{"report_id":"4905a8c3-239d-4a52-aea2-5ab2fc41faf9","version":6,"status":"done","tags":[],"date":"2026-01-07T06:30:06Z","url":{"schema":"http","addr":"xn--e-mndli-7wa.ch/","fqdn":"xn--e-mndli-7wa.ch","domain":"xn--e-mndli-7wa.ch","tld":"ch"},"ip":{"addr":"185.101.158.113","port":0,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"final":{"url":{"schema":"https","addr":"www.e-maendli.ch/","fqdn":"www.e-maendli.ch","domain":"e-maendli.ch","tld":"ch"},"title":"Das Bewegungstraining in Schaffhausen. - e-maendli – bewegt","dom":{"size":47285,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (737)","md5":"8e733253a952a1e45e0ec95752a5ddd2","sha1":"7f6594024019c223b59a48ed0cd0ceedf2df493e","sha256":"9b751a733c3df4fa2e925d02d4578719d7272e3c004791218be5c86b3d9ee83a","sha512":"1874762d49f569ce6484044c3ea15599b57ba1e44b0b270fb71fe039e8203db458756b821257ab3514ad8af72e4cf7c956161ad6123d72998ad61747e6a5a746","ssdeep":"192:Sb9JWBbV5P3K44VuFJqPR8vYn/zJ/LIN2IS7MxvjIOuhxGpYGUE1:0yY/zJ/cN2IwMxv0Z7i/UE1","tlshash":"682320732d6d42dd68a9257181595e54df62fc0aef071c0cbe8faaf20bccc65c6a1a34","dom_hash":"domhashd1d5f6980b5b2a38125f095d2a27b6b3","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xn--e-mndli-7wa.ch/","fqdn":"xn--e-mndli-7wa.ch","domain":"xn--e-mndli-7wa.ch","tld":"ch"},"ip":{"addr":"185.101.158.113","port":0,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-11T06:30:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-07T06:29:42Z","timestamp":1767767382,"ip_dst":{"addr":"Client IP","port":34230,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"185.101.158.113","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"severity":"high","alert":"ET PHISHING Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing","source":"{\"timestamp\":\"2026-01-07T06:29:42.764372+0000\",\"flow_id\":1620224828121242,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"185.101.158.113\",\"src_port\":443,\"dest_ip\":\"172.18.0.34\",\"dest_port\":34230,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2024227,\"rev\":4,\"signature\":\"ET PHISHING Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing\",\"category\":\"Potential Corporate Privacy Violation\",\"severity\":1,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2017_04_19\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0001\"],\"mitre_tactic_name\":[\"Initial_Access\"],\"mitre_technique_id\":[\"T1566\"],\"mitre_technique_name\":[\"Phishing\"],\"signature_severity\":[\"Critical\"],\"tag\":[\"Phishing\"],\"updated_at\":[\"2020_08_20\"]}},\"tls\":{\"subject\":\"CN=xn--e-mndli-7wa.ch\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R12\",\"serial\":\"06:4E:97:E6:82:78:FB:80:FF:5E:85:09:B8:5D:E8:91:DB:FC\",\"fingerprint\":\"5a:16:ea:28:e9:3f:f0:5f:f3:d4:8f:b0:86:f7:40:3a:b0:da:f9:57\",\"sni\":\"xn--e-mndli-7wa.ch\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-12-19T00:28:07\",\"notafter\":\"2026-03-19T00:28:06\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"948964c2860ebba6f44661b63bca23d3\",\"string\":\"771,49200,65281-0-11-23-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1080,\"bytes_toclient\":3487,\"start\":\"2026-01-07T06:29:42.663706+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"xn--e-mndli-7wa.ch","ip":{"addr":"185.101.158.113","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-07T06:30:07.70727Z","last_seen":"2026-01-07T06:30:07.70727Z","alert_count":0,"request_count":1,"received_data":56419,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.e-maendli.ch","ip":{"addr":"194.56.190.10","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-07T06:30:07.693327Z","last_seen":"2026-01-07T06:30:07.693327Z","alert_count":0,"request_count":19,"received_data":2606664,"sent_data":22078,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Livewire","description":"Livewire is a full-stack Laravel framework for building dynamic interfaces.","website":"https://laravel-livewire.com","common_platform_enumeration":"","icon":"Livewire.svg","categories":["Web frameworks","Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.e-maendli.ch/build-base/assets/main-38f82476.js","fqdn":"www.e-maendli.ch","domain":"e-maendli.ch","tld":"ch"},"ip":{"addr":"194.56.190.10","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"d79a0ed8728a8b0d0d7fc12307ff53e5","sha1":"b28af59035fe4a6e64439fcc7df3e79c745b9b87","sha256":"f171b3b2bce4d6ca0c0fd54f5c0ca04fef402992ad7ce8feab28e0f8dbd18092","sha512":"1ebf8ce6eafdc3a5f734f620d1ad5614dd0291769251cfa4a82f05ceb36006c74ed87425fdfb7e1cbf37642ad034cb8226509350b7b92009848f7978326d7be6","ssdeep":"","tlshash":"bbe0f15df71464dc11ff4a58c106f200101191f11302c0e2a1948255a374cbfc7f379e","size":398,"data":"","first_seen":"2026-01-07T06:30:17.44009Z","last_seen":"2026-01-07T06:30:17.44009Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.e-maendli.ch/files/js/app.js?id=69851f66c478ba49d36c29f5e06aa2d4","fqdn":"www.e-maendli.ch","domain":"e-maendli.ch","tld":"ch"},"ip":{"addr":"194.56.190.10","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"69851f66c478ba49d36c29f5e06aa2d4","sha1":"09371dc65a00e89503c85d441b346f311b1002ed","sha256":"8088bc5aa4495f8413792fb3f8981d295d7d609515d2caa22f933d92e6bdba7d","sha512":"ffe93a74039a40b7576cade7d9ae24fb019d081597ccd14b0bd586719faff435622e19b19a2a5af1939b8f412f7a509fb648346275654c2be996d75046e6a8a3","ssdeep":"1536:hDKoXch+0PEEL8gZL0LXw35EdzLjMxeIbmyWZXUdyob/EHLkm:hFch+07L8gZL0LX867ivYUsQcrr","tlshash":"e4b3a2dab6c3f03193ab207500af410bf23e6d58784e9584e261f4d97c7964ea1a7f39","size":109459,"data":"","first_seen":"2023-10-01T05:35:34Z","last_seen":"2026-02-17T22:28:30.139187Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.e-maendli.ch/build-base/assets/jquery-b1664d58.js","fqdn":"www.e-maendli.ch","domain":"e-maendli.ch","tld":"ch"},"ip":{"addr":"194.56.190.10","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"importedModule","is_inline":false,"md5":"06ee94e199eab0fe40a475f783072ff6","sha1":"71458c31762ebf3bc2cc7e5064a350df1981273d","sha256":"cec4ab3069a16547c6a272c20c5401211719bcf03b973da9b3366256c7df397d","sha512":"84bb00a88f7ea6c16e3dff0191cb9c66ea14636deefc3050f922bcece832a8a6cbbff8fa06dc7170f07f24cfdbb666b97e554129c75839121f928b08b968f0e3","ssdeep":"1536:HJiKvi8KwwcdOmsewRj5j78tylDcD/GJKtMgBI8wSCX3STX2Qb:tOlewP38y+qKtMw1X2Qb","tlshash":"518309dcb2c6b46243ab60b9007f650bf2376899280dc510f069d8f9bd75a4a817bf7d","size":87824,"data":"","first_seen":"2024-08-20T08:15:14.016549Z","last_seen":"2026-02-17T22:28:30.156125Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.e-maendli.ch/build-base/assets/image-b214714a.js","fqdn":"www.e-maendli.ch","domain":"e-maendli.ch","tld":"ch"},"ip":{"addr":"194.56.190.10","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed18b4b84d978974cd45b0bb167a37e8","sha1":"6c3c9974cf5a644a0ed61edf788ff2a610624f8e","sha256":"65473b429012ee59808326ba27d19d40de52d1129fb5fc71cba56172da3d6ef8","sha512":"f236e7c4f11ea97a3cac3596b721bef71b326100bfc916e5a91d21915cbf28a298589d14edf4723cd1ca1b956f2701061d2020603cb093e442722d1c2b233a5b","ssdeep":"","tlshash":"dd212ba4fd11e19bc1be297b122f713c2f674d454b0bc2a0b118f08845f0c6abb36a74","size":1157,"data":"","first_seen":"2025-08-04T08:39:40.776872Z","last_seen":"2026-02-17T22:28:30.162502Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.e-maendli.ch/","fqdn":"www.e-maendli.ch","domain":"e-maendli.ch","tld":"ch"},"ip":{"addr":"194