{"report_id":"347e512c-0f40-4519-bead-132b4df83af5","version":0,"status":"done","tags":[],"date":"2026-08-04T01:04:30Z","url":{"schema":"http","addr":"factiliate.de/","fqdn":"factiliate.de","domain":"factiliate.de","tld":"de"},"ip":{"addr":"116.203.213.72","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"factiliate.de/","fqdn":"factiliate.de","domain":"factiliate.de","tld":"de"},"title":"Willkommen auf factiliate.de","dom":{"size":27127,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (694)","md5":"cb6472ff95d6c745c16e7a73d054dc07","sha1":"c00841ae7f906bc1591116cd345cdb3de05ea979","sha256":"014e3b8b1efc7930fecf2f16465cdf1228737f5763ae3028ec74db802a58a394","sha512":"92e610bee6b2790192a0fe5bf005006fc2814aadc66536b54eb8761ec2c75654d47bf7dc372b6e4063ee9030cf2fbcb171d905393e8f7f9ea7b03c188ea12949","ssdeep":"384:KDRvobRwsF1FA9d6FcTPA79ExZJ6bSaZ7QYWaPNak2LOlutpj4kin7:vRwsF1FA6FwA79uaZ7QYWaPNagky","tlshash":"97c211316d250665b827a35d235a6788f324a1139a0aca787dced048efcd7f598e3f4c","dom_hash":"domhasha579fbded765531c64680218a4046a7f","first_seen":"2026-08-04T01:04:34.636808Z","last_seen":"2026-08-04T01:04:34.636808Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"factiliate.de/","fqdn":"factiliate.de","domain":"factiliate.de","tld":"de"},"ip":{"addr":"116.203.213.72","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-08T01:04:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"factiliate.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"factiliate.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"factiliate.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"factiliate.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"factiliate.de","ip":{"addr":"116.202.21.136","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-04T01:04:30.539759Z","last_seen":"2026-08-04T01:04:30.539759Z","alert_count":32,"request_count":8,"received_data":544326,"sent_data":3823,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"my.do.de","ip":{"addr":"95.128.200.228","port":443,"asn":33828,"as":"iptoX GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2022-08-17T21:37:05Z","last_seen":"2026-08-02T04:58:53.745917Z","alert_count":0,"request_count":1,"received_data":12379,"sent_data":561,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"factiliate.de/","fqdn":"factiliate.de","domain":"factiliate.de","tld":"de"},"ip":{"addr":"116.202.21.136","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"eval","is_inline":false,"md5":"91250b6db7033603c32b91081adcf6cc","sha1":"73052c2d85314605038a0cdd0c79371210116e31","sha256":"b37fee2b851ad99e7dd5ec1c3d081d5af34870f9e412d635dea3443cff2c3df2","sha512":"308b9628ed0d8e83f5e6094af1f9c3b05566c6432147ff822ad81ec7ca3889d08164cfc1b3846bc40b9a8cb7369d6a5afd02098e8ee6d11218625f5da22aae65","ssdeep":"","tlshash":"4fe0c09383d10db94c2541c06b1fa9e16475f1c94e02c042cd00a4ace48460d00f5d03","size":348,"data":"","first_seen":"2026-08-04T01:04:34.645991Z","last_seen":"2026-08-04T01:04:34.645991Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"factiliate.de/content/card/js/card_layout_a.js","fqdn":"factiliate.de","domain":"factiliate.de","tld":"de"},"ip":{"addr":"116.202.21.136","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"03403ad558ba43d8967b0b8dfdd45370","sha1":"2a98ecbd1ab564b463d90c87711556325b611b23","sha256":"e47b67cc7b7729b051275910efcd4bc3b86e11b21db39a6d68930e0b86509a91","sha512":"93c05f46bb910175075ea7c52ddc6ceaf8757b3fc60b732a051f0063e16ce2009f0d7d3fe59d2a6be3185cc6a08f2bd50f638680e4cf9630f44dc883feb760e7","ssdeep":"","tlshash":"14f0969f3de10c308cff69bb157de398353a54491806dd41d61c8694dd90e9f0a2fd45","size":543,"data":"","first_seen":"2026-07-14T02:37:01.212232Z","last_seen":"2026-08-04T03:40:02.512005Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"factiliate.de/content/js/altcha/de.min.js?v3","fqdn":"factiliate.de","domain":"factiliate.de","tld":"de"},"ip":{"addr":"116.202.21.136","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"73bf7f4b45a6414858a666dd75371200","sha1":"2c