c5c6e0bf9869f314c40087a4e563021e95","sha512":"ad6502923b2d3f43ca83dba78654e8986a5b9f46d0a0179dfdcca4bcd8882af84c58cec035079178f686d75822451c25dadb35fd2d0fb04722360100adfed25d","ssdeep":"","tlshash":"5501db13c7531e5b86e30175154ead7882c9424fdc979e897a7ce20a4fe580a9365cac","size":794,"data":"","first_seen":"2026-01-13T01:25:30.94933Z","last_seen":"2026-05-27T13:13:31.42658Z","times_seen":474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"b6fd7a8ae383a0b05078b62296f1cb31","sha1":"2f71fcf236a0277d22dfd9ba34ce0e0fae72852b","sha256":"3e49dfa8c15e4adccbb9c11a40a65c2b32f30862a46a19e514badf6979f2beb0","sha512":"c1a8828a67830610e2c2cd9eeb991e81ad6223ffd7808069483e6b6f0131a8f0fafcb659a753dd46652eea7dd97aeb2c59e169fe8e26623e97d5397f3308b78a","ssdeep":"","tlshash":"a9f08b94e7799d611917410d0b53a5ce089e24472047cf1e3f5ed16d8f7dc408cd4e97","size":643,"data":"","first_seen":"2025-09-21T14:45:40.518971Z","last_seen":"2026-05-27T13:13:31.427329Z","times_seen":569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b65284a8fd4acb5b6185de57d2336ed","sha1":"0c97ce3f512c9a80b5291083da4167cf26e5200b","sha256":"47324f7987163538988da3bdd6fc59c5c6e0bf9869f314c40087a4e563021e95","sha512":"ad6502923b2d3f43ca83dba78654e8986a5b9f46d0a0179dfdcca4bcd8882af84c58cec035079178f686d75822451c25dadb35fd2d0fb04722360100adfed25d","ssdeep":"","tlshash":"5501db13c7531e5b86e30175154ead7882c9424fdc979e897a7ce20a4fe580a9365cac","size":794,"data":"","first_seen":"2026-01-13T01:25:30.94933Z","last_seen":"2026-05-27T13:13:31.42658Z","times_seen":474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kwserving.com/sr/754870121/SAFEFRAME.html?ule=386\u0026\u0026kkdd=HA%7CH%7Cn9A*\u0026Xe=WBB2UcfaBnVf2*UVVnW\u0026~3Gu=2\u00266mGR=2\u0026Nm(G=2\u0026T3X=WVna\u0026PmT)=gWWnU\u0026Te3=VKLB2I.W7\u0026TGT3=6L4VpLiU!p!fu0fUkP-6t~%3D%3D\u0026Tue3=BcV2af*Bf\u0026me0)=UB2Hfc2\u0026TT=Ol\u0026mT=2n\u0026u)E4uk=(PPGm%3A%2F%2FNNNh-Ju6)eQmRP0h3)%2F\u0026Qm)=c\u00264~3=a\u0026kW(JmP=MNm)uXeQ~hTJ6\u0026eN=WfV2\u0026NkmPG=W\u00266T-=nfVan\u0026G~e3=G2WafcWnBVUaPf2f*2fWn2nWa\u0026G~e3m=W\u0026(P6kmuT=W\u0026sflct=7625942\u0026ure=1#\u0026startTime=1770952473484\u0026l1ch=0\u0026l2type=scs_newfl\u0026sttm=1770952473495\u0026upk=1770952473.22617\u0026hvsid=00001770952473495028899290081799\u0026verid=9121199\u0026tdAdd[]=%257C%2540%257Csde%253D1%257C%2540%257Cadepth%253D1%257C%2540%257Cddepth%253D1\u0026kbbq=%2526sde%253D1%2526adepth%253D1%2526ddepth%253D1\u0026lp=%257B%2522wlstp%2522%253A1%252C%2522mcf%2522%253A%252232843%2522%257D\u0026pvl=%257B%2522l1cdv%2522%253A%25221834%2522%252C%2522l1rpth%2522%253A%2522%252Fdm.js%2522%252C%2522lbt%2522%253A77%252C%2522pgids%2522%253A1%257D\u0026tchkpts=%7B%22l1s%22%3A1770952473484%2C%22prel2%22%3A1770952473500%7D\u0026vgd_wshp=0\u0026vgd_l1rhst=kwserving.com\u0026vgd_sc=03\u0026vgd_uspa=0\u0026vgd_isiolc=1\u0026l3d=%257B%2522bidparams%2522%253A%257B%257D%252C%2522l1btm%2522%253A%255B%255D%252C%2522clkIdQs%2522%253A%2522%2522%252C%2522l2host%2522%253A%2522https%253A%252F%252Fkwserving.com%2522%252C%2522fgbr%2522%253A%2522%2522%252C%2522kClkUP%2522%253A%2522%2522%252C%2522bid%2522%253A%2522%2522%252C%2522cntrdt%2522%253A%2522AS%257CDIV-758042672%257CDIV%2522%252C%2522pgid%2522%253A%2522p01425137894t202602130314%2522%257D","fqdn":"kwserving.com","domain":"kwserving.com","tld":"com"},"ip":{"addr":"172.67.140.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7ea336f637477485ccd6f9a5b167bd7d","sha1":"8153e4b97c42ab5b73f2f577b43043c8c9283b4b","sha256":"ce4d01ea989bb3b9243f9917fe20a39064135a99b2f3b8cd6832cccb10006b96","sha512":"1ac3fbd0a0c12ef1eacf5dc2a5848e72574bc9ebab4b159fbd080d02b3c49320e5862be0d7404e6ded0c2e2c8c0c43f84d93b966d200007782e282bbab8b3c65","ssdeep":"","tlshash":"c6f0e5b694b3c8285b0f264673ffd684145043e45c05764df1ede49a03e1d4cc0d9eaa","size":481,"data":"","first_seen":"2025-03-08T00:25:13.728891Z","last_seen":"2026-06-07T08:16:09.460583Z","times_seen":189978,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b65284a8fd4acb5b6185de57d2336ed","sha1":"0c97ce3f512c9a80b5291083da4167cf26e5200b","sha256":"47324f7987163538988da3bdd6fc59c5c6e0bf9869f314c40087a4e563021e95","sha512":"ad6502923b2d3f43ca83dba78654e8986a5b9f46d0a0179dfdcca4bcd8882af84c58cec035079178f686d75822451c25dadb35fd2d0fb04722360100adfed25d","ssdeep":"","tlshash":"5501db13c7531e5b86e30175154ead7882c9424fdc979e897a7ce20a4fe580a9365cac","size":794,"data":"","first_seen":"2026-01-13T01:25:30.94933Z","last_seen":"2026-05-27T13:13:31.42658Z","times_seen":474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b65284a8fd4acb5b6185de57d2336ed","sha1":"0c97ce3f512c9a80b5291083da4167cf26e5200b","sha256":"47324f7987163538988da3bdd6fc59c5c6e0bf9869f314c40087a4e563021e95","sha512":"ad6502923b2d3f43ca83dba78654e8986a5b9f46d0a0179dfdcca4bcd8882af84c58cec035079178f686d75822451c25dadb35fd2d0fb04722360100adfed25d","ssdeep":"","tlshash":"5501db13c7531e5b86e30175154ead7882c9424fdc979e897a7ce20a4fe580a9365cac","size":794,"data":"","first_seen":"2026-01-13T01:25:30.94933Z","last_seen":"2026-05-27T13:13:31.42658Z","times_seen":474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b65284a8fd4acb5b6185de57d2336ed","sha1":"0c97ce3f512c9a80b5291083da4167cf26e5200b","sha256":"47324f7987163538988da3bdd6fc59c5c6e0bf9869f314c40087a4e563021e95","sha512":"ad6502923b2d3f43ca83dba78654e8986a5b9f46d0a0179dfdcca4bcd8882af84c58cec035079178f686d75822451c25dadb35fd2d0fb04722360100adfed25d","ssdeep":"","tlshash":"5501db13c7531e5b86e30175154ead7882c9424fdc979e897a7ce20a4fe580a9365cac","size":794,"data":"","first_seen":"2026-01-13T01:25:30.94933Z","last_seen":"2026-05-27T13:13:31.42658Z","times_seen":474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kwserving.com/sr/754870121/SAFEFRAME.html?ule=386\u0026\u0026kkdd=HA%7CH%7Cn9A*\u0026Xe=WBB2UcfaBnVf2*UVVnW\u0026~3Gu=2\u00266mGR=2\u0026Nm(G=2\u0026T3X=WVna\u0026PmT)=gWWnU\u0026Te3=VKLB2I.W7\u0026TGT3=6L4VpLiU!p!fu0fUkP-6t~%3D%3D\u0026Tue3=BcV2af*Bf\u0026me0)=UB2Hfc2\u0026TT=Ol\u0026mT=2n\u0026u)E4uk=(PPGm%3A%2F%2FNNNh-Ju6)eQmRP0h3)%2F\u0026Qm)=c\u00264~3=a\u0026kW(JmP=MNm)uXeQ~hTJ6\u0026eN=WfV2\u0026NkmPG=W\u00266T-=nfVan\u0026G~e3=G2WafcWnBVUaPf2f*2fWn2nWa\u0026G~e3m=W\u0026(P6kmuT=W\u0026sflct=7625942\u0026ure=1#\u0026startTime=1770952473484\u0026l1ch=0\u0026l2type=scs_newfl\u0026sttm=1770952473495\u0026upk=1770952473.22617\u0026hvsid=00001770952473495028899290081799\u0026verid=9121199\u0026tdAdd[]=%257C%2540%257Csde%253D1%257C%2540%257Cadepth%253D1%257C%2540%257Cddepth%253D1\u0026kbbq=%2526sde%253D1%2526adepth%253D1%2526ddepth%253D1\u0026lp=%257B%2522wlstp%2522%253A1%252C%2522mcf%2522%253A%252232843%2522%257D\u0026pvl=%257B%2522l1cdv%2522%253A%25221834%2522%252C%2522l1rpth%2522%253A%2522%252Fdm.js%2522%252C%2522lbt%2522%253A77%252C%2522pgids%2522%253A1%257D\u0026tchkpts=%7B%22l1s%22%3A1770952473484%2C%22prel2%22%3A1770952473500%7D\u0026vgd_wshp=0\u0026vgd_l1rhst=kwserving.com\u0026vgd_sc=03\u0026vgd_uspa=0\u0026vgd_isiolc=1\u0026l3d=%257B%2522bidparams%2522%253A%257B%257D%252C%2522l1btm%2522%253A%255B%255D%252C%2522clkIdQs%2522%253A%2522%2522%252C%2522l2host%2522%253A%2522https%253A%252F%252Fkwserving.com%2522%252C%2522fgbr%2522%253A%2522%2522%252C%2522kClkUP%2522%253A%2522%2522%252C%2522bid%2522%253A%2522%2522%252C%2522cntrdt%2522%253A%2522AS%257CDIV-758042672%257CDIV%2522%252C%2522pgid%2522%253A%2522p01425137894t202602130314%2522%257D","fqdn":"kwserving.com","domain":"kwserving.com","tld":"com"},"ip":{"addr":"172.67.140.