{"report_id":"46c37273-7e35-4a82-97a2-240705b3161b","version":6,"status":"done","tags":[],"date":"2026-02-14T12:04:32Z","url":{"schema":"https","addr":"rr-beratung.com/","fqdn":"rr-beratung.com","domain":"rr-beratung.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"rr-beratung.com/","fqdn":"rr-beratung.com","domain":"rr-beratung.com","tld":"com"},"title":"RR Consulting GmbH | Strategische Unternehmensberatung","dom":{"size":50330,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (33680)","md5":"626dd445af5d9687e5540dcdf676b315","sha1":"694d0c074a7bf8bd146d3f4e6e63dbb35146c863","sha256":"9818d0f2c373438d70a6c8328ee2f0cfc6b6d1c5c7e240927d56403328ead797","sha512":"db062b417c485961e9586476de86960747a4c41d98f26abc516a10f59dbb6438a158fe76493b6129d4ecd67bcce12de81050f99497d8a852cf6520da5e68140d","ssdeep":"1536:VIXx/c64Jysq7vM4TjbwAo8L+d9e6/izslMCfvi:OGUAislMP","tlshash":"0e33d7107048163d9a2f87b8f6d4b33de139e241d667881df25c00e697c3ed69a6bbe4","dom_hash":"domhash96fd0c00f5098e78f34a3b5c5a06b1f8","first_seen":"2026-02-14T12:04:36.98777Z","last_seen":"2026-02-14T12:04:36.98777Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rr-beratung.com/","fqdn":"rr-beratung.com","domain":"rr-beratung.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T12:04:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-14T12:04:11Z","timestamp":1771070651,"ip_dst":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":54044,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2026-02-14T12:04:11.200378+0000\",\"flow_id\":938469224082828,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":54044,\"dest_ip\":\"172.64.149.246\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"rzueiherdepwvxvouucn.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":934,\"bytes_toclient\":3519,\"start\":\"2026-02-14T12:04:11.191884+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-14T12:04:11Z","timestamp":1771070651,"ip_dst":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":54058,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2026-02-14T12:04:11.205197+0000\",\"flow_id\":2179278833446597,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":54058,\"dest_ip\":\"172.64.149.246\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"rzueiherdepwvxvouucn.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3443,\"start\":\"2026-02-14T12:04:11.192197+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":3,"received_data":142173,"sent_data":1654,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rzueiherdepwvxvouucn.supabase.co","ip":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-01-11","domain_rank":0,"first_seen":"2026-02-14T12:04:33.230646Z","last_seen":"2026-02-14T12:04:33.230646Z","alert_count":0,"request_count":2,"received_data":2249,"sent_data":1616,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"rr-beratung.com","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-01-01","domain_rank":0,"first_seen":"2026-02-14T12:04:33.233085Z","last_seen":"2026-02-14T12:04:33.233085Z","alert_count":0,"request_count":8,"received_data":1230202,"sent_data":3724,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":1,"received_data":5887,"sent_data":562,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rr-beratung.com/assets/index-By1h8e9M.js","fqdn":"rr-beratung.com","domain":"rr-beratung.