{"report_id":"3bf02af5-bb21-47eb-9d0c-af64d581dbe3","version":0,"status":"done","tags":[],"date":"2026-09-25T08:09:39Z","url":{"schema":"http","addr":"vodafone-staging-alt.voltsystems.de/","fqdn":"vodafone-staging-alt.voltsystems.de","domain":"voltsystems.de","tld":"de"},"ip":{"addr":"85.13.166.85","port":0,"asn":34788,"as":"Neue Medien Muennich GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"vodafone-staging-alt.voltsystems.de/","fqdn":"vodafone-staging-alt.voltsystems.de","domain":"voltsystems.de","tld":"de"},"title":"Vodafone Forms","dom":{"size":6611,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"19243f5b61c4d775c3557a0a2cd4b194","sha1":"38888368e66c8c747101a1d1727e7538b5899102","sha256":"0f71aabcfe1261dc7da373a5f7422a1f6d39cf5f5619b650989a50558ebedbe7","sha512":"af3a6947445eb87da6a881f80f48df31c3aa5775cd07ef82fe2d26a0c852e568651fb830c46a9d85581085724e9184fb17e3da968161aac573484655ea9236b9","ssdeep":"96:nY7/4oNcCz4Vbcb6zXGIZITY15fruKs6MZVTIllfJ1g:YyCz4NcbMXGIZITY15f6Ks6MZUH1g","tlshash":"55d1421564f339123053d9b82fe99a07afa9c103c50acd5939ac22989fcbf468db3758","dom_hash":"domhashac16d0542df531301e44571344badfec","first_seen":"2026-09-25T08:06:58.431344Z","last_seen":"2026-09-25T08:09:41.373272Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"vodafone-staging-alt.voltsystems.de/","fqdn":"vodafone-staging-alt.voltsystems.de","domain":"voltsystems.de","tld":"de"},"ip":{"addr":"85.13.166.85","port":0,"asn":34788,"as":"Neue Medien Muennich GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-30T08:09:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"vodafone-staging-alt.voltsystems.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"vodafone-staging-alt.voltsystems.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"vodafone-staging-alt.voltsystems.de","ip":{"addr":"85.13.166.85","port":443,"asn":34788,"as":"Neue Medien Muennich GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-25T08:06:54.357991Z","last_seen":"2026-09-25T08:06:54.357991Z","alert_count":16,"request_count":8,"received_data":1078449,"sent_data":4610,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"vodafone-staging-alt.voltsystems.de/","fqdn":"vodafone-staging-alt.voltsystems.de","domain":"voltsystems.de","tld":"de"},"ip":{"addr":"85.13.166.85","port":443,"asn":34788,"as":"Neue Medien Muennich GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"a55269ee8c1fdae3d95ccfc294055a75","sha1":"fa04f8c246f65eab89b34957570e5da8de027be1","sha256":"1a8863e2c4007780453d826f9a44265ee2235b368836c64d149dd74bf08649cf","sha512":"c35061db0f36d4e280b12f0348aedab65cccf6ca1ec787149e6e5efe0c12ffc61b1138742559f2408ac5f4d827dd694b8011a6810f912883abe8b1fc1b31ef23","ssdeep":"","tlshash":"91e0a90c309325b02f23607a676f100bb0a06603040ee413764c328e9f6116e519a9ec","size":338,"data":"","first_seen":"2026-09-25T08:06:58.441001Z","last_seen":"2026-09-25T08:09:41.379053Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"vodafone-staging-alt.voltsystems.de/favicon.ico","fqdn":"vodafone-staging-alt.voltsystems.de","domain":"voltsystems.de","tld":"de"},"ip":{"addr":"85.13.166.85","port":443,"asn":34788,"as":"Neue Medien Muennich GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vodafone-staging-alt.voltsystems.de/","date":"2026-09-25T08:09:10.974Z","timestamp":1790323750974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vodafone-staging-alt.voltsystems.de","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:08:57 GMT","end":"Fri, 18 Dec 2026 23:08:56 GMT"},"fingerprint":{"sha1":"C9:83:8C:B8:CE:42:C5:C5:A1:EB:F4:27:50:AB:B0:0B:B0:54:90:6D","sha256":"07:BF:0C:ED:C9:9B:90:AF:1C:7D:AF:C3:B0:DD:C1:5B:11:F1:10:62:FC:12:B9:DC:F7:2C:CC:6D:C3:27:5F:44"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: vodafone-staging-alt.voltsystems.