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5b7c9ab314462752031340522cad742b","sha1":"0d228e6805b383ec3582029190acef437866d5ec","sha256":"89a88426da396d6cd07b3c5fad49b830ca1af94b04e5adc0f59551df1be5634b","sha512":"f023f45aff7c413fabc660778d9527337025175de8df005ae20768d49a4c583c4cd079549e3464f6c631bae652f854037dfd846fbed1e6ec12d8a46b05cdd0ba","ssdeep":"","tlshash":"80b02b103d301002007a0043cd75c41d0132d8f3330188d84b102cec904e480204e78c","size":122,"data":"","first_seen":"2025-03-08T00:25:13.743686Z","last_seen":"2026-06-17T12:38:25.763493Z","times_seen":478,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"0375b11affb08f447a191847c67d4720","sha1":"e8f6b8f9fa6e63faf17f721757e106ae01a2c21f","sha256":"9e16f408929a26adbb72ff0014564ba429e77b592b69aa72c1f9b0430bae83e2","sha512":"424a426c9c642aec249e8afc350ae627edb8f81628f915cc84e93f31857e171315b3241a0114dca0022303bda9d62c0b7462070d939a0f4a0b35202d6ba825d7","ssdeep":"","tlshash":"38f0e54a2dd1162008e7fb267683166be531049b281446123e4c57445f726c6952fac8","size":492,"data":"","first_seen":"2026-01-13T22:23:01.264698Z","last_seen":"2026-05-27T13:13:31.431638Z","times_seen":471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"f03bb8569cae59f6c847426ee0400665","sha1":"c763cd37aac381df331bc900252c1aeb9514aa40","sha256":"9e26cf2fd905be5a3ef3a93453f824ff78aef47d7a7fbb339fc2693caa2a3f2f","sha512":"0ab08afca7957b0d6b7e335cb028405dd87c689c09e27953f97e6500b2f6d9094953716a1f99f097ab32f607270dd8727038c797e309f96f06a17a3c4fc10732","ssdeep":"","tlshash":"81f02b9b1da2122052dae1396fd71227f63100931910d4057d2c87841fa4e96417e98d","size":468,"data":"","first_seen":"2026-01-13T01:25:30.955858Z","last_seen":"2026-05-27T13:13:31.432347Z","times_seen":476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"92299a775f9a33e4fa4850e4873ab4ae","sha1":"265895d1de4da60d937f404e811022ed5461a107","sha256":"26955627db4ba5115a1b25182cf2eb6c9070322f3f3b839a150e8668e9a499a1","sha512":"9641b17c930cf28d735285da881a82a2e0c5d26626662cfdfe733fa0c740157ef86b80d03db4d6daa99a6d8f29cb6db24e72aebb574851cd1b0b4d32b0f96113","ssdeep":"","tlshash":"57f08236bc5a0716a69ae236a6e3678bf81760172580d3ccb84c55027fe17d045bd7f4","size":607,"data":"","first_seen":"2026-01-13T22:23:01.266037Z","last_seen":"2026-05-27T13:13:31.432989Z","times_seen":471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"45d09eb07dd4a4a8c41542f68693f8d6","sha1":"1636feb60954b2ced9d07228344bd1c3023ac620","sha256":"7c3240fb7d43bbc009fe5fb800dbc326a06367eb7001e4401803c20f9b79265d","sha512":"1c59d6ef07db593c8f6876af237dca6b8b5389501cc97d9698bfaf057d4c832e7344be2df3c3408fb0ca73f886c3533dbd1aa1499cbe6b4a8b87746b468069b9","ssdeep":"192:Qk3cesZvHesXJK3hxqTZNPnayzVIexhaVeOKyCwsrseyXdceOvWexMA+IFtFQtYh:d3d2GsShx4PVIeLqeNie8OeXeShIFtFv","tlshash":"032232167db7203105bbf0ae5bcb0099b420229fb414c925be4dcb480fd6b9596fdbe9","size":10196,"data":"","first_seen":"2026-01-13T22:23:01.267347Z","last_seen":"2026-05-27T13:13:31.433639Z","times_seen":442,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd230e81d29d905435e9bee9c4c4b39c","sha1":"37991a92241951a675278f8447a60b4613dcfec4","sha256":"d663071fadcb6b59b29f2b4194943e380f41224ac1c6e5224c1a628989fb9bcd","sha512":"9c5b79be7ae881e2941c4954d5b657c4c30e5b92ca9a120d666a4013e9fbe67b70716830864a7f2921b55e6b73c21b0e392136f0fa350e7d4c60d4b5a044a8bf","ssdeep":"","tlshash":"ac811d6d21e3263546b7b1bd7b9fa249b2355047340ddc08be1c87446f50a688af3bee","size":4021,"data":"","first_seen":"2026-02-13T03:15:02.718791Z","last_seen":"2026-02-13T03:15:02.718791Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.formeinsatz.de/css/app.8ccbda3d72a02089398384dd95a0cc2b.css","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.formeinsatz.de/","date":"2026-02-13T03:14:33.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"formeinsatz.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Feb 2026 11:36:47 GMT","end":"Tue, 12 May 2026 11:36:46 GMT"},"fingerprint":{"sha1":"08:54:1D:9F:4D:BC:C2:04:39:D5:ED:28:CD:AD:31:86:ED:ED:80:9C","sha256":"8D:9B:D4:98:F1:2A:4B:43:36:67:6C:A5:26:10:5E:96:0D:4E:E3:1E:33:C2:5C:C1:53:8E:62:C6:4E:B9:59:7D"}}},"request":{"raw":"GET /css/app.8ccbda3d72a02089398384dd95a0cc2b.css HTTP/1.1\r\nHost: www.formeinsatz.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.formeinsatz.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.2\r\ndate: Fri, 13 Feb 2026 03:14:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 10 Feb 2026 13:53:44 GMT\r\netag: W/\"698b3868-1e46f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.25.3.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":124015,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65321)","md5":"8ccbda3d72a02089398384dd95a0cc2b","sha1":"65cdd3c77f9f1027a5775feeeab8e99687705384","sha256":"b94a94d38b8ab7278002dc55b0c0426bda08c2481447a8def3e080e3e3409f3a","sha512":"325fc01add1cffcd94361d9c21bd1337daffd0a510716732185ea7ed7dd63b1110729d9c3be7b415fdb7dbf4b8ef29de6f9213f1b92f82067209fd15c64f0e08","ssdeep":"1536:tTMVMWMiMTMRQO709gbQZMfjSFOlyPG95XgRM0THGhWXi6NY6:G709gUGGFwyPG95wRM0THGhv6","tlshash":"65c32fe8e44c04e97b32c08beb55b37c61b6f778d9510d69f02f590c2ed26a825c6f29","first_seen":"2026-02-04T15:02:05.848158Z","last_seen":"2026-03-23T16:28:23.89433Z","times_seen":140,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.billiger.com/dynimg/mFR8egFwmpMf1BBYqZUiJiXpJ53MH5lvA_hMn5zos5T_olRSBeQCSEAXhzSr2EMdddCbFVmpkvU2IZ7OyXbtJkEmDagcUCU_Vp74F6ol7NBidF3IKL4kEk/685535007085_large.webp","fqdn":"cdn.billiger.com","domain":"billiger.com","tld":"com"},"ip":{"addr":"104.20.37.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.formeinsatz.de/","date":"2026-02-13T03:14:33.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"billiger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:42:15 GMT","end":"Mon, 27 Apr 2026 20:42:04 GMT"},"fingerprint":{"sha1":"66:90:BA:61:46:CD:CC:25:31:62:F8:F5:76:67:8A:75:0B:29:B6:CF","sha256":"38:0A:B8:94:F4:7B:0D:44:FE:6F:3B:EA:52:78:02:AC:7D:7F:48:FB:0D:DF:FB:48:7A:0B:91:F4:E5:C6:3F:5E"}}},"request":{"raw":"GET /dynimg/mFR8egFwmpMf1BBYqZUiJiXpJ53MH5lvA_hMn5zos5T_olRSBeQCSEAXhzSr2EMdddCbFVmpkvU2IZ7OyXbtJkEmDagcUCU_Vp74F6ol7NBidF3IKL4kEk/685535007085_large.webp HTTP/1.1\r\nHost: cdn.billiger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.formeinsatz.