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"190318d5f55ad97cc274965d286f55e9","sha1":"da189c856b534923e5b04beda52c86a56f99a587","sha256":"84f84b6637910d48ab88f79f73bb2c37c7ac83d4270036f4d6085f0aa1c80670","sha512":"0d71f69c96dffbc369408243a9b5b0ec9571b2620a350c940cebd8c4cf07f7bc4f65bbc3d1992cb7aa4f636c2e1541100b00f82f2bdd32a16453f580087e0ee7","ssdeep":"12288:DCm6ZsKo7bhtNeVFyzfvP/lyhUaySPMW+eoSZD2dL1RZtr7+3v:siNeovc0SZD2c/","tlshash":"99157dc4f09575b95ba749e5507f4006b23d2a18f92e8460f07c9caa2ba5506f23bffc","size":905165,"data":"","first_seen":"2026-02-14T12:04:37.002896Z","last_seen":"2026-02-14T12:04:37.002896Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rr-beratung.com/~flock.js","fqdn":"rr-beratung.com","domain":"rr-beratung.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-08-11T02:16:25.884447Z","times_seen":15288,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rr-beratung.com/","date":"2026-02-14T12:04:11.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rr-beratung.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 23:19:09 GMT\r\nexpires: Thu, 11 Feb 2027 23:19:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 218702\r\nlast-modified: Wed, 10 Sep 2025 16:48:54 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38404,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38404, version 1.0","md5":"ef05b30d6e5ca86ef9deda8c5bfa599a","sha1":"daeff530b773fd9ef9c50a803021a2cfba76083a","sha256":"e0c764a8e9e1cce92163c55bac4b2ad6cd4cf8c696ce2289ab5c41565e65b7e2","sha512":"0d5b2444bfe9e47a0665b6f25bf8bb161346888f8e5c49f2b8b4a6c4baacf3cde37a95aa8c3d5800d545fb5e684e3833df41582671073df12b60a42bf8ebb331","ssdeep":"768:FwI4wBedSjX1mVXUjvqnWIiYvffoRgF4vY7Ooy263B1kzEj9SSJxE:aIYdSjX+rWIiYXQRS4iTy2637ky0ExE","tlshash":"0603f1cb9b682138e95f513b0b8b13dd56ad112e9591d9a1821d8c0c96f033e5fff31a","first_seen":"2025-09-11T16:59:11.155785Z","last_seen":"2026-08-11T01:56:40.67116Z","times_seen":66301,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":118,"dns":0,"connect":7,"send":0,"wait":8,"receive":3,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rzueiherdepwvxvouucn.supabase.co/rest/v1/site_settings?select=key%2Cvalue","fqdn":"rzueiherdepwvxvouucn.supabase.co","domain":"rzueiherdepwvxvouucn.supabase.co","tld":"supabase.co"},"ip":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rr-beratung.com/","date":"2026-02-14T12:04:11.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 06:20:04 GMT","end":"Thu, 02 Apr 2026 07:19:59 GMT"},"fingerprint":{"sha1":"53:7B:EA:AA:0A:13:9A:C5:94:1F:F6:35:89:F3:54:70:C4:08:C0:1D","sha256":"2F:FE:D0:12:7B:AB:9D:42:41:69:23:1F:06:96:BF:8E:3C:AB:2F:00:05:7D:6D:EE:4A:C0:18:C3:82:92:61:B4"}}},"request":{"raw":"OPTIONS /rest/v1/site_settings?select=key%2Cvalue HTTP/1.1\r\nHost: rzueiherdepwvxvouucn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: accept-profile,apikey,authorization,x-client-info\r\nReferer: https://rr-beratung.com/\r\nOrigin: https://rr-beratung.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:11 GMT\r\ncontent-length: 0\r\ncf-ray: 9cdc6d3219d375ab-OSL\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\naccess-control-allow-headers: accept-profile,apikey,authorization,x-client-info\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-gateway-version: 1\r\nsb-project-ref: rzueiherdepwvxvouucn\r\nsb-request-id: 019c5c09-7b5c-78aa-b19f-b4ff6758713b\r\nset-cookie: __cf_bm=lxZ.Elm_no2nJBLnxG8zwUA2n8DAjyjEs1_AbAWvnY4-1771070651-1.0.1.1-vOubx8ymj26Zuxl0r.MlDWZ_gOew.h7yoMDqYLROzVm8JtBGc595Df9g56_9VV4XjoBoy0b2p4eHkDg8fHq7SFq1q4kwewe5DAGNVLZYx8o; path=/; expires=Sat, 14-Feb-26 12:34:11 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T02:55:35.911989Z","times_seen":17829037,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":39,"dns":20,"connect":1,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rr-beratung.com/~api/analytics","fqdn":"rr-beratung.com","domain":"rr-beratung.