{"report_id":"54cc023f-39d0-4fc7-9f0b-c20d3d469a39","version":0,"status":"done","tags":[],"date":"2026-07-12T19:40:16Z","url":{"schema":"http","addr":"kleinanzeigen-rechnung.412838191.net/getpayment/05284973","fqdn":"kleinanzeigen-rechnung.412838191.net","domain":"412838191.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/getpayment/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"title":"50 Servietten in Bayern - Piding | kleinanzeigen.de","dom":{"size":96183,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39705)","md5":"fe4b14ca14ea57a53f329791eb88289f","sha1":"007b6edcb9998138bfb8604814bf8b8b50f84902","sha256":"8e5a2d9eff717fd5c49682c76d342b23db1fbba9662ba6a65fc9c483bebe6252","sha512":"0a5346ac4837f5bcd419933768ffb95ef7c789dada37f6c6ccaa38e6ede928813738049bbf39689a3b130447d88c6bb4eb17762a876f34afc503fbb5db11a7a3","ssdeep":"1536:3E4cgQrYeb/ULnbeelwrndRkdpilFoqiteRvq:JQrY7Nl4ndYMlCqiD","tlshash":"12934db4f104216fe497cba865d1fecb264b92d7d70547a4f06b39d0c68a9ca4633f88","dom_hash":"domhash74c3ebbf4511de4123e11fc12e05295d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kleinanzeigen-rechnung.412838191.net/getpayment/05284973","fqdn":"kleinanzeigen-rechnung.412838191.net","domain":"412838191.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T19:40:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.412838191.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.412838191.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.412838191.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.412838191.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"kleinanzeigen-rechnung.857219983.net","ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2026-07-06","domain_rank":0,"first_seen":"2026-07-11T03:43:22.339822Z","last_seen":"2026-07-11T03:43:22.339822Z","alert_count":162,"request_count":60,"received_data":3673895,"sent_data":31894,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-05T22:22:24.069932Z","alert_count":0,"request_count":1,"received_data":146540,"sent_data":1813,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-05T22:19:28.847206Z","alert_count":0,"request_count":1,"received_data":63272,"sent_data":582,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kleinanzeigen-rechnung.412838191.net","ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2026-06-30","domain_rank":0,"first_seen":"2026-07-06T19:49:57.521071Z","last_seen":"2026-07-06T19:50:15.010094Z","alert_count":4,"request_count":1,"received_data":1684,"sent_data":524,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/widget.js","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ee27f254b245456f85d8b6b19ed34b7","sha1":"891cedc5598f9cf4c457d0f64460b90feea3e9e3","sha256":"d41102ae0fc8a5f755a95a0af047fff26c0d7fc6197fb5687cfcdb02be5d45da","sha512":"75c9376f7b2db4bff11f955fbe63450d0f71c11e69311fce3b6d8d1707c0826866c2547ace962b85d152b5837ac2bb2236eb5600ca3a1be8d350e2b36773ac97","ssdeep":"384:9Y887Vor8Qqj/q6ynkGoH3Pz9j4u+fpVQ49AhLG4Px:mnS4Q6GnDKz9j+SqC","tlshash":"8bc2d65eb9e61235ad23b07a672f30047332d0132688dd107c9d97946fd5a6902bafee","size":27590,"data":"","first_seen":"2026-06-25T14:00:32.528983Z","last_seen":"2026-07-12T19:40:21.480343Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/assets/yDzCUUn5.js","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1726fe829864ad9de8b59be9d6b28ca9","sha1":"448a0ff3468adb87e6936934342ca29b4323e3bb","sha256":"02f8816a912c3dd0ae769ef3fe12a9cb8691eea3f714f51fe6101b9a4f8db1ba","sha512":"6a41a2271eeb0d1a4f4f92bb8b59af3a61e280e4fd20dda48f488577af4e6f4c5baf83ba5fc514a5a36a0d33ad969db4d01b0bb77cd5245697b1958c906e6641","ssdeep":"3072:P+SeZttBdrxNM+OdMfCEZ6t5KwKhoPLJhN286x+:PsbdrxNM+J8KwKuPLN286s","tlshash":"bf042b05f042afbdee6b09e5b83ea004b01a5f55db3f89e1f0bf6425166845b76633c8","size":181129,"data":"","first_seen":"2026-07-06T19:50:02.890735Z","last_seen":"2026-07-12T19:40:21.49705Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/assets/BRytNTGI.js","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"281eb9fb86997323869c8b0f8d973bb9","sha1":"2824353b232e3a29921ca218255e1fd73973948d","sha256":"4ab0b643decc99f8bb63b355304b31c9c1d4725ff87eb696837a4c4db7343418","sha512":"e671a8a6719863cd8f314b571e2d86e6b4a169ed86a9549fb25837fadb95ebec393dd40d015c94fab664d6a5c4abe43617219eeb4e376b5fc41142d3f3baf884","ssdeep":"1536:PYVaLvMO+yCsemgVXoERzbZ46nNkKvJCghjbwverG4V1CdCuFSfb1/ZSf:WaL0ORtj6pG6NxvnhjEMxVCCuoDtZi","tlshash":"e3d31be831beb6626ba34675106f1507733c29131c4c4861a611fdae77fa40a90bbfed","size":142054,"data":"","first_seen":"2026-06-25T14:00:32.523942Z","last_seen":"2026-07-12T19:40:21.46057Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/assets/CZLQBWjE.js","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d0a75bdce4de4b06c0ab2aac3c317e5","sha1":"6dd078dd4cf3be327fe4009face8ef397b95f12c","sha256":"9e4eb9830637a743f6d84f97a3e52c135ce2fab5f360eb3f8b165eed2de11369","sha512":"952265592318bec31dc6d4bec5485f94968d768e850a78936bd6de6e4802a532181fb4b2ed14739bebb123ed4e8738bd589c75d5b99a741b02aea12a16624ce0","ssdeep":"3072:M5pC598HFII5uhP/a6YGPUp+dxvvc/FBezMI:M8gHFIX/BYGMGxvMFBe7","tlshash":"e2b308c5b2917521c3d688e9c0bf0741b73729883409c0acb63dadcb7d6154a66bbb7e","size":113794,"data":"","first_seen":"2026-06-25T14:00:32.539069Z","last_seen":"2026-07-12T19:40:21.47703Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/assets/DPz9ax8H.js","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5777f3fae808210077cc6d8358bf6b6c","sha1":"d59b029ab883ac2bc00785b5c5ba11a87ab13d51","sha256":"6bf8381258c6986aede1cd2c121c4388e9c05637f3d23b03d609b139aa15ebbc","sha512":"6d4dc70b09c0955fdd455f6954db0ffd9edaae313d8ce1af8ea9060ab501ae4761ad554386c81a017b936006df8a9d26832bfa852aeb29bb0b65f5e44d12543e","ssdeep":"6144:CM/g58Oa53YLIgEcTZpmXRfH43oBel2Kcqn8SW9NnE:G2IMgTZpmXRfY3oBlZ9NE","tlshash":"6ab41b84b19578a64386c2e5ec37520163392d59350c80b8fb3ce8e77a74f46b277bb6","size":512284,"data":"","first_seen":"2026-07-06T19:50:02.887204Z","last_seen":"2026-07-12T19:40:21.498827Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/getpayment/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9730f8b35de350b432cff1731d90f83e","sha1":"64a91d451c8bc7d0ea9127b82b88ae8a7c913dc7","sha256":"b0549696e786249af629ef737cdcd095d7ac16c902290be1fb6574a6b2cfcd0d","sha512":"1952e81f376781f078d63ac8d3f66cc84b13e8252f3bddc53037390cb2e031f7160fe3ea389257a4cb806543c875de0a95dabd7f7e84a6f037345be3a2ff85ac","ssdeep":"96:S0QELC9FFm04fRsGiAuG9GRGcxGtGIdZG1GKyow2AoRGhGEII2vG7o0lu6kpx0Fn:S0XLu004ffy0Fgi","tlshash":"7591ee877789164906e7533e4bab670c343b5d6b6849ca29bc6c28181f40f0bd37abdd","size":4278,"data":"","first_seen":"2026-07-12T19:40:21.500641Z","last_seen":"2026-07-12T19:40:21.500641Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/getpayment/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"491c0c3f2113c92496dbf2db1914e5c3","sha1":"fdf108cc06ae1bce8bc0cf7aca0dfccabf4d5cc7","sha256":"0a9cde1603379f9f7f9d2fe059ef93c9b1d75a5c8f2abe764175a853d82835f5","sha512":"5988f2c63c9836e3ca67fe8b16e348565d74f2f01fa5f9c04537f13c857a68f6c021b24919d1b2628178b7153bf2f2ee2b6062ee13817171efcbe5ae522da503","ssdeep":"","tlshash":"dc8000ae000822ba80aac0b0033bba0b2a800230c02000808a80008a2c8a08b00888ae","size":30,"data":"","first_seen":"2026-06-25T14:00:32.542257Z","last_seen":"2026-07-12T19:40:21.502752Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/getpayment/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"27274ddbb655a3b538a0b7bb06fc576e","sha1":"991db54334a7312c100eb70972a02cab4c2552c2","sha256":"c0105a609b31c5bf51d8778eb60da7966f85955520be5b062c1f20669a40460c","sha512":"0b5a2e2a3cadc54e60c4db8f568b2eaf79c39274b64d5b528873beb15600b8bb0f0710b5dcd2462a13fe42e63d29547ba779d7d7c092d0d7d5e4f6b10636192d","ssdeep":"","tlshash":"073142eeb44626abc9e7e176353ff704927f0127bdd5848