3fd85405000847b7037e3480aec7b8429b0756","sha256":"d80f019c6b00cde8822e369faa3518b3b111aed268e36e1670531ca3fd8d3ff3","sha512":"592c34fe170dfc06492370c727b6b27a5b5ea152f7858b516a02f99ff0eb42063d0a7130581abd51fe23bc045f221412f293c2d0a1ffacfa6643799479e4bd17","ssdeep":"","tlshash":"4d11e5f3a8d3418b19819b45310b0ab1778571bb175c7135d36cc673e98e16722b21bd","size":993,"data":"","first_seen":"2026-06-06T04:24:26.084409Z","last_seen":"2026-08-04T03:40:02.510454Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"factiliate.de/content/js/altcha/altcha.min.js?v3","fqdn":"factiliate.de","domain":"factiliate.de","tld":"de"},"ip":{"addr":"116.202.21.136","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e11c3c39ee4874c2d56543416ab864f","sha1":"767b3335b0243dc9ef800899cac751e1c6faea32","sha256":"895f5a00c31b511353a7e69da8fc66c96178f1049d99723a631ea78f50ae197c","sha512":"eecb08c403201b12f161c7d9f52bb7e23221e99754a85f5299ca6827bef6a32dfc880820834ef872fd0949f6db3adae7e309c61f616607ac44a0de2d3b761420","ssdeep":"1536:5lcsUSCxm9Zxo0MdRiTOETNHhzIwPSP9IVry+pFAL/vkAV7c4:5/USSm9no0MPSOJwSmogIg4","tlshash":"95b31a713d01a13562731baa52ef0205f335625978168138ba6eecc677af9f491f3e38","size":110188,"data":"","first_seen":"2026-06-06T04:24:26.110554Z","last_seen":"2026-08-04T03:40:02.517784Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"factiliate.de/content/card/fonts/Roboto-Regular.woff2","fqdn":"factiliate.de","domain":"factiliate.de","tld":"de"},"ip":{"addr":"116.202.21.136","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://factiliate.de/","date":"2026-08-04T01:04:02.884Z","timestamp":1785805442884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.factiliate.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 23:30:58 GMT","end":"Fri, 11 Sep 2026 23:30:57 GMT"},"fingerprint":{"sha1":"60:9C:71:EE:43:B8:85:0B:C4:BB:EE:18:55:DF:80:B1:38:7B:FD:5E","sha256":"37:78:9E:C8:CC:1F:F4:CE:92:E7:DE:8F:14:A3:DC:A6:11:32:DB:93:B7:73:0B:8A:91:0A:3F:43:96:B1:B5:61"}}},"request":{"raw":"GET /content/card/fonts/Roboto-Regular.woff2 HTTP/1.1\r\nHost: factiliate.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://factiliate.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Tue, 04 Aug 2026 01:03:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15736\r\nlast-modified: Wed, 12 Jun 2024 06:49:56 GMT\r\netag: \"66694514-3d78\"\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15736,"size_decoded":15943,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15736, version 1.0","md5":"479970ffb74f2117317f9d24d9e317fe","sha1":"81c796737cbe44d4a719777f0aff14b73a3efb1e","sha256":"48c3fa6f86c54f1d9bb519220713d4b0a1f8cd1a589a3c03b9fa82e98ecb13e3","sha512":"13f6b2ecc2407445c1f97109ededcc8ac64fae89fc90432a28ffdaef233b373089be25731718408c32ff3cf632afb260d0035f85fbd8b1b4e068a0d7baf9f6a8","ssdeep":"384:4V2g2L6wzYU8GCyt8jJlPaIi8jGCIWzUy+k:Uk6+8UtaJlPK8jGfeDn","tlshash":"6f62bf0cc5245712f8120d37b695aa60cf1995cf1f787af71bedb822f560bc685de121","first_seen":"2023-04-05T13:27:57Z","last_seen":"2026-08-07T17:04:11.681786Z","times_seen":8928,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"factiliate.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"factiliate.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"factiliate.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"factiliate.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"factiliate.de/content/favicon.png","fqdn":"factiliate.de","domain":"factiliate.de","tld":"de"},"ip":{"addr":"116.202.21.136","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://factiliate.de/","date":"2026-08-04T01:04:03.063Z","timestamp":1785805443063,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.factiliate.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 23:30:58 GMT","end":"Fri, 11 Sep 2026 23:30:57 GMT"},"fingerprint":{"sha1":"60:9C:71:EE:43:B8:85:0B:C4:BB:EE:18:55:DF:80:B1:38:7B:FD:5E","sha256":"37:78:9E:C8:CC:1F:F4:CE:92:E7:DE:8F:14:A3:DC:A6:11:32:DB:93:B7:73:0B:8A:91:0A:3F:43:96:B1:B5:61"}}},"request":{"raw":"GET /content/favicon.png HTTP/1.1\r\nHost: factiliate.