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rr-beratung.com/","date":"2026-02-14T12:04:11.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-beratung.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 07:30:15 GMT","end":"Thu, 02 Apr 2026 08:30:14 GMT"},"fingerprint":{"sha1":"2B:75:CE:C6:12:4F:70:04:BE:65:3A:4F:E2:F0:7C:2E:30:17:A1:67","sha256":"13:C9:5F:ED:C5:51:F0:03:CC:EB:A0:BA:19:71:71:40:88:9B:09:92:1B:08:7B:FF:D8:CF:28:9E:82:D7:C4:DF"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: rr-beratung.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rr-beratung.com/\r\nContent-Type: application/json\r\nContent-Length: 336\r\nOrigin: https://rr-beratung.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session-id=84079201-2d19-4b9d-b7b7-e8b50b3424fc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":336,"data":"{\"timestamp\":\"2026-02-14T12:04:11.240Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"84079201-2d19-4b9d-b7b7-e8b50b3424fc\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://rr-beratung.com/\\\"}\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:12 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=uYIZH9MCQUxANTpnH55m7wKKkyDDMWlYIZkO9A.MoOo-1771070651.2463353-1.0.1.1-zA1RmM.GomuxdF_HxPajkxnhmJxm0gQ4ER.MauwUCXEcZoHqte2WE3Qs3BqOLi__jabUeBEcgpbU6EQf7DGstnJ0eSVSPZ4JauCxbr4wogTC.So3o5Jm.j2Ecl0vb_Oj; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sat, 14 Feb 2026 12:34:12 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9cdc6d324ebe723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f92965e2c8a7afb3c1b9a5c09a263636","sha1":"e9b450d14bc2363d292c84f17cfad5cfbd58a458","sha256":"11a6767d5674c7e45f7e00dc525762275b3a48491ad6045427d2609cc496c516","sha512":"25775ba3c567970fc3df3f8107f2a78a67c5619d54bfb37704423acceec253316949eee77b81100a01b91c742e475b4f6157dd2427a9f9fafd87a4078f2d65df","ssdeep":"","tlshash":"54300000000000000000c00c00000000000000000c0000000000000000000000000000","first_seen":"2023-04-09T18:20:08Z","last_seen":"2026-08-04T21:48:10.819261Z","times_seen":12920,"resource_available":true,"data":null}},"time_used":1232,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rzueiherdepwvxvouucn.supabase.co/rest/v1/site_settings?select=key%2Cvalue","fqdn":"rzueiherdepwvxvouucn.supabase.co","domain":"rzueiherdepwvxvouucn.supabase.co","tld":"supabase.co"},"ip":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rr-beratung.com/","date":"2026-02-14T12:04:11.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 06:20:04 GMT","end":"Thu, 02 Apr 2026 07:19:59 GMT"},"fingerprint":{"sha1":"53:7B:EA:AA:0A:13:9A:C5:94:1F:F6:35:89:F3:54:70:C4:08:C0:1D","sha256":"2F:FE:D0:12:7B:AB:9D:42:41:69:23:1F:06:96:BF:8E:3C:AB:2F:00:05:7D:6D:EE:4A:C0:18:C3:82:92:61:B4"}}},"request":{"raw":"GET /rest/v1/site_settings?select=key%2Cvalue HTTP/1.1\r\nHost: rzueiherdepwvxvouucn.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rr-beratung.com/\r\naccept-profile: public\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InJ6dWVpaGVyZGVwd3Z4dm91dWNuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NjcyODgwNjYsImV4cCI6MjA4Mjg2NDA2Nn0.aK2QxrLJzkL60amXINg1pfHHm_YdUJNuBmLLmoZEjX4\r\nauthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InJ6dWVpaGVyZGVwd3Z4dm91dWNuIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NjcyODgwNjYsImV4cCI6MjA4Mjg2NDA2Nn0.aK2QxrLJzkL60amXINg1pfHHm_YdUJNuBmLLmoZEjX4\r\nx-client-info: supabase-js-web/2.89.0\r\nOrigin: https://rr-beratung.