.56.190.10","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"62695131bf936686b1266bf41d054001","sha1":"8d5b7b7f6b553c80c12ca9c29b420f0791645377","sha256":"5654b22bd58ecadb2336f061c12293665dcbad4c55e4a0cc603046bec3afea0a","sha512":"9111dc1337a69c820073d9fbd1d79361b02cfbb7a0f40678b5d44865c4adea6af68e20567793795c37478cd228e124d4aa187021543f41c9facf2e3990d9d828","ssdeep":"","tlshash":"2ef0bb7a4ac6faf4a976b0d5e34f730929f631c908835524c43cc2957ca447bc6a68cb","size":539,"data":"","first_seen":"2026-01-07T06:30:17.486471Z","last_seen":"2026-01-07T06:30:17.486471Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.e-maendli.ch/build-base/assets/jquery.fancybox.pack-93f11b83.js","fqdn":"www.e-maendli.ch","domain":"e-maendli.ch","tld":"ch"},"ip":{"addr":"194.56.190.10","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"c69566d60a7980bdd8dddfb25bc38a08","sha1":"6851ddd01c3ffdfc4b729e1f6e4bf42dc8d97539","sha256":"0f6a70770254bf28bf3ae19257eeed94de6bd778f0414cc2af294e1899f7db2b","sha512":"5b69ad758071adeac9283e79edb349c172501248a4c0fc881a527955fd83e6e964d21f5322662374d0527e04a79d69b20897d45045e0a5b0149da5ca7916c9d0","ssdeep":"384:i9bNk7F+IxiB18onkfJ212Fh0D3w4zgv+6twAgtacomEU:i9bNkRijnkfcKiw4zgv+Qqac1","tlshash":"88a239857510784a807f2a65914f110d92361027c7178ab6b07de9f85ebabc072fbefe","size":23060,"data":"","first_seen":"2025-08-04T08:39:40.725489Z","last_seen":"2026-02-17T22:28:30.176202Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.e-maendli.ch/livewire/livewire.js?id=90730a3b0e7144480175","fqdn":"www.e-maendli.ch","domain":"e-maendli.ch","tld":"ch"},"ip":{"addr":"194.56.190.10","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e377e741f7d57da94c0d5aed41693cd","sha1":"f2619196a61c34b00491f62774a84f778134b974","sha256":"38a4dc885f9d1267bbfaf361e24fbf51994bd7f6743784ec3e4a267bbe74a0be","sha512":"0ec135c5f1e0a57cfd9eb5f946aab9798b2dfb52e042ef6dbfbfce0f6f72ebd2211ac9b44e56e3fa8bd97f38eecea66ea01011f8091cc2c6c6fef6748a898013","ssdeep":"3072:VKWLfncHETio2zqDpPZZG2uIHIYKvt64EOxuA:VKWzsncDNDCvt65A","tlshash":"fe044a89b681f5b209c771a4543f390fb276205498ad9090f679cec07efa948522bf7f","size":174819,"data":"","first_seen":"2023-03-25T22:43:16Z","last_seen":"2026-04-04T08:34:21.755389Z","times_seen":1771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.e-maendli.ch/build-base/assets/main-4d19cab2.js","fqdn":"www.e-maendli.ch","domain":"e-maendli.ch","tld":"ch"},"ip":{"addr":"194.56.190.10","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"importedModule","is_inline":false,"md5":"3324bd0874bf24681ac79d1850f21253","sha1":"6466f76d7cb062a107ff24b6617b02b1841d7e50","sha256":"ec4f0ae9d4e88c6f83fe08f7e6a2e9c5c406177c918590e312bd356ab0383997","sha512":"190cf8f93636cb50c2b92036a0c8c3e39044a0a8c85da8165ae4387e63ae9f1f1794532365aaeb5ea1914b9a96580005506979f3ecfc2945d831083b77aea203","ssdeep":"768:6AeFxAbQ8u8SjWTInMADfNj/0vMqYsjYq1WAmLjBfMFMGoqrIz2XoPorOp9XXW+j:ROxAErts/YuFdrIz2VOp9XXva4","tlshash":"eb33e849b221356107efb1b1511f120e7336693ee94640acb8a9d9f62cb9c487277f3d","size":52270,"data":"","first_seen":"2025-08-04T08:39:40.765043Z","last_seen":"2026-02-17T22:28:30.142218Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.e-maendli.ch/build-base/assets/main-38f82476.js","fqdn":"www.e-maendli.ch","domain":"e-maendli.ch","tld":"ch"},"ip":{"addr":"194.56.190.10","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.e-maendli.ch/","date":"2026-01-07T06:29:44.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-maendli.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 23:25:56 GMT","end":"Mon, 30 Mar 2026 23:25:55 GMT"},"fingerprint":{"sha1":"BA:F7:D4:3B:58:6F:6F:DF:AB:C2:9F:69:34:3E:67:F9:8C:A0:D9:CD","sha256":"2B:5F:05:83:0D:71:A5:CC:DE:CB:C7:05:77:77:9E:0A:25:63:B4:C8:80:87:AB:BF:F2:81:D2:39:5F:B1:53:51"}}},"request":{"raw":"GET /build-base/assets/main-38f82476.js HTTP/1.1\r\nHost: www.e-maendli.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.e-maendli.ch/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik40dHFnK0o4OXlOSEdxaHc0SXJoZWc9PSIsInZhbHVlIjoiVzNZYlRzbkhyWXJab25uZnpyNXVla1U1a2p2NUxuRDhpY3huWFFUa2MrclZ1eWgzanlmcVViYk1ldkY5bWRvR1lGcTJtakMvb0NiRkVLMlhOcUtXZXNuUFordXFDUWQ2N2VVb2RKN1VDMFRWNUt0UlVKSnI3aHNXUTFOUWtjTDAiLCJtYWMiOiIzZjBmZTcyZGYwYmMwYmM0Njc1NWVmYWVkYWI4OTBiN2VhNDQ5MTI2YTRhMjRmZmY4MjdiZmYwOTA2OWMwODAzIiwidGFnIjoiIn0%3D; e_maendlich_session=eyJpdiI6ImxNZlplWStEcUY2WVMvdE04ejhHNFE9PSIsInZhbHVlIjoic3V5QmMyM25YbUhDdDcyOXJDY1VMNmVob1p1UFVBUEJ3RGhxN29kejAzNmdvUkVxRkZNdjBRa3pSd0U0a2hGYXV4Vy91TnZwckk2aktjT0RzWlkvbkhTTTZNc0xxSklUOXllTXVjdFMwTEdiMXhCQ3c1dFJ6aUlzcmpKZnpFVUQiLCJtYWMiOiI0N2UzMDFlYTk5OTdkMDNkMWUzYTcxYjM0ODJjYzlkYjc2ZWQ1NzI1Y2RjN2FhMTU1ZDNmN2RhYjVhYjgxMGQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 06:29:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 292\r\nx-accel-version: 0.01\r\nlast-modified: Mon, 11 Aug 2025 11:50:08 GMT\r\netag: \"18e-63c1586741c00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":398,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (397)","md5":"d79a0ed8728a8b0d0d7fc12307ff53e5","sha1":"b28af59035fe4a6e64439fcc7df3e79c745b9b87","sha256":"f171b3b2bce4d6ca0c0fd54f5c0ca04fef402992ad7ce8feab28e0f8dbd18092","sha512":"1ebf8ce6eafdc3a5f734f620d1ad5614dd0291769251cfa4a82f05ceb36006c74ed87425fdfb7e1cbf37642ad034cb8226509350b7b92009848f7978326d7be6","ssdeep":"","tlshash":"bbe0f15df71464dc11ff4a58c106f200101191f11302c0e2a1948255a374cbfc7f379e","first_seen":"2026-01-07T06:30:17.44009Z","last_seen":"2026-01-07T06:30:17.44009Z","times_seen":1,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.e-maendli.ch/build-base/assets/jquery.fancybox-c4c560a6.css","fqdn":"www.e-maendli.ch","domain":"e-maendli.ch","tld":"ch"},"ip":{"addr":"194.56.190.10","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.e-maendli.ch/","date":"2026-01-07T06:29:44.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-maendli.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 23:25:56 GMT","end":"Mon, 30 Mar 2026 23:25:55 GMT"},"fingerprint":{"sha1":"BA:F7:D4:3B:58:6F:6F:DF:AB:C2:9F:69:34:3E:67:F9:8C:A0:D9:CD","sha256":"2B:5F:05:83:0D:71:A5:CC:DE:CB:C7:05:77:77:9E:0A:25:63:B4:C8:80:87:AB:BF:F2:81:D2:39:5F:B1:53:51"}}},"request":{"raw":"GET /build-base/assets/jquery.fancybox-c4c560a6.css HTTP/1.1\r\nHost: www.e-maendli.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.e-maendli.ch/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik40dHFnK0o4OXlOSEdxaHc0SXJoZWc9PSIsInZhbHVlIjoiVzNZYlRzbkhyWXJab25uZnpyNXVla1U1a2p2NUxuRDhpY3huWFFUa2MrclZ1eWgzanlmcVViYk1ldkY5bWRvR1lGcTJtakMvb0NiRkVLMlhOcUtXZXNuUFordXFDUWQ2N2VVb2RKN1VDMFRWNUt0UlVKSnI3aHNXUTFOUWtjTDAiLCJtYWMiOiIzZjBmZTcyZGYwYmMwYmM0Njc1NWVmYWVkYWI4OTBiN2VhNDQ5MTI2YTRhMjRmZmY4MjdiZmYwOTA2OWMwODAzIiwidGFnIjoiIn0%3D; e_maendlich_session=eyJpdiI6ImxNZlplWStEcUY2WVMvdE04ejhHNFE9PSIsInZhbHVlIjoic3V5QmMyM25YbUhDdDcyOXJDY1VMNmVob1p1UFVBUEJ3RGhxN29kejAzNmdvUkVxRkZNdjBRa3pSd0U0a2hGYXV4Vy91TnZwckk2aktjT0RzWlkvbkhTTTZNc0xxSklUOXllTXVjdFMwTEdiMXhCQ3c1dFJ6aUlzcmpKZnpFVUQiLCJtYWMiOiI0N2UzMDFlYTk5OTdkMDNkMWUzYTcxYjM0ODJjYzlkYjc2ZWQ1NzI1Y2RjN2FhMTU1ZDNmN2RhYjVhYjgxMGQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 06:29:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 11 Aug 2025 11:50:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6899d8f0-100c\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4108,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4107)","md5":"16f9288c303a537d0e353556bd787899","sha1":"455b5e5ff3ac337235af9e0aaf99e3cda128b71d","sha256":"c4c560a65c5b25f934bbf0e0a447f06c38b2989fb293354a145c22728f134359","sha512":"ded22ac2886bcbf75c3dd822c9205159a401f2d446b04ea1fae06f28369db8ed88aa124ce2087d99c879a091f7a8cf44e5d4ab6eed7f2b485c4c24c4ff6ac4b0","ssdeep":"48:Ma4jsTGO/OAZDa+AZ5AvUinCarzFVOptqfchj8/L5h+AZ5S5dL:NtGANLAjNiCOzFo2khj8/9kAjA9","tlshash":"a68101235444302aa43bee21e3afa5d9e1729846f25356ff920cfa7187d5bd160f26cc","first_seen":"2025-08-04T08:39:40.779929Z","last_seen":"2026-02-17T22:28:30.167462Z","times_seen":10,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.e-maendli.ch/build-base/assets/jquery.fancybox.pack-93f11b83.js","fqdn":"www.e-maendli.ch","domain":"e-maendli.ch","tld":"ch"},"ip":{"addr":"194.56.190.10","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.e-maendli.ch/","date":"2026-01-07T06:29:44.