{"report_id":"2ed503a4-0edf-4755-8303-a7f19704e0db","version":0,"status":"done","tags":[],"date":"2026-09-12T18:35:16Z","url":{"schema":"http","addr":"bego-bau.de/","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":0,"asn":14061,"as":"DigitalOcean, LLC","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"bego-bau.de/","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"title":"Homepage","dom":{"size":38631,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2343)","md5":"78240128142e4d617e7e4ef175ec0fd0","sha1":"4a8ed5c0697890e80c02f8e469dbaeeecf8caf7f","sha256":"0078ee473b60d3d747aadd39d3920774ded3d55acdd0325902b5fabc2d2d8da5","sha512":"8fd2202668ec98105bc86215c1bae517a7a02dbf42e7f14017c2ba457d6131b95e7e8c7b9755d7bb960e9bb084db556163c77f8104018e8143d07a9c71cd60b0","ssdeep":"384:0TQw0tboOCkN/0woUH/UKJUrKgoq74DDrm710/f3GZef1s:3wqikN/IJHt71Qlq","tlshash":"f503c520e9e9253a419383d5b5e06f5e2ea3d30bc7074894b2fc92a69fcbed14c4764d","dom_hash":"domhash7c72a3a7db1741958a57269e63d98a4d","first_seen":"2026-09-12T18:35:22.495338Z","last_seen":"2026-09-12T18:35:22.495338Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bego-bau.de/","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-17T18:35:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-09-07T08:15:42.085292Z","alert_count":0,"request_count":1,"received_data":30927,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bego-bau.de","ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-12T18:19:21.366609Z","last_seen":"2026-09-12T18:19:21.366609Z","alert_count":117,"request_count":39,"received_data":6317549,"sent_data":21018,"comment":"","tags":null,"fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]}]},{"fqdn":"maps.googleapis.com","ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3442,"first_seen":"2012-05-22T14:23:23Z","last_seen":"2026-09-07T08:37:17.758967Z","alert_count":0,"request_count":4,"received_data":767115,"sent_data":1908,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":5,"received_data":199705,"sent_data":2735,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":9239,"sent_data":513,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bego-bau.de/","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"560ca277360600306c17d87b56562024","sha1":"c0e9c29c9fbfbfeb26dde1c247a0ddbb00e4d59c","sha256":"7ebcf22b9547006b34d69f760f55743c08d47a469f6af6f6624f6efa974a6ef8","sha512":"626148dda8a20b184d9eafb156c3539c72558c3759ea5f5bff2079d2d4151197b038733b6751e97884693aec1b430ec5f43d4cddf223c2d19977caf2b4a4179d","ssdeep":"","tlshash":"16d0a76731b116344dcb397f14ed03c53410d0025e15500abbb813504e28dbf7e3fa68","size":230,"data":"","first_seen":"2026-09-12T18:19:28.69714Z","last_seen":"2026-09-12T18:35:22.546794Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ba3b6a9f111265c634088b4f1931c62","sha1":"e6aa87cc0c276453509f96e0e4a1b8e057f3c11a","sha256":"9352ff310039c7a6f21869e4a8e33b0775c8682c5185c1da65f87beaf90dcc1d","sha512":"b40522e6c1c723e935ad383f538626dd62d72c6180dab304fcf0f29601e0a0333651d9b1a1bc0a15e0676a5e92ecc16e46f9e6e68cbb55acf49c38299f0cc47b","ssdeep":"","tlshash":"8aa002d0d74a2504f77de30467f7d6ea5146c86641097be39cee8a10b3bb4105700701","size":70,"data":"","first_seen":"2026-09-12T18:19:28.699073Z","last_seen":"2026-09-12T18:35:22.547831Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"b8509b6ecb1ee20b9bf1ecfcd4181aee","sha1":"83bb4c8d4dcfa0da86b5a8fdeaa25b8e83d795b3","sha256":"7d1402df328e336d278ad9eb38bdcd58e35dc0d58035f18b83e218537bace8f0","sha512":"40c45fa366c5abc9dbaca2f426a4ce42298b9f4dd5ac8524d4615543c0acd604c3251bbd8d02d5d6f5104dce085f60933ea76aa2ca2a5c46faa0b269a155e62a","ssdeep":"","tlshash":"6ba024c1c3c31004d555f14053df01d10004c117013375f3dc7ccd00d3170004517300","size":81,"data":"","first_seen":"2026-09-12T18:19:28.701324Z","last_seen":"2026-09-12T18:35:22.550999Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd68e885f6a97121b2b89866f6dcf0e2","sha1":"2c237d08aa68208ebd9a3d054dd46cf22c0b5a29","sha256":"e68311d12523b69f42cd516364d4d78548078e73407477e67046e22adc8454a2","sha512":"569c5726a3a0744d9f950d8043a4af8b78e1ebd724137c2f046d3fcda6c0749a887500f0e9ac93648bf139fa27b3c8f86cab9d0498daf2cdbe9481726cdd404a","ssdeep":"","tlshash":"9b900291c24d620df189f120205715515d41a106149149245ead41451213a841148500","size":50,"data":"","first_seen":"2026-09-12T18:19:28.703393Z","last_seen":"2026-09-12T18:35:22.552183Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b3537c9558ac71b6a53ea6cbd14e58c","sha1":"aa24aca048278fb1881b921d13df3a267b091f21","sha256":"1e13266c1724a3cfc1021c5833e67a61c0ddb33c9122fe5620701618e0b0bbe9","sha512":"6cd5d910e7094717ae2573a7e69746af802eb18c63686dab30df98b05c03cdb853091ae29abeb42d173e4e7db28efd0492694e77aa0cfff6a2599f88ddaf43c4","ssdeep":"","tlshash":"45b0128077019414e118f20010821af144a0c492800105137c5ded0436f24104284104","size":87,"data":"","first_seen":"2026-09-12T18:19:28.705218Z","last_seen":"2026-09-12T18:35:22.553163Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"688be3b1a87b64a03b6275347186e97f","sha1":"680b1c2a6bd208f43d4c4eb796f777437d953371","sha256":"7fdbbf40ba2b7de7bccd2daa1f5e1893e7479c1bcfe621e81a04321838c508b7","sha512":"7a6d4371f71a639ba9db08e0dbc4c0d11a24049e749a6f5c3330676d5727e019ce0fc58f89a69941097dc24b5d50064ba2d5f0b43935d9459d7c9b50a51fa673","ssdeep":"","tlshash":"349004f7c7013105d0c4f14410c31d541011c453d40301375c3f51131777f00154c310","size":43,"data":"","first_seen":"2026-09-12T18:19:28.707444Z","last_seen":"2026-09-12T18:35:22.554242Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"cea69d3b96f1840aac48e47ae0a25b4d","sha1":"5bbb53f755a077c98e00e896456d268c38f9857e","sha256":"291437cf1d86dd23692fbb74838eb70aeccc7488bb898a14b6b4ed7305621865","sha512":"87ce56e4430dd57e7dcab27418fdef3cfa85192208e55546f1a103b7bbb352e04fe353569cdb039f6285ae6d1701cf601ff2ad94310750e8e393f579af408ae7","ssdeep":"","tlshash":"7cb0122e3080342e1c0710410c3c87610371c0477590a021350d14101f2ccc92c5e125","size":103,"data":"","first_seen":"2026-09-12T18:19:28.709417Z","last_seen":"2026-09-12T18:35:22.555328Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"1edb52ab699985e9cf187e7b77c5e433","sha1":"2c951e79ab79153dbfc08d6ede32f385d942b0b8","sha256":"b5a10a477d98ab723f7db326923810a5b9c05894065ac0882e56a657af7aabaf","sha512":"6dab0fe3b0006e1d4697a7738135b043f32aac00ae04df52ebddffcd3b0af29902100d958296e7aca71dfe4f07405f7f77e38a2e7affdd48ac2acfca39ff1117","ssdeep":"","tlshash":"a8c08c0865f83138a0e3b0f5589fa7072e322e0308c8a9113e0c832a8f409111e62dae","size":179,"data":"","first_seen":"2026-09-12T18:19:28.711348Z","last_seen":"2026-09-12T18:35:22.565437Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/js?callback=__gmap3","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"65173812524756f4048a7de15297a409","sha1":"2bf5d245570e106756ec4f13d1e6b382d611855f","sha256":"413058d8dadfb94a3b0db4db65b37538f01580ff12fc4efc22ecde9b4ac7665a","sha512":"6b6c1c930b329f37bc6d68d3c6ee992acb28c3872e764095270c155f18c3cf68906c80079182222d25a8e1f707fc25be26301ef9b5354860b4eed406e4e3880f","ssdeep":"3072:W5m4ShMPcJWP9+agj9afT7TU+TbQx183bPk9bnFlPTuJ/8RoDmCX9XO6s3MiuQAB:NhHagaT7TU+I82eDmM9+GisUSIcj","tlshash":"ef643d947362747287b2e4a4402b0107f17ea85af00c89acfa9cddf2aef594546b7f74","size":315700,"data":"","first_seen":"2026-09-12T18:19:28.653122Z","last_seen":"2026-09-12T18:35:22.535381Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/3e99bae5-b192-4ab6-a256-331ce35218f0","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"","is_inline":false,"md5":"914b44ee858175e07b3eade6bd2fcdbf","sha1":"fd6ae23a0d208deac13b0d595942d83eafbbd22d","sha256":"7960db13ff5efb8230f30a1982d0326f5f7ad14cce9b8cae89c411421cfb8e20","sha512":"7ebde0c3701ee6ad8ea92040d8c39342f84344559a79e7cc1646a881e2145417f93df41d73ed34214d4a788411ee7c47a960144bd84fd98dc38d56a6ff91f133","ssdeep":"192:o4t4lFBaK1cuWxstEKK9YkA1/c2GBdxM5aTth9aOaTeoAjnT/xB:o4iDBN1tWxstEKK95A1wK5Ib47SnrxB","tlshash":"f6221a3022227d2f73e4e8ca6453751a4c2ceb672544075cfb4d5cf2c6ad6a6c52cf29","size":9966,"data":"","first_seen":"2026-06-08T10:28:03.616052Z","last_seen":"2026-09-12T18:35:22.566083Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/js/validateFormCaptcha.js","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c925e5ca1137b59eaf7a84f542feba74","sha1":"f84a96c5802b6b1ad587571ec4b84a65f03fc616","sha256":"da2fe9e23bcccec4a6c717c8b0986227acb9bebf0a0db9531c39939a357b6a3c","sha512":"b49800f4bbafba5469a72344baf3d1d5fb55447e3fb23cc8700478c79d5db6d6b12994866da93ebca7c6d0321f5b05e1cce2eaf2a94092ba53a2f56c7a8641b9","ssdeep":"","tlshash":"a96154a6338d09394dfd277252fb41c5ad6cc039ad02a8a0f8ccd40097b1d1127aefb4","size":3341,"data":"","first_seen":"2026-09-12T18:19:28.664787Z","last_seen":"2026-09-12T18:35:22.53717Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/plugins/scripts.js","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ef2c4f6bc0b3e83e559d185780a81f6","sha1":"55c6f17f0a8783b0d0160b7dfb19daac9cea40a0","sha256":"9e6bdc246e9fc7073a93be7c3ba8d45e116007fa7b1fbf783059100960fb5aed","sha512":"38cf26a295cb87b7d1fe670be2a007cbf77fe11e92f9534d890c85828f0f1d75b0e95da794f3cc8c1928487ee099047fc09af68b61ba3b707b33fe1cc21dd5a3","ssdeep":"192:b6Ajqdm7CmH0Xopmok1Vo7sVotc58Eo7uS5O+toT2wXw5USYfgnwlNpXyT6:Rmdm77/7s6A6NtX5+Lgrfe","tlshash":"8d32ede2734c706fceb6520ed139c846dabce47dd71b94bef29aa02640f5e821397146","size":11092,"data":"","first_seen":"2026-09-12T18:19:28.666374Z","last_seen":"2026-09-12T18:35:22.534555Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d1c3053c9075fcf2a4fd016993f5750","sha1":"151282260a690de2800d78c1e19d7b36034a00df","sha256":"7e8ab0c9a3639d1761b3b2c9dd7ecb91f308295db329ef91d4f2bc665ae69075","sha512":"df9f9bd939cd08ef36c4c4b231e47734c3bb120cdbb7b7cb155037b238d2be0a840f6414224d822da844a604cdddad9678e91cb718088fa3661c23a117462bf8","ssdeep":"384:Rxzdbsv52ydfPEnYpF5BzJCP0bRjB6Y3tsq4dtS1YD2JQu/BDY8+wEGNc8zOluDk:ZwpFDO+tsq4dtLsQEBDYHPGNm6GV+UfH","tlshash":"0a43eac6ea102ce591ab8145d1bf44593220ffb8b10385f1fd56a49a1a4cf8621ebf7f","size":55994,"data":"","first_seen":"2026-09-12T18:19:28.679333Z","last_seen":"2026-09-12T18:35:22.500979Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/196fced7-31b0-4946-8709-8d19f42372ea","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"","is_inline":false,"md5":"914b44ee858175e07b3eade6bd2fcdbf","sha1":"fd6ae23a0d208deac13b0d595942d83eafbbd22d","sha256":"7960db13ff5efb8230f30a1982d0326f5f7ad14cce9b8cae89c411421cfb8e20","sha512":"7ebde0c3701ee6ad8ea92040d8c39342f84344559a79e7cc1646a881e2145417f93df41d73ed34214d4a788411ee7c47a960144bd84fd98dc38d56a6ff91f133","ssdeep":"192:o4t4lFBaK1cuWxstEKK9YkA1/c2GBdxM5aTth9aOaTeoAjnT/xB:o4iDBN1tWxstEKK95A1wK5Ib47SnrxB","tlshash":"f6221a3022227d2f73e4e8ca6453751a4c2ceb672544075cfb4d5cf2c6ad6a6c52cf29","size":9966,"data":"","first_seen":"2026-06-08T10:28:03.616052Z","last_seen":"2026-09-12T18:35:22.566083Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/friendly-challenge@0.9.2/widget.module.