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\ncontent-range: 0-1/*\r\ncf-ray: 9cdc6d32aac575ab-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://rr-beratung.com\r\ncontent-encoding: gzip\r\ncontent-location: /site_settings?select=key%2Cvalue\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: rzueiherdepwvxvouucn\r\nsb-request-id: 019c5c09-7bb8-7813-8c4b-59759f99504f\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 187\r\nset-cookie: __cf_bm=aUImpPHUwLz6JxUfAv.F3acktCQPZJjgAF0CVAsAJD4-1771070651-1.0.1.1-wnKwlodN3XPlI1pKgfmqrd8l99qd6jqmtUUug0GKLrLtE3kPr2lCC4PuNSNPHQJ1kz3vdN3VjJtw98yxYUX_UzOtddEcl3sVJdnQfv2Avyk; path=/; expires=Sat, 14-Feb-26 12:34:11 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":163,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"eaff725db496c97e49ce98c33d74f983","sha1":"21f594c32c99f0c20e51ade07abe26e4aad3d575","sha256":"f1965bb4a959046e62d091155cefcc3c503ae026aafa716df2df4a0e261721ea","sha512":"bdc74f38e34d6a66473e6add194452c4969c6c4cd1c9452c380588b23b1a4c9d68569e027a980761a83bee350f174556fbb73809458aed466b96130ec1d8cebe","ssdeep":"","tlshash":"59c08c12f0c0587a0f238ec83e9aec05234f10df85804cc812b466c11ea44a06f02e8b","first_seen":"2026-02-14T12:04:36.993737Z","last_seen":"2026-05-05T01:28:39.947969Z","times_seen":2,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rr-beratung.com/","fqdn":"rr-beratung.com","domain":"rr-beratung.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T12:04:10.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-beratung.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 07:30:15 GMT","end":"Thu, 02 Apr 2026 08:30:14 GMT"},"fingerprint":{"sha1":"2B:75:CE:C6:12:4F:70:04:BE:65:3A:4F:E2:F0:7C:2E:30:17:A1:67","sha256":"13:C9:5F:ED:C5:51:F0:03:CC:EB:A0:BA:19:71:71:40:88:9B:09:92:1B:08:7B:FF:D8:CF:28:9E:82:D7:C4:DF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rr-beratung.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: __cf_bm=p6N0SVCmqCWZ9sxPdamSl7ylny4fnMwsbBC5uXo3gDQ-1771070650.0770638-1.0.1.1-PfrTFyJycx_DJU3IHxGB9B6vWypGd29kOTs_q0E0_CLmnw2AXy66AkfKAUwri6bHI5hEkeAA5M9K4o1YCr5wloYollASh.6L8NPFKqUEO6VBZNDpf_NTyh0fYMiOaUxk; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sat, 14 Feb 2026 12:34:10 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"f32a5bb409b1f9e1b9482e106b86f791\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9cdc6d2afa36723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1537,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"64bb754d79b905c15f828dc55296264f","sha1":"daeb88d72eae72c4ef9c127cf3b33cfa7a5c8597","sha256":"1123f5fee96def911b35f78b9c22d457c2e2825aeb3179c63d81d41852941965","sha512":"7fb6225543ec51db943a0bacb4b9c6ba0248bf708165335b71cff86cb548ba09e8577473be487700784b94f897a52d7e82c8b2a2c0acf81adcfd6e92f3d7bc6c","ssdeep":"","tlshash":"3c31ac539d908809532891b818ebb4488d169687c3a8c95c71cd61ae4fc2fc1cbf7dd6","first_seen":"2026-02-14T12:04:36.995643Z","last_seen":"2026-02-14T12:04:36.995643Z","times_seen":1,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":52,"dns":41,"connect":1,"send":0,"wait":325,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rr-beratung.com/~flock.js","fqdn":"rr-beratung.com","domain":"rr-beratung.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rr-beratung.com/","date":"2026-02-14T12:04:10.