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-maendli.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 23:25:56 GMT","end":"Mon, 30 Mar 2026 23:25:55 GMT"},"fingerprint":{"sha1":"BA:F7:D4:3B:58:6F:6F:DF:AB:C2:9F:69:34:3E:67:F9:8C:A0:D9:CD","sha256":"2B:5F:05:83:0D:71:A5:CC:DE:CB:C7:05:77:77:9E:0A:25:63:B4:C8:80:87:AB:BF:F2:81:D2:39:5F:B1:53:51"}}},"request":{"raw":"GET /build-base/assets/jquery.fancybox.pack-93f11b83.js HTTP/1.1\r\nHost: www.e-maendli.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.e-maendli.ch/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik40dHFnK0o4OXlOSEdxaHc0SXJoZWc9PSIsInZhbHVlIjoiVzNZYlRzbkhyWXJab25uZnpyNXVla1U1a2p2NUxuRDhpY3huWFFUa2MrclZ1eWgzanlmcVViYk1ldkY5bWRvR1lGcTJtakMvb0NiRkVLMlhOcUtXZXNuUFordXFDUWQ2N2VVb2RKN1VDMFRWNUt0UlVKSnI3aHNXUTFOUWtjTDAiLCJtYWMiOiIzZjBmZTcyZGYwYmMwYmM0Njc1NWVmYWVkYWI4OTBiN2VhNDQ5MTI2YTRhMjRmZmY4MjdiZmYwOTA2OWMwODAzIiwidGFnIjoiIn0%3D; e_maendlich_session=eyJpdiI6ImxNZlplWStEcUY2WVMvdE04ejhHNFE9PSIsInZhbHVlIjoic3V5QmMyM25YbUhDdDcyOXJDY1VMNmVob1p1UFVBUEJ3RGhxN29kejAzNmdvUkVxRkZNdjBRa3pSd0U0a2hGYXV4Vy91TnZwckk2aktjT0RzWlkvbkhTTTZNc0xxSklUOXllTXVjdFMwTEdiMXhCQ3c1dFJ6aUlzcmpKZnpFVUQiLCJtYWMiOiI0N2UzMDFlYTk5OTdkMDNkMWUzYTcxYjM0ODJjYzlkYjc2ZWQ1NzI1Y2RjN2FhMTU1ZDNmN2RhYjVhYjgxMGQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 06:29:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 11 Aug 2025 11:50:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6899d8f0-5a14\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23060,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23059)","md5":"c69566d60a7980bdd8dddfb25bc38a08","sha1":"6851ddd01c3ffdfc4b729e1f6e4bf42dc8d97539","sha256":"0f6a70770254bf28bf3ae19257eeed94de6bd778f0414cc2af294e1899f7db2b","sha512":"5b69ad758071adeac9283e79edb349c172501248a4c0fc881a527955fd83e6e964d21f5322662374d0527e04a79d69b20897d45045e0a5b0149da5ca7916c9d0","ssdeep":"384:i9bNk7F+IxiB18onkfJ212Fh0D3w4zgv+6twAgtacomEU:i9bNkRijnkfcKiw4zgv+Qqac1","tlshash":"88a239857510784a807f2a65914f110d92361027c7178ab6b07de9f85ebabc072fbefe","first_seen":"2025-08-04T08:39:40.725489Z","last_seen":"2026-02-17T22:28:30.176202Z","times_seen":10,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.e-maendli.ch/build-base/assets/main-4d19cab2.js","fqdn":"www.e-maendli.ch","domain":"e-maendli.ch","tld":"ch"},"ip":{"addr":"194.56.190.10","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.e-maendli.ch/","date":"2026-01-07T06:29:44.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-maendli.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 23:25:56 GMT","end":"Mon, 30 Mar 2026 23:25:55 GMT"},"fingerprint":{"sha1":"BA:F7:D4:3B:58:6F:6F:DF:AB:C2:9F:69:34:3E:67:F9:8C:A0:D9:CD","sha256":"2B:5F:05:83:0D:71:A5:CC:DE:CB:C7:05:77:77:9E:0A:25:63:B4:C8:80:87:AB:BF:F2:81:D2:39:5F:B1:53:51"}}},"request":{"raw":"GET /build-base/assets/main-4d19cab2.js HTTP/1.1\r\nHost: www.e-maendli.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.e-maendli.ch/build-base/assets/main-38f82476.js\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik40dHFnK0o4OXlOSEdxaHc0SXJoZWc9PSIsInZhbHVlIjoiVzNZYlRzbkhyWXJab25uZnpyNXVla1U1a2p2NUxuRDhpY3huWFFUa2MrclZ1eWgzanlmcVViYk1ldkY5bWRvR1lGcTJtakMvb0NiRkVLMlhOcUtXZXNuUFordXFDUWQ2N2VVb2RKN1VDMFRWNUt0UlVKSnI3aHNXUTFOUWtjTDAiLCJtYWMiOiIzZjBmZTcyZGYwYmMwYmM0Njc1NWVmYWVkYWI4OTBiN2VhNDQ5MTI2YTRhMjRmZmY4MjdiZmYwOTA2OWMwODAzIiwidGFnIjoiIn0%3D; e_maendlich_session=eyJpdiI6ImxNZlplWStEcUY2WVMvdE04ejhHNFE9PSIsInZhbHVlIjoic3V5QmMyM25YbUhDdDcyOXJDY1VMNmVob1p1UFVBUEJ3RGhxN29kejAzNmdvUkVxRkZNdjBRa3pSd0U0a2hGYXV4Vy91TnZwckk2aktjT0RzWlkvbkhTTTZNc0xxSklUOXllTXVjdFMwTEdiMXhCQ3c1dFJ6aUlzcmpKZnpFVUQiLCJtYWMiOiI0N2UzMDFlYTk5OTdkMDNkMWUzYTcxYjM0ODJjYzlkYjc2ZWQ1NzI1Y2RjN2FhMTU1ZDNmN2RhYjVhYjgxMGQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 06:29:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 11 Aug 2025 11:50:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6899d8f0-cc2e\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52270,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43497)","md5":"3324bd0874bf24681ac79d1850f21253","sha1":"6466f76d7cb062a107ff24b6617b02b1841d7e50","sha256":"ec4f0ae9d4e88c6f83fe08f7e6a2e9c5c406177c918590e312bd356ab0383997","sha512":"190cf8f93636cb50c2b92036a0c8c3e39044a0a8c85da8165ae4387e63ae9f1f1794532365aaeb5ea1914b9a96580005506979f3ecfc2945d831083b77aea203","ssdeep":"768:6AeFxAbQ8u8SjWTInMADfNj/0vMqYsjYq1WAmLjBfMFMGoqrIz2XoPorOp9XXW+j:ROxAErts/YuFdrIz2VOp9XXva4","tlshash":"eb33e849b221356107efb1b1511f120e7336693ee94640acb8a9d9f62cb9c487277f3d","first_seen":"2025-08-04T08:39:40.765043Z","last_seen":"2026-02-17T22:28:30.142218Z","times_seen":10,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--e-mndli-7wa.ch/","fqdn":"xn--e-mndli-7wa.ch","domain":"xn--e-mndli-7wa.ch","tld":"ch"},"ip":{"addr":"185.101.158.113","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-07T06:29:42.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--e-mndli-7wa.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 00:28:07 GMT","end":"Thu, 19 Mar 2026 00:28:06 GMT"},"fingerprint":{"sha1":"5A:16:EA:28:E9:3F:F0:5F:F3:D4:8F:B0:86:F7:40:3A:B0:DA:F9:57","sha256":"9C:8B:B1:91:B6:FF:45:D8:38:4A:46:F2:37:A0:8E:8B:AB:DA:BA:1F:1A:26:A9:4E:C4:67:F0:F1:D2:B7:45:2A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xn--e-mndli-7wa.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx/1.10.3\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nDate: Wed, 07 Jan 2026 06:29:42 GMT\r\nLocation: https://www.e-maendli.ch\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56198,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":156,"dns":56,"connect":31,"send":0,"wait":51,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.e-maendli.ch/build-base/assets/image-b214714a.js","fqdn":"www.e-maendli.ch","domain":"e-maendli.ch","tld":"ch"},"ip":{"addr":"194.56.190.10","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.e-maendli.ch/","date":"2026-01-07T06:29:44.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-maendli.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 23:25:56 GMT","end":"Mon, 30 Mar 2026 23:25:55 GMT"},"fingerprint":{"sha1":"BA:F7:D4:3B:58:6F:6F:DF:AB:C2:9F:69:34:3E:67:F9:8C:A0:D9:CD","sha256":"2B:5F:05:83:0D:71:A5:CC:DE:CB:C7:05:77:77:9E:0A:25:63:B4:C8:80:87:AB:BF:F2:81:D2:39:5F:B1:53:51"}}},"request":{"raw":"GET /build-base/assets/image-b214714a.js HTTP/1.1\r\nHost: www.e-maendli.