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e95fd38ca1a3a5e1a5c0e04cea09d996","sha1":"e38bc2de505d8678a30c8d2d9dc29d918800a92d","sha256":"ae489f38d8a5b5504a9f595c3e7f778b68e3c50f4bc85d919ddce97ab74c2de8","sha512":"eaae5fdc8da4ed4de4858b829e538a7f5fb54aa102a58943ac82928f8dffe5d9a008cd4510b3cab8cc893fc269d9afdd6553d353055d565fbd0f741e0a7d5293","ssdeep":"768:2/yVy2jMPjgTx02G4iD6stEKK9me47Snrx2pMJrqirvupX6Xr80TL:2OySM2ishdyMJ+i0TiL","tlshash":"e3d25b7491511d372792c38eda173304ac38992a6c44d18cff9ee8f343e56969a2fb36","size":30049,"data":"","first_seen":"2026-01-13T14:20:38.601838Z","last_seen":"2026-09-12T18:35:22.529342Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/js/modernizr.js","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"507d5f6a6b9bda5e53751ca9764b90b8","sha1":"c76a74197b1dc0a53df33cd82890c2c978954277","sha256":"d25f5a3eba2ef53ebfeb1b7ff8d6c19fc719a1071d03c0c2f3fbf1051320fe91","sha512":"4c48c3e04d9265f8810685152543ee41cedb2da7a0cf20b648d952b91dcfdbb39381942d9dd97b2c8e45b5a457139720e38c6e88003ae8e18c9e3f6ffa30a263","ssdeep":"384:by2vg6gE6fTu5ZoFx/ZWk0MbH2Ob0gEx1iaHPxjYAKLo:Fg8oFdgxMbHOD1iab3","tlshash":"c2725c763323b12a036a60e2917e540aecb85e2b6e14c440f28ff5b965389b5437bd7c","size":16975,"data":"","first_seen":"2023-03-26T04:21:33Z","last_seen":"2026-09-12T18:35:22.536323Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/plugins/waypoints/jquery.waypoints.min.js","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d05f92297dede9ecfe3706efb95677a","sha1":"56bdb149d9baf64474a4c24ae66445769a28254e","sha256":"368daab67b1a5b2b2802edbbac79a2aa4ba992a2ebf9c67b98ad784d8004018c","sha512":"df25e4c654002bf66cbaea0917976f75afd9e16cb22d995f371de879d83d9334391bf9e921718995664da8fdd643239210205841fda0ac691b751693d505c759","ssdeep":"192:mEBzxsMCm1nJDl6hj8E3aPEGnvfiaaLkYluY4pLyUcDWZPeGz+nrFr:mEFoWJDlC8eaPZnvGLkYluYTUcEPeGzs","tlshash":"55126189750134221bdf50fad91f474ab337582ca80680bdb4c8d4ed29f152d676bfba","size":9028,"data":"","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-09-13T16:50:41.799914Z","times_seen":18982,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/js/vendor.min.js","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7de0eb3233db3fd54ecb2b26b4792d82","sha1":"0ee346ff965ee61c61b77ae3ed31d9f484f15781","sha256":"424f089874d7f172e2ebf3caa22b2f45285e7f0cc1a50cbfe9eb2d36ad06c458","sha512":"069ad1e665da696f43b6d09d611a0bcbeba6f1997aaff5bcc8316baafad374405d27cf7964e5d18c234810512acf50782ad580d15262194e7c9282b8d4d07789","ssdeep":"6144:5k6oxeeQPSewT3BWSfJP4NnwGdfIMuZfYjbgNDfsGeXkYQwtDHDNzVcxxVoX/AEo:Ux5QPSVBWSf6aYfIxZUDPg","tlshash":"be842a8d7350746247ab61b5513f020fb23b685db40a806cb56dd8e92db8e8d217bfbc","size":379643,"data":"","first_seen":"2025-11-23T06:45:19.800225Z","last_seen":"2026-09-12T18:35:22.522932Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"28ab3ac4f312bd520bf6236043d15c56","sha1":"17f2cccb80a4de1b8fb131e520d5fcadc7577513","sha256":"84d2a33717734d7310e576164399b4f73de04daa0d60aaab53e8dc0d23a5970b","sha512":"697fd26267dfcb484a1ef8a976ce4d6e00762afab9693f88234d13e493f3a49b7841f66ae905c1309c2a47ced3653896175273b131c0173b5f9cb0b12252a42a","ssdeep":"384:wy1KpMxWR1zy40Islk/4EfoXdOM8w706DvCQ41b0zouFwhq1Tdo+2sb3AB8kNv1A:wsIslkQEfoXdOM8w7HvfzoiHRBm4","tlshash":"64d2ebebaa265c6290532142c3a54d192128ce36fd32aeda33d6d0f506c305d37fafd6","size":29395,"data":"","first_seen":"2023-03-07T14:41:01Z","last_seen":"2026-09-12T18:35:22.541802Z","times_seen":695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/489719cf-6992-450a-a2d2-a33bf11cf3a6","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"","is_inline":false,"md5":"914b44ee858175e07b3eade6bd2fcdbf","sha1":"fd6ae23a0d208deac13b0d595942d83eafbbd22d","sha256":"7960db13ff5efb8230f30a1982d0326f5f7ad14cce9b8cae89c411421cfb8e20","sha512":"7ebde0c3701ee6ad8ea92040d8c39342f84344559a79e7cc1646a881e2145417f93df41d73ed34214d4a788411ee7c47a960144bd84fd98dc38d56a6ff91f133","ssdeep":"192:o4t4lFBaK1cuWxstEKK9YkA1/c2GBdxM5aTth9aOaTeoAjnT/xB:o4iDBN1tWxstEKK95A1wK5Ib47SnrxB","tlshash":"f6221a3022227d2f73e4e8ca6453751a4c2ceb672544075cfb4d5cf2c6ad6a6c52cf29","size":9966,"data":"","first_seen":"2026-06-08T10:28:03.616052Z","last_seen":"2026-09-12T18:35:22.566083Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/66/4d/common.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e91b9bde854891e6009711f799cf1f5f","sha1":"26f197a65cc5114c4f1280b6310108f265466ef2","sha256":"e6950fe4cd4d52a1d912f5433d84f4a30353d3193736aae422c1d11344658556","sha512":"2a6e8628ebcba4b02dc126bdd267b2db331df38521b59186f91c55a3d4b6a35796794bdcbc4ec5bf1371d87057b9713b30de09e75db2651a7e3f16854f6cbbe5","ssdeep":"3072:bB6gtQPXtVgO5NXQ/5IAW0ZhNUehBLC/yMOfAiR:bedVvNXQ/5DZhqeh8/yMOfAiR","tlshash":"cbc3a7c5729370a3bbb1b4b444970007b2b9a895f00e8c2db5f9d8f1aef485651f9b39","size":128855,"data":"","first_seen":"2026-09-09T19:32:09.377876Z","last_seen":"2026-09-13T16:55:29.46333Z","times_seen":281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/66/4d/util.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2436679981c6d3f1b28b79b6345aaaa","sha1":"9d3f8b54213f2658fc9f8a5120395b7033890801","sha256":"0d76ce1e9af8f34169c86e57a72289e035fa5d02c26b958e399505c65b27fef1","sha512":"f43eb7ddab715b783cb9692794dff58ae0308398e0dddc6c06ac4ceac9603149f5f3a30f3ea8911eecbd0acc68aab95db49c155798d11a89013397347e41db89","ssdeep":"3072:ZP+7mahat3ddwywuPInJG7NJG7A8kwyuZmBFo1k:xomakLIsCk8kxu0BFMk","tlshash":"4a64d77c72316b0ee973c85bc626300e90257ddbfad488bdfee59146ea54988f0e4934","size":319781,"data":"","first_seen":"2026-09-09T19:32:09.414566Z","last_seen":"2026-09-13T16:55:29.500667Z","times_seen":279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/dist/script.js","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"41d67f9dec6b44d293a457d6af1969ea","sha1":"f0ad4cd20757366cf8120c74481ce2f2b5997097","sha256":"6628008a53779448b283e59cdd1382a243029cf55383379047e86d6fd2e97f89","sha512":"c2f0cc9e1f8264c935da3642f8f6c10ecd1f2ea09beb74f78ad6caf2c9feb602d28ad34effb1b7297218510bebea569d47673d385b8013b283dc588ffed788f0","ssdeep":"96:dlv9IHDb/Vo88vt/BQsGUFJDJH9WO26Pzx1Z22uazZFvd0qh93RKfU33cMUjor2P:TVAVo88BBK6932yx1OHq33RSTSVgT","tlshash":"8e12936cb9ec223e02df13a7319f4b8a76315360d492540d1168e4384bbad934a9ffe7","size":9176,"data":"","first_seen":"2026-01-15T07:11:01.320164Z","last_seen":"2026-09-12T18:35:22.528322Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/1d06346f-7d21-4a3d-9f13-191a0d4e6a31","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"","is_inline":false,"md5":"914b44ee858175e07b3eade6bd2fcdbf","sha1":"fd6ae23a0d208deac13b0d595942d83eafbbd22d","sha256":"7960db13ff5efb8230f30a1982d0326f5f7ad14cce9b8cae89c411421cfb8e20","sha512":"7ebde0c3701ee6ad8ea92040d8c39342f84344559a79e7cc1646a881e2145417f93df41d73ed34214d4a788411ee7c47a960144bd84fd98dc38d56a6ff91f133","ssdeep":"192:o4t4lFBaK1cuWxstEKK9YkA1/c2GBdxM5aTth9aOaTeoAjnT/xB:o4iDBN1tWxstEKK95A1wK5Ib47SnrxB","tlshash":"f6221a3022227d2f73e4e8ca6453751a4c2ceb672544075cfb4d5cf2c6ad6a6c52cf29","size":9966,"data":"","first_seen":"2026-06-08T10:28:03.616052Z","last_seen":"2026-09-12T18:35:22.566083Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/plugins/rs-plugin-5/js/jquery.themepunch.tools.min.js?rev=5.0","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"30cb21d5971d0c0bfbbb246f0165ff02","sha1":"84fba4e85ce564ea81a2475c751c69cf46fa1047","sha256":"9a865189efd70c8f19439a428e6da65a64296fb2fff2fdee604f654e671c9f72","sha512":"33c45439b5c91f8ef93c8b805c8befb14f843227276b8bb50658192bdde7b867323e29202aa6f87c84bb23517e03e391bbab322b662df995f67b845937895862","ssdeep":"1536:0QpnayKBk7l5aknBDU0KsIu5XOD1ITONqvniqL3P99cN7H98rYx5f14/gCs0fXwR:0S7lYoDU0Gjqvniq7s7dCYSIn0fD0a8","tlshash":"36b319ca35517022859622a5517f0643723bdceab4098d3df548d9ed3e2cc8921bffba","size":110418,"data":"","first_seen":"2023-03-07T12:04:50Z","last_seen":"2026-09-13T16:55:29.44119Z","times_seen":1350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/plugins/rs-plugin-5/js/jquery.themepunch.revolution.min.js?rev=5.0","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfee79882f83618687d341c45b632f6f","sha1":"7d1f4dbed341044f4c526b89d0c5bdb31119f691","sha256":"1a9a8c11add8a94102a342eb577db718499df7175d685218a30f08135762b4e9","sha512":"952004f58fd6e0af6b86e5cfed72b78551388616d01bc0ed5083b573fe236744e305722b03427e4a0ae88dd3902118de9b88912625b2c2ed2ee8c9022df7af85","ssdeep":"1536:PCnzw4t1e8eipkDE6+3YZdpEaUH/qj6rw3AihzdqwjIX7D6QmAFH8oXT5pLv:PCnzXzVkDr3A/X7uQVHNpLv","tlshash":"d353e8647e10647644fb7265e03e8515f2b16d3aa703c090f2a6a87c6aecd85235ffdc","size":64861,"data":"","first_seen":"2023-03-07T12:57:13Z","last_seen":"2026-09-12T18:35:22.506646Z","times_seen":315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/js/scripts.js","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9f82ffb1f6cfdc5331f8e7002d142b0","sha1":"2d4be1141e42267ec3f6f93d17f2e76e95ab8bd4","sha256":"b2a29f07131bc4e2ee4392f119731b7a0b15e30cf7dfaefe9c9273824d9e7e0c","sha512":"78a6703c15eb8519777d025af925a5bd2e6b719ff486a2250bc291ab7402c066f40b06328a0e5ee6ce07a7030ad40df377c7a75662c5c02cb335f8b6ac4ed886","ssdeep":"384:qdn0yOSUZGasY4at4aINP84XkLEFBYor1QpFv4xKx6n:9yO/57eNPz4ooSs6n","tlshash":"c3a262947f1d616e46e3f37aa1beea00d93dc031d1430079b8be49481bb6655872eebc","size":21932,"data":"","first_seen":"2026-09-12T18:19:28.634399Z","last_seen":"2026-09-12T18:35:22.49866Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/plugins/waypoints/sticky.min.js","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"46666d5e20e3ed6dd94dfdbfb1a0d757","sha1":"f9086a87087921ede5d537e009ab9e859e60b48d","sha256":"14c52b4f1daa1aa3a92d960a311d4518da07e80b7b1a443d3f1a55c0968c99a0","sha512":"413607ffc105d422ccf7707921a527a7c0b96615e01e2dcef42383c1478a5a2e7595b4197f29bb9e63636bd6b76d20c7afd363a1e7a3da5d2ff7cb811a99d5cd","ssdeep":"","tlshash":"1521484a39323216068b85ee24170a4db2b387385847602db0f9dbdea771c0976bea34","size":1243,"data":"","first_seen":"2023-03-07T01:10:30Z","last_seen":"2026-09-12T18:35:22.49937Z","times_seen":1337,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Google Maps JavaScript API has been loaded directly without loading=async. This can result in suboptimal performance. For best-practice loading patterns please see https://goo.gle/js-api-loading","filename":"https://maps.googleapis.com/maps/api/js?callback=__gmap3","line_number":330,"column_number":325},{"level":"error","text":"Error while calling actor 'source's method 'source'Could not load the source for wasm:blob:https://bego-bau.de/196fced7-31b0-4946-8709-8d19f42372ea%20line%201%20%3E%20WebAssembly.compile.\nError: WebAssembly binary source is not available\nStack: _getSourceText@resource://devtools/server/actors/source.js:241:20\nsource@resource://devtools/server/actors/source.js:541:51\nhandler@resource://devtools/shared/protocol/Actor.js:228:37\nonPacket@resource://devtools/server/devtools-server-connection.js:371:58\n_onMessage@resource://devtools/shared/transport/worker-transport.js:104:18\nLine: 241, column: 20","filename":"resource://devtools/shared/protocol/Actor.js","line_number":112,"column_number":13},{"level":"error","text":"Could not load the source for wasm:blob:https://bego-bau.de/196fced7-31b0-4946-8709-8d19f42372ea%20line%201%20%3E%20WebAssembly.compile.