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://factiliate.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Tue, 04 Aug 2026 01:03:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 121\r\nlast-modified: Wed, 12 Jun 2024 06:49:56 GMT\r\netag: \"66694514-79\"\r\nexpires: Sun, 31 Jan 2027 01:03:59 GMT\r\ncache-control: max-age=15552000, public, no-transform\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":121,"size_decoded":418,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit gray+alpha, non-interlaced","md5":"1dd93e91d4be3d56e351493f1f8d265a","sha1":"29e787641aadae0f62a83d25fe1e31dd6f4f3e70","sha256":"c3bd639cb3b47a2a9dfc3af84bb7125419b8f157eb62d0bf68dd396b00abb1fd","sha512":"585a9bdb38860b19edbf49a5aac16ddf14781d89455db2c3ce0d1c80a9a3f2094eb00a7007378137ec70731d72ab3fe055eb89865168c69869a825dce5f98a74","ssdeep":"","tlshash":"5db022e3e3a088a8c88a003382222830a8b202aa0800288c0b3ec0208880280882e202","first_seen":"2024-09-19T20:12:02.01436Z","last_seen":"2026-08-04T03:40:02.516594Z","times_seen":50,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"factiliate.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"factiliate.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"factiliate.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"factiliate.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"factiliate.de/","fqdn":"factiliate.de","domain":"factiliate.de","tld":"de"},"ip":{"addr":"116.203.213.72","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-04T01:04:02.317Z","timestamp":1785805442317,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.factiliate.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 23:30:58 GMT","end":"Fri, 11 Sep 2026 23:30:57 GMT"},"fingerprint":{"sha1":"60:9C:71:EE:43:B8:85:0B:C4:BB:EE:18:55:DF:80:B1:38:7B:FD:5E","sha256":"37:78:9E:C8:CC:1F:F4:CE:92:E7:DE:8F:14:A3:DC:A6:11:32:DB:93:B7:73:0B:8A:91:0A:3F:43:96:B1:B5:61"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: factiliate.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 04 Aug 2026 01:04:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-redirect-server: cs2\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(self), microphone=(), camera=(), usb=(), gyroscope=(), magnetometer=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9440,"size_decoded":3815,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (635), with CRLF line terminators","md5":"429410d14091dbafe2cbc6ac34321757","sha1":"3ddfaec0b62e2f6e48c69cb49f16a401138e40a4","sha256":"ddaec595812c81aaff4aa74da07364a603bda4682d768f89cdf4c88f09cb028e","sha512":"b5d9cd5e7ba53e30a3fb34f0a77e124eb5dd56e54d85820fb78fcadf9555aabae7b94dcd6f48854b3b3cc2a6daaf2f6a992d8558dbe96ad47124aa17fe56228d","ssdeep":"192:3/p+HS8QNOjC47bfUQ+uJEwewQiK661/F:hQS8Q2jsi69","tlshash":"901233269a802505147392759bb72359fd678063c702c1a4bedca7ea9ffafc08c53f84","first_seen":"2026-08-04T01:04:34.639751Z","last_seen":"2026-08-04T01:04:34.639751Z","times_seen":1,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":10,"connect":68,"send":0,"wait":35,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"factiliate.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"factiliate.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"factiliate.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"factiliate.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"factiliate.de/content/js/altcha/de.min.js?v3","fqdn":"factiliate.de","domain":"factiliate.de","tld":"de"},"ip":{"addr":"116.202.21.136","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://factiliate.de/","date":"2026-08-04T01:04:02.679Z","timestamp":1785805442679,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.factiliate.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 23:30:58 GMT","end":"Fri, 11 Sep 2026 23:30:57 GMT"},"fingerprint":{"sha1":"60:9C:71:EE:43:B8:85:0B:C4:BB:EE:18:55:DF:80:B1:38:7B:FD:5E","sha256":"37:78:9E:C8:CC:1F:F4:CE:92:E7:DE:8F:14:A3:DC:A6:11:32:DB:93:B7:73:0B:8A:91:0A:3F:43:96:B1:B5:61"}}},"request":{"raw":"GET /content/js/altcha/de.min.js?v3 HTTP/1.1\r\nHost: factiliate.