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 03:14:33 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncache-control: max-age=31536000\r\nexpires: Sat, 13 Feb 2027 03:14:33 GMT\r\netag: \"8739f1a8bbb6db45d54d0b8171001dbd\"\r\nlast-modified: Thu, 18 Dec 2025 06:48:22 GMT\r\nx-dynimg-origin: cdnfe02\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9cd127fe9a7e723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5810,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c2d67a5d121362db0c0095cdfd8b34b8","sha1":"cdfb34d4ec1b1aecd182d5b7e42efbe7be1a67a9","sha256":"ff4fd1b8438f20525631b2d0ee4ff9d6e0744316f153941e3c19629a44726928","sha512":"9ab9d33af7379047343f321272986d9b6dab0bbcaa93ea574faa09762aa3a4d7719a23368fad4a1e897df732c6270f0e97550a31f8e2dc1e89397957f65100c4","ssdeep":"96:QsccZFYjmZlNx85m7mrRS4ZuhUIKTGo8MRuwj61KoLFXea74O7MTfcyP:vDMjmFxZ7v4MqEo8MRhj/eFXLEyW9","tlshash":"92c18d0a4c162b8e44d65d8eafed84ba23c84f7c673598d23b0d5db1fb42158d12621f","first_seen":"2026-02-13T03:15:02.653124Z","last_seen":"2026-02-13T03:15:02.653124Z","times_seen":1,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":105,"dns":34,"connect":3,"send":0,"wait":264,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.billiger.com/dynimg/wNkbhrSb-DbnTsxTCmniA-XpJ53MH5lvA_hMn5zos5T_olRSBeQCSEAXhzSr2EMdfzYnj2iblAm_aA4qJ8yLqf9V5PTh_Crpo6AC0W7WCslVh-Egtqjv7o/685547648556_large.webp","fqdn":"cdn.billiger.com","domain":"billiger.com","tld":"com"},"ip":{"addr":"104.20.37.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.formeinsatz.de/","date":"2026-02-13T03:14:33.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"billiger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:42:15 GMT","end":"Mon, 27 Apr 2026 20:42:04 GMT"},"fingerprint":{"sha1":"66:90:BA:61:46:CD:CC:25:31:62:F8:F5:76:67:8A:75:0B:29:B6:CF","sha256":"38:0A:B8:94:F4:7B:0D:44:FE:6F:3B:EA:52:78:02:AC:7D:7F:48:FB:0D:DF:FB:48:7A:0B:91:F4:E5:C6:3F:5E"}}},"request":{"raw":"GET /dynimg/wNkbhrSb-DbnTsxTCmniA-XpJ53MH5lvA_hMn5zos5T_olRSBeQCSEAXhzSr2EMdfzYnj2iblAm_aA4qJ8yLqf9V5PTh_Crpo6AC0W7WCslVh-Egtqjv7o/685547648556_large.webp HTTP/1.1\r\nHost: cdn.billiger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.formeinsatz.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 03:14:33 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncache-control: max-age=31536000\r\nexpires: Sat, 13 Feb 2027 03:14:33 GMT\r\netag: \"2677cc632de361fefc1d4284054922be\"\r\nlast-modified: Thu, 18 Dec 2025 06:32:48 GMT\r\nx-dynimg-origin: cdnfe05\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9cd127fe8a69723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7472,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a50efb0388f052bcd49be4e19e5601d8","sha1":"aee5b9d619a2a7cebeba32f36ab4da5eb36f018f","sha256":"1e7e1585ffce6d9ec18d9784889eb6526910fbe2b880b7fba08c8826fb73f81b","sha512":"4c0841bbe301ae5fa849f1c83d2df0415b4aa6cf0b960e735c9640b2e72147cfc9e883165dfc3f56e5ed9eaac50ee5daee10bebd5219c6769a70df16d98b6fe5","ssdeep":"192:VrWlUpKY7Nb9/AITsI3xO/oa5ILpJUWRaVBsMDjnDW8:xWiL7IYhO/VC5sVBsMDLDN","tlshash":"3cf1af38cca6130d4f2b55c2292a90e3c13c5be0a6b57e067aa62f790d3e31549e5df6","first_seen":"2026-02-13T03:15:02.654218Z","last_seen":"2026-02-13T03:15:02.654218Z","times_seen":1,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":96,"dns":33,"connect":3,"send":0,"wait":274,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.billiger.com/dynimg/NwmU1BLnkZW297ZomK8s8iXpJ53MH5lvA_hMn5zos5T_olRSBeQCSEAXhzSr2EMdUdK_aiVfVxKgiL7QrVNcun5Sew258-u7JDvEvriv4aQBavw72osntw/271306667417_large.webp","fqdn":"cdn.billiger.com","domain":"billiger.com","tld":"com"},"ip":{"addr":"104.20.37.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.formeinsatz.de/","date":"2026-02-13T03:14:33.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"billiger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:42:15 GMT","end":"Mon, 27 Apr 2026 20:42:04 GMT"},"fingerprint":{"sha1":"66:90:BA:61:46:CD:CC:25:31:62:F8:F5:76:67:8A:75:0B:29:B6:CF","sha256":"38:0A:B8:94:F4:7B:0D:44:FE:6F:3B:EA:52:78:02:AC:7D:7F:48:FB:0D:DF:FB:48:7A:0B:91:F4:E5:C6:3F:5E"}}},"request":{"raw":"GET /dynimg/NwmU1BLnkZW297ZomK8s8iXpJ53MH5lvA_hMn5zos5T_olRSBeQCSEAXhzSr2EMdUdK_aiVfVxKgiL7QrVNcun5Sew258-u7JDvEvriv4aQBavw72osntw/271306667417_large.webp HTTP/1.1\r\nHost: cdn.billiger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.formeinsatz.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 03:14:33 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncache-control: max-age=31536000\r\nexpires: Sat, 13 Feb 2027 03:14:33 GMT\r\netag: \"6c0e9cb90a996a23ebf55c10f5f99e01\"\r\nlast-modified: Wed, 13 Nov 2024 08:47:22 GMT\r\nx-dynimg-origin: cdnfe04\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9cd127fe8a72723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3120,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4391b210d516dedca19d0024993563c1","sha1":"b9c3a1c5f1a189f8351dd25f35a0c125f6fa31aa","sha256":"c9815c32f32ecb1612004c75023fe8e4efbbc5544a93be371f4b09244305a29a","sha512":"c3f7255525b7b23aafa91124f5e6c0d1f0b31408a541194aad3c3b64afd3ca97bfe523853db7cd271666af1d57b401f0b8dbdd2aa1988f7669ad2274ae1a44a3","ssdeep":"","tlshash":"2f517d5b4279281f2ba4f958b2460586545e548db3f7909d0befa70650d343968893f3","first_seen":"2026-02-13T03:15:02.65573Z","last_seen":"2026-02-13T03:15:02.65573Z","times_seen":1,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":96,"dns":32,"connect":3,"send":0,"wait":162,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.billiger.com/dynimg/Y00KxSbLC-g2vPErx6qti6XpJ53MH5lvA_hMn5zos5T_olRSBeQCSEAXhzSr2EMda3JLAZgDTk1YSGm1Oa7CVHgiVpoHO61_q7LnNB9tr_XzVms47P7yxQ/525786357063_large.webp","fqdn":"cdn.billiger.com","domain":"billiger.com","tld":"com"},"ip":{"addr":"104.20.37.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.formeinsatz.de/","date":"2026-02-13T03:14:33.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"billiger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:42:15 GMT","end":"Mon, 27 Apr 2026 20:42:04 GMT"},"fingerprint":{"sha1":"66:90:BA:61:46:CD:CC:25:31:62:F8:F5:76:67:8A:75:0B:29:B6:CF","sha256":"38:0A:B8:94:F4:7B:0D:44:FE:6F:3B:EA:52:78:02:AC:7D:7F:48:FB:0D:DF:FB:48:7A:0B:91:F4:E5:C6:3F:5E"}}},"request":{"raw":"GET /dynimg/Y00KxSbLC-g2vPErx6qti6XpJ53MH5lvA_hMn5zos5T_olRSBeQCSEAXhzSr2EMda3JLAZgDTk1YSGm1Oa7CVHgiVpoHO61_q7LnNB9tr_XzVms47P7yxQ/525786357063_large.webp HTTP/1.1\r\nHost: cdn.billiger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.formeinsatz.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 03:14:33 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncache-control: max-age=31536000\r\nexpires: Sat, 13 Feb 2027 03:14:33 GMT\r\netag: \"7b0dc48f5e25ff27ce2031edac416d28\"\r\nlast-modified: Fri, 16 Jan 2026 12:29:06 GMT\r\nx-dynimg-origin: cdnfe01\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9cd127fe8a7b723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2926,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"de983d776aa09e15d18c24f51021fd74","sha1":"48edec8af4f3087f8de4e32bd99bd064d60fd29d","sha256":"b77ce5b23655a39a3b96c18de146861a479ad380ede2b26913f3bcfd1496bb91","sha512":"229d34e01047673cf5a2d421c9dd4efe126616b188b1e66cdef7eaa998816978c09776979abe209df848a7c717f232e466ff5dd55e21a7a4571fba77593cc141","ssdeep":"","tlshash":"4f515c88535ffc64c93257b2aeddaeb143625f9254c5654c6414f0300862f10e459c85","first_seen":"2026-02-13T03:15:02.656965Z","last_seen":"2026-02-13T03:15:02.656965Z","times_seen":1,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":99,"dns":32,"connect":3,"send":0,"wait":173,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.billiger.com/dynimg/tJbiDU-WD6qtosdUAnZrTiXpJ53MH5lvA_hMn5zos5T_olRSBeQCSEAXhzSr2EMdWSEI3Ijb8YhiDaGgl20d-WV1fXYjEXiE3mlGEeh8emBO72F63cLIH4/685530990424_large.webp","fqdn":"cdn.billiger.com","domain":"billiger.com","tld":"com"},"ip":{"addr":"104.20.37.