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vodafone-staging-alt.voltsystems.de/\r\nCookie: PHPSESSID=665f19fdcd2b935ba02ece6724ae21ae\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sat, 20 Mar 2021 23:00:00 GMT\r\netag: \"10be-5bdffcac87c00\"\r\naccept-ranges: bytes\r\ncontent-length: 4286\r\nvary: User-Agent\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"default\",\"max_age\":31536000,\"endpoints\":[{\"url\":\"https://135999d6ab3ff242348f659ddd48bd69.report-uri.com/a/d/g\"}],\"include_subdomains\":true}\r\nx-content-type-options: nosniff\r\ncontent-type: image/x-icon\r\ndate: Fri, 25 Sep 2026 08:09:10 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":4869,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"2bffab495b136649a1b83672e7c89ec8","sha1":"ddd477380e1784bfe096e89b100fd93fa7bee83d","sha256":"65ce85c282ba6be09c4ec4a061e732fc4b5b3911e7bcadde22e718e5c1d9e754","sha512":"bf0d18911b40b17fcfb11bce5a8ecb03732b98457f0956f554f35a161bef8e3f47619f6ad4e45fb3c07bb88aa7cf2133da7fc96003c765616ebdbaade2ca26d4","ssdeep":"24:suopmqCl0dcZNbJzk053M7JlzaqyjdyRGGclXwwlbYMSeO5qR545FU/tm8mNV:hrZNdIJJczjdUG3lXwaEMSeoq/V1XCV","tlshash":"e19189026a4cac77e60d1b714127af97af3a8e77c23216053a527d1f397a14f5d22543","first_seen":"2026-09-25T08:06:58.438442Z","last_seen":"2026-09-25T08:09:41.37409Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"vodafone-staging-alt.voltsystems.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"vodafone-staging-alt.voltsystems.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vodafone-staging-alt.voltsystems.de/","fqdn":"vodafone-staging-alt.voltsystems.de","domain":"voltsystems.de","tld":"de"},"ip":{"addr":"85.13.166.85","port":443,"asn":34788,"as":"Neue Medien Muennich GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-25T08:09:10.415Z","timestamp":1790323750415,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vodafone-staging-alt.voltsystems.de","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:08:57 GMT","end":"Fri, 18 Dec 2026 23:08:56 GMT"},"fingerprint":{"sha1":"C9:83:8C:B8:CE:42:C5:C5:A1:EB:F4:27:50:AB:B0:0B:B0:54:90:6D","sha256":"07:BF:0C:ED:C9:9B:90:AF:1C:7D:AF:C3:B0:DD:C1:5B:11:F1:10:62:FC:12:B9:DC:F7:2C:CC:6D:C3:27:5F:44"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vodafone-staging-alt.voltsystems.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nset-cookie: PHPSESSID=665f19fdcd2b935ba02ece6724ae21ae; path=/; samesite=strict; secure; HttpOnly\r\nvary: User-Agent\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"default\",\"max_age\":31536000,\"endpoints\":[{\"url\":\"https://135999d6ab3ff242348f659ddd48bd69.report-uri.com/a/d/g\"}],\"include_subdomains\":true}\r\nx-content-type-options: nosniff\r\ncontent-type: text/html\r\ndate: Fri, 25 Sep 2026 08:09:10 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"665f19fdcd2b935ba02ece6724ae21ae","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"Strict","partitioned":false,"raw":"PHPSESSID=665f19fdcd2b935ba02ece6724ae21ae; path=/; samesite=strict; secure; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6633,"size_decoded":7331,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"5576d4d2a13492214337a9277541ee7d","sha1":"180a47fef3623df642f01ede1a8b93ba2d1f9464","sha256":"ef4351930f0f26146ee9dba8a6469ab790d01738293ecfa61b96718753a0cec3","sha512":"3b0f93c9cf5bdbc9bd6790a3e0494ac0056420708251c43ce70d46f9272418c7cd3f11305787c167f95d6b5473118cd250c1bd22eec9a082a0bb6d5a766e5bdd","ssdeep":"96:d7hoNcCz4Vbcb6zXGIZITY15fruKs6MZVTIllfJ1S:d7Cz4NcbMXGIZITY15f6Ks6MZUH1S","tlshash":"7fd1421564f338123043d9b82fd99a07afa5c103c54acd5939ac23889fcaf458db3758","first_seen":"2026-09-25T08:06:58.432602Z","last_seen":"2026-09-25T08:09:41.374839Z","times_seen":2,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":25,"connect":22,"send":0,"wait":48,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"vodafone-staging-alt.voltsystems.