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-beratung.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 07:30:15 GMT","end":"Thu, 02 Apr 2026 08:30:14 GMT"},"fingerprint":{"sha1":"2B:75:CE:C6:12:4F:70:04:BE:65:3A:4F:E2:F0:7C:2E:30:17:A1:67","sha256":"13:C9:5F:ED:C5:51:F0:03:CC:EB:A0:BA:19:71:71:40:88:9B:09:92:1B:08:7B:FF:D8:CF:28:9E:82:D7:C4:DF"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: rr-beratung.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rr-beratung.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:10 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=QJVXmFZGQ6lSGZOg2fOMitSJeS_XlceiszMlRkYXhXM-1771070650.5480075-1.0.1.1-S1YSvvtN7HxkH4GlRNqFExq58bivInjDv..RnVgfuTYyxciuQhNbH.7hO5f7zUqrarHugiMwSeK6e6iYIWEl5m5c3TO4Ar3IulIAUKgCT5WkPKBCPlpvW6BpyJqrzsvO; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sat, 14 Feb 2026 12:34:10 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9cdc6d2deffd723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21296,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-08-11T02:16:25.884447Z","times_seen":15288,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rr-beratung.com/assets/index-Bqmrpl69.css","fqdn":"rr-beratung.com","domain":"rr-beratung.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rr-beratung.com/","date":"2026-02-14T12:04:10.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-beratung.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 07:30:15 GMT","end":"Thu, 02 Apr 2026 08:30:14 GMT"},"fingerprint":{"sha1":"2B:75:CE:C6:12:4F:70:04:BE:65:3A:4F:E2:F0:7C:2E:30:17:A1:67","sha256":"13:C9:5F:ED:C5:51:F0:03:CC:EB:A0:BA:19:71:71:40:88:9B:09:92:1B:08:7B:FF:D8:CF:28:9E:82:D7:C4:DF"}}},"request":{"raw":"GET /assets/index-Bqmrpl69.css HTTP/1.1\r\nHost: rr-beratung.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rr-beratung.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\nset-cookie: __cf_bm=opSm8l39Hvx7w6vW1cPPALReuScjkGIPikJ5_Kd97DA-1771070650.5477843-1.0.1.1-awwGOrdTcAPEEOgvW8T38jinm1YJKDhbQy0JVewc_shLGbu9_AbwpTc073gFS_CCkKW9ZYFQozKkoTfr7ow.VYyPU247KBRH8zyLazdXbJJb71s78ZCWgRhf7.BVIKne; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sat, 14 Feb 2026 12:34:10 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"5842ab79298034a789028f0e6f52c83b\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9cdc6d2deff8723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71698,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5842ab79298034a789028f0e6f52c83b","sha1":"2b8eaf870c24535b699df69d2654cbe79075ab89","sha256":"15f9e48bd0659f523f440d90f2736db0a2a2c4b92dc5f29bf9c406a5fa44c48b","sha512":"0414af20e0e67923d487ec34a262235d054fcbee510d7b27b2c9ceb5a2689ef747e0a9adfac74b9807cde88c6d1db10757875b83401ccb99ab9cb9388c1f4e7f","ssdeep":"1536:ghIicDB7kMDUTPGGCr378VQZkt5FfCobb:ghIic1k6UTPGGCr378VQZkt5FRbb","tlshash":"a463a71eb919617e3c2790e883ccbaec610af0c0de3b06b57e9a41215bd37f61977558","first_seen":"2026-02-14T12:04:36.998326Z","last_seen":"2026-05-05T01:28:39.939653Z","times_seen":2,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rr-beratung.com/assets/hero-bg-vNwIWRUX.jpg","fqdn":"rr-beratung.com","domain":"rr-beratung.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rr-beratung.com/","date":"2026-02-14T12:04:10.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-beratung.