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.formeinsatz.de/","date":"2026-02-13T03:14:33.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"billiger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:42:15 GMT","end":"Mon, 27 Apr 2026 20:42:04 GMT"},"fingerprint":{"sha1":"66:90:BA:61:46:CD:CC:25:31:62:F8:F5:76:67:8A:75:0B:29:B6:CF","sha256":"38:0A:B8:94:F4:7B:0D:44:FE:6F:3B:EA:52:78:02:AC:7D:7F:48:FB:0D:DF:FB:48:7A:0B:91:F4:E5:C6:3F:5E"}}},"request":{"raw":"GET /dynimg/tJbiDU-WD6qtosdUAnZrTiXpJ53MH5lvA_hMn5zos5T_olRSBeQCSEAXhzSr2EMdWSEI3Ijb8YhiDaGgl20d-WV1fXYjEXiE3mlGEeh8emBO72F63cLIH4/685530990424_large.webp HTTP/1.1\r\nHost: cdn.billiger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.formeinsatz.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 03:14:33 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncache-control: max-age=31536000\r\nexpires: Sat, 13 Feb 2027 03:14:33 GMT\r\netag: \"6a2214fecba16f30e459453bca4a304c\"\r\nlast-modified: Tue, 02 Sep 2025 13:06:06 GMT\r\nx-dynimg-origin: cdnfe09\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9cd127fe7a5f723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3576,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fec1157c3e47413cd6403271ac4edc39","sha1":"cce8174021a0a3294f614806036d0e1df333439e","sha256":"b7fdb39c9a16f1bac1509f547d59335702e2ff81990139cb1c3cf382da494628","sha512":"4be749d13b24406f19d76f7d52044bb16c9f446e46cb11eeefdd554e71feac181f778f102cccfeb2f57123544424a92fcce400300857a6b63f1eb76dae3c73aa","ssdeep":"","tlshash":"8e716b30bf5c1efb65a54180878c3da7e9b0982a91143bbce512baca800ec7ad80c495","first_seen":"2026-02-13T03:15:02.660983Z","last_seen":"2026-05-05T22:30:27.69094Z","times_seen":2,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":30,"connect":3,"send":0,"wait":217,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/webfonts/fa-solid-900.woff2","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.formeinsatz.de/","date":"2026-02-13T03:14:33.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"formeinsatz.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Feb 2026 11:36:47 GMT","end":"Tue, 12 May 2026 11:36:46 GMT"},"fingerprint":{"sha1":"08:54:1D:9F:4D:BC:C2:04:39:D5:ED:28:CD:AD:31:86:ED:ED:80:9C","sha256":"8D:9B:D4:98:F1:2A:4B:43:36:67:6C:A5:26:10:5E:96:0D:4E:E3:1E:33:C2:5C:C1:53:8E:62:C6:4E:B9:59:7D"}}},"request":{"raw":"GET /webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: www.formeinsatz.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.formeinsatz.de/css/app.8ccbda3d72a02089398384dd95a0cc2b.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.2\r\ndate: Fri, 13 Feb 2026 03:14:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 156400\r\nlast-modified: Fri, 04 Oct 2024 12:17:18 GMT\r\netag: \"66ffdcce-262f0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.25.3.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":156400,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 156400, version 773.1280","md5":"1ec0ba058c021acf7feaa18081445d63","sha1":"73e7eabf7a8ae9be149a85d196c9f3f26622925b","sha256":"ae17c16afbea216707b2203ea1cf9bdb45b9bfe47d0f4ae3258ddbc6294dd02f","sha512":"16a1b8a067ad4a33dcf4483c8370ca42e32f1385e3c4e717f8d0ce9995ca1f8397b15a63c0cee044c4b0fca96c4b648c850f483eeb1188a20f8b6cbf11d2b208","ssdeep":"3072:T0NNdf7uJ/Q8zfLtuI3m4uTtijwbr+mV+5ZUTRjV:AN7r8jMbgjwvOrU3","tlshash":"b6e3139a9a1f63d89c3cd982f61ef3fb715aadab1f521220193149f9d04f0af5035a4c","first_seen":"2024-04-05T18:44:58Z","last_seen":"2026-06-25T00:26:09.127849Z","times_seen":12553,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":25,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.cdn-fileserver.com/__media__/fonts/InterBold/InterBold.woff","fqdn":"s.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kwserving.com/sr/754870121/SAFEFRAME.html?ule=386\u0026\u0026kkdd=HA%7CH%7Cn9A*\u0026Xe=WBB2UcfaBnVf2*UVVnW\u0026~3Gu=2\u00266mGR=2\u0026Nm(G=2\u0026T3X=WVna\u0026PmT)=gWWnU\u0026Te3=VKLB2I.W7\u0026TGT3=6L4VpLiU!p!fu0fUkP-6t~%3D%3D\u0026Tue3=BcV2af*Bf\u0026me0)=UB2Hfc2\u0026TT=Ol\u0026mT=2n\u0026u)E4uk=(PPGm%3A%2F%2FNNNh-Ju6)eQmRP0h3)%2F\u0026Qm)=c\u00264~3=a\u0026kW(JmP=MNm)uXeQ~hTJ6\u0026eN=WfV2\u0026NkmPG=W\u00266T-=nfVan\u0026G~e3=G2WafcWnBVUaPf2f*2fWn2nWa\u0026G~e3m=W\u0026(P6kmuT=W\u0026sflct=7625942\u0026ure=1#\u0026startTime=1770952473484\u0026l1ch=0\u0026l2type=scs_newfl\u0026sttm=1770952473495\u0026upk=1770952473.22617\u0026hvsid=00001770952473495028899290081799\u0026verid=9121199\u0026tdAdd[]=%257C%2540%257Csde%253D1%257C%2540%257Cadepth%253D1%257C%2540%257Cddepth%253D1\u0026kbbq=%2526sde%253D1%2526adepth%253D1%2526ddepth%253D1\u0026lp=%257B%2522wlstp%2522%253A1%252C%2522mcf%2522%253A%252232843%2522%257D\u0026pvl=%257B%2522l1cdv%2522%253A%25221834%2522%252C%2522l1rpth%2522%253A%2522%252Fdm.js%2522%252C%2522lbt%2522%253A77%252C%2522pgids%2522%253A1%257D\u0026tchkpts=%7B%22l1s%22%3A1770952473484%2C%22prel2%22%3A1770952473500%7D\u0026vgd_wshp=0\u0026vgd_l1rhst=kwserving.com\u0026vgd_sc=03\u0026vgd_uspa=0\u0026vgd_isiolc=1\u0026l3d=%257B%2522bidparams%2522%253A%257B%257D%252C%2522l1btm%2522%253A%255B%255D%252C%2522clkIdQs%2522%253A%2522%2522%252C%2522l2host%2522%253A%2522https%253A%252F%252Fkwserving.com%2522%252C%2522fgbr%2522%253A%2522%2522%252C%2522kClkUP%2522%253A%2522%2522%252C%2522bid%2522%253A%2522%2522%252C%2522cntrdt%2522%253A%2522AS%257CDIV-758042672%257CDIV%2522%252C%2522pgid%2522%253A%2522p01425137894t202602130314%2522%257D","date":"2026-02-13T03:14:34.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fileserver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:34:52 GMT","end":"Tue, 28 Apr 2026 17:33:19 GMT"},"fingerprint":{"sha1":"F3:1F:AE:F5:F8:55:3C:E0:73:9D:53:9F:50:2C:79:55:B2:A1:33:D1","sha256":"50:7A:11:63:E8:59:A1:60:B9:7A:1C:11:46:F4:E5:9E:5A:10:E9:46:AD:96:82:92:F4:32:FE:23:EC:45:AC:B9"}}},"request":{"raw":"GET /__media__/fonts/InterBold/InterBold.woff HTTP/1.1\r\nHost: s.cdn-fileserver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kwserving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kwserving.