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://factiliate.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Tue, 04 Aug 2026 01:03:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 993\r\nlast-modified: Mon, 13 Apr 2026 11:45:18 GMT\r\netag: \"69dcd74e-3e1\"\r\nexpires: Sun, 31 Jan 2027 01:03:59 GMT\r\ncache-control: max-age=15552000, public, no-transform\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":993,"size_decoded":1319,"mime_type":"application/javascript; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"73bf7f4b45a6414858a666dd75371200","sha1":"2c3fd85405000847b7037e3480aec7b8429b0756","sha256":"d80f019c6b00cde8822e369faa3518b3b111aed268e36e1670531ca3fd8d3ff3","sha512":"592c34fe170dfc06492370c727b6b27a5b5ea152f7858b516a02f99ff0eb42063d0a7130581abd51fe23bc045f221412f293c2d0a1ffacfa6643799479e4bd17","ssdeep":"","tlshash":"4d11e5f3a8d3418b19819b45310b0ab1778571bb175c7135d36cc673e98e16722b21bd","first_seen":"2026-06-06T04:24:26.084409Z","last_seen":"2026-08-04T03:40:02.510454Z","times_seen":11,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"factiliate.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"factiliate.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"factiliate.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"factiliate.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"my.do.de/assets/img/businesscards/example-logo.png","fqdn":"my.do.de","domain":"do.de","tld":"de"},"ip":{"addr":"95.128.200.228","port":443,"asn":33828,"as":"iptoX GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://factiliate.de/","date":"2026-08-04T01:04:02.872Z","timestamp":1785805442872,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"do.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:47:03 GMT","end":"Sun, 18 Oct 2026 23:47:02 GMT"},"fingerprint":{"sha1":"19:92:DD:7E:CF:9D:33:67:3A:DB:10:1F:94:5C:34:37:D6:65:9B:63","sha256":"44:58:46:97:A3:DF:06:2C:A2:70:F0:ED:9F:43:78:67:47:56:6A:2D:84:17:2A:F7:E8:9B:1E:8E:6D:8D:28:3C"}}},"request":{"raw":"GET /assets/img/businesscards/example-logo.png HTTP/1.1\r\nHost: my.do.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://factiliate.de/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 04 Aug 2026 01:04:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 12073\r\nlast-modified: Thu, 20 Mar 2025 09:01:32 GMT\r\netag: \"67dbd96c-2f29\"\r\nexpires: Thu, 03 Sep 2026 01:04:02 GMT\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12073,"size_decoded":12379,"mime_type":"image/png","magic":"PNG image data, 300 x 289, 8-bit colormap, non-interlaced","md5":"5c97dce443eb438cd5097b31c6890161","sha1":"388563f84696e2fa57e2ccf0adf2fbb9fb11b2e4","sha256":"7996d757a14cf6bbcd75700c583bac15b7f12f74db346d5dcc860e00c9f46ac5","sha512":"23ed9f71f3f0418f8ebb01d6a12cfb9dfc886200cd629d4a2b819ce4d82799b7a872c420e62ae927ab438ce856e12295ec8868425b6a25998ec6599944272bc6","ssdeep":"192:MBSIcTnYson5+Ggus7ZOTtSFYw3tA7zccqilGmdEAfii2SGO/hlKJkk1M+uzi:MovTm5+n7ZcsGw3t5cqO4Ax2SMv+bzi","tlshash":"fb42cf5ffc655f7409a178d1650402ca4faf3ecb2842721ea05838710773beb9d25a31","first_seen":"2026-07-14T02:37:01.200891Z","last_seen":"2026-08-04T03:40:02.504047Z","times_seen":5,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":8,"connect":26,"send":0,"wait":51,"receive":0,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"factiliate.de/content/card/images/ocean-gruen.jpg","fqdn":"factiliate.de","domain":"factiliate.de","tld":"de"},"ip":{"addr":"116.202.21.136","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://factiliate.de/","date":"2026-08-04T01:04:02.882Z","timestamp":1785805442882,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.factiliate.