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 07:30:15 GMT","end":"Thu, 02 Apr 2026 08:30:14 GMT"},"fingerprint":{"sha1":"2B:75:CE:C6:12:4F:70:04:BE:65:3A:4F:E2:F0:7C:2E:30:17:A1:67","sha256":"13:C9:5F:ED:C5:51:F0:03:CC:EB:A0:BA:19:71:71:40:88:9B:09:92:1B:08:7B:FF:D8:CF:28:9E:82:D7:C4:DF"}}},"request":{"raw":"GET /assets/hero-bg-vNwIWRUX.jpg HTTP/1.1\r\nHost: rr-beratung.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rr-beratung.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T02:55:35.911989Z","times_seen":17829037,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFkD-vYSZviVYUb_rj3ij__anPXDTnogkk7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rr-beratung.com/","date":"2026-02-14T12:04:11.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFkD-vYSZviVYUb_rj3ij__anPXDTnogkk7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rr-beratung.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38804\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Feb 2026 20:12:37 GMT\r\nexpires: Fri, 12 Feb 2027 20:12:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 143494\r\nlast-modified: Wed, 10 Sep 2025 16:48:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38804,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38804, version 1.0","md5":"2175449f9d4450ae6ffa92c12e38768c","sha1":"682cdaa40af625ceedaff11e83167ad78194cc1c","sha256":"54af24bd0f911f0fd7399d5445ea2023ff501d6a69f2d728f1213072f977ab14","sha512":"2dcc58920335757f867936e243a7f3315a8d2ea5a55c2f58412dab7361a9038d90c31e1bab6a95d0886e30c338b0a3337ca82c6e1e3f329583bc1b43e7569005","ssdeep":"768:ks9Jo7FMnoJCuKNFH68vNpT1eGJM0KtIfzaWG5Avamb5q9UcnRjw:L9Jo72nhtjvNpTlM0kIfzK5AvaWLcnRs","tlshash":"3803f11094d0b285d02d2fff9a2f48fde005cce11b6d9735abecb6f46641236a2080de","first_seen":"2025-06-05T03:25:00.901256Z","last_seen":"2026-08-11T03:12:08.94044Z","times_seen":6137,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":103,"dns":1,"connect":8,"send":0,"wait":11,"receive":4,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rr-beratung.com/favicon.png","fqdn":"rr-beratung.com","domain":"rr-beratung.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rr-beratung.com/","date":"2026-02-14T12:04:11.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-beratung.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 07:30:15 GMT","end":"Thu, 02 Apr 2026 08:30:14 GMT"},"fingerprint":{"sha1":"2B:75:CE:C6:12:4F:70:04:BE:65:3A:4F:E2:F0:7C:2E:30:17:A1:67","sha256":"13:C9:5F:ED:C5:51:F0:03:CC:EB:A0:BA:19:71:71:40:88:9B:09:92:1B:08:7B:FF:D8:CF:28:9E:82:D7:C4:DF"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: rr-beratung.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rr-beratung.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session-id=84079201-2d19-4b9d-b7b7-e8b50b3424fc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 4101\r\netag: \"2d7b0df46a1b91409d3e4d45c6c96123\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=8BHwgb.TaAkzWopGrRXneWNMiMG4W8kHrTyQT54tJfk-1771070651.445581-1.0.1.1-8x5I00lhxB1iUJL7H8lBqekD2fTEVqjyVMUSdG3ZBmF2YvwOg8uETfIj2X3rOk2i_pMul34Uxg.DLG7HSUCNNoutLyKUfCtrTsaH.qrBkIWeqJ8GYLmZXZ9dWqqa3vIS; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sat, 14 Feb 2026 12:34:11 GMT\r\nserver: cloudflare\r\ncf-ray: 9cdc6d338d4e723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4101,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 74 x 80, 8-bit/color RGBA, non-interlaced","md5":"2d7b0df46a1b91409d3e4d45c6c96123","sha1":"8c2c748edde153cd5495f8789ef7f6914e52a647","sha256":"e25a3bd9ac725973e0b433ab78b1d79c2827c489d30bea6e64e1c01deb2b67a0","sha512":"d1453c1628e5522d4e140aea39f837c9d29b70a7cf5d7f13568ba7adc3625101049feb6b76d5fe3bfd354ecc220dbcadacb934e43bbb5b8b4af187defa8dd7a4","ssdeep":"96:a90bJGnlEIRfkwylYg3MRRowoPWxvvrwnHKV7:WgJs7cwkYg3MROwoPWdMnqF","tlshash":"ea816ddd637cc420c3be023bd5a188ebb9f92d63f1549ce0489166795f0a5ec0106beb","first_seen":"2026-02-14T12:04:37.000928Z","last_seen":"2026-05-05T01:28:39.946209Z","times_seen":2,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rr-beratung.com/assets/index-By1h8e9M.js","fqdn":"rr-beratung.com","domain":"rr-beratung.