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 03:14:34 GMT\r\ncontent-type: font/woff\r\ncontent-length: 29768\r\nserver: cloudflare\r\nlast-modified: Mon, 20 Sep 2021 08:36:38 GMT\r\netag: \"7448-5cc692df1b180\"\r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\naccess-control-allow-origin: *\r\nedge-control: downstream-ttl=1d\r\nvia: 1.1 google\r\nx-cache-status: miss\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 169576\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8TEBOQGByFhxaGUDhY0KTjxgp1KT2dfAdHUYkz4vuPqbsIs1ubobRcIk4lbJqObITjfyuZuJvcTZOKYfDmS%2FL8LkJID3K14c%2Fcyt%2BTYPZYE4skS5\"}]}\r\ncf-ray: 9cd128037c6e4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":29768,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 29768, version 1.0","md5":"139e4cf7e20d3f4be59facbbd2931681","sha1":"e46e75017cb388a0ef40232daca063896b95ac52","sha256":"e457ddba8d64d6ab72720f320078b6ccfc9be781d963d5fa3f2de5e44a659daf","sha512":"0631e052e7559ab3f23ef811aaa9220657e9ef2b9c617a5fc2d65846fe0259555914b13bdd2da61375c07e15adb8d0bad72b3416ebdfa9f253c189d405cf1d98","ssdeep":"768:xfbL8AaNuQX+t0kE9QmPz9CXCdsfYhyE0ojArrI4:xf3vaNuQOt0kE9QmPzzGAX0ojArr1","tlshash":"52d2f1711e23132bfd1e33f1674114e5166722e46f06b399b6af06da5cba9da22c600f","first_seen":"2026-01-13T01:25:30.933232Z","last_seen":"2026-05-27T13:13:31.418343Z","times_seen":475,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":10,"receive":2,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T03:14:32.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"formeinsatz.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Feb 2026 11:36:47 GMT","end":"Tue, 12 May 2026 11:36:46 GMT"},"fingerprint":{"sha1":"08:54:1D:9F:4D:BC:C2:04:39:D5:ED:28:CD:AD:31:86:ED:ED:80:9C","sha256":"8D:9B:D4:98:F1:2A:4B:43:36:67:6C:A5:26:10:5E:96:0D:4E:E3:1E:33:C2:5C:C1:53:8E:62:C6:4E:B9:59:7D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.formeinsatz.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.2\r\ndate: Fri, 13 Feb 2026 03:14:33 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nvary: accept-encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.25.3.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":250839,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (638)","md5":"7653c65b4b563733a6f82cb8de291693","sha1":"12471a145d050da58e8be77eb103b7b0024d01b9","sha256":"509389d9df60cb9a82b3245b9394fdde67f696f726234b1ab6df5dbb21a9252d","sha512":"4cde230df1a36db8631f10490387c92206a30df863cc7fa8228683fb3c80b3563e706e8adddf8fea17b2da19c4d6c00bd174726c76ff230a41bef85426653f18","ssdeep":"3072:ke2222mYOCCu4e+OSvkfCrt1WLK/8Iltxgw3uzrXqi0l2uGWs5mwSu2s2uwC+J2s:hXqi/rqiDw","tlshash":"9e34d824a5f109a3019382b537d3aa6eeda6d753d5138c1cb37c86825fc7c858f876e8","first_seen":"2026-02-13T03:15:02.663937Z","last_seen":"2026-02-13T03:15:02.663937Z","times_seen":1,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":56,"dns":1,"connect":24,"send":0,"wait":48,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/logos/logo_3.png","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.formeinsatz.de/","date":"2026-02-13T03:14:33.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"formeinsatz.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Feb 2026 11:36:47 GMT","end":"Tue, 12 May 2026 11:36:46 GMT"},"fingerprint":{"sha1":"08:54:1D:9F:4D:BC:C2:04:39:D5:ED:28:CD:AD:31:86:ED:ED:80:9C","sha256":"8D:9B:D4:98:F1:2A:4B:43:36:67:6C:A5:26:10:5E:96:0D:4E:E3:1E:33:C2:5C:C1:53:8E:62:C6:4E:B9:59:7D"}}},"request":{"raw":"GET /logos/logo_3.png HTTP/1.1\r\nHost: www.formeinsatz.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.formeinsatz.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.2\r\ndate: Fri, 13 Feb 2026 03:14:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 4645\r\nlast-modified: Fri, 04 Oct 2024 12:50:06 GMT\r\netag: \"66ffe47e-1225\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.25.3.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4645,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"3c491f50cafe92da1db3389951fc9d42","sha1":"9f1d5d2dc33ec1b21a33f2f3e36dea51b195d713","sha256":"b62b31bbfe5437d60affd1436dfab4912dbcbcfaf6089b7573209c0ad860a206","sha512":"260ac15af97d175872ac2f76ccb79835173b75aacbfaf37fb32c574d417b23db44cfab2ac117693e8dfc098a05e9e2a4fb531ca138f7412525dc96202a74a72d","ssdeep":"96:paqxZYrNdLtdwVI/RTAgLl/elq6zNJ4xvsNROVIRNF19bz5T6JFyX0:REZQI5TATqMSvsGW3F1xzQu0","tlshash":"f5a16d382cd3b293d66eb3518efb3880e453da46d985d28d2cf19c235e214a26e36753","first_seen":"2025-09-21T14:45:40.427572Z","last_seen":"2026-05-23T19:23:39.760822Z","times_seen":79,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"media.averdo.com/picture/images_shop/B00/000/000/B00000000794180.jpg","fqdn":"media.averdo.com","domain":"averdo.com","tld":"com"},"ip":{"addr":"144.76.36.66","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.formeinsatz.de/","date":"2026-02-13T03:14:33.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"media.averdo.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:22:52 GMT","end":"Mon, 13 Apr 2026 01:22:51 GMT"},"fingerprint":{"sha1":"5F:6B:C2:8D:E8:03:EC:46:2B:EF:6B:8D:F3:9E:98:D4:10:A5:6E:31","sha256":"78:49:8A:07:81:2E:4B:B2:41:69:3C:78:EC:42:13:69:BB:E5:51:F1:07:07:80:DD:41:93:14:88:07:AA:83:5C"}}},"request":{"raw":"GET /picture/images_shop/B00/000/000/B00000000794180.jpg HTTP/1.1\r\nHost: media.averdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.formeinsatz.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Fri, 13 Feb 2026 03:14:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 59808\r\nLast-Modified: Thu, 26 Jun 2025 10:45:33 GMT\r\nConnection: keep-alive\r\nETag: \"685d24cd-e9a0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59808,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 1024x1024, components 3","md5":"34de26a8ff944a255f02cc38fa554a59","sha1":"1a2792aafb4843d02223248fdec3b6eb302eef4e","sha256":"eafb3b520e12c360dc3933377bc77f6fd12757a5641af704a8d0c0c38ff4d999","sha512":"53b79d2ee8ea264f4083626d1479d93230c0e19a3a9692fc8ebab1bcb01d06833b48aa2965adcc441843ac919dda15a80a4511bcc48ce9b2db8c881a610f5e90","ssdeep":"1536:8EumMsCJ/YxnJ3k0DSVdaVacWcwiK8GrM3M/:3umOQxnC0D4d89OMm","tlshash":"654392039c488787f12857e9fd130eac2a5a2b48f8877bfb05360eda3d245525cde53a","first_seen":"2026-01-04T07:10:22.750974Z","last_seen":"2026-05-04T00:52:50.745031Z","times_seen":5,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":26,"send":0,"wait":48,"receive":27,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/domLoaded","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.formeinsatz.de/","date":"2026-02-13T03:14:33.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"formeinsatz.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Feb 2026 11:36:47 GMT","end":"Tue, 12 May 2026 11:36:46 GMT"},"fingerprint":{"sha1":"08:54:1D:9F:4D:BC:C2:04:39:D5:ED:28:CD:AD:31:86:ED:ED:80:9C","sha256":"8D:9B:D4:98:F1:2A:4B:43:36:67:6C:A5:26:10:5E:96:0D:4E:E3:1E:33:C2:5C:C1:53:8E:62:C6:4E:B9:59:7D"}}},"request":{"raw":"GET /domLoaded HTTP/1.1\r\nHost: www.formeinsatz.