\nError: WebAssembly binary source is not available\nStack: _getSourceText@resource://devtools/server/actors/source.js:241:20\nsource@resource://devtools/server/actors/source.js:541:51\nhandler@resource://devtools/shared/protocol/Actor.js:228:37\nonPacket@resource://devtools/server/devtools-server-connection.js:371:58\n_onMessage@resource://devtools/shared/transport/worker-transport.js:104:18\nLine: 241, column: 20","filename":"resource://devtools/shared/protocol/Actor.js","line_number":119,"column_number":15},{"level":"error","text":"Error while calling actor 'source's method 'source'Could not load the source for wasm:blob:https://bego-bau.de/3e99bae5-b192-4ab6-a256-331ce35218f0%20line%201%20%3E%20WebAssembly.compile.\nError: WebAssembly binary source is not available\nStack: _getSourceText@resource://devtools/server/actors/source.js:241:20\nsource@resource://devtools/server/actors/source.js:541:51\nhandler@resource://devtools/shared/protocol/Actor.js:228:37\nonPacket@resource://devtools/server/devtools-server-connection.js:371:58\n_onMessage@resource://devtools/shared/transport/worker-transport.js:104:18\nLine: 241, column: 20","filename":"resource://devtools/shared/protocol/Actor.js","line_number":112,"column_number":13},{"level":"error","text":"Could not load the source for wasm:blob:https://bego-bau.de/3e99bae5-b192-4ab6-a256-331ce35218f0%20line%201%20%3E%20WebAssembly.compile.\nError: WebAssembly binary source is not available\nStack: _getSourceText@resource://devtools/server/actors/source.js:241:20\nsource@resource://devtools/server/actors/source.js:541:51\nhandler@resource://devtools/shared/protocol/Actor.js:228:37\nonPacket@resource://devtools/server/devtools-server-connection.js:371:58\n_onMessage@resource://devtools/shared/transport/worker-transport.js:104:18\nLine: 241, column: 20","filename":"resource://devtools/shared/protocol/Actor.js","line_number":119,"column_number":15},{"level":"error","text":"Error while calling actor 'source's method 'source'Could not load the source for wasm:blob:https://bego-bau.de/1d06346f-7d21-4a3d-9f13-191a0d4e6a31%20line%201%20%3E%20WebAssembly.compile.\nError: WebAssembly binary source is not available\nStack: _getSourceText@resource://devtools/server/actors/source.js:241:20\nsource@resource://devtools/server/actors/source.js:541:51\nhandler@resource://devtools/shared/protocol/Actor.js:228:37\nonPacket@resource://devtools/server/devtools-server-connection.js:371:58\n_onMessage@resource://devtools/shared/transport/worker-transport.js:104:18\nLine: 241, column: 20","filename":"resource://devtools/shared/protocol/Actor.js","line_number":112,"column_number":13},{"level":"error","text":"Could not load the source for wasm:blob:https://bego-bau.de/1d06346f-7d21-4a3d-9f13-191a0d4e6a31%20line%201%20%3E%20WebAssembly.compile.\nError: WebAssembly binary source is not available\nStack: _getSourceText@resource://devtools/server/actors/source.js:241:20\nsource@resource://devtools/server/actors/source.js:541:51\nhandler@resource://devtools/shared/protocol/Actor.js:228:37\nonPacket@resource://devtools/server/devtools-server-connection.js:371:58\n_onMessage@resource://devtools/shared/transport/worker-transport.js:104:18\nLine: 241, column: 20","filename":"resource://devtools/shared/protocol/Actor.js","line_number":119,"column_number":15},{"level":"error","text":"Error while calling actor 'source's method 'source'Could not load the source for wasm:blob:https://bego-bau.de/489719cf-6992-450a-a2d2-a33bf11cf3a6%20line%201%20%3E%20WebAssembly.compile.\nError: WebAssembly binary source is not available\nStack: _getSourceText@resource://devtools/server/actors/source.js:241:20\nsource@resource://devtools/server/actors/source.js:541:51\nhandler@resource://devtools/shared/protocol/Actor.js:228:37\nonPacket@resource://devtools/server/devtools-server-connection.js:371:58\n_onMessage@resource://devtools/shared/transport/worker-transport.js:104:18\nLine: 241, column: 20","filename":"resource://devtools/shared/protocol/Actor.js","line_number":112,"column_number":13},{"level":"error","text":"Could not load the source for wasm:blob:https://bego-bau.de/489719cf-6992-450a-a2d2-a33bf11cf3a6%20line%201%20%3E%20WebAssembly.compile.\nError: WebAssembly binary source is not available\nStack: _getSourceText@resource://devtools/server/actors/source.js:241:20\nsource@resource://devtools/server/actors/source.js:541:51\nhandler@resource://devtools/shared/protocol/Actor.js:228:37\nonPacket@resource://devtools/server/devtools-server-connection.js:371:58\n_onMessage@resource://devtools/shared/transport/worker-transport.js:104:18\nLine: 241, column: 20","filename":"resource://devtools/shared/protocol/Actor.js","line_number":119,"column_number":15},{"level":"warn","text":"Google Maps JavaScript API warning: NoApiKeys https://developers.google.com/maps/documentation/javascript/error-messages#no-api-keys","filename":"https://maps.googleapis.com/maps-api-v3/api/js/66/4d/util.js","line_number":38,"column_number":65}]},"http":[{"url":{"schema":"https","addr":"bego-bau.de/css/animations.css","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.349Z","timestamp":1789238083349,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /css/animations.css HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 14 Apr 2021 16:40:51 GMT\r\nETag: \"b8a-5bff168deaac0-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 438\r\nKeep-Alive: timeout=3, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2954,"size_decoded":781,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"75181f69f95085f332e1a757879c0236","sha1":"06ed6e075a38c4e3ec9d372a5c2ca8e9f3ee4374","sha256":"dfd4dfc5ddae5b439488d37acfdf2a813fda3007520a12351318fa89207a06a9","sha512":"0cb9bd8897840f4b6bf821497c980950b38c5dde6ae220cc6b14d65ee505568afdc0492559e3797a9a15f81af9097bbc5035c813f364ee34019e9f5b2a1ff75d","ssdeep":"","tlshash":"d251fa6d1c44158002714ba9d7df8f28d92db17348222deeb2c968478ff7f9c6388a57","first_seen":"2026-05-04T19:50:03.67782Z","last_seen":"2026-09-12T18:35:22.497773Z","times_seen":3,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/js/scripts.js","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.358Z","timestamp":1789238083358,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /js/scripts.js HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 14 Apr 2021 16:42:08 GMT\r\nETag: \"55ac-5bff16d759800-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 5122\r\nKeep-Alive: timeout=3, max=98\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":21932,"size_decoded":5481,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (546), with CRLF line terminators","md5":"d9f82ffb1f6cfdc5331f8e7002d142b0","sha1":"2d4be1141e42267ec3f6f93d17f2e76e95ab8bd4","sha256":"b2a29f07131bc4e2ee4392f119731b7a0b15e30cf7dfaefe9c9273824d9e7e0c","sha512":"78a6703c15eb8519777d025af925a5bd2e6b719ff486a2250bc291ab7402c066f40b06328a0e5ee6ce07a7030ad40df377c7a75662c5c02cb335f8b6ac4ed886","ssdeep":"384:qdn0yOSUZGasY4at4aINP84XkLEFBYor1QpFv4xKx6n:9yO/57eNPz4ooSs6n","tlshash":"c3a262947f1d616e46e3f37aa1beea00d93dc031d1430079b8be49481bb6655872eebc","first_seen":"2026-09-12T18:19:28.634399Z","last_seen":"2026-09-12T18:35:22.49866Z","times_seen":2,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":100,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/plugins/waypoints/sticky.min.js","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.362Z","timestamp":1789238083362,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /plugins/waypoints/sticky.min.js HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 14 Apr 2021 16:53:21 GMT\r\nETag: \"4db-5bff19592c240-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 577\r\nKeep-Alive: timeout=3, max=98\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1243,"size_decoded":934,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1054)","md5":"46666d5e20e3ed6dd94dfdbfb1a0d757","sha1":"f9086a87087921ede5d537e009ab9e859e60b48d","sha256":"14c52b4f1daa1aa3a92d960a311d4518da07e80b7b1a443d3f1a55c0968c99a0","sha512":"413607ffc105d422ccf7707921a527a7c0b96615e01e2dcef42383c1478a5a2e7595b4197f29bb9e63636bd6b76d20c7afd363a1e7a3da5d2ff7cb811a99d5cd","ssdeep":"","tlshash":"1521484a39323216068b85ee24170a4db2b387385847602db0f9dbdea771c0976bea34","first_seen":"2023-03-07T01:10:30Z","last_seen":"2026-09-12T18:35:22.49937Z","times_seen":1337,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":116,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/productsoriginal/52c1529558b9ba0724b665afa4df11effliesenarbeiten.jpg","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.389Z","timestamp":1789238083389,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /productsoriginal/52c1529558b9ba0724b665afa4df11effliesenarbeiten.jpg HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 16 Jun 2021 07:41:06 GMT\r\nETag: \"7522-5c4dd36936880\"\r\nAccept-Ranges: bytes\r\nContent-Length: 29986\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=3, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":29986,"size_decoded":30282,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 393x227, components 3","md5":"c96fd4ac773949164cbdda38293bbbdc","sha1":"5b89da6c2dd74f5a7c1cae0b5ca94b733277f358","sha256":"298e6476af78d115eecae5419da0fadce0c8c8e7b8ff192eddeaa5fb2946a5ca","sha512":"2d25ca9f3cfde448aa9ab4d765bc87cf167495586ac84b284d4f5dfa90ca6a745b1d31f70ef0bc10d1a1061dccbd092d88064e80fbcc2356adab488a2b6987d7","ssdeep":"768:gn/2OQi4QHb1vKmJhMwUPWI8rFI/LDSmU6d3ZKsooEpPsnKTZDtOYhx6u:g/PtAmJhMwUKGvSmU+pvoHsnKTrOg6u","tlshash":"bad2e1156b934f0ab8afd97a11b1a3d23ed19a116352c5d0e5baf72c08071af2194dcc","first_seen":"2026-09-12T18:19:28.649315Z","last_seen":"2026-09-12T18:35:22.500065Z","times_seen":2,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":164,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/plugins/rs-plugin-5/js/extensions/revolution.extension.layeranimation.min.js?version=5.4.6","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.713Z","timestamp":1789238083713,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /plugins/rs-plugin-5/js/extensions/revolution.extension.layeranimation.min.js?version=5.4.6 HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 14 Apr 2021 16:52:35 GMT\r\nETag: \"daba-5bff192d4dac0-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 14369\r\nKeep-Alive: timeout=3, max=95\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":55994,"size_decoded":14729,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (55747)","md5":"3d1c3053c9075fcf2a4fd016993f5750","sha1":"151282260a690de2800d78c1e19d7b36034a00df","sha256":"7e8ab0c9a3639d1761b3b2c9dd7ecb91f308295db329ef91d4f2bc665ae69075","sha512":"df9f9bd939cd08ef36c4c4b231e47734c3bb120cdbb7b7cb155037b238d2be0a840f6414224d822da844a604cdddad9678e91cb718088fa3661c23a117462bf8","ssdeep":"384:Rxzdbsv52ydfPEnYpF5BzJCP0bRjB6Y3tsq4dtS1YD2JQu/BDY8+wEGNc8zOluDk:ZwpFDO+tsq4dtLsQEBDYHPGNm6GV+UfH","tlshash":"0a43eac6ea102ce591ab8145d1bf44593220ffb8b10385f1fd56a49a1a4cf8621ebf7f","first_seen":"2026-09-12T18:19:28.679333Z","last_seen":"2026-09-12T18:35:22.500979Z","times_seen":2,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/favicon.ico","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:44.053Z","timestamp":1789238084053,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 