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rr-beratung.com/","date":"2026-02-14T12:04:10.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-beratung.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 07:30:15 GMT","end":"Thu, 02 Apr 2026 08:30:14 GMT"},"fingerprint":{"sha1":"2B:75:CE:C6:12:4F:70:04:BE:65:3A:4F:E2:F0:7C:2E:30:17:A1:67","sha256":"13:C9:5F:ED:C5:51:F0:03:CC:EB:A0:BA:19:71:71:40:88:9B:09:92:1B:08:7B:FF:D8:CF:28:9E:82:D7:C4:DF"}}},"request":{"raw":"GET /assets/index-By1h8e9M.js HTTP/1.1\r\nHost: rr-beratung.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rr-beratung.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:10 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nset-cookie: __cf_bm=UhFter.yJ7Givt12WhiyorVQqXMltWb_OYlk_V7M.O0-1771070650.5472968-1.0.1.1-Zh5dt4i6vah.nm_DBg0hzKH_qY6l6cGRIj5UBlW8O_PCAGlsUjwxLNl8k1BUHtv7U2cQbDrxlfAGBqHUEu1riUyHtppXZhxDHKts2ljqLRyW7u7jmlcBpJyTs5VKD6Xh; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sat, 14 Feb 2026 12:34:10 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"190318d5f55ad97cc274965d286f55e9\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9cdc6d2deff3723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":905165,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37534)","md5":"190318d5f55ad97cc274965d286f55e9","sha1":"da189c856b534923e5b04beda52c86a56f99a587","sha256":"84f84b6637910d48ab88f79f73bb2c37c7ac83d4270036f4d6085f0aa1c80670","sha512":"0d71f69c96dffbc369408243a9b5b0ec9571b2620a350c940cebd8c4cf07f7bc4f65bbc3d1992cb7aa4f636c2e1541100b00f82f2bdd32a16453f580087e0ee7","ssdeep":"12288:DCm6ZsKo7bhtNeVFyzfvP/lyhUaySPMW+eoSZD2dL1RZtr7+3v:siNeovc0SZD2c/","tlshash":"99157dc4f09575b95ba749e5507f4006b23d2a18f92e8460f07c9caa2ba5506f23bffc","first_seen":"2026-02-14T12:04:37.002896Z","last_seen":"2026-02-14T12:04:37.002896Z","times_seen":1,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026family=Playfair+Display:ital,wght@0,400..900;1,400..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rr-beratung.com/","date":"2026-02-14T12:04:10.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026family=Playfair+Display:ital,wght@0,400..900;1,400..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rr-beratung.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 12:04:10 GMT\r\ndate: Sat, 14 Feb 2026 12:04:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/mr\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5050,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0652744a9a243418818d15177f4180b6","sha1":"d6b207736aa72fdba9a950e7bc749998a6aba965","sha256":"5a4fa04b608b3f280dffc6c522aca73a857a2f5a7b50a08d00b3805ec7cde33b","sha512":"9f14c88ccc9ee91f22cd0f45b98b5ab3e8f83ec4b9266fa31be5b82d43de775d1b5ac04927387855257c8adf5fc1f08a89d60976e170b64155686ab13ec2a12b","ssdeep":"96:jYgQauJc+ufYgQawNkOQaepJc+ufOQawNMIYgPaV2bFZOjYgPaV2fVYgPaV2GJcs:MI+VIOcDNJlV2SMlV2qlV2GXlV2cor23","tlshash":"6ba1e0920567a114db431cc223cfbf229e5f61507084967cbffe18c8ac9bd6a9364b0d","first_seen":"2025-11-05T22:06:00.561073Z","last_seen":"2026-07-31T21:11:20.010082Z","times_seen":276,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":117,"dns":1,"connect":21,"send":0,"wait":36,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rr-beratung.com/assets/hero-bg-vNwIWRUX.jpg","fqdn":"rr-beratung.com","domain":"rr-beratung.