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.formeinsatz.de/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_depth=www.formeinsatz.de%3D1%7C758042672%3D1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.2\r\ndate: Fri, 13 Feb 2026 03:14:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 59\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IlBMcjNjZnh1R0tCWnVmNVpTNkRIZ2c9PSIsInZhbHVlIjoiY0NWeXBqL0ZPTEpEcmQvR1BFVXZQZDdXRk1pSmNvMWlxOEdSVURJb0tVV3FYejhKRkdGb3pudFdmVTZVUndIUUdubUJXdFpjRVkzblJCcTBoOVorZUNoMElTbXhrRG1LYjVzR3B0Wjdjc3R1cEtYSWdyTUpkL3VsbnBzZ1QzT2kiLCJtYWMiOiJhNjZiMGM1ZTExYzdlZWEyNzQwOTgzYTE1MGRlZTAyMjc5YjAyZjEyMDZlNDBhMTE3MWY5ODI4YzQ1MzQzZTE1IiwidGFnIjoiIn0%3D; expires=Fri, 13 Feb 2026 05:14:34 GMT; Max-Age=7200; path=/; secure; samesite=lax\nlaravel_session=eyJpdiI6Im9xRWhrMXBDNGZ4elhSZUlORHhkbHc9PSIsInZhbHVlIjoiakJBekd1U0dhcGpqd3ArVEszSFIrYXRadHNQNWZ0d0k0OFdCWlU0aTZlcnRmZjQvQVZoY2x4ZVd0WSsvcktYWGE3dXFlU25WVWZ6akdXOXFsUVRBVTYvN2JhMzhoaG9zSWR6Y0NNNndHVW1xOElEbUJCZjJ3TVlTay94RDdTVW8iLCJtYWMiOiJhNTkxNmUxMTIwMTBiZjBjM2ZlMDJiODQ4MjQ0Y2RlYWQ4ZjM2ZWNiYjU4YTgzZTQwN2RmY2NlYTg2Njg0ZDk2IiwidGFnIjoiIn0%3D; expires=Fri, 13 Feb 2026 05:14:34 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.25.3.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T02:14:30.679539Z","times_seen":16696957,"resource_available":true,"data":null}},"time_used":910,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":910,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.cdn-fileserver.com/__media__/fonts/Inter-Regular/Inter-Regular.woff","fqdn":"s.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kwserving.com/sr/754870121/SAFEFRAME.html?ule=386\u0026\u0026kkdd=HA%7CH%7Cn9A*\u0026Xe=WBB2UcfaBnVf2*UVVnW\u0026~3Gu=2\u00266mGR=2\u0026Nm(G=2\u0026T3X=WVna\u0026PmT)=gWWnU\u0026Te3=VKLB2I.W7\u0026TGT3=6L4VpLiU!p!fu0fUkP-6t~%3D%3D\u0026Tue3=BcV2af*Bf\u0026me0)=UB2Hfc2\u0026TT=Ol\u0026mT=2n\u0026u)E4uk=(PPGm%3A%2F%2FNNNh-Ju6)eQmRP0h3)%2F\u0026Qm)=c\u00264~3=a\u0026kW(JmP=MNm)uXeQ~hTJ6\u0026eN=WfV2\u0026NkmPG=W\u00266T-=nfVan\u0026G~e3=G2WafcWnBVUaPf2f*2fWn2nWa\u0026G~e3m=W\u0026(P6kmuT=W\u0026sflct=7625942\u0026ure=1#\u0026startTime=1770952473484\u0026l1ch=0\u0026l2type=scs_newfl\u0026sttm=1770952473495\u0026upk=1770952473.22617\u0026hvsid=00001770952473495028899290081799\u0026verid=9121199\u0026tdAdd[]=%257C%2540%257Csde%253D1%257C%2540%257Cadepth%253D1%257C%2540%257Cddepth%253D1\u0026kbbq=%2526sde%253D1%2526adepth%253D1%2526ddepth%253D1\u0026lp=%257B%2522wlstp%2522%253A1%252C%2522mcf%2522%253A%252232843%2522%257D\u0026pvl=%257B%2522l1cdv%2522%253A%25221834%2522%252C%2522l1rpth%2522%253A%2522%252Fdm.js%2522%252C%2522lbt%2522%253A77%252C%2522pgids%2522%253A1%257D\u0026tchkpts=%7B%22l1s%22%3A1770952473484%2C%22prel2%22%3A1770952473500%7D\u0026vgd_wshp=0\u0026vgd_l1rhst=kwserving.com\u0026vgd_sc=03\u0026vgd_uspa=0\u0026vgd_isiolc=1\u0026l3d=%257B%2522bidparams%2522%253A%257B%257D%252C%2522l1btm%2522%253A%255B%255D%252C%2522clkIdQs%2522%253A%2522%2522%252C%2522l2host%2522%253A%2522https%253A%252F%252Fkwserving.com%2522%252C%2522fgbr%2522%253A%2522%2522%252C%2522kClkUP%2522%253A%2522%2522%252C%2522bid%2522%253A%2522%2522%252C%2522cntrdt%2522%253A%2522AS%257CDIV-758042672%257CDIV%2522%252C%2522pgid%2522%253A%2522p01425137894t202602130314%2522%257D","date":"2026-02-13T03:14:34.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fileserver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:34:52 GMT","end":"Tue, 28 Apr 2026 17:33:19 GMT"},"fingerprint":{"sha1":"F3:1F:AE:F5:F8:55:3C:E0:73:9D:53:9F:50:2C:79:55:B2:A1:33:D1","sha256":"50:7A:11:63:E8:59:A1:60:B9:7A:1C:11:46:F4:E5:9E:5A:10:E9:46:AD:96:82:92:F4:32:FE:23:EC:45:AC:B9"}}},"request":{"raw":"GET /__media__/fonts/Inter-Regular/Inter-Regular.woff HTTP/1.1\r\nHost: s.cdn-fileserver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://kwserving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kwserving.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 03:14:34 GMT\r\ncontent-type: font/woff\r\ncontent-length: 27676\r\nserver: cloudflare\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nedge-control: downstream-ttl=1d\r\nvia: 1.1 google\r\ncache-control: public, max-age=604800\r\nlast-modified: Wed, 15 Jul 2020 10:51:09 GMT\r\netag: \"6c1c-5aa78b3916140\"\r\nage: 275580\r\nx-cache-status: hit\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v6LDOJ7isU94cFCizWLo5a5HyMVoizavUEaNE0QK%2BAkCAoghgeiNMioq0yhDk3vIQh30usB5Ti7gq9PRnPxBjwmLuYpIFDaWkj90SQHXJbMwSaZ8\"}]}\r\ncf-ray: 9cd128037c854e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27676,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 27676, version 1.0","md5":"d018983276941d4d273424c1c01b411a","sha1":"58185aa434eaff25b3d2cc1180e33f381e3e398c","sha256":"db8b880da3b4500b5628fff8b770b0b73c3c3cec757deae20f1bf10c0a3da670","sha512":"908ee039edf7c351b1368ff7394489103e5237721f076358e4ee992884927de2ad4d83f2853d3e599c2ddd61f62c9f872dea8d09c9e9e56549343c114a53833b","ssdeep":"768:O6OrO3qE5tOqr89LpbUaQ0FYiTXH51b3cp:O6OrO3qE5/r89dJYO51b32","tlshash":"e1c2e1049327bf53fba6b9f469223ce1a7a1dbb1d7572d9ac1e04196eb1e23ac113014","first_seen":"2025-04-21T14:05:14.69411Z","last_seen":"2026-06-15T18:41:43.235993Z","times_seen":578,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":25,"dns":2,"connect":3,"send":0,"wait":8,"receive":1,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T03:14:31.772Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.formeinsatz.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: openresty/1.25.3.2\r\nDate: Fri, 13 Feb 2026 03:14:31 GMT\r\nContent-Type: text/html\r\nContent-Length: 175\r\nConnection: keep-alive\r\nLocation: https://www.formeinsatz.de/\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"OpenResty:1.25.3.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T02:14:30.679539Z","times_seen":16696957,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":24,"dns":1,"connect":24,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T03:14:31.825Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.formeinsatz.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T02:14:30.679539Z","times_seen":16696957,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":1,"connect":24,"send":0,"wait":0,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/js/htmx.min.js","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.formeinsatz.de/","date":"2026-02-13T03:14:33.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"formeinsatz.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Feb 2026 11:36:47 GMT","end":"Tue, 12 May 2026 11:36:46 GMT"},"fingerprint":{"sha1":"08:54:1D:9F:4D:BC:C2:04:39:D5:ED:28:CD:AD:31:86:ED:ED:80:9C","sha256":"8D:9B:D4:98:F1:2A:4B:43:36:67:6C:A5:26:10:5E:96:0D:4E:E3:1E:33:C2:5C:C1:53:8E:62:C6:4E:B9:59:7D"}}},"request":{"raw":"GET /js/htmx.min.js HTTP/1.1\r\nHost: www.formeinsatz.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.formeinsatz.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.2\r\ndate: Fri, 13 Feb 2026 03:14:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 04 Oct 2024 12:50:06 GMT\r\netag: W/\"66ffe47e-c19f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.25.3.