12 Sep 2026 18:34:44 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 15 Jul 2021 09:30:38 GMT\r\nETag: \"328-5c7261fb20b80\"\r\nAccept-Ranges: bytes\r\nContent-Length: 808\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=3, max=94\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":808,"size_decoded":1107,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-09-13T14:40:36.286964Z","times_seen":39140,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:44.254Z","timestamp":1789238084254,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"DB:16:C1:37:8D:6C:67:F5:7B:69:A5:CC:5A:E4:14:86:68:68:28:08","sha256":"7C:9F:DC:87:45:B2:79:1B:26:C3:F9:27:4E:6A:13:97:FF:C5:A0:2C:69:69:31:D1:9D:3F:8D:E7:2F:66:1C:15"}}},"request":{"raw":"GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bego-bau.de\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Sat, 12 Sep 2026 18:34:44 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 23\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://bego-bau.de\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nserver-timing: gfet4t7; dur=12\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3,"size_decoded":548,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8a80554c91d9fca8acb82f023de02f11","sha1":"5f36b2ea290645ee34d943220a14b54ee5ea5be5","sha256":"ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356","sha512":"ca4b6defb8adcc010050bc8b1bb8f8092c4928b8a0fba32146abcfb256e4d91672f88ca2cdf6210e754e5b8ac5e23fb023806ccd749ac8b701f79a691f03c87a","ssdeep":"","tlshash":"c7200000000000000000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:10:31Z","last_seen":"2026-09-13T16:25:47.028402Z","times_seen":439019,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/fonts/font-awesome/css/solid.min.css","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.341Z","timestamp":1789238083341,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /fonts/font-awesome/css/solid.min.css HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 14 Apr 2021 16:41:22 GMT\r\nETag: \"29c-5bff16ab7b080-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 308\r\nKeep-Alive: timeout=3, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":668,"size_decoded":652,"mime_type":"text/css","magic":"ASCII text, with very long lines (482)","md5":"685230fe920360c8d423498ebe891455","sha1":"2c91a5cb73adeb02a6c5eb77f886c3068da35e35","sha256":"c65878693f0d8bf3276c8bc559b9c8ac9f9829efb54bfcb5c4d425ed8580ad77","sha512":"40db16939fa3ee1e39d0177b7d60d731762d332b67afc3087c68731cbf224e203239ff48bc4bd4f7cb98987a25d79dd3bdf6e5cdec0d0fd1f9ed35e4673fda22","ssdeep":"","tlshash":"4201f96e4646194141c60f1138d9fa5ded46f0b87c582f33a12adc2d8cf9e5f21b9f19","first_seen":"2023-04-12T04:59:49Z","last_seen":"2026-09-12T18:35:22.50417Z","times_seen":12,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":43,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/plugins/rs-plugin-5/css/settings.css","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.343Z","timestamp":1789238083343,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /plugins/rs-plugin-5/css/settings.css HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 14 Apr 2021 16:51:48 GMT\r\nETag: \"757b-5bff19007b100-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 7128\r\nKeep-Alive: timeout=3, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":30075,"size_decoded":7474,"mime_type":"text/css","magic":"ASCII text, with very long lines (29704), with CRLF line terminators","md5":"b75b5e0526955b53d0289cb6ba46e8bd","sha1":"39da155e2e2124dc47245423586a6067859be3ee","sha256":"157516d11831f4bdfaa3ef84b3555a0bba8befd117fcfd507daab83ff81f5f3e","sha512":"34640ac074a779bb606f3f6a6f58ade7b0f9c44cb13fb747228a1b6643d43e53c1dd44426ca03f2b5de1c9d54d22844755485eec6cfa175881251a5e38e757fd","ssdeep":"384:bThTMEow4rLT4ILX4sSeciOWC7G7C5+TU1Zz80id48f/:bRME0LTPX4sSetOWCy7wmU1h8D283","tlshash":"15d2db70e98975fc77a7c22563c0b7adf02ed122e6520d6ef02f76f986d3086446e648","first_seen":"2026-09-12T18:19:28.661799Z","last_seen":"2026-09-12T18:35:22.505176Z","times_seen":2,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":37,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/plugins/rs-plugin-5/css/slider.css","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.348Z","timestamp":1789238083348,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /plugins/rs-plugin-5/css/slider.css HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 14 Apr 2021 16:51:49 GMT\r\nETag: \"2b43-5bff19016f340-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 2158\r\nKeep-Alive: timeout=3, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11075,"size_decoded":2503,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"2714c8325ae1f91a7cac39fe912a3247","sha1":"9f2e2a997bde09254f68b950f4e863eddc340a9b","sha256":"8cebc2db60779586e893cd4750ad0c95bb5ed16caa2a8a9dc2023f0427be97b2","sha512":"86d9ebb4742bc6a20fbdbcb285da57100d55175b82fcc4bdbc3268fe3e5da7545fb556e9aa979b94d9d37b1beb39f09b92b8bc951053cebb17142d50a330bc08","ssdeep":"192:+ydxfMwzKRQpEPLfNyG/mYiohrFpngCdfU:9xkwIQmPLVyhYioh3ngd","tlshash":"513273bdc342a05112b35bb5bb668f69ef6920738b1207e8b6c37458f3504a87619fdc","first_seen":"2026-09-12T18:19:28.688895Z","last_seen":"2026-09-12T18:35:22.505988Z","times_seen":2,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/plugins/rs-plugin-5/js/jquery.themepunch.revolution.min.js?rev=5.0","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.360Z","timestamp":1789238083360,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /plugins/rs-plugin-5/js/jquery.themepunch.revolution.min.js?rev=5.0 HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 14 Apr 2021 16:52:30 GMT\r\nETag: \"fd5d-5bff192888f80-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 17947\r\nKeep-Alive: timeout=3, max=98\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":64861,"size_decoded":18307,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (64526), with CRLF line terminators","md5":"dfee79882f83618687d341c45b632f6f","sha1":"7d1f4dbed341044f4c526b89d0c5bdb31119f691","sha256":"1a9a8c11add8a94102a342eb577db718499df7175d685218a30f08135762b4e9","sha512":"952004f58fd6e0af6b86e5cfed72b78551388616d01bc0ed5083b573fe236744e305722b03427e4a0ae88dd3902118de9b88912625b2c2ed2ee8c9022df7af85","ssdeep":"1536:PCnzw4t1e8eipkDE6+3YZdpEaUH/qj6rw3AihzdqwjIX7D6QmAFH8oXT5pLv:PCnzXzVkDr3A/X7uQVHNpLv","tlshash":"d353e8647e10647644fb7265e03e8515f2b16d3aa703c090f2a6a87c6aecd85235ffdc","first_seen":"2023-03-07T12:57:13Z","last_seen":"2026-09-12T18:35:22.506646Z","times_seen":315,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/fonts/font-awesome/webfonts/fa-solid-900.woff2","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.683Z","timestamp":1789238083683,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /fonts/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/fonts/font-awesome/css/solid.min.css\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 14 Apr 2021 16:41:51 GMT\r\nETag: \"12690-5bff16c7231c0\"\r\nAccept-Ranges: bytes\r\nContent-Length: 75408\r\nX-Powered-By: PleskLin\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=3, max=91\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":75408,"size_decoded":75737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 75408, version 330.15859","md5":"d6d8d5da9214dc7d46b297672a602d55","sha1":"9991033ce701c9a3d092ba2263a6a89c4d7e21da","sha256":"80fe90cb559538158bc235f4e539d9bcae203e19fab7c6970aad37b0154348ff","sha512":"6c2f42d8547eeee5d8f95b653e1b3dde318b1d280a7226d9b6da326b5de2ecac2f7c55d2a45dc5c4ce88aba308e9a872a5ef3666cc0028a56a8b81b473eee7e1","ssdeep":"1536:T2tGzfR+ZLtE6zaM3tSmcpoN9xiGX66h3qbLLPcmcRcjA+1:ytGfR+ZLXdwSL3Xj3EbVd08","tlshash":"147312f0b8bb4515d2a02658dd43f897ccb425a01e50d7c279f725be4a7298f1ecba24","first_seen":"2023-04-07T09:37:49Z","last_seen":"2026-09-12T23:06:26.634599Z","times_seen":3304,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/fonts/feather.woff","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.686Z","timestamp":1789238083686,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /fonts/feather.woff HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/css/vendor.min.css\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 14 Apr 2021 16:41:10 GMT\r\nETag: \"10ed0-5bff16a009580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 69328\r\nX-Powered-By: PleskLin\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=3, max=96\r\nConnection: Keep-Alive\r\nContent-Type: font/woff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":69328,"size_decoded":69656,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 69328, version 1.0","md5":"0c51de8512c271e72d33ec74e84d5cab","sha1":"e9dde54c2790f285b9b2aec31779d7adfd682bf3","sha256":"6758d48c645ef6740d2d7d5c582a4d7aaa5c95f0edd78b8c31a412a356094f08","sha512":"57882800f7fb0b9a2df26cdb75f7b4d87fe6a28560e9d25c837998f9a117883f79ee5b85b95ce8526987caebc76f7a99a44cf43de60dbc5a70c869165c52662d","ssdeep":"1536:NWZM5ep5Yu8WEShwTJ1docbPTqTbTY6YqRWUMzIYt6/qc4GQcB5QOAHB+uNt6MZi:uM5ep5Yu8WEShwTJ1docbPTqnTY6YqRZ","tlshash":"c9631a5aef4ae70bd7abfbf6941070510eea5a3d937a72125dc35d0bc10d8580c68eca","first_seen":"2023-06-09T13:02:23Z","last_seen":"2026-09-12T18:35:22.50832Z","times_seen":75,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.688Z","timestamp":1789238083688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bego-bau.de\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Sep 2026 10:29:39 GMT\r\nexpires: Sat, 11 Sep 2027 10:29:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 115504\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-09-13T16:45:48.882241Z","times_seen":53177,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":30,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/css/vendor.min.css","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.338Z","timestamp":1789238083338,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /css/vendor.min.css HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 14 Apr 2021 16:40:54 GMT\r\nETag: \"281a0-5bff1690c7180-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 26054\r\nKeep-Alive: timeout=3, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":164256,"size_decoded":26401,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"1bd5487d34d64941b50be14aa8e77390","sha1":"69349acbdcd1071537d1adf76cce1c31636930ea","sha256":"ffcdfc9e638e4198ee8efe06b9b2b015bb95c163b2a8c8dec2045ce63ca0aff8","sha512":"f8a2d949995929927cfd7c9f84620447fea55838b2ba903d20a713a195508df6593b7aa26843d2c14a003045bf2d857c7af52e875b4d3e50fec3719d42aa845c","ssdeep":"1536:+ushitqcMBmwcpiSdQNk6hNO6byUFSADQE3+/IEi:psAqowcpiSdQNk6hNO6HOAEi","tlshash":"7df383a7f4a021982323ca5a53c1b7bc257fd121d6525efbf01b7f248bc56c605a398e","first_seen":"2026-09-12T18:19:28.647611Z","last_seen":"2026-09-12T18:35:22.510512Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/fonts/font-awesome/css/fontawesome.min.css","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.339Z","timestamp":1789238083339,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /fonts/font-awesome/css/fontawesome.min.css HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 14 Apr 2021 16:41:19 GMT\r\nETag: \"d732-5bff16a89e9c0-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 11986\r\nKeep-Alive: timeout=3, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":55090,"size_decoded":12333,"mime_type":"text/css","magic":"ASCII text, with very long lines (54904)","md5":"df3b5091bcf015feb9f8dab2a8579ca9","sha1":"fb80ddd36e2d920d1a11067d87a1f9b6dc1c6263","sha256":"d26970e007b58fd783cd94f32eec395fd7c108bf6701e86bb55c8a7c8b2d6500","sha512":"5a1b749cd5266cb0d42e629da5f1bbbd1eca73306a3c24cd9c36dbbe9459b9f6bc41e55b91d99e109b53e52de36da711dfe69efc1ed56ff799a28f171f6e16c8","ssdeep":"768:8EC31sPizPq4/vBUAUHJvkQCg/xMQyjJrX759sGZQzO:8ETPUC4/pMHBBC8gd7nsDC","tlshash":"1433fab8e54c01c9a731c44fff42b2bc61baf73de5910d95f04e691c2ad26a81185fba","first_seen":"2023-04-12T04:59:51Z","last_seen":"2026-09-12T18:35:22.511561Z","times_seen":36,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":35,"receive":22,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/dist/style.css","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.352Z","timestamp":1789238083352,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /dist/style.css HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 14 Apr 2021 16:40:57 GMT\r\nETag: \"1c81-5bff1693a3840-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 1628\r\nKeep-Alive: timeout=3, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":7297,"size_decoded":1973,"mime_type":"text/css","magic":"ASCII text, with very long lines (7257)","md5":"1fded0cde885d8226cf3075a10c24ff0","sha1":"c1cb67229d5a533f1bf7a476b949a0b1fec77ee9","sha256":"24af89ab426f932f2f043cae6b8c02d22ca50b4490e2afcc8e5eca7e3af099e5","sha512":"10d954d84b2c00c89f2628634b1b5ab4a14a8048a4b6bcd84d5c75e6051c53d061ccc53964de090490696c4940e7e3000a14318a6b97e2338636808ed7213846","ssdeep":"48:BuJswVdeHzFfO8naXt4rz8nhSlS8FgCnJ8/GeYNoKOd+xL/yQmHkDpAp9XrXU7cD:CeHz8RXqwD8FgCnJIuJ/tk78+nTyle","tlshash":"85e1512fbdd8130c71bfcb627ac405966635c122d1a1199c97a23235c79f0e71aea78b","first_seen":"2026-01-15T07:11:01.319251Z","last_seen":"2026-09-12T18:35:22.520603Z","times_seen":6,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/css/custom.css","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.353Z","timestamp":1789238083353,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /css/custom.css HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 16 Jun 2021 11:49:36 GMT\r\nETag: \"14a8-5c4e0af47f400-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 1676\r\nKeep-Alive: timeout=3, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5288,"size_decoded":2021,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"5b510bf013ac3478e82624d482145e30","sha1":"4b742289b63a1029d16c49b84e6896ecc212611f","sha256":"e494e6cbd28bd74ee6cc2285a8fc5e07e339d854018ab8a756f2b4be2c898d2f","sha512":"111a55921bf3456507ef2c3d9cde5061fabee2d1fa0db74ef04ecadad7f27e02ca6cbbbf40bd538caddb3f6cb7082ada10e19f4f0369d2fd2123704a8d264ef5","ssdeep":"96:Zlhn1C5BkAxBEqr3q088uT8GPCErU//J2xidyWDo2Q3uHOOfOTsfvO5hds+uTkSl:p1ahxO46088uTq+U/jDo24uW+bZ","tlshash":"35b1b1fae597104f233b6e59f372be356e2c40a5cf474b6cb2b4272492d14672e11a8c","first_seen":"2026-09-12T18:19:28.682273Z","last_seen":"2026-09-12T18:35:22.521751Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/js/vendor.min.js","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.357Z","timestamp":1789238083357,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /js/vendor.min.js HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 14 Apr 2021 16:42:12 GMT\r\nETag: \"5cafb-5bff16db2a100-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=3, max=95\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":379643,"size_decoded":116424,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"7de0eb3233db3fd54ecb2b26b4792d82","sha1":"0ee346ff965ee61c61b77ae3ed31d9f484f15781","sha256":"424f089874d7f172e2ebf3caa22b2f45285e7f0cc1a50cbfe9eb2d36ad06c458","sha512":"069ad1e665da696f43b6d09d611a0bcbeba6f1997aaff5bcc8316baafad374405d27cf7964e5d18c234810512acf50782ad580d15262194e7c9282b8d4d07789","ssdeep":"6144:5k6oxeeQPSewT3BWSfJP4NnwGdfIMuZfYjbgNDfsGeXkYQwtDHDNzVcxxVoX/AEo:Ux5QPSVBWSf6aYfIxZUDPg","tlshash":"be842a8d7350746247ab61b5513f020fb23b685db40a806cb56dd8e92db8e8d217bfbc","first_seen":"2025-11-23T06:45:19.800225Z","last_seen":"2026-09-12T18:35:22.522932Z","times_seen":8,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":39,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/productsoriginal/fe13fdb602bb8a4b000f51c5e1c56bd0teaser-3.jpg","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.391Z","timestamp":1789238083391,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /productsoriginal/fe13fdb602bb8a4b000f51c5e1c56bd0teaser-3.jpg HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 27 May 2021 13:04:27 GMT\r\nETag: \"eed4-5c34f6623acc0\"\r\nAccept-Ranges: bytes\r\nContent-Length: 61140\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=3, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":61140,"size_decoded":61436,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.4 (Macintosh), datetime=2021:05:27 15:03:33], progressive, precision 8, 393x227, components 3","md5":"dc3d1c3cbc30f8916ff5152b239af0fb","sha1":"bdfcc1e08b2e0de9773d85bea534e410d3897bb3","sha256":"9c651be3797cf32a58328a5c3d0eff55a43b1bb1796666432e1d536c72af0895","sha512":"e1c56aca2f4b257292cddfb291209f1c63270abf106e7bb1c1c5f72ea5a58c4b9a07fa4bf3a98a4d69464099e95f5b05c233d8ccad2a6d5d17a3dc36e2566e49","ssdeep":"1536:XirTGjBZrTGjBgf/AgxROkJUXc4B7J0O1evf+xJsWRxE:XinGdZnGd0/AoJUXXB7J316f+xFW","tlshash":"6653f1289b868e51f9c1d239aed8d3179613df1ba3b31717f88ca5183f629604c4d6a3","first_seen":"2026-09-12T18:19:28.686936Z","last_seen":"2026-09-12T18:35:22.523933Z","times_seen":2,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":164,"dns":0,"connect":0,"send":0,"wait":46,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/productsoriginal/70d484cec990839fa2cac10d32c6cb2aparallax.png","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.646Z","timestamp":1789238083646,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /productsoriginal/70d484cec990839fa2cac10d32c6cb2aparallax.png HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 14 Apr 2021 16:47:54 GMT\r\nETag: \"65de5-5bff182152280\"\r\nAccept-Ranges: bytes\r\nContent-Length: 417253\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=3, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":417253,"size_decoded":417550,"mime_type":"image/png","magic":"PNG image data, 1450 x 360, 8-bit/color RGBA, non-interlaced","md5":"22da2051b05cf3e4fd17369df49991dd","sha1":"3b8fa140e6382bf433929822c94626a71a8785aa","sha256":"431ca6c5e470699804e1fae3ecab5dc4dc97898f4c72b313742c7940b9eef086","sha512":"7cd8e4209895d14acfa73eb6fee16e168354b767690c969b466c9b37a4dfc08ae1815f936b3c36943162997085ea7fdebd36940325c4e9dbd509956fe516b595","ssdeep":"12288:XQzk7LbF6KEWlJ8BSnWahZI10t2bs83WWzWcc:gzgFvnhJADWWzWb","tlshash":"6994230adcac960e6f02cb77874459f259d1ac32710d38a685b9f7b352a58e0c169ff8","first_seen":"2026-09-12T18:19:28.642363Z","last_seen":"2026-09-12T18:35:22.525003Z","times_seen":2,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/img/contacts-bg.png","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.647Z","timestamp":1789238083647,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /img/contacts-bg.png HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 14 Apr 2021 16:41:54 GMT\r\nETag: \"a8d8-5bff16c9ff880\"\r\nAccept-Ranges: bytes\r\nContent-Length: 43224\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=3, max=92\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":43224,"size_decoded":43519,"mime_type":"image/png","magic":"PNG image data, 1450 x 712, 8-bit/color RGBA, non-interlaced","md5":"1a87bd9022646c3d3642f0618f748fdb","sha1":"e04c8ed523d2cc053f0c5be0965bc91d4604e556","sha256":"8eac6b956c6ab16215d8c79291948cb18979c44d2184cfa29446ae42e37691b5","sha512":"b4135b63ce453a7a6ceec800ae574380736691f9ebc7580a2dad45d0163ddc57df63e1ce1d81ef8feedb96e00621571962c464688055b421679411a7306b4397","ssdeep":"768:DMXqu64wt5Pf8EfNVF4kUPyKUKwsviM8IcDpM:DMXfpwtnlP4kUXUKb1c2","tlshash":"d313bf86c34a0533721991387862553b29e96c333564dea528dbb50f73a3f791df0ee8","first_seen":"2026-09-12T18:19:28.669365Z","last_seen":"2026-09-12T18:35:22.526051Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Nunito:400,600,700,800,900","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.335Z","timestamp":1789238083335,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Nunito:400,600,700,800,900 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 12 Sep 2026 18:34:43 GMT\r\ndate: Sat, 12 Sep 2026 18:34:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8555,"size_decoded":1331,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2d7e5c2b01a7539121bca2cdfb6e793e","sha1":"b1e240689f22948dcd2a4f15e97c9a55ef38847b","sha256":"82239979818429e022443f0d521f9fa8d38c1a16274fad7523bf4eef6287d362","sha512":"78ade81658065d96510cb24c87b87470c3036eb395a5b99938e6b2b9def9b4dd11262789c6575ea99761ae371e94db5dadbc35a167d19a98a5db997b017e9b37","ssdeep":"192:kH0y7vkmWHGy1JkUJH5yyWk/oHYynzkazHjy8ok9H:ID69rkpfv2Y","tlshash":"4d02bba1141bd40067432cc667df7e32dd4e62103458c476ebfd9898eca7d272264b5e","first_seen":"2025-10-26T11:07:27.48902Z","last_seen":"2026-09-12T18:35:22.526832Z","times_seen":22,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":35,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/plugins/rs-plugin-5/css/layers.css","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.345Z","timestamp":1789238083345,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /plugins/rs-plugin-5/css/layers.css HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 14 Apr 2021 16:51:46 GMT\r\nETag: \"23bec-5bff18fe92c80-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 10702\r\nKeep-Alive: timeout=3, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":146412,"size_decoded":11050,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"d8814f7c82574fa2dd82eba7a1131651","sha1":"fa5cec73f8b551d4692b441f4a2eb836aa426142","sha256":"b32f8018ec4a2cea60528d9d4598df381d5242e1dac55f2d1cf9e73526a8ef6c","sha512":"c6dc764ce0b231661f7e5ce0d2db7f0e2d38770593d639519c7d7f9fa65038946370def646c97d87258c281dffa19f15a971c708712bcddbcca69a1d8c97de8d","ssdeep":"384:78qEbZtaszFwt62cWrmv5xRDvnA44WzJVaNTcKmq0kGOmhARNTPNNj0PWSuKuhs/:ybTrf5xR4JGZhq0+KQ/G","tlshash":"c1e3df61e80541c73077e91833729fc8db690253ae078a34fbbd23648f7d2acaa5179d","first_seen":"2026-09-12T18:19:28.68095Z","last_seen":"2026-09-12T18:35:22.52753Z","times_seen":2,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":38,"receive":23,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/dist/script.js","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.365Z","timestamp":1789238083365,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /dist/script.js HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 14 Apr 2021 16:40:56 GMT\r\nETag: \"23d8-5bff1692af600-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 3271\r\nKeep-Alive: timeout=3, max=97\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":9176,"size_decoded":3630,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9122)","md5":"41d67f9dec6b44d293a457d6af1969ea","sha1":"f0ad4cd20757366cf8120c74481ce2f2b5997097","sha256":"6628008a53779448b283e59cdd1382a243029cf55383379047e86d6fd2e97f89","sha512":"c2f0cc9e1f8264c935da3642f8f6c10ecd1f2ea09beb74f78ad6caf2c9feb602d28ad34effb1b7297218510bebea569d47673d385b8013b283dc588ffed788f0","ssdeep":"96:dlv9IHDb/Vo88vt/BQsGUFJDJH9WO26Pzx1Z22uazZFvd0qh93RKfU33cMUjor2P:TVAVo88BBK6932yx1OHq33RSTSVgT","tlshash":"8e12936cb9ec223e02df13a7319f4b8a76315360d492540d1168e4384bbad934a9ffe7","first_seen":"2026-01-15T07:11:01.320164Z","last_seen":"2026-09-12T18:35:22.528322Z","times_seen":5,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":134,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/friendly-challenge@0.9.2/widget.module.