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.e-maendli.ch/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik40dHFnK0o4OXlOSEdxaHc0SXJoZWc9PSIsInZhbHVlIjoiVzNZYlRzbkhyWXJab25uZnpyNXVla1U1a2p2NUxuRDhpY3huWFFUa2MrclZ1eWgzanlmcVViYk1ldkY5bWRvR1lGcTJtakMvb0NiRkVLMlhOcUtXZXNuUFordXFDUWQ2N2VVb2RKN1VDMFRWNUt0UlVKSnI3aHNXUTFOUWtjTDAiLCJtYWMiOiIzZjBmZTcyZGYwYmMwYmM0Njc1NWVmYWVkYWI4OTBiN2VhNDQ5MTI2YTRhMjRmZmY4MjdiZmYwOTA2OWMwODAzIiwidGFnIjoiIn0%3D; e_maendlich_session=eyJpdiI6ImxNZlplWStEcUY2WVMvdE04ejhHNFE9PSIsInZhbHVlIjoic3V5QmMyM25YbUhDdDcyOXJDY1VMNmVob1p1UFVBUEJ3RGhxN29kejAzNmdvUkVxRkZNdjBRa3pSd0U0a2hGYXV4Vy91TnZwckk2aktjT0RzWlkvbkhTTTZNc0xxSklUOXllTXVjdFMwTEdiMXhCQ3c1dFJ6aUlzcmpKZnpFVUQiLCJtYWMiOiI0N2UzMDFlYTk5OTdkMDNkMWUzYTcxYjM0ODJjYzlkYjc2ZWQ1NzI1Y2RjN2FhMTU1ZDNmN2RhYjVhYjgxMGQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 06:29:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 11 Aug 2025 11:50:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6899d8f0-485\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1157,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1156)","md5":"ed18b4b84d978974cd45b0bb167a37e8","sha1":"6c3c9974cf5a644a0ed61edf788ff2a610624f8e","sha256":"65473b429012ee59808326ba27d19d40de52d1129fb5fc71cba56172da3d6ef8","sha512":"f236e7c4f11ea97a3cac3596b721bef71b326100bfc916e5a91d21915cbf28a298589d14edf4723cd1ca1b956f2701061d2020603cb093e442722d1c2b233a5b","ssdeep":"","tlshash":"dd212ba4fd11e19bc1be297b122f713c2f674d454b0bc2a0b118f08845f0c6abb36a74","first_seen":"2025-08-04T08:39:40.776872Z","last_seen":"2026-02-17T22:28:30.162502Z","times_seen":9,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.e-maendli.ch/files/userdata/thumbs/compressed/474918.JPG","fqdn":"www.e-maendli.ch","domain":"e-maendli.ch","tld":"ch"},"ip":{"addr":"194.56.190.10","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.e-maendli.ch/","date":"2026-01-07T06:29:44.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-maendli.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 23:25:56 GMT","end":"Mon, 30 Mar 2026 23:25:55 GMT"},"fingerprint":{"sha1":"BA:F7:D4:3B:58:6F:6F:DF:AB:C2:9F:69:34:3E:67:F9:8C:A0:D9:CD","sha256":"2B:5F:05:83:0D:71:A5:CC:DE:CB:C7:05:77:77:9E:0A:25:63:B4:C8:80:87:AB:BF:F2:81:D2:39:5F:B1:53:51"}}},"request":{"raw":"GET /files/userdata/thumbs/compressed/474918.JPG HTTP/1.1\r\nHost: www.e-maendli.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.e-maendli.ch/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik40dHFnK0o4OXlOSEdxaHc0SXJoZWc9PSIsInZhbHVlIjoiVzNZYlRzbkhyWXJab25uZnpyNXVla1U1a2p2NUxuRDhpY3huWFFUa2MrclZ1eWgzanlmcVViYk1ldkY5bWRvR1lGcTJtakMvb0NiRkVLMlhOcUtXZXNuUFordXFDUWQ2N2VVb2RKN1VDMFRWNUt0UlVKSnI3aHNXUTFOUWtjTDAiLCJtYWMiOiIzZjBmZTcyZGYwYmMwYmM0Njc1NWVmYWVkYWI4OTBiN2VhNDQ5MTI2YTRhMjRmZmY4MjdiZmYwOTA2OWMwODAzIiwidGFnIjoiIn0%3D; e_maendlich_session=eyJpdiI6ImxNZlplWStEcUY2WVMvdE04ejhHNFE9PSIsInZhbHVlIjoic3V5QmMyM25YbUhDdDcyOXJDY1VMNmVob1p1UFVBUEJ3RGhxN29kejAzNmdvUkVxRkZNdjBRa3pSd0U0a2hGYXV4Vy91TnZwckk2aktjT0RzWlkvbkhTTTZNc0xxSklUOXllTXVjdFMwTEdiMXhCQ3c1dFJ6aUlzcmpKZnpFVUQiLCJtYWMiOiI0N2UzMDFlYTk5OTdkMDNkMWUzYTcxYjM0ODJjYzlkYjc2ZWQ1NzI1Y2RjN2FhMTU1ZDNmN2RhYjVhYjgxMGQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 06:29:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 491295\r\nlast-modified: Fri, 14 Jul 2023 11:09:31 GMT\r\netag: \"64b12ceb-77f1f\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":491295,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 3840x2560, components 3","md5":"db22f736e6f79e9f716eb6081449ef3c","sha1":"bf988d536f62d1091d7ceaba6d001105acc30a8a","sha256":"1764723be7912c1892c18b0efe1c9d15d357e10f95b262108e883dd493ed6426","sha512":"dbc857fa89e2a30f309281dbce9b2af34264f76b64c850ffc487845dbd3a29e22439339d065a99556b88834d5008f754083743286c564f7c432ac7a5bef512e5","ssdeep":"12288:tXE1ascxqJDU+CXD7dl6xY54J+uZYIEox/v4Am75u:G1asrD4z5EsA++hEox4A4u","tlshash":"5da4235f3239b2308bbd56708af4eb8967941754d1cd83ef210b8d42aa7f709a7b7508","first_seen":"2026-01-07T06:30:17.454348Z","last_seen":"2026-01-07T06:30:17.454348Z","times_seen":1,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.e-maendli.ch/files/userdata/thumbs/compressed/474911.JPG","fqdn":"www.e-maendli.ch","domain":"e-maendli.ch","tld":"ch"},"ip":{"addr":"194.56.190.10","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.e-maendli.ch/","date":"2026-01-07T06:29:44.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-maendli.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 23:25:56 GMT","end":"Mon, 30 Mar 2026 23:25:55 GMT"},"fingerprint":{"sha1":"BA:F7:D4:3B:58:6F:6F:DF:AB:C2:9F:69:34:3E:67:F9:8C:A0:D9:CD","sha256":"2B:5F:05:83:0D:71:A5:CC:DE:CB:C7:05:77:77:9E:0A:25:63:B4:C8:80:87:AB:BF:F2:81:D2:39:5F:B1:53:51"}}},"request":{"raw":"GET /files/userdata/thumbs/compressed/474911.JPG HTTP/1.1\r\nHost: www.e-maendli.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.e-maendli.ch/files/css/page_439499.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik40dHFnK0o4OXlOSEdxaHc0SXJoZWc9PSIsInZhbHVlIjoiVzNZYlRzbkhyWXJab25uZnpyNXVla1U1a2p2NUxuRDhpY3huWFFUa2MrclZ1eWgzanlmcVViYk1ldkY5bWRvR1lGcTJtakMvb0NiRkVLMlhOcUtXZXNuUFordXFDUWQ2N2VVb2RKN1VDMFRWNUt0UlVKSnI3aHNXUTFOUWtjTDAiLCJtYWMiOiIzZjBmZTcyZGYwYmMwYmM0Njc1NWVmYWVkYWI4OTBiN2VhNDQ5MTI2YTRhMjRmZmY4MjdiZmYwOTA2OWMwODAzIiwidGFnIjoiIn0%3D; e_maendlich_session=eyJpdiI6ImxNZlplWStEcUY2WVMvdE04ejhHNFE9PSIsInZhbHVlIjoic3V5QmMyM25YbUhDdDcyOXJDY1VMNmVob1p1UFVBUEJ3RGhxN29kejAzNmdvUkVxRkZNdjBRa3pSd0U0a2hGYXV4Vy91TnZwckk2aktjT0RzWlkvbkhTTTZNc0xxSklUOXllTXVjdFMwTEdiMXhCQ3c1dFJ6aUlzcmpKZnpFVUQiLCJtYWMiOiI0N2UzMDFlYTk5OTdkMDNkMWUzYTcxYjM0ODJjYzlkYjc2ZWQ1NzI1Y2RjN2FhMTU1ZDNmN2RhYjVhYjgxMGQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 06:29:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 548001\r\nlast-modified: Fri, 14 Jul 2023 11:09:31 GMT\r\netag: \"64b12ceb-85ca1\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":548001,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 3840x2560, components 3","md5":"c6a9b4943ad904dd7bd9ebc01bd63d6e","sha1":"884ea5a7196bb51530205e54689ba91c3f89df3f","sha256":"9c075598cffbe7744c8976329eb3a38ee392aec1f4f96511e6bedbca58460425","sha512":"aedc0cb8be52c2e9cb6c73d7d85e9dcf221e5c70812266484d65534fd2bbc80a527662803eee5664e4585f3d279022df3dc247b1b7003099289100106b2e9ed5","ssdeep":"12288:FESUqdtidZ4QmkYD/EwsEVf7L/c3GXCBMo2CmXmSO5gTA9KESJ+H+hwkw48HR:FE2i7ykYMER7MGXCBMo2CAmSO5S0ffeO","tlshash":"a2c4233f47544753a13c6d3bb664b1e482c0ba9c74edcd1a3239a7b815de98fad8086c","first_seen":"2026-01-07T06:30:17.456921Z","last_seen":"2026-01-07T06:30:17.456921Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.e-maendli.ch/files/fonts/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2","fqdn":"www.e-maendli.ch","domain":"e-maendli.ch","tld":"ch"},"ip":{"addr":"194.56.190.10","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.e-maendli.ch/","date":"2026-01-07T06:29:44.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-maendli.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 23:25:56 GMT","end":"Mon, 30 Mar 2026 23:25:55 GMT"},"fingerprint":{"sha1":"BA:F7:D4:3B:58:6F:6F:DF:AB:C2:9F:69:34:3E:67:F9:8C:A0:D9:CD","sha256":"2B:5F:05:83:0D:71:A5:CC:DE:CB:C7:05:77:77:9E:0A:25:63:B4:C8:80:87:AB:BF:F2:81:D2:39:5F:B1:53:51"}}},"request":{"raw":"GET /files/fonts/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1\r\nHost: www.e-maendli.