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"vodafone-staging-alt.voltsystems.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vodafone-staging-alt.voltsystems.de/lte3/plugins/fontawesome-free/css/all.min.css","fqdn":"vodafone-staging-alt.voltsystems.de","domain":"voltsystems.de","tld":"de"},"ip":{"addr":"85.13.166.85","port":443,"asn":34788,"as":"Neue Medien Muennich GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vodafone-staging-alt.voltsystems.de/","date":"2026-09-25T08:09:10.715Z","timestamp":1790323750715,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vodafone-staging-alt.voltsystems.de","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:08:57 GMT","end":"Fri, 18 Dec 2026 23:08:56 GMT"},"fingerprint":{"sha1":"C9:83:8C:B8:CE:42:C5:C5:A1:EB:F4:27:50:AB:B0:0B:B0:54:90:6D","sha256":"07:BF:0C:ED:C9:9B:90:AF:1C:7D:AF:C3:B0:DD:C1:5B:11:F1:10:62:FC:12:B9:DC:F7:2C:CC:6D:C3:27:5F:44"}}},"request":{"raw":"GET /lte3/plugins/fontawesome-free/css/all.min.css HTTP/1.1\r\nHost: vodafone-staging-alt.voltsystems.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vodafone-staging-alt.voltsystems.de/\r\nCookie: PHPSESSID=665f19fdcd2b935ba02ece6724ae21ae\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 29 Nov 2023 21:28:14 GMT\r\netag: \"190f1-60b5136729780\"\r\naccept-ranges: bytes\r\ncontent-length: 102641\r\nvary: User-Agent\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"default\",\"max_age\":31536000,\"endpoints\":[{\"url\":\"https://135999d6ab3ff242348f659ddd48bd69.report-uri.com/a/d/g\"}],\"include_subdomains\":true}\r\nx-content-type-options: nosniff\r\ncontent-type: text/css\r\ndate: Fri, 25 Sep 2026 08:09:10 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102641,"size_decoded":103223,"mime_type":"text/css","magic":"ASCII text, with very long lines (52276)","md5":"9402848c3d4bbc710c764326f8b887c9","sha1":"b6e555166eb1381392e00adcde9bf8863f16ff01","sha256":"c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7","sha512":"0d33903bd456087de9a46a9c59a100d41219382eb1c5a97012cc3d73641078021fb65f957a0a2f96779ed5cf505f84dcb6758c9f5dd36727be822326f1ed8bc0","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgSLCJ:O709gMGFiyPG9ZiSLCJ","tlshash":"79a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-09-25T10:05:34.533332Z","times_seen":36580,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"vodafone-staging-alt.voltsystems.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"vodafone-staging-alt.voltsystems.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vodafone-staging-alt.voltsystems.de/css/login.css?v=0.32","fqdn":"vodafone-staging-alt.voltsystems.de","domain":"voltsystems.de","tld":"de"},"ip":{"addr":"85.13.166.85","port":443,"asn":34788,"as":"Neue Medien Muennich GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vodafone-staging-alt.voltsystems.de/","date":"2026-09-25T08:09:10.720Z","timestamp":1790323750720,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vodafone-staging-alt.voltsystems.de","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:08:57 GMT","end":"Fri, 18 Dec 2026 23:08:56 GMT"},"fingerprint":{"sha1":"C9:83:8C:B8:CE:42:C5:C5:A1:EB:F4:27:50:AB:B0:0B:B0:54:90:6D","sha256":"07:BF:0C:ED:C9:9B:90:AF:1C:7D:AF:C3:B0:DD:C1:5B:11:F1:10:62:FC:12:B9:DC:F7:2C:CC:6D:C3:27:5F:44"}}},"request":{"raw":"GET /css/login.css?v=0.32 HTTP/1.1\r\nHost: vodafone-staging-alt.voltsystems.