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.365Z","timestamp":1789238083365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 18:43:31 GMT","end":"Mon, 07 Dec 2026 19:43:28 GMT"},"fingerprint":{"sha1":"C3:5B:D6:E9:86:06:91:EE:6D:00:E5:15:F5:23:66:F0:7C:0C:E6:46","sha256":"0D:52:A5:47:28:79:E1:05:1C:8E:DB:39:17:95:F3:D8:05:10:86:FC:5A:70:B8:B3:84:AB:34:1E:E0:63:DE:18"}}},"request":{"raw":"GET /friendly-challenge@0.9.2/widget.module.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bego-bau.de\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 12 Sep 2026 18:34:43 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a3a102052bc0b1b8-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 959\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 12 Sep 2027 18:34:43 GMT\r\nlast-modified: Sat, 12 Sep 2026 18:18:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:xr/576+IbfLzWBV9eSBbXLe2wGfxWqD/ZJKIhlei7lE=:\r\nfly-request-id: 01KZYR0PFVHJ0RFB5KEQ403ZW1-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30051,"size_decoded":13071,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29536), with no line terminators","md5":"e95fd38ca1a3a5e1a5c0e04cea09d996","sha1":"e38bc2de505d8678a30c8d2d9dc29d918800a92d","sha256":"ae489f38d8a5b5504a9f595c3e7f778b68e3c50f4bc85d919ddce97ab74c2de8","sha512":"eaae5fdc8da4ed4de4858b829e538a7f5fb54aa102a58943ac82928f8dffe5d9a008cd4510b3cab8cc893fc269d9afdd6553d353055d565fbd0f741e0a7d5293","ssdeep":"768:2/yVy2jMPjgTx02G4iD6stEKK9me47Snrx2pMJrqirvupX6Xr80TL:2OySM2ishdyMJ+i0TiL","tlshash":"e3d25b7491511d372792c38eda173304ac38992a6c44d18cff9ee8f343e56969a2fb36","first_seen":"2026-01-13T14:20:38.601838Z","last_seen":"2026-09-12T18:35:22.529342Z","times_seen":3,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":4,"connect":12,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/productsoriginal/c632e84c20172ad1056bba2114ffa506slider.jpg","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.385Z","timestamp":1789238083385,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /productsoriginal/c632e84c20172ad1056bba2114ffa506slider.jpg HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 16 Jun 2021 07:28:05 GMT\r\nETag: \"53f52-5c4dd08064b40\"\r\nAccept-Ranges: bytes\r\nContent-Length: 343890\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=3, max=94\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":343890,"size_decoded":344188,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1900x650, components 3","md5":"3cd2d6eee48abb54f3375845a28fa0de","sha1":"d0539e0a4c5685163c70402ad2d7410d34bb3a0b","sha256":"299770ca8ccd8d904940995bf61ff5291b63f8e93a5d940943dba45192b0948c","sha512":"1264626febd834c6812a2ef834a3e74a36183eebdf37fd4f9cf3cd6811d6587d6268d07527b6f24bf6638966f1891141abce07bf4e5ba0ac542ff7ba82c7c4a2","ssdeep":"6144:zmN2ZCMgLyx7RK/IOB8mmS9SUFy9DIJlWFjVtOGXhirXgsrLHv9zZw5w:zmkULyx7pmmS9o98jWFSyh0P9zr","tlshash":"0c742369232402b097bc327ee52cd317a32996dca7dc36c524f9cd7894751126886aff","first_seen":"2026-09-12T18:19:28.621254Z","last_seen":"2026-09-12T18:35:22.530234Z","times_seen":2,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":164,"dns":0,"connect":0,"send":0,"wait":47,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/plugins/rs-plugin-5/assets/loader.gif","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.916Z","timestamp":1789238083916,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /plugins/rs-plugin-5/assets/loader.gif HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/plugins/rs-plugin-5/css/settings.css\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 14 Apr 2021 16:40:41 GMT\r\nETag: \"9f1-5bff168461440\"\r\nAccept-Ranges: bytes\r\nContent-Length: 2545\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=3, max=95\r\nConnection: Keep-Alive\r\nContent-Type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":2545,"size_decoded":2838,"mime_type":"image/gif","magic":"GIF image data, version 89a, 24 x 24","md5":"4b3afb84b2b71ef56df09997a350bd04","sha1":"accdac8a7abeab0e21c49539aad0a973addb28ef","sha256":"9034d5d34015e4b05d2c1d1a8dc9f6ec9d59bd96d305eb9e24e24e65c591a645","sha512":"d65078b5d13873adb363472b5c358f6b42c128b530f8feba9776f8e4906cc97f20ee7bf1e823336cda8049147a9c7fa5e4016f07f96ec154f3774fbde1a564b6","ssdeep":"","tlshash":"de51e743e6a9fbe3cd7c013aee3c02c9764543e8ca2c6f38952bb5672509329a056a41","first_seen":"2023-04-05T06:54:01Z","last_seen":"2026-09-13T11:57:32.554839Z","times_seen":25303,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/plugins/rs-plugin-5/css/navigation.css","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.346Z","timestamp":1789238083346,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /plugins/rs-plugin-5/css/navigation.css HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 14 Apr 2021 16:51:47 GMT\r\nETag: \"f2ee-5bff18ff86ec0-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 8076\r\nKeep-Alive: timeout=3, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":62190,"size_decoded":8421,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"f4ce354955bd6504133e8a24b698fc86","sha1":"36a228caa0a1086e723a8db338ad7b66d417c2dd","sha256":"3637131632969d5143286e076eae9a30f9cc89d54650d5b9529fc402621d9ec4","sha512":"cf2d2fa7cef71b06fc277fc285e21ccc65d9598f223d832cf0e53546bf27329d8ef92278e1d7be5e48b612b337a76eb418de66941a98a7dbee4289b872d38659","ssdeep":"1536:CxvHMOhb7OHsUJt9NZoTmMowVE6/VnTIemW1yyN1SxYdpMs/:a7471oi8T/","tlshash":"555365388e466104b233d74497e00baceb398027ea530a9ef7ae74c6df6159c51ad7cd","first_seen":"2026-09-12T18:19:28.663251Z","last_seen":"2026-09-12T18:35:22.531598Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/plugins/rs-plugin-5/js/jquery.themepunch.tools.min.js?rev=5.0","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.359Z","timestamp":1789238083359,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /plugins/rs-plugin-5/js/jquery.themepunch.tools.min.js?rev=5.0 HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 14 Apr 2021 16:52:31 GMT\r\nETag: \"1af52-5bff19297d1c0-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 38310\r\nKeep-Alive: timeout=3, max=99\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":110418,"size_decoded":38671,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (27287)","md5":"30cb21d5971d0c0bfbbb246f0165ff02","sha1":"84fba4e85ce564ea81a2475c751c69cf46fa1047","sha256":"9a865189efd70c8f19439a428e6da65a64296fb2fff2fdee604f654e671c9f72","sha512":"33c45439b5c91f8ef93c8b805c8befb14f843227276b8bb50658192bdde7b867323e29202aa6f87c84bb23517e03e391bbab322b662df995f67b845937895862","ssdeep":"1536:0QpnayKBk7l5aknBDU0KsIu5XOD1ITONqvniqL3P99cN7H98rYx5f14/gCs0fXwR:0S7lYoDU0Gjqvniq7s7dCYSIn0fD0a8","tlshash":"36b319ca35517022859622a5517f0643723bdceab4098d3df548d9ed3e2cc8921bffba","first_seen":"2023-03-07T12:04:50Z","last_seen":"2026-09-13T16:55:29.44119Z","times_seen":1350,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":100,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/plugins/waypoints/jquery.waypoints.min.js","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.361Z","timestamp":1789238083361,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /plugins/waypoints/jquery.waypoints.min.js HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 14 Apr 2021 16:53:20 GMT\r\nETag: \"2344-5bff195838000-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 2753\r\nKeep-Alive: timeout=3, max=98\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":9028,"size_decoded":3112,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8863)","md5":"7d05f92297dede9ecfe3706efb95677a","sha1":"56bdb149d9baf64474a4c24ae66445769a28254e","sha256":"368daab67b1a5b2b2802edbbac79a2aa4ba992a2ebf9c67b98ad784d8004018c","sha512":"df25e4c654002bf66cbaea0917976f75afd9e16cb22d995f371de879d83d9334391bf9e921718995664da8fdd643239210205841fda0ac691b751693d505c759","ssdeep":"192:mEBzxsMCm1nJDl6hj8E3aPEGnvfiaaLkYluY4pLyUcDWZPeGz+nrFr:mEFoWJDlC8eaPZnvGLkYluYTUcEPeGzs","tlshash":"55126189750134221bdf50fad91f474ab337582ca80680bdb4c8d4ed29f152d676bfba","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-09-13T16:50:41.799914Z","times_seen":18982,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/plugins/scripts.js","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.363Z","timestamp":1789238083363,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /plugins/scripts.js HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 14 Apr 2021 16:40:35 GMT\r\nETag: \"2b54-5bff167ea86c0-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 1750\r\nKeep-Alive: timeout=3, max=97\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":11092,"size_decoded":2109,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"4ef2c4f6bc0b3e83e559d185780a81f6","sha1":"55c6f17f0a8783b0d0160b7dfb19daac9cea40a0","sha256":"9e6bdc246e9fc7073a93be7c3ba8d45e116007fa7b1fbf783059100960fb5aed","sha512":"38cf26a295cb87b7d1fe670be2a007cbf77fe11e92f9534d890c85828f0f1d75b0e95da794f3cc8c1928487ee099047fc09af68b61ba3b707b33fe1cc21dd5a3","ssdeep":"192:b6Ajqdm7CmH0Xopmok1Vo7sVotc58Eo7uS5O+toT2wXw5USYfgnwlNpXyT6:Rmdm77/7s6A6NtX5+Lgrfe","tlshash":"8d32ede2734c706fceb6520ed139c846dabce47dd71b94bef29aa02640f5e821397146","first_seen":"2026-09-12T18:19:28.666374Z","last_seen":"2026-09-12T18:35:22.534555Z","times_seen":2,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":133,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/js?callback=__gmap3","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.820Z","timestamp":1789238083820,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"DB:16:C1:37:8D:6C:67:F5:7B:69:A5:CC:5A:E4:14:86:68:68:28:08","sha256":"7C:9F:DC:87:45:B2:79:1B:26:C3:F9:27:4E:6A:13:97:FF:C5:A0:2C:69:69:31:D1:9D:3F:8D:E7:2F:66:1C:15"}}},"request":{"raw":"GET /maps/api/js?callback=__gmap3 HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nvary: Accept-Language, Origin, X-Origin, Referer\r\ncache-control: public, max-age=1800, stale-while-revalidate=12600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: aaccd0e5\r\ncontent-encoding: gzip\r\ndate: Sat, 12 Sep 2026 18:34:44 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 103201\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nserver-timing: gfet4t7; dur=32\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":315700,"size_decoded":103776,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14828)","md5":"65173812524756f4048a7de15297a409","sha1":"2bf5d245570e106756ec4f13d1e6b382d611855f","sha256":"413058d8dadfb94a3b0db4db65b37538f01580ff12fc4efc22ecde9b4ac7665a","sha512":"6b6c1c930b329f37bc6d68d3c6ee992acb28c3872e764095270c155f18c3cf68906c80079182222d25a8e1f707fc25be26301ef9b5354860b4eed406e4e3880f","ssdeep":"3072:W5m4ShMPcJWP9+agj9afT7TU+TbQx183bPk9bnFlPTuJ/8RoDmCX9XO6s3MiuQAB:NhHagaT7TU+I82eDmM9+GisUSIcj","tlshash":"ef643d947362747287b2e4a4402b0107f17ea85af00c89acfa9cddf2aef594546b7f74","first_seen":"2026-09-12T18:19:28.653122Z","last_seen":"2026-09-12T18:35:22.535381Z","times_seen":2,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":3,"connect":8,"send":0,"wait":41,"receive":27,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/js/modernizr.js","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.351Z","timestamp":1789238083351,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /js/modernizr.js HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 14 Apr 2021 16:42:06 GMT\r\nETag: \"424f-5bff16d571380-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 8839\r\nKeep-Alive: timeout=3, max=99\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16975,"size_decoded":9198,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16783)","md5":"507d5f6a6b9bda5e53751ca9764b90b8","sha1":"c76a74197b1dc0a53df33cd82890c2c978954277","sha256":"d25f5a3eba2ef53ebfeb1b7ff8d6c19fc719a1071d03c0c2f3fbf1051320fe91","sha512":"4c48c3e04d9265f8810685152543ee41cedb2da7a0cf20b648d952b91dcfdbb39381942d9dd97b2c8e45b5a457139720e38c6e88003ae8e18c9e3f6ffa30a263","ssdeep":"384:by2vg6gE6fTu5ZoFx/ZWk0MbH2Ob0gEx1iaHPxjYAKLo:Fg8oFdgxMbHOD1iab3","tlshash":"c2725c763323b12a036a60e2917e540aecb85e2b6e14c440f28ff5b965389b5437bd7c","first_seen":"2023-03-26T04:21:33Z","last_seen":"2026-09-12T18:35:22.536323Z","times_seen":38,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/js/validateFormCaptcha.js","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.356Z","timestamp":1789238083356,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /js/validateFormCaptcha.js HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 19 May 2022 08:28:25 GMT\r\nETag: \"d0d-5df5928507c40-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 1128\r\nKeep-Alive: timeout=3, max=99\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":3341,"size_decoded":1486,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"c925e5ca1137b59eaf7a84f542feba74","sha1":"f84a96c5802b6b1ad587571ec4b84a65f03fc616","sha256":"da2fe9e23bcccec4a6c717c8b0986227acb9bebf0a0db9531c39939a357b6a3c","sha512":"b49800f4bbafba5469a72344baf3d1d5fb55447e3fb23cc8700478c79d5db6d6b12994866da93ebca7c6d0321f5b05e1cce2eaf2a94092ba53a2f56c7a8641b9","ssdeep":"","tlshash":"a96154a6338d09394dfd277252fb41c5ad6cc039ad02a8a0f8ccd40097b1d1127aefb4","first_seen":"2026-09-12T18:19:28.664787Z","last_seen":"2026-09-12T18:35:22.53717Z","times_seen":2,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/img/logo.png","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.384Z","timestamp":1789238083384,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /img/logo.png HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 22 Nov 2023 13:59:07 GMT\r\nETag: \"1e90-60abe1f6460c0\"\r\nAccept-Ranges: bytes\r\nContent-Length: 7824\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=3, max=93\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7824,"size_decoded":8118,"mime_type":"image/png","magic":"PNG image data, 208 x 112, 8-bit/color RGB, non-interlaced","md5":"d6bed4de8337fb983c0d7a0ee9313595","sha1":"546a3d6d439ab52cd8ad5d8db5a731d1b998d206","sha256":"95cc0a0563a5db978d16f7d948d02bd6f3c9ed75dcbcebdcf9b24c0329a98c23","sha512":"72d31283e4ae0808c372e2cf579d26afa949ba53470f563d42c4e4e4cacad844a1869765d794a51048799f445109cf261c8043de1bc48c1e3e0d2c9c6b2fc441","ssdeep":"192:9SCkn451nd8+i8SlscHEy36e56Gxqf7bgN9LHACoob9gVGgN:8Bn4Hd8REyNO7q9Lqob9c5","tlshash":"77f18f086c90e0658d2dd13a55fed1a666a311c086fdf407bd8fe853ac14a74d58ad87","first_seen":"2026-09-12T18:19:28.667984Z","last_seen":"2026-09-12T18:35:22.538237Z","times_seen":2,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":243,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/productsoriginal/52fdbabcb4bd69393b0526ec1d825685IMG_0307.JPG","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.390Z","timestamp":1789238083390,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /productsoriginal/52fdbabcb4bd69393b0526ec1d825685IMG_0307.JPG HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 28 Mar 2026 19:12:10 GMT\r\nETag: \"4604a-64e1a6500a393\"\r\nAccept-Ranges: bytes\r\nContent-Length: 286794\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=3, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":286794,"size_decoded":287092,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 2048x1152, components 3","md5":"1ad1209e7ed7351b072e281ed18e2393","sha1":"9f2b7fbcebb925476e47cab398485ca9685d4111","sha256":"06ea1cfbe9f08a53e5d24ae71e62115f7d2bec0d836ac4253aed74a1838e3231","sha512":"3a7d181baeff378e0ffde0611e093d8ba326c386593aae6b003750a6b594798bf13040bef28e68064b73a985ec08721231471c3e5fe66ae502c836f64d2d9db6","ssdeep":"6144:RpSZibPGkOjTdVfUsse5dQN1jCoRnfMbevyqy1Xk2e1bDJ:7SZibOfHrLYR/YRzXkvtJ","tlshash":"1c5423bdad872a14d003daf14bf3556c10c7a335870087ac5f68a8a4d96e27eccd1d6e","first_seen":"2026-09-12T18:19:28.684947Z","last_seen":"2026-09-12T18:35:22.53893Z","times_seen":2,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":164,"dns":0,"connect":0,"send":0,"wait":44,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/css/animate.css","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.498Z","timestamp":1789238083498,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /css/animate.css HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/css/animations.css\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 14 Apr 2021 16:40:50 GMT\r\nETag: \"11a43-5bff168cf6880-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 4430\r\nKeep-Alive: timeout=3, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":72259,"size_decoded":4776,"mime_type":"text/css","magic":"ASCII text","md5":"07f146141537e04ee282a965d8053198","sha1":"5bac0162dbfcfd0c701b8d0848411a288c27a2c2","sha256":"d34c3af0d3b74cbb878ca4472668ebae02410ed1bfe8e85b244bb582d1dcb2ea","sha512":"439160867a718c13e064ec3a421d9943c6bd7d774c78023f3e77719cbc7d7826e3f859bdef7a76dceb91bf6b31ec5672543f6665a06ceedcb552e1b146a0f33b","ssdeep":"384:B4HuaurH2fqftulucfwf7l3laGPGF+1fHf7SpS/fjfHqDxbe3NxdV2PVriL:yHuauafqftulucfwfk+1fHf7SpS/fjfB","tlshash":"7e630e6d2991118457238a5d83df9e68273ce573182a9cef73c2488bdf86fac67c5207","first_seen":"2023-04-05T13:39:40Z","last_seen":"2026-09-13T16:18:52.693747Z","times_seen":5266,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.684Z","timestamp":1789238083684,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bego-bau.de\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Sep 2026 10:29:39 GMT\r\nexpires: Sat, 11 Sep 2027 10:29:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 115504\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-09-13T16:45:48.882241Z","times_seen":53177,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":3,"connect":30,"send":0,"wait":20,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.690Z","timestamp":1789238083690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bego-bau.de\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Sep 2026 10:29:39 GMT\r\nexpires: Sat, 11 Sep 2027 10:29:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 115504\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-09-13T16:45:48.882241Z","times_seen":53177,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":42,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-12T18:34:42.153Z","timestamp":1789238082153,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:42 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nSet-Cookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e; path=/\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 6884\r\nKeep-Alive: timeout=3, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"qs1as2n8bsb5tf6akhgipfdn5e","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]}],"data":{"size":29395,"size_decoded":7313,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1803), with CRLF, LF line terminators","md5":"970bec28ba6705f6cf21ed1adeb518dd","sha1":"d7f16f40339752380f41b8023f706fd72605d999","sha256":"6c2c937b7e78572756e6e84d93d3dca5d623084fdf9b3aeba2065e37e3b26991","sha512":"b28b4b47ae4c243880cade3e3d0f57bda76dfc0391644ee2b451f16e5c5a782eb90aaa1f874efff97d6e304d5998517433e1e4b061d011014f945551b60c0fbc","ssdeep":"384:+Qu0F3He6Bxhj0kaEE0jeUoDx48kIPIyWYO:7n+6BZds3IyhO","tlshash":"a5d28310a9d9653b017382d5a6b06f5dee93c20bc70b9940b2fc679b6ff6e418d8364c","first_seen":"2026-09-12T18:19:28.657011Z","last_seen":"2026-09-12T18:35:22.540232Z","times_seen":2,"resource_available":false,"data":null}},"time_used":816,"timings":{"blocked":0,"dns":3,"connect":28,"send":0,"wait":726,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/productsoriginal/8dbda66ba22f96c1525140af569ce967ee77856f-e429-47fe-9fdb-0d9f88134418.JPG","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.388Z","timestamp":1789238083388,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /productsoriginal/8dbda66ba22f96c1525140af569ce967ee77856f-e429-47fe-9fdb-0d9f88134418.JPG HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 19 Oct 2024 16:06:32 GMT\r\nETag: \"5f2a9-624d69a6dd81b\"\r\nAccept-Ranges: bytes\r\nContent-Length: 389801\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=3, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":389801,"size_decoded":390099,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 1600x900, components 