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.e-maendli.ch/files/css/app.css?id=a259c016d29c9d943a533bc1cba50a7b\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik40dHFnK0o4OXlOSEdxaHc0SXJoZWc9PSIsInZhbHVlIjoiVzNZYlRzbkhyWXJab25uZnpyNXVla1U1a2p2NUxuRDhpY3huWFFUa2MrclZ1eWgzanlmcVViYk1ldkY5bWRvR1lGcTJtakMvb0NiRkVLMlhOcUtXZXNuUFordXFDUWQ2N2VVb2RKN1VDMFRWNUt0UlVKSnI3aHNXUTFOUWtjTDAiLCJtYWMiOiIzZjBmZTcyZGYwYmMwYmM0Njc1NWVmYWVkYWI4OTBiN2VhNDQ5MTI2YTRhMjRmZmY4MjdiZmYwOTA2OWMwODAzIiwidGFnIjoiIn0%3D; e_maendlich_session=eyJpdiI6ImxNZlplWStEcUY2WVMvdE04ejhHNFE9PSIsInZhbHVlIjoic3V5QmMyM25YbUhDdDcyOXJDY1VMNmVob1p1UFVBUEJ3RGhxN29kejAzNmdvUkVxRkZNdjBRa3pSd0U0a2hGYXV4Vy91TnZwckk2aktjT0RzWlkvbkhTTTZNc0xxSklUOXllTXVjdFMwTEdiMXhCQ3c1dFJ6aUlzcmpKZnpFVUQiLCJtYWMiOiI0N2UzMDFlYTk5OTdkMDNkMWUzYTcxYjM0ODJjYzlkYjc2ZWQ1NzI1Y2RjN2FhMTU1ZDNmN2RhYjVhYjgxMGQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 06:29:44 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 34852\r\nlast-modified: Mon, 26 Jun 2023 05:09:12 GMT\r\netag: \"64991d78-8824\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34852,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34852, version 1.0","md5":"0e8eefb4549a2edf26c560cb9845952e","sha1":"8d0b1718aacad934fd0043c87cbc54aa091396bf","sha256":"7f653b3ce9d3277457fc6da4edb246ae2f6c913f088c42dcb8cd2e96267aa21a","sha512":"237659dd4b8680ab4856d38290d57ae9211b479c51033d8db4ac61326551e33cc245ebf10eed35aab6854d8196d6651eb70cb63a2ba1d7373404851fe084772e","ssdeep":"768:zF+n1CXK5zIgArjvw2FiGzwrRnMiVPxhA31bgD8BgYyjAtJ:kAda5rRnMiVjAuDtYbtJ","tlshash":"c4f2f1e5b7a37d69c3f04922aa3e5761e4ca56eb0d60899b44438353bd6c0f02bd0268","first_seen":"2023-04-05T14:04:03Z","last_seen":"2026-04-04T04:47:44.539721Z","times_seen":27245,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.e-maendli.ch/","fqdn":"www.e-maendli.ch","domain":"e-maendli.ch","tld":"ch"},"ip":{"addr":"194.56.190.10","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-07T06:29:42.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-maendli.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 23:25:56 GMT","end":"Mon, 30 Mar 2026 23:25:55 GMT"},"fingerprint":{"sha1":"BA:F7:D4:3B:58:6F:6F:DF:AB:C2:9F:69:34:3E:67:F9:8C:A0:D9:CD","sha256":"2B:5F:05:83:0D:71:A5:CC:DE:CB:C7:05:77:77:9E:0A:25:63:B4:C8:80:87:AB:BF:F2:81:D2:39:5F:B1:53:51"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.e-maendli.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 06:29:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6254\r\ncache-control: max-age=0, must-revalidate, no-cache, no-store, private\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Ik40dHFnK0o4OXlOSEdxaHc0SXJoZWc9PSIsInZhbHVlIjoiVzNZYlRzbkhyWXJab25uZnpyNXVla1U1a2p2NUxuRDhpY3huWFFUa2MrclZ1eWgzanlmcVViYk1ldkY5bWRvR1lGcTJtakMvb0NiRkVLMlhOcUtXZXNuUFordXFDUWQ2N2VVb2RKN1VDMFRWNUt0UlVKSnI3aHNXUTFOUWtjTDAiLCJtYWMiOiIzZjBmZTcyZGYwYmMwYmM0Njc1NWVmYWVkYWI4OTBiN2VhNDQ5MTI2YTRhMjRmZmY4MjdiZmYwOTA2OWMwODAzIiwidGFnIjoiIn0%3D; expires=Wed, 07 Jan 2026 08:29:44 GMT; Max-Age=7200; path=/; secure; samesite=lax\ne_maendlich_session=eyJpdiI6ImxNZlplWStEcUY2WVMvdE04ejhHNFE9PSIsInZhbHVlIjoic3V5QmMyM25YbUhDdDcyOXJDY1VMNmVob1p1UFVBUEJ3RGhxN29kejAzNmdvUkVxRkZNdjBRa3pSd0U0a2hGYXV4Vy91TnZwckk2aktjT0RzWlkvbkhTTTZNc0xxSklUOXllTXVjdFMwTEdiMXhCQ3c1dFJ6aUlzcmpKZnpFVUQiLCJtYWMiOiI0N2UzMDFlYTk5OTdkMDNkMWUzYTcxYjM0ODJjYzlkYjc2ZWQ1NzI1Y2RjN2FhMTU1ZDNmN2RhYjVhYjgxMGQwIiwidGFnIjoiIn0%3D; expires=Wed, 07 Jan 2026 08:29:44 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Livewire","description":"Livewire is a full-stack Laravel framework for building dynamic interfaces.","website":"https://laravel-livewire.com","common_platform_enumeration":"","icon":"Livewire.svg","categories":["Web frameworks","Miscellaneous"]}],"data":{"size":56198,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3927)","md5":"2b7cbb448d2aa020f905b1b8f2f3604c","sha1":"5f31f5902e90180206cba8d65b2297470e992e1d","sha256":"33a78d0d15be8de1561316af2fa8da96a7e869d3d2e826762dca5473f0a0e430","sha512":"097671fea3455035f3188040422b704f9527d82ca9989dff69e569115c6061442bc0f2a974b84aca4d0a8ae417ee32113779dc8768f489929875047c483fa11e","ssdeep":"384:cTwDYwIukwMxGNF3x5eznO68GeMnN+RV1:cTF2kwMsNxezbeMYJ","tlshash":"ac43a3632c7d02dd64ac243191695f44db53f90bef471e48be8fa9f20bccc6595a2a38","first_seen":"2026-01-07T06:30:17.460316Z","last_seen":"2026-01-07T06:30:17.460316Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1448,"timings":{"blocked":150,"dns":60,"connect":38,"send":0,"wait":1147,"receive":1,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.e-maendli.ch/files/template.css","fqdn":"www.e-maendli.ch","domain":"e-maendli.ch","tld":"ch"},"ip":{"addr":"194.56.190.10","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.e-maendli.ch/","date":"2026-01-07T06:29:44.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-maendli.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 23:25:56 GMT","end":"Mon, 30 Mar 2026 23:25:55 GMT"},"fingerprint":{"sha1":"BA:F7:D4:3B:58:6F:6F:DF:AB:C2:9F:69:34:3E:67:F9:8C:A0:D9:CD","sha256":"2B:5F:05:83:0D:71:A5:CC:DE:CB:C7:05:77:77:9E:0A:25:63:B4:C8:80:87:AB:BF:F2:81:D2:39:5F:B1:53:51"}}},"request":{"raw":"GET /files/template.css HTTP/1.1\r\nHost: www.e-maendli.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.e-maendli.ch/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik40dHFnK0o4OXlOSEdxaHc0SXJoZWc9PSIsInZhbHVlIjoiVzNZYlRzbkhyWXJab25uZnpyNXVla1U1a2p2NUxuRDhpY3huWFFUa2MrclZ1eWgzanlmcVViYk1ldkY5bWRvR1lGcTJtakMvb0NiRkVLMlhOcUtXZXNuUFordXFDUWQ2N2VVb2RKN1VDMFRWNUt0UlVKSnI3aHNXUTFOUWtjTDAiLCJtYWMiOiIzZjBmZTcyZGYwYmMwYmM0Njc1NWVmYWVkYWI4OTBiN2VhNDQ5MTI2YTRhMjRmZmY4MjdiZmYwOTA2OWMwODAzIiwidGFnIjoiIn0%3D; e_maendlich_session=eyJpdiI6ImxNZlplWStEcUY2WVMvdE04ejhHNFE9PSIsInZhbHVlIjoic3V5QmMyM25YbUhDdDcyOXJDY1VMNmVob1p1UFVBUEJ3RGhxN29kejAzNmdvUkVxRkZNdjBRa3pSd0U0a2hGYXV4Vy91TnZwckk2aktjT0RzWlkvbkhTTTZNc0xxSklUOXllTXVjdFMwTEdiMXhCQ3c1dFJ6aUlzcmpKZnpFVUQiLCJtYWMiOiI0N2UzMDFlYTk5OTdkMDNkMWUzYTcxYjM0ODJjYzlkYjc2ZWQ1NzI1Y2RjN2FhMTU1ZDNmN2RhYjVhYjgxMGQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 06:29:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 Aug 2025 09:01:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a58f04-3cc39\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":248889,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (62608)","md5":"eb5a288a7a1f31b8d67dfebef875be93","sha1":"7a348022a034d4a14fa83881af4daea7a6cc29c4","sha256":"0e4e9aecc56a5dfb6f79d603e380a860c4dc8482f5aec9a4726b9efd3219e785","sha512":"610baa72cc2b44b50cef725025ce13dd6c4591e800af929627af6a793aeb004b52cdbeaf1f62437cead5b16be033157a783db55154e3cd6f15442a2eadca96a0","ssdeep":"1536:GKM1MvMaMfMRQUgI/c1EpKutrZFUMpMdm2b979TSbNQKYtr6rHZkcIJuXdLVj4/Z:6I/c1E0o1FUMpMdmE979TevZc1YQ","tlshash":"99341bf4e14824d57332c80fa390b76d2539f372d5524ea6f12f998c4fc669922a2f2d","first_seen":"2026-01-07T06:30:17.462582Z","last_seen":"2026-01-07T06:30:17.462582Z","times_seen":1,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.e-maendli.ch/files/css/app.css?id=a259c016d29c9d943a533bc1cba50a7b","fqdn":"www.e-maendli.ch","domain":"e-maendli.ch","tld":"ch"},"ip":{"addr":"194.56.190.10","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.e-maendli.ch/","date":"2026-01-07T06:29:44.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-maendli.