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vodafone-staging-alt.voltsystems.de/\r\nCookie: PHPSESSID=665f19fdcd2b935ba02ece6724ae21ae\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 03 Jul 2025 08:11:45 GMT\r\netag: \"988-63901eda49240\"\r\naccept-ranges: bytes\r\ncontent-length: 2440\r\nvary: User-Agent\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"default\",\"max_age\":31536000,\"endpoints\":[{\"url\":\"https://135999d6ab3ff242348f659ddd48bd69.report-uri.com/a/d/g\"}],\"include_subdomains\":true}\r\nx-content-type-options: nosniff\r\ncontent-type: text/css\r\ndate: Fri, 25 Sep 2026 08:09:10 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2440,"size_decoded":3018,"mime_type":"text/css","magic":"ASCII text","md5":"6948d424b9a8a895174dffb3b2264e82","sha1":"bd445b912e2d28debbfce597186e4e12d877f2b9","sha256":"c562f2ee0a8648887a794836e4c7783446b52c499a699ffc4a97e1a4ec95473b","sha512":"13e5709edef5fbd0942bd2015541cf70f369f81539eca63a8eae722f6a3ed1c7fdea8ba3351d73d50228ead56c64cc9278616f0d61356db0f8747ec3c3c6d986","ssdeep":"","tlshash":"5a510e7ebd7a090d312ac8856ba1fee323692503c19bc96676c4307c7f09ecc4c62a48","first_seen":"2026-09-25T08:06:58.435632Z","last_seen":"2026-09-25T08:09:41.376166Z","times_seen":2,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"vodafone-staging-alt.voltsystems.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"vodafone-staging-alt.voltsystems.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vodafone-staging-alt.voltsystems.de/lte3/dist/css/adminlte.css","fqdn":"vodafone-staging-alt.voltsystems.de","domain":"voltsystems.de","tld":"de"},"ip":{"addr":"85.13.166.85","port":443,"asn":34788,"as":"Neue Medien Muennich GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vodafone-staging-alt.voltsystems.de/","date":"2026-09-25T08:09:10.717Z","timestamp":1790323750717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vodafone-staging-alt.voltsystems.de","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:08:57 GMT","end":"Fri, 18 Dec 2026 23:08:56 GMT"},"fingerprint":{"sha1":"C9:83:8C:B8:CE:42:C5:C5:A1:EB:F4:27:50:AB:B0:0B:B0:54:90:6D","sha256":"07:BF:0C:ED:C9:9B:90:AF:1C:7D:AF:C3:B0:DD:C1:5B:11:F1:10:62:FC:12:B9:DC:F7:2C:CC:6D:C3:27:5F:44"}}},"request":{"raw":"GET /lte3/dist/css/adminlte.css HTTP/1.1\r\nHost: vodafone-staging-alt.voltsystems.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vodafone-staging-alt.voltsystems.de/\r\nCookie: PHPSESSID=665f19fdcd2b935ba02ece6724ae21ae\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sat, 20 Mar 2021 23:00:00 GMT\r\netag: \"bbd3a-5bdffcac87c00\"\r\naccept-ranges: bytes\r\ncontent-length: 769338\r\nvary: User-Agent\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"default\",\"max_age\":31536000,\"endpoints\":[{\"url\":\"https://135999d6ab3ff242348f659ddd48bd69.report-uri.com/a/d/g\"}],\"include_subdomains\":true}\r\nx-content-type-options: nosniff\r\ncontent-type: text/css\r\ndate: Fri, 25 Sep 2026 08:09:10 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":769338,"size_decoded":769920,"mime_type":"text/css","magic":"ASCII text, with very long lines (624)","md5":"a040c8370fdd6f9e1306f3fdf2243eae","sha1":"b0231431a1d2415b1a6cc4562b5addf2a332e519","sha256":"5df2b2e51a8c3990e15ea9d2db9287c8510cd1e2e0de43c088da42998b675824","sha512":"b14219fa92fb5b85d28c69cd5d89530ba47ae355189e1c024bec7d722f619a46c498ecd0bad5aa6e48c7d0b927b2c439481aae5a8cbf6efd1dbe4be0275488a6","ssdeep":"6144:z2zUmvdu/zDL4iDF4GYjNrA7KPR05nNWWz8DwaVdOZeW9pOp+NH2ssgExfhEWAaI:SUmvJ3vcGqBsT9qyyZRSE","tlshash":"31f4a55cb6f13834706f486e68e4e970ab1f84c9c1198fbe77b7612c9b8c2855837d86","first_seen":"2026-09-25T08:06:58.43993Z","last_seen":"2026-09-25T08:09:41.376818Z","times_seen":2,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"vodafone-staging-alt.voltsystems.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"vodafone-staging-alt.voltsystems.