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rr-beratung.com/","date":"2026-02-14T12:04:11.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-beratung.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 07:30:15 GMT","end":"Thu, 02 Apr 2026 08:30:14 GMT"},"fingerprint":{"sha1":"2B:75:CE:C6:12:4F:70:04:BE:65:3A:4F:E2:F0:7C:2E:30:17:A1:67","sha256":"13:C9:5F:ED:C5:51:F0:03:CC:EB:A0:BA:19:71:71:40:88:9B:09:92:1B:08:7B:FF:D8:CF:28:9E:82:D7:C4:DF"}}},"request":{"raw":"GET /assets/hero-bg-vNwIWRUX.jpg HTTP/1.1\r\nHost: rr-beratung.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rr-beratung.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:11 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 221689\r\netag: \"e3f54b9819e4885ebf0561de5c9ef7b8\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=v0yxwZDZ8iwZCHfI8dcHm982gkE0ry.uy_8ubuLWmGw-1771070651.0149727-1.0.1.1-tv0wWEUarOj47T0PopIcZEP3FIXhESXu_Fu4ZTv0hNHUSOENvYqC7V_IuP5ad9wgCYdlnL2B5ILCn8tt57E..Hvm1Og8HGsKgknW8iwyZwdDBQKuMy9CqbDGfOhhJMc_; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sat, 14 Feb 2026 12:34:11 GMT\r\nserver: cloudflare\r\ncf-ray: 9cdc6d30de98723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":221689,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3","md5":"e3f54b9819e4885ebf0561de5c9ef7b8","sha1":"6b04bbaa6ad0ea0e40dedbb98956cca6c32d69d1","sha256":"cd27d5f9f873b4d51d385819fe3258345c45ea41cc7587045a1bd14f47b5c6b4","sha512":"6c211b14e622f658b3666c824e6d4abea4f294fd38aefbca1697bfecececd4b7cd096ae1bb55ab940bfabd7df079fdb086223d450e569bb3634b2abb81e0babc","ssdeep":"6144:LWPGz0RgxQV98L1gaJQwkXNSZjgLClseoEwbWK631:WRgiVCeauwsNLCxwbK","tlshash":"1924f10717280dd3a63d9ba7bfd8249f0f302e6c86aa3c9d15142de6ff58664d6184f8","first_seen":"2026-02-14T12:04:37.005402Z","last_seen":"2026-05-05T01:28:39.941138Z","times_seen":2,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rr-beratung.com/","date":"2026-02-14T12:04:11.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rr-beratung.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62460\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Feb 2026 20:33:59 GMT\r\nexpires: Tue, 09 Feb 2027 20:33:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 401412\r\nlast-modified: Wed, 10 Sep 2025 16:30:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62460,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62460, version 1.0","md5":"4c04ee82dc1deb4f32b244195d258e9b","sha1":"9bd2bc9c6f54075acd20589f87c17a73e3ab07b3","sha256":"ab72fd10c9ac5633c1f9ae4267864b674596062e023458e02973080bd1098904","sha512":"43bd417c75382fbcad7a44c73db7ec8e883bb505b63215ec67488eb205b61acd94031d5740bdf70cf413fcb126ac6a567b4c71831eeb063e5643fa0adc704895","ssdeep":"1536:Hjv9lkTtdw0aS3yPvWdfDSFdW6KK8zPJ86DQMBXQX:Hz9ceS3y2FDSFdRKNzPJj5gX","tlshash":"8753028264d3489c8c8b69d354847f1c707ef88fc1b88995a8e33ca14d4b1e6e85ad7f","first_seen":"2025-09-11T19:26:36.805532Z","last_seen":"2026-08-11T02:48:33.066164Z","times_seen":24383,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":71,"dns":0,"connect":7,"send":0,"wait":9,"receive":20,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}