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 23:25:56 GMT","end":"Mon, 30 Mar 2026 23:25:55 GMT"},"fingerprint":{"sha1":"BA:F7:D4:3B:58:6F:6F:DF:AB:C2:9F:69:34:3E:67:F9:8C:A0:D9:CD","sha256":"2B:5F:05:83:0D:71:A5:CC:DE:CB:C7:05:77:77:9E:0A:25:63:B4:C8:80:87:AB:BF:F2:81:D2:39:5F:B1:53:51"}}},"request":{"raw":"GET /files/css/app.css?id=a259c016d29c9d943a533bc1cba50a7b HTTP/1.1\r\nHost: www.e-maendli.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.e-maendli.ch/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik40dHFnK0o4OXlOSEdxaHc0SXJoZWc9PSIsInZhbHVlIjoiVzNZYlRzbkhyWXJab25uZnpyNXVla1U1a2p2NUxuRDhpY3huWFFUa2MrclZ1eWgzanlmcVViYk1ldkY5bWRvR1lGcTJtakMvb0NiRkVLMlhOcUtXZXNuUFordXFDUWQ2N2VVb2RKN1VDMFRWNUt0UlVKSnI3aHNXUTFOUWtjTDAiLCJtYWMiOiIzZjBmZTcyZGYwYmMwYmM0Njc1NWVmYWVkYWI4OTBiN2VhNDQ5MTI2YTRhMjRmZmY4MjdiZmYwOTA2OWMwODAzIiwidGFnIjoiIn0%3D; e_maendlich_session=eyJpdiI6ImxNZlplWStEcUY2WVMvdE04ejhHNFE9PSIsInZhbHVlIjoic3V5QmMyM25YbUhDdDcyOXJDY1VMNmVob1p1UFVBUEJ3RGhxN29kejAzNmdvUkVxRkZNdjBRa3pSd0U0a2hGYXV4Vy91TnZwckk2aktjT0RzWlkvbkhTTTZNc0xxSklUOXllTXVjdFMwTEdiMXhCQ3c1dFJ6aUlzcmpKZnpFVUQiLCJtYWMiOiI0N2UzMDFlYTk5OTdkMDNkMWUzYTcxYjM0ODJjYzlkYjc2ZWQ1NzI1Y2RjN2FhMTU1ZDNmN2RhYjVhYjgxMGQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 06:29:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 11 Aug 2025 11:49:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6899d8c6-24aca\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150218,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a259c016d29c9d943a533bc1cba50a7b","sha1":"09b45346a5e09c790b9dfabaeeee1eb074ab8fff","sha256":"a3cb9e447838ff7f27a00ca77f6e334b0da9089710b865ec7c0976b8d13012ea","sha512":"4ab2ecc960622209fe63f35a47bbda1a63fbb17c2dc28f5555ea7a771626232bac03ddf1152ffa48d3e8743e0bf2aadf6ffb49c29ae0d8ab51391ad549cf28e5","ssdeep":"1536:VQq4vnQpQxQtQiQSNRESbapy9jHtbqT5O:VQqgYk2dUpQjHte9O","tlshash":"1ae38234562a644194b38ca330ca77273d1ea009b6525963f62f4ae88ff793b13d5b3d","first_seen":"2025-08-04T08:39:40.767834Z","last_seen":"2026-01-07T06:30:17.464902Z","times_seen":4,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.e-maendli.ch/files/userdata/thumbs/compressed/474916.JPG","fqdn":"www.e-maendli.ch","domain":"e-maendli.ch","tld":"ch"},"ip":{"addr":"194.56.190.10","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.e-maendli.ch/","date":"2026-01-07T06:29:44.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-maendli.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 23:25:56 GMT","end":"Mon, 30 Mar 2026 23:25:55 GMT"},"fingerprint":{"sha1":"BA:F7:D4:3B:58:6F:6F:DF:AB:C2:9F:69:34:3E:67:F9:8C:A0:D9:CD","sha256":"2B:5F:05:83:0D:71:A5:CC:DE:CB:C7:05:77:77:9E:0A:25:63:B4:C8:80:87:AB:BF:F2:81:D2:39:5F:B1:53:51"}}},"request":{"raw":"GET /files/userdata/thumbs/compressed/474916.JPG HTTP/1.1\r\nHost: www.e-maendli.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.e-maendli.ch/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik40dHFnK0o4OXlOSEdxaHc0SXJoZWc9PSIsInZhbHVlIjoiVzNZYlRzbkhyWXJab25uZnpyNXVla1U1a2p2NUxuRDhpY3huWFFUa2MrclZ1eWgzanlmcVViYk1ldkY5bWRvR1lGcTJtakMvb0NiRkVLMlhOcUtXZXNuUFordXFDUWQ2N2VVb2RKN1VDMFRWNUt0UlVKSnI3aHNXUTFOUWtjTDAiLCJtYWMiOiIzZjBmZTcyZGYwYmMwYmM0Njc1NWVmYWVkYWI4OTBiN2VhNDQ5MTI2YTRhMjRmZmY4MjdiZmYwOTA2OWMwODAzIiwidGFnIjoiIn0%3D; e_maendlich_session=eyJpdiI6ImxNZlplWStEcUY2WVMvdE04ejhHNFE9PSIsInZhbHVlIjoic3V5QmMyM25YbUhDdDcyOXJDY1VMNmVob1p1UFVBUEJ3RGhxN29kejAzNmdvUkVxRkZNdjBRa3pSd0U0a2hGYXV4Vy91TnZwckk2aktjT0RzWlkvbkhTTTZNc0xxSklUOXllTXVjdFMwTEdiMXhCQ3c1dFJ6aUlzcmpKZnpFVUQiLCJtYWMiOiI0N2UzMDFlYTk5OTdkMDNkMWUzYTcxYjM0ODJjYzlkYjc2ZWQ1NzI1Y2RjN2FhMTU1ZDNmN2RhYjVhYjgxMGQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 06:29:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 518054\r\nlast-modified: Fri, 14 Jul 2023 11:09:31 GMT\r\netag: \"64b12ceb-7e7a6\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":518054,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 3840x2560, components 3","md5":"24a21d01956f63489d2ee1f47431c075","sha1":"039eb4f6f2b88765741dc8eecaa0a1e815b4fb53","sha256":"d21fcf4ec9ffae9e6bfc8a717ee488d49bfa0ea9b911532d485236bfc001d511","sha512":"0ea12948ec666e70a2eb77a77ae7595b8a5b01e90b42617b0f051d8a73c7138b65248dce92e617ae6391df8a7322215656ae1397c07b0cc5e5ac8ad31b53d088","ssdeep":"6144:aJfrYtacs4BrjLvsnTz0fOQ7LHhtFwOV3i2PUTBgHjO6ZMFupUSkwDnkXq1JGru8:WEacsj4LHrbVyYHj8uGoncq1JGrdv","tlshash":"8fb423dbc6bb87a8f4957fb547d329661a7de3f30960028b8f649b41d53630a790cb02","first_seen":"2026-01-07T06:30:17.465929Z","last_seen":"2026-01-07T06:30:17.465929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":138,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.e-maendli.ch/files/js/app.js?id=69851f66c478ba49d36c29f5e06aa2d4","fqdn":"www.e-maendli.ch","domain":"e-maendli.ch","tld":"ch"},"ip":{"addr":"194.56.190.10","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.e-maendli.ch/","date":"2026-01-07T06:29:44.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-maendli.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 23:25:56 GMT","end":"Mon, 30 Mar 2026 23:25:55 GMT"},"fingerprint":{"sha1":"BA:F7:D4:3B:58:6F:6F:DF:AB:C2:9F:69:34:3E:67:F9:8C:A0:D9:CD","sha256":"2B:5F:05:83:0D:71:A5:CC:DE:CB:C7:05:77:77:9E:0A:25:63:B4:C8:80:87:AB:BF:F2:81:D2:39:5F:B1:53:51"}}},"request":{"raw":"GET /files/js/app.js?id=69851f66c478ba49d36c29f5e06aa2d4 HTTP/1.1\r\nHost: www.e-maendli.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.e-maendli.ch/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik40dHFnK0o4OXlOSEdxaHc0SXJoZWc9PSIsInZhbHVlIjoiVzNZYlRzbkhyWXJab25uZnpyNXVla1U1a2p2NUxuRDhpY3huWFFUa2MrclZ1eWgzanlmcVViYk1ldkY5bWRvR1lGcTJtakMvb0NiRkVLMlhOcUtXZXNuUFordXFDUWQ2N2VVb2RKN1VDMFRWNUt0UlVKSnI3aHNXUTFOUWtjTDAiLCJtYWMiOiIzZjBmZTcyZGYwYmMwYmM0Njc1NWVmYWVkYWI4OTBiN2VhNDQ5MTI2YTRhMjRmZmY4MjdiZmYwOTA2OWMwODAzIiwidGFnIjoiIn0%3D; e_maendlich_session=eyJpdiI6ImxNZlplWStEcUY2WVMvdE04ejhHNFE9PSIsInZhbHVlIjoic3V5QmMyM25YbUhDdDcyOXJDY1VMNmVob1p1UFVBUEJ3RGhxN29kejAzNmdvUkVxRkZNdjBRa3pSd0U0a2hGYXV4Vy91TnZwckk2aktjT0RzWlkvbkhTTTZNc0xxSklUOXllTXVjdFMwTEdiMXhCQ3c1dFJ6aUlzcmpKZnpFVUQiLCJtYWMiOiI0N2UzMDFlYTk5OTdkMDNkMWUzYTcxYjM0ODJjYzlkYjc2ZWQ1NzI1Y2RjN2FhMTU1ZDNmN2RhYjVhYjgxMGQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 06:29:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 11 Aug 2025 11:49:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6899d8c6-1ab93\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":109459,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (45386), with LF, NEL line terminators","md5":"13010ea52c0c85ff5ffeb3ca25fc31b9","sha1":"22ec88e780dbe065b98da2abeb8046a4dd6741c4","sha256":"90a34e346bdcfe1c0aa5d396431fd574c9defb7d6fa8d1a2232ea2f48b44d1b5","sha512":"13958aa5df25bf8264efc31c2950a293cbf4c2229ccf49bcb83f0b7b4c965f00ee6ddcfe28a21f41766fa98f03b57df37067ea439fbd94c514ecc781967cad8b","ssdeep":"1536:hDKoXch+0PEEL8gZL0LXw35EdzdjMxeIbmyWZXUdyob/EHLkm:hFch+07L8gZL0LX8k7ivYUsQcrr","tlshash":"feb3b4cab6c3f03193ab207500af410bf23e6d58784e9984e261f4d97c7954ea1a7f79","first_seen":"2025-10-11T04:45:44.83445Z","last_seen":"2026-01-07T06:30:17.468328Z","times_seen":2,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.e-maendli.ch/files/css/page_439499.css","fqdn":"www.e-maendli.ch","domain":"e-maendli.ch","tld":"ch"},"ip":{"addr":"194.56.190.10","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.e-maendli.ch/","date":"2026-01-07T06:29:44.