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vodafone-staging-alt.voltsystems.de/css/custom3.css","fqdn":"vodafone-staging-alt.voltsystems.de","domain":"voltsystems.de","tld":"de"},"ip":{"addr":"85.13.166.85","port":443,"asn":34788,"as":"Neue Medien Muennich GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vodafone-staging-alt.voltsystems.de/","date":"2026-09-25T08:09:10.718Z","timestamp":1790323750718,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vodafone-staging-alt.voltsystems.de","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:08:57 GMT","end":"Fri, 18 Dec 2026 23:08:56 GMT"},"fingerprint":{"sha1":"C9:83:8C:B8:CE:42:C5:C5:A1:EB:F4:27:50:AB:B0:0B:B0:54:90:6D","sha256":"07:BF:0C:ED:C9:9B:90:AF:1C:7D:AF:C3:B0:DD:C1:5B:11:F1:10:62:FC:12:B9:DC:F7:2C:CC:6D:C3:27:5F:44"}}},"request":{"raw":"GET /css/custom3.css HTTP/1.1\r\nHost: vodafone-staging-alt.voltsystems.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vodafone-staging-alt.voltsystems.de/\r\nCookie: PHPSESSID=665f19fdcd2b935ba02ece6724ae21ae\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 03 Apr 2025 19:32:10 GMT\r\netag: \"2c48-631e4d3718280\"\r\naccept-ranges: bytes\r\ncontent-length: 11336\r\nvary: User-Agent\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"default\",\"max_age\":31536000,\"endpoints\":[{\"url\":\"https://135999d6ab3ff242348f659ddd48bd69.report-uri.com/a/d/g\"}],\"include_subdomains\":true}\r\nx-content-type-options: nosniff\r\ncontent-type: text/css\r\ndate: Fri, 25 Sep 2026 08:09:10 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11336,"size_decoded":11916,"mime_type":"text/css","magic":"ASCII text","md5":"f26921641b0d8ae0ad6af96748a3d518","sha1":"1204635f10c457056d6d0fae5a00f16b0ab8eae6","sha256":"df4215e6f6d679ebb2a5bf2b9b3ab8e1eed42f990bcd4171e8c8b9563132b535","sha512":"6028c9b0e11840feae198705fa037dc757c938d3ce69ac35d7efd9b6c4a9f3f484097680b64c988cf46c7064448237f13045335f66ec37be0bac11f23540b273","ssdeep":"192:yKR2T4cvU1D3Fq0TIfeYuNqykMqWmtWNia1TtWaUAHMSLsPfeNXXJHFiAYDJ8bN3:XRm4c6D3FPBotEFBthnJ","tlshash":"ea32eeb6f9e20d0670ce866d65e5e5c1634e30c3c10e8e3ef76163694f86e864839d8b","first_seen":"2026-09-25T08:06:58.434419Z","last_seen":"2026-09-25T08:09:41.377348Z","times_seen":2,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"vodafone-staging-alt.voltsystems.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"vodafone-staging-alt.voltsystems.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vodafone-staging-alt.voltsystems.de/img/vodafone.png","fqdn":"vodafone-staging-alt.voltsystems.de","domain":"voltsystems.de","tld":"de"},"ip":{"addr":"85.13.166.85","port":443,"asn":34788,"as":"Neue Medien Muennich GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vodafone-staging-alt.voltsystems.de/","date":"2026-09-25T08:09:10.728Z","timestamp":1790323750728,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vodafone-staging-alt.voltsystems.de","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:08:57 GMT","end":"Fri, 18 Dec 2026 23:08:56 GMT"},"fingerprint":{"sha1":"C9:83:8C:B8:CE:42:C5:C5:A1:EB:F4:27:50:AB:B0:0B:B0:54:90:6D","sha256":"07:BF:0C:ED:C9:9B:90:AF:1C:7D:AF:C3:B0:DD:C1:5B:11:F1:10:62:FC:12:B9:DC:F7:2C:CC:6D:C3:27:5F:44"}}},"request":{"raw":"GET /img/vodafone.png HTTP/1.1\r\nHost: vodafone-staging-alt.voltsystems.