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49567,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49567), with no line terminators","md5":"48e021f096c4eebe52326397e031c75d","sha1":"13dcd355b9ee9b169ddc7afea6683877be30920c","sha256":"e1746d9759ec0d43c5c284452333a310bb5fd7285ebac4b2dc9bf44d72b5a887","sha512":"89103e0c98032d428f93ea6a1a900cdfec120de3b988a4246171ad22fe3e100f2825637599ec0c243ee4582f611c2c944dd7b2f5b432a40871e8f0125928633b","ssdeep":"768:mGHffLGa3LQ4oPHKFha5y0OJCofjURdQvkS+dYrPM6Y6pzRTuPbotGqeIqMIMv1K:PH5NL6WZ53NR+n2JL0IqKtM","tlshash":"c523c6ca33c2317787fe24f995bb1106f37598d2784a8150e058b89b3c75a4a86b7f6c","first_seen":"2024-09-28T07:12:36.6106Z","last_seen":"2026-06-22T19:57:31.439924Z","times_seen":882,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.billiger.com/dynimg/ZSUH3jLDt47hWLLda6HbK6XpJ53MH5lvA_hMn5zos5T_olRSBeQCSEAXhzSr2EMdecJbcA_fPFPwcYpxDedT2qSjlat7DQczXLZl8kg5VHdQxn_S1sH3aE/651896063688_large.webp","fqdn":"cdn.billiger.com","domain":"billiger.com","tld":"com"},"ip":{"addr":"104.20.37.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.formeinsatz.de/","date":"2026-02-13T03:14:33.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"billiger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:42:15 GMT","end":"Mon, 27 Apr 2026 20:42:04 GMT"},"fingerprint":{"sha1":"66:90:BA:61:46:CD:CC:25:31:62:F8:F5:76:67:8A:75:0B:29:B6:CF","sha256":"38:0A:B8:94:F4:7B:0D:44:FE:6F:3B:EA:52:78:02:AC:7D:7F:48:FB:0D:DF:FB:48:7A:0B:91:F4:E5:C6:3F:5E"}}},"request":{"raw":"GET /dynimg/ZSUH3jLDt47hWLLda6HbK6XpJ53MH5lvA_hMn5zos5T_olRSBeQCSEAXhzSr2EMdecJbcA_fPFPwcYpxDedT2qSjlat7DQczXLZl8kg5VHdQxn_S1sH3aE/651896063688_large.webp HTTP/1.1\r\nHost: cdn.billiger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.formeinsatz.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 03:14:33 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncache-control: max-age=31536000\r\nexpires: Sat, 13 Feb 2027 03:14:33 GMT\r\netag: \"99e9b2b5ffd0380823a7e00437b849bd\"\r\nlast-modified: Sat, 07 Feb 2026 17:02:12 GMT\r\nx-dynimg-origin: cdnfe09\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\ncf-ray: 9cd127feaa9b723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3614,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8461f0db5966eb10591e31697bc4bccf","sha1":"ff2be3534e90dab0687979b492a4455ea1173604","sha256":"1bd7db26e26bd079c8f4d0484684905a1578ab2240bed46e81af39999895e16e","sha512":"05f48a54b957a080c0aeaf61ea392dd4af81d1fbf1cb2454699e31f6885fdd9601db8e45dd68f7b783ff99aee957125120330ecce1c00c78c273bb440d6e169a","ssdeep":"","tlshash":"db714cfd6f1ed20bd56d88a7f82005c57af2861b150190a8eccd7338ae9b72d0408e6e","first_seen":"2026-02-13T03:15:02.691011Z","last_seen":"2026-02-13T03:15:02.691011Z","times_seen":1,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":109,"dns":31,"connect":5,"send":0,"wait":172,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/favicon.ico","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"78.46.86.91","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.formeinsatz.de/","date":"2026-02-13T03:14:33.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"formeinsatz.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Feb 2026 11:36:47 GMT","end":"Tue, 12 May 2026 11:36:46 GMT"},"fingerprint":{"sha1":"08:54:1D:9F:4D:BC:C2:04:39:D5:ED:28:CD:AD:31:86:ED:ED:80:9C","sha256":"8D:9B:D4:98:F1:2A:4B:43:36:67:6C:A5:26:10:5E:96:0D:4E:E3:1E:33:C2:5C:C1:53:8E:62:C6:4E:B9:59:7D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.formeinsatz.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.formeinsatz.de/\r\nCookie: session_depth=www.formeinsatz.de%3D1%7C758042672%3D1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.2\r\ndate: Fri, 13 Feb 2026 03:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 2387\r\ncache-control: public\r\nlast-modified: Fri, 04 Oct 2024 12:17:18 GMT\r\naccept-ranges: bytes\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjRmZEZJMFRVTk4rQ05IU09XY1lJbEE9PSIsInZhbHVlIjoiUTd3Y0o3RUZobU5hTkhJamFqZ1pTdktyaGc4TFVxNyt3cDFOUUVHNmRKMzV0Ulk0bFo5VWlsOEZ1dHYzVjFxNlc3V2V4V250UUJiU0JXRmNXeTFxRmh1RGxTaWpuTmkwSHloMHRVNmFKb0JwaE9TOGNIYzFNOGFwbDZndnpQR1kiLCJtYWMiOiI5ZWM5ZDkzZDhjODg3MTk1MjI4OTA4Y2ZlYmVmMGQ4ZTU4ODkyNDhjY2NjNmFiMTE1YWQ1MDYzODI5OGMzZjgxIiwidGFnIjoiIn0%3D; expires=Fri, 13 Feb 2026 05:14:34 GMT; Max-Age=7200; path=/; secure; samesite=lax\nlaravel_session=eyJpdiI6Ilh2d3FoS1ZDczBtRDFjWjFzWkdUQ0E9PSIsInZhbHVlIjoieGlxZThBVWR2YUdyUEh4cm1vN2dLaHBhYzdSSlJUTXhTZVN3dEhRQkhnaHhvWG0yTERCTWhVSEoxZ1RlM3ZabUw3Mkl6S1R1MFUvTFNORTMydS9vV2VBWk5BaHVDWm9xb0QzK0RoMmR1WnRQQ0F6ek5LSEN6QkdrODAvSUljY2giLCJtYWMiOiJlMDEyNmEwZWNmMGRmN2FmODZlNzM0NTEyMDdiMjQ0OWNmMGRmMGIxZTAyYmFiNGY5NjZmYzBkMjhjYzBkMDU1IiwidGFnIjoiIn0%3D; expires=Fri, 13 Feb 2026 05:14:34 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.25.3.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2387,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit colormap, non-interlaced","md5":"062a5dcda4729fcd7ddadc09eee16b78","sha1":"be8c91fc50161d113be16cdc7be15178940e3a0a","sha256":"55007f96ea938a0428bc939c08f58d5ad0769d9cc9cdcde9bcab45a63fec91b9","sha512":"2ff22fd93347302c95a0a92819ca2f39484ba276d1e55a385b379bbe0487d3f318a2bfaa836e10dce9fbf14bc700f61037ee01069ea1f8f9cf4ebe62769fb637","ssdeep":"","tlshash":"8541c75cbd539383965da3550cdf2584ea630d42ca81d98a64e9ec238e405a24fbe3c3","first_seen":"2025-09-21T14:45:40.478137Z","last_seen":"2026-03-23T01:09:30.050996Z","times_seen":34,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.formeinsatz.de/","fqdn":"www.formeinsatz.de","domain":"formeinsatz.de","tld":"de"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T03:14:31.606Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.formeinsatz.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T02:14:30.679539Z","times_seen":16696957,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":97,"dns":0,"connect":24,"send":0,"wait":0,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kwserving.com/dm.js?cid=8CU70BJ1S","fqdn":"kwserving.com","domain":"kwserving.com","tld":"com"},"ip":{"addr":"172.67.140.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.formeinsatz.de/","date":"2026-02-13T03:14:33.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwserving.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 07:59:15 GMT","end":"Sat, 09 May 2026 08:56:36 GMT"},"fingerprint":{"sha1":"90:1B:3F:BE:78:C0:33:25:54:58:38:1F:3F:8C:B3:21:CC:70:BB:FE","sha256":"45:36:45:61:E3:B3:81:51:A8:D4:67:4E:E5:06:EE:56:6B:56:0C:62:12:B6:67:92:77:FC:5B:2B:7C:8F:B5:B7"}}},"request":{"raw":"GET /dm.js?cid=8CU70BJ1S HTTP/1.1\r\nHost: kwserving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.formeinsatz.