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-maendli.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 23:25:56 GMT","end":"Mon, 30 Mar 2026 23:25:55 GMT"},"fingerprint":{"sha1":"BA:F7:D4:3B:58:6F:6F:DF:AB:C2:9F:69:34:3E:67:F9:8C:A0:D9:CD","sha256":"2B:5F:05:83:0D:71:A5:CC:DE:CB:C7:05:77:77:9E:0A:25:63:B4:C8:80:87:AB:BF:F2:81:D2:39:5F:B1:53:51"}}},"request":{"raw":"GET /files/css/page_439499.css HTTP/1.1\r\nHost: www.e-maendli.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.e-maendli.ch/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik40dHFnK0o4OXlOSEdxaHc0SXJoZWc9PSIsInZhbHVlIjoiVzNZYlRzbkhyWXJab25uZnpyNXVla1U1a2p2NUxuRDhpY3huWFFUa2MrclZ1eWgzanlmcVViYk1ldkY5bWRvR1lGcTJtakMvb0NiRkVLMlhOcUtXZXNuUFordXFDUWQ2N2VVb2RKN1VDMFRWNUt0UlVKSnI3aHNXUTFOUWtjTDAiLCJtYWMiOiIzZjBmZTcyZGYwYmMwYmM0Njc1NWVmYWVkYWI4OTBiN2VhNDQ5MTI2YTRhMjRmZmY4MjdiZmYwOTA2OWMwODAzIiwidGFnIjoiIn0%3D; e_maendlich_session=eyJpdiI6ImxNZlplWStEcUY2WVMvdE04ejhHNFE9PSIsInZhbHVlIjoic3V5QmMyM25YbUhDdDcyOXJDY1VMNmVob1p1UFVBUEJ3RGhxN29kejAzNmdvUkVxRkZNdjBRa3pSd0U0a2hGYXV4Vy91TnZwckk2aktjT0RzWlkvbkhTTTZNc0xxSklUOXllTXVjdFMwTEdiMXhCQ3c1dFJ6aUlzcmpKZnpFVUQiLCJtYWMiOiI0N2UzMDFlYTk5OTdkMDNkMWUzYTcxYjM0ODJjYzlkYjc2ZWQ1NzI1Y2RjN2FhMTU1ZDNmN2RhYjVhYjgxMGQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 06:29:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 07 Jan 2026 06:29:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695dfd58-1c30\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7216,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7216), with no line terminators","md5":"bd609ea44ea83dbc56d0975a1bc8ace2","sha1":"7716f51f883fdf98f175816ac56412cf04148bf3","sha256":"e1d3bd8e3ebd155f0995b450b87dd739a0d1b5505f323c92fe928ef0ae7e2cac","sha512":"4c84f9136c86700ac8df05c4bde7394c89a2c2c2c7115a7abe48c09948827fbd3deff73f8fae853ad14bebe3c9952657522984a034d691ed0677036f052f473c","ssdeep":"192:2IuAapXVo3Q2OZQyQuXoduY7XdK6Ncwhy9mO:vGmO","tlshash":"09e1a3d1f98640649857d56b2213f7fcb77f47026f0e4932b8e07a31c714ae724a2667","first_seen":"2026-01-07T06:30:17.470785Z","last_seen":"2026-01-07T06:30:17.470785Z","times_seen":1,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.e-maendli.ch/livewire/livewire.js?id=90730a3b0e7144480175","fqdn":"www.e-maendli.ch","domain":"e-maendli.ch","tld":"ch"},"ip":{"addr":"194.56.190.10","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.e-maendli.ch/","date":"2026-01-07T06:29:44.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-maendli.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 23:25:56 GMT","end":"Mon, 30 Mar 2026 23:25:55 GMT"},"fingerprint":{"sha1":"BA:F7:D4:3B:58:6F:6F:DF:AB:C2:9F:69:34:3E:67:F9:8C:A0:D9:CD","sha256":"2B:5F:05:83:0D:71:A5:CC:DE:CB:C7:05:77:77:9E:0A:25:63:B4:C8:80:87:AB:BF:F2:81:D2:39:5F:B1:53:51"}}},"request":{"raw":"GET /livewire/livewire.js?id=90730a3b0e7144480175 HTTP/1.1\r\nHost: www.e-maendli.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.e-maendli.ch/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik40dHFnK0o4OXlOSEdxaHc0SXJoZWc9PSIsInZhbHVlIjoiVzNZYlRzbkhyWXJab25uZnpyNXVla1U1a2p2NUxuRDhpY3huWFFUa2MrclZ1eWgzanlmcVViYk1ldkY5bWRvR1lGcTJtakMvb0NiRkVLMlhOcUtXZXNuUFordXFDUWQ2N2VVb2RKN1VDMFRWNUt0UlVKSnI3aHNXUTFOUWtjTDAiLCJtYWMiOiIzZjBmZTcyZGYwYmMwYmM0Njc1NWVmYWVkYWI4OTBiN2VhNDQ5MTI2YTRhMjRmZmY4MjdiZmYwOTA2OWMwODAzIiwidGFnIjoiIn0%3D; e_maendlich_session=eyJpdiI6ImxNZlplWStEcUY2WVMvdE04ejhHNFE9PSIsInZhbHVlIjoic3V5QmMyM25YbUhDdDcyOXJDY1VMNmVob1p1UFVBUEJ3RGhxN29kejAzNmdvUkVxRkZNdjBRa3pSd0U0a2hGYXV4Vy91TnZwckk2aktjT0RzWlkvbkhTTTZNc0xxSklUOXllTXVjdFMwTEdiMXhCQ3c1dFJ6aUlzcmpKZnpFVUQiLCJtYWMiOiI0N2UzMDFlYTk5OTdkMDNkMWUzYTcxYjM0ODJjYzlkYjc2ZWQ1NzI1Y2RjN2FhMTU1ZDNmN2RhYjVhYjgxMGQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 06:29:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 45033\r\nexpires: Thu, 07 Jan 2027 06:29:44 GMT\r\ncache-control: max-age=31536000, public\r\naccept-ranges: bytes\r\nlast-modified: Sat, 13 Jul 2024 17:58:46 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":174819,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53585)","md5":"0e377e741f7d57da94c0d5aed41693cd","sha1":"f2619196a61c34b00491f62774a84f778134b974","sha256":"38a4dc885f9d1267bbfaf361e24fbf51994bd7f6743784ec3e4a267bbe74a0be","sha512":"0ec135c5f1e0a57cfd9eb5f946aab9798b2dfb52e042ef6dbfbfce0f6f72ebd2211ac9b44e56e3fa8bd97f38eecea66ea01011f8091cc2c6c6fef6748a898013","ssdeep":"3072:VKWLfncHETio2zqDpPZZG2uIHIYKvt64EOxuA:VKWzsncDNDCvt65A","tlshash":"fe044a89b681f5b209c771a4543f390fb276205498ad9090f679cec07efa948522bf7f","first_seen":"2023-03-25T22:43:16Z","last_seen":"2026-04-04T08:34:21.755389Z","times_seen":1771,"resource_available":true,"data":null}},"time_used":787,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":785,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.e-maendli.ch/build-base/assets/jquery-b1664d58.js","fqdn":"www.e-maendli.ch","domain":"e-maendli.ch","tld":"ch"},"ip":{"addr":"194.56.190.10","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.e-maendli.ch/","date":"2026-01-07T06:29:44.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-maendli.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 23:25:56 GMT","end":"Mon, 30 Mar 2026 23:25:55 GMT"},"fingerprint":{"sha1":"BA:F7:D4:3B:58:6F:6F:DF:AB:C2:9F:69:34:3E:67:F9:8C:A0:D9:CD","sha256":"2B:5F:05:83:0D:71:A5:CC:DE:CB:C7:05:77:77:9E:0A:25:63:B4:C8:80:87:AB:BF:F2:81:D2:39:5F:B1:53:51"}}},"request":{"raw":"GET /build-base/assets/jquery-b1664d58.js HTTP/1.1\r\nHost: www.e-maendli.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.e-maendli.ch/build-base/assets/main-38f82476.js\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik40dHFnK0o4OXlOSEdxaHc0SXJoZWc9PSIsInZhbHVlIjoiVzNZYlRzbkhyWXJab25uZnpyNXVla1U1a2p2NUxuRDhpY3huWFFUa2MrclZ1eWgzanlmcVViYk1ldkY5bWRvR1lGcTJtakMvb0NiRkVLMlhOcUtXZXNuUFordXFDUWQ2N2VVb2RKN1VDMFRWNUt0UlVKSnI3aHNXUTFOUWtjTDAiLCJtYWMiOiIzZjBmZTcyZGYwYmMwYmM0Njc1NWVmYWVkYWI4OTBiN2VhNDQ5MTI2YTRhMjRmZmY4MjdiZmYwOTA2OWMwODAzIiwidGFnIjoiIn0%3D; e_maendlich_session=eyJpdiI6ImxNZlplWStEcUY2WVMvdE04ejhHNFE9PSIsInZhbHVlIjoic3V5QmMyM25YbUhDdDcyOXJDY1VMNmVob1p1UFVBUEJ3RGhxN29kejAzNmdvUkVxRkZNdjBRa3pSd0U0a2hGYXV4Vy91TnZwckk2aktjT0RzWlkvbkhTTTZNc0xxSklUOXllTXVjdFMwTEdiMXhCQ3c1dFJ6aUlzcmpKZnpFVUQiLCJtYWMiOiI0N2UzMDFlYTk5OTdkMDNkMWUzYTcxYjM0ODJjYzlkYjc2ZWQ1NzI1Y2RjN2FhMTU1ZDNmN2RhYjVhYjgxMGQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 06:29:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 11 Aug 2025 11:50:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6899d8f0-15710\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87824,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65079)","md5":"06ee94e199eab0fe40a475f783072ff6","sha1":"71458c31762ebf3bc2cc7e5064a350df1981273d","sha256":"cec4ab3069a16547c6a272c20c5401211719bcf03b973da9b3366256c7df397d","sha512":"84bb00a88f7ea6c16e3dff0191cb9c66ea14636deefc3050f922bcece832a8a6cbbff8fa06dc7170f07f24cfdbb666b97e554129c75839121f928b08b968f0e3","ssdeep":"1536:HJiKvi8KwwcdOmsewRj5j78tylDcD/GJKtMgBI8wSCX3STX2Qb:tOlewP38y+qKtMw1X2Qb","tlshash":"518309dcb2c6b46243ab60b9007f650bf2376899280dc510f069d8f9bd75a4a817bf7d","first_seen":"2024-08-20T08:15:14.016549Z","last_seen":"2026-02-17T22:28:30.156125Z","times_seen":18,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.e-maendli.ch/files/userdata/thumbs/compressed/474913.png","fqdn":"www.e-maendli.ch","domain":"e-maendli.ch","tld":"ch"},"ip":{"addr":"194.56.190.10","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.e-maendli.ch/","date":"2026-01-07T06:29:44.