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vodafone-staging-alt.voltsystems.de/\r\nCookie: PHPSESSID=665f19fdcd2b935ba02ece6724ae21ae\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sat, 20 Mar 2021 23:00:00 GMT\r\netag: \"5043-5bdffcac87c00\"\r\naccept-ranges: bytes\r\ncontent-length: 20547\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"default\",\"max_age\":31536000,\"endpoints\":[{\"url\":\"https://135999d6ab3ff242348f659ddd48bd69.report-uri.com/a/d/g\"}],\"include_subdomains\":true}\r\nx-content-type-options: nosniff\r\ncontent-type: image/png\r\ndate: Fri, 25 Sep 2026 08:09:10 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":20547,"size_decoded":21110,"mime_type":"image/png","magic":"PNG image data, 200 x 270, 8-bit/color RGBA, non-interlaced","md5":"531fb8a011f776f54b9fd17cabf31b96","sha1":"688b63e53b2dcc7e99795c958fbea93a0ffb39f4","sha256":"ed40b64e82a4a32371a157ff1579c98f00c84594d0bcf452d6f732a7cb7f592a","sha512":"adc70c868aa1ac99f9901bd0102743073fe764d9fd727744db01b96bd600c153324350afd4ccb0b7bb2e6360117b0c25970a1031a94d496d4d08dacadd4e5e0e","ssdeep":"384:SOVzkpDEiUm78ggA8YdWCjhA6I5ImmiCXjfB6lMvBkXJ7BuSNjheTDgnyJO28v/U:KpARm9ghYvjhy5gXjf3vO5BuS1KeyJwU","tlshash":"0e92e1c1d95a5b6da56b534336d37eec010f1b3e09a67c1d8cd1ea05fce5c041aac913","first_seen":"2026-09-25T08:06:58.436566Z","last_seen":"2026-09-25T08:09:41.377949Z","times_seen":2,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"vodafone-staging-alt.voltsystems.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"vodafone-staging-alt.voltsystems.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vodafone-staging-alt.voltsystems.de/lte3/plugins/fontawesome-free/webfonts/fa-solid-900.woff2","fqdn":"vodafone-staging-alt.voltsystems.de","domain":"voltsystems.de","tld":"de"},"ip":{"addr":"85.13.166.85","port":443,"asn":34788,"as":"Neue Medien Muennich GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vodafone-staging-alt.voltsystems.de/","date":"2026-09-25T08:09:10.941Z","timestamp":1790323750941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vodafone-staging-alt.voltsystems.de","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:08:57 GMT","end":"Fri, 18 Dec 2026 23:08:56 GMT"},"fingerprint":{"sha1":"C9:83:8C:B8:CE:42:C5:C5:A1:EB:F4:27:50:AB:B0:0B:B0:54:90:6D","sha256":"07:BF:0C:ED:C9:9B:90:AF:1C:7D:AF:C3:B0:DD:C1:5B:11:F1:10:62:FC:12:B9:DC:F7:2C:CC:6D:C3:27:5F:44"}}},"request":{"raw":"GET /lte3/plugins/fontawesome-free/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: vodafone-staging-alt.voltsystems.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vodafone-staging-alt.voltsystems.de/lte3/plugins/fontawesome-free/css/all.min.css\r\nCookie: PHPSESSID=665f19fdcd2b935ba02ece6724ae21ae\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 29 Nov 2023 21:28:14 GMT\r\netag: \"26350-60b5136729780\"\r\naccept-ranges: bytes\r\ncontent-length: 156496\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"default\",\"max_age\":31536000,\"endpoints\":[{\"url\":\"https://135999d6ab3ff242348f659ddd48bd69.report-uri.com/a/d/g\"}],\"include_subdomains\":true}\r\nx-content-type-options: nosniff\r\ncontent-type: font/woff2\r\ndate: Fri, 25 Sep 2026 08:09:10 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156496,"size_decoded":157062,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 156496, version 773.768","md5":"6c4eee562650e53cee32496bdfbe534b","sha1":"1aae708e3b94ee981b452a918d28ed037fbb5e18","sha256":"9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2","sha512":"ebcb5a2e2a908228f77ecd03b45491778cad73ddc39fa3a6334b129aaf9fa36c16c0307aeaad74d77f616b5b34aac52d91e9f4816945253dc9a826ddd71f4d12","ssdeep":"3072:OvM6gZMLmY8uGpjVnlooQ+GQs8jic0f/KkMdE:OU65LoP5QSsuic0f/cdE","tlshash":"8ce31200d620498d9978fd5b2a1fa1ffa7a939c95ed210bad3c30cb93257143bbc2556","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-09-25T10:21:24.358434Z","times_seen":53514,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"vodafone-staging-alt.voltsystems.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"vodafone-staging-alt.voltsystems.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}