3","md5":"a2e2d9c3857f9d75436e7b0318705b12","sha1":"2a0266f82afe216103084a6484db6573afaf80db","sha256":"b6e7abd30f219ce90b86a8a9f020bf389de4b8e9263b28cbe9ca507979620887","sha512":"29a317d553434cd83e90f3c9d46d187a1c9ec849828ef1a3442c699abbbdddc8d872020a18375ea09d3a5f3f31ab2a97aeb736522bb1e4d0ec4e2e6ad4f352a3","ssdeep":"6144:n0dlCh8ABRAgLH3YyxUv4NHCyxvTH9EQgCluRiz3CkY6u8xce6bwESfp5j/Jm+PC:0dMh8I53Yy0OHC2LH9EQaRb6dcsffL7y","tlshash":"e984235be394ad176f1746b047d91bbf62a8a40014487eeb6f1f3a81219f6318af017e","first_seen":"2026-09-12T18:19:28.640733Z","last_seen":"2026-09-12T18:35:22.540875Z","times_seen":2,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":228,"dns":0,"connect":0,"send":0,"wait":82,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.685Z","timestamp":1789238083685,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bego-bau.de\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Sep 2026 10:29:39 GMT\r\nexpires: Sat, 11 Sep 2027 10:29:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 115504\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-09-13T16:45:48.882241Z","times_seen":53177,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":25,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.689Z","timestamp":1789238083689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bego-bau.de\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Sep 2026 10:29:39 GMT\r\nexpires: Sat, 11 Sep 2027 10:29:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 115504\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-09-13T16:45:48.882241Z","times_seen":53177,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":37,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/plugins/rs-plugin-5/js/extensions/revolution.extension.slideanims.min.js?version=5.4.6","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.712Z","timestamp":1789238083712,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /plugins/rs-plugin-5/js/extensions/revolution.extension.slideanims.min.js?version=5.4.6 HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 14 Apr 2021 16:52:37 GMT\r\nETag: \"72d3-5bff192f35f40-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 7016\r\nKeep-Alive: timeout=3, max=90\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":29395,"size_decoded":7375,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (29149)","md5":"28ab3ac4f312bd520bf6236043d15c56","sha1":"17f2cccb80a4de1b8fb131e520d5fcadc7577513","sha256":"84d2a33717734d7310e576164399b4f73de04daa0d60aaab53e8dc0d23a5970b","sha512":"697fd26267dfcb484a1ef8a976ce4d6e00762afab9693f88234d13e493f3a49b7841f66ae905c1309c2a47ced3653896175273b131c0173b5f9cb0b12252a42a","ssdeep":"384:wy1KpMxWR1zy40Islk/4EfoXdOM8w706DvCQ41b0zouFwhq1Tdo+2sb3AB8kNv1A:wsIslkQEfoXdOM8w7HvfzoiHRBm4","tlshash":"64d2ebebaa265c6290532142c3a54d192128ce36fd32aeda33d6d0f506c305d37fafd6","first_seen":"2023-03-07T14:41:01Z","last_seen":"2026-09-12T18:35:22.541802Z","times_seen":695,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/66/4d/common.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:49.279Z","timestamp":1789238089279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"DB:16:C1:37:8D:6C:67:F5:7B:69:A5:CC:5A:E4:14:86:68:68:28:08","sha256":"7C:9F:DC:87:45:B2:79:1B:26:C3:F9:27:4E:6A:13:97:FF:C5:A0:2C:69:69:31:D1:9D:3F:8D:E7:2F:66:1C:15"}}},"request":{"raw":"GET /maps-api-v3/api/js/66/4d/common.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38117\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 12 Sep 2026 06:32:53 GMT\r\nexpires: Sun, 12 Sep 2027 06:32:53 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 09 Sep 2026 07:52:19 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 43316\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":128855,"size_decoded":38955,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (726)","md5":"e91b9bde854891e6009711f799cf1f5f","sha1":"26f197a65cc5114c4f1280b6310108f265466ef2","sha256":"e6950fe4cd4d52a1d912f5433d84f4a30353d3193736aae422c1d11344658556","sha512":"2a6e8628ebcba4b02dc126bdd267b2db331df38521b59186f91c55a3d4b6a35796794bdcbc4ec5bf1371d87057b9713b30de09e75db2651a7e3f16854f6cbbe5","ssdeep":"3072:bB6gtQPXtVgO5NXQ/5IAW0ZhNUehBLC/yMOfAiR:bedVvNXQ/5DZhqeh8/yMOfAiR","tlshash":"cbc3a7c5729370a3bbb1b4b444970007b2b9a895f00e8c2db5f9d8f1aef485651f9b39","first_seen":"2026-09-09T19:32:09.377876Z","last_seen":"2026-09-13T16:55:29.46333Z","times_seen":281,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/66/4d/util.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:49.281Z","timestamp":1789238089281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"DB:16:C1:37:8D:6C:67:F5:7B:69:A5:CC:5A:E4:14:86:68:68:28:08","sha256":"7C:9F:DC:87:45:B2:79:1B:26:C3:F9:27:4E:6A:13:97:FF:C5:A0:2C:69:69:31:D1:9D:3F:8D:E7:2F:66:1C:15"}}},"request":{"raw":"GET /maps-api-v3/api/js/66/4d/util.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72646\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 12 Sep 2026 05:13:06 GMT\r\nexpires: Sun, 12 Sep 2027 05:13:06 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 09 Sep 2026 07:52:19 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 48103\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":319781,"size_decoded":73484,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (532)","md5":"d2436679981c6d3f1b28b79b6345aaaa","sha1":"9d3f8b54213f2658fc9f8a5120395b7033890801","sha256":"0d76ce1e9af8f34169c86e57a72289e035fa5d02c26b958e399505c65b27fef1","sha512":"f43eb7ddab715b783cb9692794dff58ae0308398e0dddc6c06ac4ceac9603149f5f3a30f3ea8911eecbd0acc68aab95db49c155798d11a89013397347e41db89","ssdeep":"3072:ZP+7mahat3ddwywuPInJG7NJG7A8kwyuZmBFo1k:xomakLIsCk8kxu0BFMk","tlshash":"4a64d77c72316b0ee973c85bc626300e90257ddbfad488bdfee59146ea54988f0e4934","first_seen":"2026-09-09T19:32:09.414566Z","last_seen":"2026-09-13T16:55:29.500667Z","times_seen":279,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/css/styles.css","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.342Z","timestamp":1789238083342,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /css/styles.css HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 22 Nov 2023 14:00:42 GMT\r\nETag: \"4082c-60abe250df680-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 41335\r\nKeep-Alive: timeout=3, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":264236,"size_decoded":41683,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (1572)","md5":"e89e2e5d6db2c81f83175bd51ade5911","sha1":"e85743b67b7175c3b87b729ec3f1648bc0239167","sha256":"505e64830e2037ab9182abf7e4882c112536b0ed618430ec546b7a747e59c85f","sha512":"b98b7e5b403a0702de9e75f970f3c82dcfde5e4768671e4cb321fa570233678aa293d44d7b71e6eef2b5c3b740785b94c637fb406e401c29ec5781ed2efb614f","ssdeep":"6144:iU2NRNPdcvzKehBlVQdcD6Cy2/mFahDe8fBn5prI/4Kr:iU2NRNPKzZZQdcDo2/WahDe8fBnDrI/t","tlshash":"db44969aa7f41a08302f445d5186fb637b6d50c2c60fcfbdabf2a45c9b895dc0672a4c","first_seen":"2026-09-12T18:19:28.626413Z","last_seen":"2026-09-12T18:35:22.543767Z","times_seen":2,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":38,"receive":47,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/productsoriginal/b5197234e566bd0948f4ca8ff69261c83db9295cb3435bda35175c4d7c80cac88F171712-4E0D-4E5C-A246-AD31D6D747E8.JPG","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.386Z","timestamp":1789238083386,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /productsoriginal/b5197234e566bd0948f4ca8ff69261c83db9295cb3435bda35175c4d7c80cac88F171712-4E0D-4E5C-A246-AD31D6D747E8.JPG HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 01 Jun 2024 10:55:56 GMT\r\nETag: \"143272-619d1f1d183f9\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1323634\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=3, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1323634,"size_decoded":1323934,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=11, manufacturer=Apple, model=iPhone 13 Pro, orientation=upper-left, xresolution=166, yresolution=174, resolutionunit=2, software=16.1.1, datetime=2022:12:05 11:36:23, hostcomputer=iPhone 13 Pro], baseline, precision 8, 3840x2160, components 3","md5":"8816ce3b7cc9c1810edf3568b8ad925f","sha1":"25996277eb4ccace1392b3080c94f1f96cfb7676","sha256":"c8289004bbd3f567679f389ecf184424e760a5599e91312c2842d1e78a228e3f","sha512":"fd6331305d86f2b7069a73a02c8426e718173b6d06799c105769744a775fc2f838c89f085acfd320de1bec18ded6267bc6aa79ed0d57d58e4beb373c8383360e","ssdeep":"24576:dHlVLKh6BA7DTzZAxhxhHqIL6U8Fry10hrDgKbMyJKsaSej:Dk6BA7HzZAxhPrLR8A1OrDtQybaSej","tlshash":"b825338e571128d1e2390cb92d165bed53106fae7f9b4e2859039f96a7e3d43f48b8c0","first_seen":"2026-09-12T18:19:28.636932Z","last_seen":"2026-09-12T18:35:22.544888Z","times_seen":2,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":164,"dns":0,"connect":0,"send":0,"wait":323,"receive":185,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bego-bau.de/productsoriginal/3c06e9869b775b9cd1fe9d86d2beea05IMG_1245-6.jpeg","fqdn":"bego-bau.de","domain":"bego-bau.de","tld":"de"},"ip":{"addr":"165.227.169.167","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bego-bau.de/","date":"2026-09-12T18:34:43.387Z","timestamp":1789238083387,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bego-bau.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:19:49 GMT","end":"Mon, 16 Nov 2026 09:19:48 GMT"},"fingerprint":{"sha1":"EB:49:23:29:EC:10:F2:E4:C2:8C:F2:6D:7A:1E:3C:3E:61:C6:B5:82","sha256":"95:38:E2:6C:07:2F:86:2A:26:29:B8:2A:21:6A:D3:76:85:D8:23:E7:C2:9A:82:14:75:CA:2E:0E:EB:E1:13:B9"}}},"request":{"raw":"GET /productsoriginal/3c06e9869b775b9cd1fe9d86d2beea05IMG_1245-6.jpeg HTTP/1.1\r\nHost: bego-bau.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bego-bau.de/\r\nCookie: PHPSESSID=qs1as2n8bsb5tf6akhgipfdn5e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Sep 2026 18:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 19 Oct 2024 20:02:01 GMT\r\nETag: \"19c3ba-624d9e492e929\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1688506\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=3, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1688506,"size_decoded":1688806,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, manufacturer=Apple, model=iPhone 13 Pro, orientation=upper-left, xresolution=178, yresolution=186, resolutionunit=2, software=18.0.1, datetime=2024:10:09 12:23:48, hostcomputer=iPhone 13 Pro, GPS-Data], baseline, precision 8, 4030x2267, components 3","md5":"4d0460a2523eb03de3fac0bfd2bfa5f1","sha1":"38d086936eff7cefc206116379ed5f8f730a4ba0","sha256":"6b3820839393b78fad19e6f8c4ace7c54b4783b3804efbb5e7240a5334f13ae8","sha512":"37fdee8c4841ce999b3bbafc1b0cbef5bc1982b54639c9bd144a5514c793afd693a0c86aca1e1bf634fa515f93b8cc3e1f22001ca69d2ad3b8ab77da379109d5","ssdeep":"12288:ZeMH2Nz//StCsRilhu+oL6rCgdlPK66qwXZmZ4vQIbrqbyWi+CRAqxwDY6EZr6PI:SdS5YlS/IIbrqbYpxwDYwWYGuRqz17","tlshash":"5a252341af929184df2a1a39008eae2ba7c4b73c87d06a3c42a0f96d7951ef15ddd3d4","first_seen":"2026-09-12T18:19:28.638924Z","last_seen":"2026-09-12T18:35:22.545747Z","times_seen":2,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":164,"dns":0,"connect":0,"send":0,"wait":48,"receive":240,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"bego-bau.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"bego-bau.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}