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 23:30:58 GMT","end":"Fri, 11 Sep 2026 23:30:57 GMT"},"fingerprint":{"sha1":"60:9C:71:EE:43:B8:85:0B:C4:BB:EE:18:55:DF:80:B1:38:7B:FD:5E","sha256":"37:78:9E:C8:CC:1F:F4:CE:92:E7:DE:8F:14:A3:DC:A6:11:32:DB:93:B7:73:0B:8A:91:0A:3F:43:96:B1:B5:61"}}},"request":{"raw":"GET /content/card/images/ocean-gruen.jpg HTTP/1.1\r\nHost: factiliate.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://factiliate.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Tue, 04 Aug 2026 01:03:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 345744\r\nlast-modified: Wed, 12 Jun 2024 06:49:56 GMT\r\netag: \"66694514-54690\"\r\nexpires: Sun, 31 Jan 2027 01:03:59 GMT\r\ncache-control: max-age=15552000, public, no-transform\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":345744,"size_decoded":346048,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3","md5":"5154b67cfd5c15a77c8c0a30ea868b6d","sha1":"c219f4fcb7b1d18b09edb722dd8f4dd9f8a5e871","sha256":"86f5f791133f3b32488e02d673c0342e199f8c2b3b9507024a57158bcd5b08e9","sha512":"0eba9f1a0bb37df5e46ce69f5278d2d9b7ad1ddc2b11362e6c2d1af85f2590ff113c0f48977bddfb701b497e7dd3e67335f0813c4a59589e6c050e10cb6881c8","ssdeep":"6144:54TZYdku40aCelWXMk1++aRnreoYylwlG3l8hJ7o2etSSHnhUohHVojCMn:54Taauls+ah1YSkGiz7oT1z1ojCMn","tlshash":"0274239094995391cc4e303b68db598e838ffad217a89f66db261c01e3d687f78dad04","first_seen":"2026-07-14T02:37:01.203751Z","last_seen":"2026-08-04T03:40:02.513285Z","times_seen":5,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"factiliate.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"factiliate.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"factiliate.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"factiliate.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"factiliate.de/content/card/fonts/FontAwesome/css/all.min.css","fqdn":"factiliate.de","domain":"factiliate.de","tld":"de"},"ip":{"addr":"116.202.21.136","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://factiliate.de/","date":"2026-08-04T01:04:02.677Z","timestamp":1785805442677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.factiliate.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 23:30:58 GMT","end":"Fri, 11 Sep 2026 23:30:57 GMT"},"fingerprint":{"sha1":"60:9C:71:EE:43:B8:85:0B:C4:BB:EE:18:55:DF:80:B1:38:7B:FD:5E","sha256":"37:78:9E:C8:CC:1F:F4:CE:92:E7:DE:8F:14:A3:DC:A6:11:32:DB:93:B7:73:0B:8A:91:0A:3F:43:96:B1:B5:61"}}},"request":{"raw":"GET /content/card/fonts/FontAwesome/css/all.min.css HTTP/1.1\r\nHost: factiliate.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://factiliate.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Tue, 04 Aug 2026 01:03:59 GMT\r\ncontent-type: text/css\r\ncontent-length: 58935\r\nlast-modified: Wed, 12 Jun 2024 06:49:56 GMT\r\netag: \"66694514-e637\"\r\nexpires: Sun, 31 Jan 2027 01:03:59 GMT\r\ncache-control: max-age=15552000, public, no-transform\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58935,"size_decoded":59235,"mime_type":"text/css","magic":"ASCII text, with very long lines (58749)","md5":"84d8ad2b4fcdc0f0c58247e778133b3a","sha1":"6f33eae92d42fe209167139940a0ad6a3c6c167e","sha256":"14cbd9b866a9b092e3a2e03a93b128da5baca005fd8b44a1956146eaab7b48b7","sha512":"d4f28e808639f7127c0a8f3e344e8567e2ce0192a3cbe298f22ab41b80770b2798eb0607377cadf4f5b45e94ab8959643177b8d0f4ca9d7acb9d9f7e7e40daa2","ssdeep":"768:qEC31IPiyXNq4/xBowbHJmkwFR/sMQyYJYX9BftF5Qzl:qEPPxXE4/XJH8dF+fy9ltkB","tlshash":"cc43fbb8e54c01c9b731c44bef81b2bc61baf73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-05T18:11:28Z","last_seen":"2026-08-07T16:41:13.486889Z","times_seen":9474,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"factiliate.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"factiliate.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"factiliate.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"factiliate.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"factiliate.de/content/js/altcha/altcha.min.js?v3","fqdn":"factiliate.de","domain":"factiliate.de","tld":"de"},"ip":{"addr":"116.202.21.136","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://factiliate.de/","date":"2026-08-04T01:04:02.678Z","timestamp":1785805442678,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.factiliate.