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-maendli.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 23:25:56 GMT","end":"Mon, 30 Mar 2026 23:25:55 GMT"},"fingerprint":{"sha1":"BA:F7:D4:3B:58:6F:6F:DF:AB:C2:9F:69:34:3E:67:F9:8C:A0:D9:CD","sha256":"2B:5F:05:83:0D:71:A5:CC:DE:CB:C7:05:77:77:9E:0A:25:63:B4:C8:80:87:AB:BF:F2:81:D2:39:5F:B1:53:51"}}},"request":{"raw":"GET /files/userdata/thumbs/compressed/474913.png HTTP/1.1\r\nHost: www.e-maendli.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.e-maendli.ch/files/css/page_439499.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik40dHFnK0o4OXlOSEdxaHc0SXJoZWc9PSIsInZhbHVlIjoiVzNZYlRzbkhyWXJab25uZnpyNXVla1U1a2p2NUxuRDhpY3huWFFUa2MrclZ1eWgzanlmcVViYk1ldkY5bWRvR1lGcTJtakMvb0NiRkVLMlhOcUtXZXNuUFordXFDUWQ2N2VVb2RKN1VDMFRWNUt0UlVKSnI3aHNXUTFOUWtjTDAiLCJtYWMiOiIzZjBmZTcyZGYwYmMwYmM0Njc1NWVmYWVkYWI4OTBiN2VhNDQ5MTI2YTRhMjRmZmY4MjdiZmYwOTA2OWMwODAzIiwidGFnIjoiIn0%3D; e_maendlich_session=eyJpdiI6ImxNZlplWStEcUY2WVMvdE04ejhHNFE9PSIsInZhbHVlIjoic3V5QmMyM25YbUhDdDcyOXJDY1VMNmVob1p1UFVBUEJ3RGhxN29kejAzNmdvUkVxRkZNdjBRa3pSd0U0a2hGYXV4Vy91TnZwckk2aktjT0RzWlkvbkhTTTZNc0xxSklUOXllTXVjdFMwTEdiMXhCQ3c1dFJ6aUlzcmpKZnpFVUQiLCJtYWMiOiI0N2UzMDFlYTk5OTdkMDNkMWUzYTcxYjM0ODJjYzlkYjc2ZWQ1NzI1Y2RjN2FhMTU1ZDNmN2RhYjVhYjgxMGQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 06:29:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 52121\r\nlast-modified: Fri, 14 Jul 2023 11:09:31 GMT\r\netag: \"64b12ceb-cb99\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52121,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1072 x 509, 8-bit/color RGBA, non-interlaced","md5":"0d9234b029d44c2a6cd7873ae5741fb0","sha1":"83bc6bb7f5d55311868e42da496b4c89b047831e","sha256":"c6dc3bd09e23f18c0ab5629d791414b865995600cc941aa0ac0bc079d53dfce2","sha512":"de6b774e252c3c660f48ba0d88e8a16c9ceba6b67934a19abeccd468d177c1e6a7a34b722cf9e89c73831a3512a0c359357dcab4354ec9ff336d32445b305b2a","ssdeep":"768:8k6GsTVJfMnx1BZzv0kjEL6QmvVLRPhl/Rf0fVNbArNC+ESfRLtEDZ:82iKB1J46Qmv5h/Rc/krUOpLu9","tlshash":"5133f119b3bfe56b6f4f090520d208496c74e285159015b49270bd2ecb277273afef89","first_seen":"2026-01-07T06:30:17.476347Z","last_seen":"2026-01-07T06:30:17.476347Z","times_seen":1,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.e-maendli.ch/files/fonts/cabin/v11/jZSwn9gMgsQpyndNljYDIw.woff","fqdn":"www.e-maendli.ch","domain":"e-maendli.ch","tld":"ch"},"ip":{"addr":"194.56.190.10","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.e-maendli.ch/","date":"2026-01-07T06:29:44.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-maendli.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 23:25:56 GMT","end":"Mon, 30 Mar 2026 23:25:55 GMT"},"fingerprint":{"sha1":"BA:F7:D4:3B:58:6F:6F:DF:AB:C2:9F:69:34:3E:67:F9:8C:A0:D9:CD","sha256":"2B:5F:05:83:0D:71:A5:CC:DE:CB:C7:05:77:77:9E:0A:25:63:B4:C8:80:87:AB:BF:F2:81:D2:39:5F:B1:53:51"}}},"request":{"raw":"GET /files/fonts/cabin/v11/jZSwn9gMgsQpyndNljYDIw.woff HTTP/1.1\r\nHost: www.e-maendli.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.e-maendli.ch/files/css/app.css?id=a259c016d29c9d943a533bc1cba50a7b\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik40dHFnK0o4OXlOSEdxaHc0SXJoZWc9PSIsInZhbHVlIjoiVzNZYlRzbkhyWXJab25uZnpyNXVla1U1a2p2NUxuRDhpY3huWFFUa2MrclZ1eWgzanlmcVViYk1ldkY5bWRvR1lGcTJtakMvb0NiRkVLMlhOcUtXZXNuUFordXFDUWQ2N2VVb2RKN1VDMFRWNUt0UlVKSnI3aHNXUTFOUWtjTDAiLCJtYWMiOiIzZjBmZTcyZGYwYmMwYmM0Njc1NWVmYWVkYWI4OTBiN2VhNDQ5MTI2YTRhMjRmZmY4MjdiZmYwOTA2OWMwODAzIiwidGFnIjoiIn0%3D; e_maendlich_session=eyJpdiI6ImxNZlplWStEcUY2WVMvdE04ejhHNFE9PSIsInZhbHVlIjoic3V5QmMyM25YbUhDdDcyOXJDY1VMNmVob1p1UFVBUEJ3RGhxN29kejAzNmdvUkVxRkZNdjBRa3pSd0U0a2hGYXV4Vy91TnZwckk2aktjT0RzWlkvbkhTTTZNc0xxSklUOXllTXVjdFMwTEdiMXhCQ3c1dFJ6aUlzcmpKZnpFVUQiLCJtYWMiOiI0N2UzMDFlYTk5OTdkMDNkMWUzYTcxYjM0ODJjYzlkYjc2ZWQ1NzI1Y2RjN2FhMTU1ZDNmN2RhYjVhYjgxMGQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 06:29:44 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 22616\r\nlast-modified: Mon, 26 Jun 2023 05:09:12 GMT\r\netag: \"64991d78-5858\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22616,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 22616, version 1.1","md5":"aa043700cf0d40d357b0534dcd3d0b89","sha1":"52a41b11bc20eea8b6e94c709a9f3ab1de1b3d04","sha256":"83a7f1cbba4935e7e0f3db3b7cfdf9a02e36a43ff3483e067035321c6d258c89","sha512":"83e0909bf6ce66d4e1654d121cc7646de63b57ab0e235c244c8dcfd87e476c663d712ba2897e69ba51591a553ad5336bd610250cf9e9f9acb4ca235b0d0f9ec0","ssdeep":"384:ao3jx3uHwlI5CSnl6krMURYoeNHZSVtPgoy/82NVcXdi43jdjGH:J3deHwlSkiMURYh0Vtooy/9QXX3Jq","tlshash":"6fa2e1f98db63c0ec0b2f0b4d190373677256a42d6f8f979ab87525a01b70b73614da1","first_seen":"2025-12-24T03:31:07.214941Z","last_seen":"2026-01-07T06:30:17.478937Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.e-maendli.ch/files/favicon.png","fqdn":"www.e-maendli.ch","domain":"e-maendli.ch","tld":"ch"},"ip":{"addr":"194.56.190.10","port":443,"asn":207143,"as":"hosttech GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.e-maendli.ch/","date":"2026-01-07T06:29:45.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-maendli.ch","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 23:25:56 GMT","end":"Mon, 30 Mar 2026 23:25:55 GMT"},"fingerprint":{"sha1":"BA:F7:D4:3B:58:6F:6F:DF:AB:C2:9F:69:34:3E:67:F9:8C:A0:D9:CD","sha256":"2B:5F:05:83:0D:71:A5:CC:DE:CB:C7:05:77:77:9E:0A:25:63:B4:C8:80:87:AB:BF:F2:81:D2:39:5F:B1:53:51"}}},"request":{"raw":"GET /files/favicon.png HTTP/1.1\r\nHost: www.e-maendli.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.e-maendli.ch/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik40dHFnK0o4OXlOSEdxaHc0SXJoZWc9PSIsInZhbHVlIjoiVzNZYlRzbkhyWXJab25uZnpyNXVla1U1a2p2NUxuRDhpY3huWFFUa2MrclZ1eWgzanlmcVViYk1ldkY5bWRvR1lGcTJtakMvb0NiRkVLMlhOcUtXZXNuUFordXFDUWQ2N2VVb2RKN1VDMFRWNUt0UlVKSnI3aHNXUTFOUWtjTDAiLCJtYWMiOiIzZjBmZTcyZGYwYmMwYmM0Njc1NWVmYWVkYWI4OTBiN2VhNDQ5MTI2YTRhMjRmZmY4MjdiZmYwOTA2OWMwODAzIiwidGFnIjoiIn0%3D; e_maendlich_session=eyJpdiI6ImxNZlplWStEcUY2WVMvdE04ejhHNFE9PSIsInZhbHVlIjoic3V5QmMyM25YbUhDdDcyOXJDY1VMNmVob1p1UFVBUEJ3RGhxN29kejAzNmdvUkVxRkZNdjBRa3pSd0U0a2hGYXV4Vy91TnZwckk2aktjT0RzWlkvbkhTTTZNc0xxSklUOXllTXVjdFMwTEdiMXhCQ3c1dFJ6aUlzcmpKZnpFVUQiLCJtYWMiOiI0N2UzMDFlYTk5OTdkMDNkMWUzYTcxYjM0ODJjYzlkYjc2ZWQ1NzI1Y2RjN2FhMTU1ZDNmN2RhYjVhYjgxMGQwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 07 Jan 2026 06:29:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 17203\r\nlast-modified: Wed, 20 Aug 2025 09:01:57 GMT\r\netag: \"68a58f05-4333\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17203,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"a427c2ee0cb6a11f83ffa7605e3dff6a","sha1":"e1554b8e5b24dbf9bc0b7737237ab465af9e2c68","sha256":"22a75bcb12130de94b44cd50b34e42979f3b319988c5bc629d1d468fcc5ad302","sha512":"7ee2350b18eee470aac001d70a5a144ec823e8fc4f15b3c9131908565890f56d44f1b24a21782cfc0476df2751a5cfbdc88630439d29a845bf9bac5521f08d66","ssdeep":"384:bUzFqSo9c5NS/myTggcfeF5v11k9obmoK6SLLvNGmHhMvd8TE:IzcSQiujUeVaebmgSLkmHeKE","tlshash":"5272e015657605c0482b8a689e4c93d4fd7d8e94dd7e230676f398bc650bd80ae4ce68","first_seen":"2026-01-07T06:30:17.481517Z","last_seen":"2026-01-07T06:30:17.481517Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}