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 03:14:33 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 41902\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=604800, post-check=1800\r\npragma: max-age=604800\r\nexpires: Mon, 16 Feb 2026 15:09:09 GMT\r\nedge-control: downstream-ttl=5m\r\nedge-cache-tag: L1-CTI,8CU70BJ1S,8PR11258V\r\ntiming-allow-origin: *\r\nx-mnt-w: 21-b79k\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\nage: 302723\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Mon, 09 Feb 2026 15:09:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W1%2BlhoDG21%2ByPRo8ktS3Kc4wFcFDz%2FKDqV1P77IptYCPM8KR%2BX5Ubkcg9eBzjFgxDoIwMgKywPprL7VzKlXeaGi1qi6YyJfTG0ozrxY%3D\"}]}\r\ncf-ray: 9cd127feacc28be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123447,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1a8781098b0adc9e98da25229c76b45a","sha1":"444359d80686f18ba1967bb0c920fce695bda5da","sha256":"6ef3df97797b9832a4cc4bda983b1d8fd75f4df165f7336e6a0a7cacef922e18","sha512":"8db371f3147baee6d47193a486ab7b331f8857f02fa86a6c7b5b8521024ef4bd0a343ba754af4131fa8302ce88f39b640ce247b206630ffe3cebdde3e6f38005","ssdeep":"3072:B/5koK//74ExuQGFYad4RYBO/MlCz+3m8LxQ+:pOoK/3TEOFz+3m8LxZ","tlshash":"aac380a572c13039c347f0b19d8fcd09f22ab99922cb5405aa1c95f4bc288bdd776e9d","first_seen":"2026-02-10T06:55:55.376156Z","last_seen":"2026-02-14T03:07:47.240914Z","times_seen":18,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":122,"dns":35,"connect":5,"send":0,"wait":6,"receive":3,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"media.averdo.com/picture/images_shop/B00/000/000/B00000000295465.jpg","fqdn":"media.averdo.com","domain":"averdo.com","tld":"com"},"ip":{"addr":"144.76.36.66","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.formeinsatz.de/","date":"2026-02-13T03:14:33.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"media.averdo.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 01:22:52 GMT","end":"Mon, 13 Apr 2026 01:22:51 GMT"},"fingerprint":{"sha1":"5F:6B:C2:8D:E8:03:EC:46:2B:EF:6B:8D:F3:9E:98:D4:10:A5:6E:31","sha256":"78:49:8A:07:81:2E:4B:B2:41:69:3C:78:EC:42:13:69:BB:E5:51:F1:07:07:80:DD:41:93:14:88:07:AA:83:5C"}}},"request":{"raw":"GET /picture/images_shop/B00/000/000/B00000000295465.jpg HTTP/1.1\r\nHost: media.averdo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.formeinsatz.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Fri, 13 Feb 2026 03:14:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 58416\r\nLast-Modified: Thu, 26 Jun 2025 18:15:08 GMT\r\nConnection: keep-alive\r\nETag: \"685d8e2c-e430\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58416,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 1024x1024, components 3","md5":"6bfabb7b3a603a0bae67a6abba501123","sha1":"7a25b4e9417bee6616c0df9081ae486fb57f93e4","sha256":"80c61e3b2802712226315fcb2b54fe2986991a946483857c8a4daf971beccf87","sha512":"d732d97f0ab84b007058ef239f9f485e4a09497cf36b37c600b4d0dff0471cdf132755e295d227bc6a387fe727d6daacfc5c4138606c097af2a986bf58ebea02","ssdeep":"1536:8SMsmfynyFOSlNfhGt0UvdSqfIhhVrFqmd:DsynyHLMbIhEmd","tlshash":"0343f7479c59db83a02887e9fd530ead5f4a2b0cf8523afe55261dcf2e206650cce52d","first_seen":"2026-02-13T03:15:02.694802Z","last_seen":"2026-02-13T03:15:02.694802Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":2,"connect":24,"send":0,"wait":46,"receive":29,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kwserving.com/sr/754870121/SAFEFRAME.html?ule=386\u0026\u0026kkdd=HA%7CH%7Cn9A*\u0026Xe=WBB2UcfaBnVf2*UVVnW\u0026~3Gu=2\u00266mGR=2\u0026Nm(G=2\u0026T3X=WVna\u0026PmT)=gWWnU\u0026Te3=VKLB2I.W7\u0026TGT3=6L4VpLiU!p!fu0fUkP-6t~%3D%3D\u0026Tue3=BcV2af*Bf\u0026me0)=UB2Hfc2\u0026TT=Ol\u0026mT=2n\u0026u)E4uk=(PPGm%3A%2F%2FNNNh-Ju6)eQmRP0h3)%2F\u0026Qm)=c\u00264~3=a\u0026kW(JmP=MNm)uXeQ~hTJ6\u0026eN=WfV2\u0026NkmPG=W\u00266T-=nfVan\u0026G~e3=G2WafcWnBVUaPf2f*2fWn2nWa\u0026G~e3m=W\u0026(P6kmuT=W\u0026sflct=7625942\u0026ure=1#\u0026startTime=1770952473484\u0026l1ch=0\u0026l2type=scs_newfl\u0026sttm=1770952473495\u0026upk=1770952473.22617\u0026hvsid=00001770952473495028899290081799\u0026verid=9121199\u0026tdAdd[]=%257C%2540%257Csde%253D1%257C%2540%257Cadepth%253D1%257C%2540%257Cddepth%253D1\u0026kbbq=%2526sde%253D1%2526adepth%253D1%2526ddepth%253D1\u0026lp=%257B%2522wlstp%2522%253A1%252C%2522mcf%2522%253A%252232843%2522%257D\u0026pvl=%257B%2522l1cdv%2522%253A%25221834%2522%252C%2522l1rpth%2522%253A%2522%252Fdm.js%2522%252C%2522lbt%2522%253A77%252C%2522pgids%2522%253A1%257D\u0026tchkpts=%7B%22l1s%22%3A1770952473484%2C%22prel2%22%3A1770952473500%7D\u0026vgd_wshp=0\u0026vgd_l1rhst=kwserving.com\u0026vgd_sc=03\u0026vgd_uspa=0\u0026vgd_isiolc=1\u0026l3d=%257B%2522bidparams%2522%253A%257B%257D%252C%2522l1btm%2522%253A%255B%255D%252C%2522clkIdQs%2522%253A%2522%2522%252C%2522l2host%2522%253A%2522https%253A%252F%252Fkwserving.com%2522%252C%2522fgbr%2522%253A%2522%2522%252C%2522kClkUP%2522%253A%2522%2522%252C%2522bid%2522%253A%2522%2522%252C%2522cntrdt%2522%253A%2522AS%257CDIV-758042672%257CDIV%2522%252C%2522pgid%2522%253A%2522p01425137894t202602130314%2522%257D","fqdn":"kwserving.com","domain":"kwserving.com","tld":"com"},"ip":{"addr":"172.67.140.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.formeinsatz.de/","date":"2026-02-13T03:14:33.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kwserving.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 07:59:15 GMT","end":"Sat, 09 May 2026 08:56:36 GMT"},"fingerprint":{"sha1":"90:1B:3F:BE:78:C0:33:25:54:58:38:1F:3F:8C:B3:21:CC:70:BB:FE","sha256":"45:36:45:61:E3:B3:81:51:A8:D4:67:4E:E5:06:EE:56:6B:56:0C:62:12:B6:67:92:77:FC:5B:2B:7C:8F:B5:B7"}}},"request":{"raw":"GET /sr/754870121/SAFEFRAME.html?ule=386\u0026\u0026kkdd=HA%7CH%7Cn9A*\u0026Xe=WBB2UcfaBnVf2*UVVnW\u0026~3Gu=2\u00266mGR=2\u0026Nm(G=2\u0026T3X=WVna\u0026PmT)=gWWnU\u0026Te3=VKLB2I.W7\u0026TGT3=6L4VpLiU!p!fu0fUkP-6t~%3D%3D\u0026Tue3=BcV2af*Bf\u0026me0)=UB2Hfc2\u0026TT=Ol\u0026mT=2n\u0026u)E4uk=(PPGm%3A%2F%2FNNNh-Ju6)eQmRP0h3)%2F\u0026Qm)=c\u00264~3=a\u0026kW(JmP=MNm)uXeQ~hTJ6\u0026eN=WfV2\u0026NkmPG=W\u00266T-=nfVan\u0026G~e3=G2WafcWnBVUaPf2f*2fWn2nWa\u0026G~e3m=W\u0026(P6kmuT=W\u0026sflct=7625942\u0026ure=1 HTTP/1.1\r\nHost: kwserving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.formeinsatz.de/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 03:14:33 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nx-sc-h: 21-kmtr\r\nvia: 1.1 google\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2BB8YFuSYLqR2t0x%2Byg%2BRj6qIfdAsA2LHu9YX4JEAn%2BLDPollP4FtwdyImow5MlPZP9E6K6dGBj67up9up02We23sNfaH1Y1GWQp3l4%3D\"}]}\r\ncf-ray: 9cd127ff6f0e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78440,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40129), with CRLF, LF line terminators","md5":"ea15dec6c13c0417fd5bc0ca01e0aa96","sha1":"f20fdb64c6dc1558b9ca81a076020e5823fb2863","sha256":"3f4fcb39f9dc7a70c6c033024d00e1d189aaa4c4d56fdb7f1a8a2653a4d108ae","sha512":"6c1dbe461248788ed0dcc33faf103862fa2b2a41c8b6da41671831d66258ae517284b2b099086377dac209aa25f76188b557d8428da4457ec37acb98a70318c9","ssdeep":"1536:SXvLW3k6SHGoMpWAFQ9JweArf7Axh+zMzB5xbop2Bmwyt7WxLb0R:SXvLW3k6SHGoMpWAFQ9JweArf7K+Vpd1","tlshash":"7e7309a53183203493a7b0b1ee1ede09f9a6659a13ca8404999ca9b57c2ccfdc732d5d","first_seen":"2026-02-13T03:15:02.69743Z","last_seen":"2026-02-13T03:15:02.69743Z","times_seen":1,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":441,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}