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 23:30:58 GMT","end":"Fri, 11 Sep 2026 23:30:57 GMT"},"fingerprint":{"sha1":"60:9C:71:EE:43:B8:85:0B:C4:BB:EE:18:55:DF:80:B1:38:7B:FD:5E","sha256":"37:78:9E:C8:CC:1F:F4:CE:92:E7:DE:8F:14:A3:DC:A6:11:32:DB:93:B7:73:0B:8A:91:0A:3F:43:96:B1:B5:61"}}},"request":{"raw":"GET /content/js/altcha/altcha.min.js?v3 HTTP/1.1\r\nHost: factiliate.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://factiliate.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Tue, 04 Aug 2026 01:03:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 110188\r\nlast-modified: Mon, 13 Apr 2026 11:45:18 GMT\r\netag: \"69dcd74e-1ae6c\"\r\nexpires: Sun, 31 Jan 2027 01:03:59 GMT\r\ncache-control: max-age=15552000, public, no-transform\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":110188,"size_decoded":110519,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0e11c3c39ee4874c2d56543416ab864f","sha1":"767b3335b0243dc9ef800899cac751e1c6faea32","sha256":"895f5a00c31b511353a7e69da8fc66c96178f1049d99723a631ea78f50ae197c","sha512":"eecb08c403201b12f161c7d9f52bb7e23221e99754a85f5299ca6827bef6a32dfc880820834ef872fd0949f6db3adae7e309c61f616607ac44a0de2d3b761420","ssdeep":"1536:5lcsUSCxm9Zxo0MdRiTOETNHhzIwPSP9IVry+pFAL/vkAV7c4:5/USSm9no0MPSOJwSmogIg4","tlshash":"95b31a713d01a13562731baa52ef0205f335625978168138ba6eecc677af9f491f3e38","first_seen":"2026-06-06T04:24:26.110554Z","last_seen":"2026-08-04T03:40:02.517784Z","times_seen":11,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"factiliate.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"factiliate.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"factiliate.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"factiliate.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"factiliate.de/content/card/js/card_layout_a.js","fqdn":"factiliate.de","domain":"factiliate.de","tld":"de"},"ip":{"addr":"116.202.21.136","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://factiliate.de/","date":"2026-08-04T01:04:02.860Z","timestamp":1785805442860,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.factiliate.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 23:30:58 GMT","end":"Fri, 11 Sep 2026 23:30:57 GMT"},"fingerprint":{"sha1":"60:9C:71:EE:43:B8:85:0B:C4:BB:EE:18:55:DF:80:B1:38:7B:FD:5E","sha256":"37:78:9E:C8:CC:1F:F4:CE:92:E7:DE:8F:14:A3:DC:A6:11:32:DB:93:B7:73:0B:8A:91:0A:3F:43:96:B1:B5:61"}}},"request":{"raw":"GET /content/card/js/card_layout_a.js HTTP/1.1\r\nHost: factiliate.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://factiliate.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Tue, 04 Aug 2026 01:03:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 543\r\nlast-modified: Wed, 12 Jun 2024 06:49:56 GMT\r\netag: \"66694514-21f\"\r\nexpires: Sun, 31 Jan 2027 01:03:59 GMT\r\ncache-control: max-age=15552000, public, no-transform\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":543,"size_decoded":869,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"03403ad558ba43d8967b0b8dfdd45370","sha1":"2a98ecbd1ab564b463d90c87711556325b611b23","sha256":"e47b67cc7b7729b051275910efcd4bc3b86e11b21db39a6d68930e0b86509a91","sha512":"93c05f46bb910175075ea7c52ddc6ceaf8757b3fc60b732a051f0063e16ce2009f0d7d3fe59d2a6be3185cc6a08f2bd50f638680e4cf9630f44dc883feb760e7","ssdeep":"","tlshash":"14f0969f3de10c308cff69bb157de398353a54491806dd41d61c8694dd90e9f0a2fd45","first_seen":"2026-07-14T02:37:01.212232Z","last_seen":"2026-08-04T03:40:02.512005Z","times_seen":5,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"factiliate.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"factiliate.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"factiliate.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-04","alert":"Phishing Block","trigger":"factiliate.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}