080e90d029949f0f861378d","size":1526,"data":"","first_seen":"2026-07-08T17:24:14.695095Z","last_seen":"2026-07-12T19:40:21.503664Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/assets/QzDH6Cl8.js","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6b64b4a821cfe9573910800bbc3d58c","sha1":"b689e6a276214ed61fbabcdca3f858279b30460e","sha256":"b44dbf716abaa7adad5ead5de3c48e48a33037312dd5f0e23f3d06231cfbdf08","sha512":"b0d62f33a80eace7bcc5a03caa32156fb60259018af269598865c740e0f54622443b2afa44add8a65eb25eec477387b17eb6d6aa0f7a4cc3b4d33b1a114e7864","ssdeep":"768:EgHBKh2j470wWYR29fsWGlCPFm3tLFfMxJthka8YzcXd+H+iZaEDI/QA9ni8gux2:E+3A2URfN19ni8u","tlshash":"55e2959a7142a2273ad1c491dc3e4125e2346d14340a802cb9adade7f953dceb9bfb35","size":33240,"data":"","first_seen":"2026-06-25T14:00:32.538143Z","last_seen":"2026-07-12T19:40:21.46634Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/assets/1rpN--U6.js","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"029fe306eccacbec87499daeba2b42ff","sha1":"8d28ccdcff56309a01e35f6d28e14b77dc1f75f2","sha256":"ef714150abf06ff9b3041afc44bfe02e01dc462216140642a1e319138316edda","sha512":"a56352a43d7cf41b6adb1050470051277b33036cf10d282f54f1abd5534c6d0bc77f504f71c3f204c85263fd203c78ca60dae39162d8a0e62ea1f1e9c789b728","ssdeep":"768:MTA9R0qk7PAhszvMG9+fTIz9LLwoSyuz534Hzia1qMrzlTHW5D5NPb6bspZ/hEtg:6pTpItH2SPHEBpW0tGHCS9v0ssvSR","tlshash":"9df284af8fcd125f5806e6881e1bb0104fee63b9338e8892e50f9532d696543dda3f15","size":35017,"data":"","first_seen":"2026-07-06T19:50:02.886347Z","last_seen":"2026-07-12T19:40:21.497889Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/assets/ows9L6Hu.js","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfd754324d16f1d97dca2efac4271377","sha1":"f634add36f6cdcde56d031019540973c7f048531","sha256":"8a304c4da1a948fe185168d573dac0a004071da3fa09d068406b139c7258a30b","sha512":"d877b3bb19c162049fbb7621e1c39f0346e626fbe94876c3c39e8aa4df1cd2d9cf37ffc55add70d18348c8c37cb7a6dda45167a789bafa8c2bc06ce79b08ba3f","ssdeep":"1536:pFbylsY99jvqpym5ogt1DONp1wYxgXS3FpUQ5bgHN1nVSvMe42/gwWQzGVQTF/V+:Dbyr9NgSb+Uu2vOh","tlshash":"e0e32ada305274b0dbad4986817f813c77371950300e51a0f13d9e6c39a9692e6bbfee","size":147080,"data":"","first_seen":"2026-07-06T19:50:02.87848Z","last_seen":"2026-07-12T19:40:21.491143Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026device=desktop\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ff3c91d07229d45d3f464767c1761aba","sha1":"bd0321d06e186637700cfa72e5fca52a59d8f893","sha256":"d880cb32086868e8cdaca5286e2811969527567b059e5efb2ddb82fffb3e95a1","sha512":"bef599ee2d7b667124fd3ea32f7d2a53c5fb079a12c0757cdbe7bcaa73a8974f96bf304a34e0a0057e75a57f5a988dc0e99e6d620d28da9dbf2befca35cd9180","ssdeep":"","tlshash":"53e07daf21c8553554d32db6065d96d07522c4cf45c689517c2cab195f30b9b0738fcf","size":358,"data":"","first_seen":"2026-06-22T20:43:44.618065Z","last_seen":"2026-07-12T19:40:21.505517Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/assets/CXVPiTs1.js","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"654a676bb2d6f7bcec381e26693b8bc9","sha1":"329b84eeff199a18b7c597e66d7263e57caa40e2","sha256":"3e6b00ddfb85352042b0f01c43d81ab40f0b6f861577fcce6a79fb661af1d31e","sha512":"6e49de7c422fde85a1187bfc3bb197dbaf6b5b4361d1840c368694d598ecaec2b50b39026aaca52f7a7aa9939d6c0dc32ee9f51493d1fcc84c79d87d480dbfd0","ssdeep":"768:bdvnqvURWd7dk9FStJpgURKolnL6KRMcy+wXUp8/J3GvJ5aepTPKDWCoUUTn:bNqvN7dksJGYjYrJdwDaepTiDmUUTn","tlshash":"2623090fc61029324a8702d67e8f599976ba2c55375049e24fdcc02e13f5bef913b6ea","size":46803,"data":"","first_seen":"2026-06-22T20:43:44.611658Z","last_seen":"2026-07-12T19:40:21.490129Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/assets/Bpbfi9Ji.js","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d161138773f12fe5152c00581dacef2","sha1":"6e1383b33852340c6f6a99a866017e75397bfc4a","sha256":"b56292ecb6d1e6feb6ebcf4e4c9a0f2e19d299f6e709753380fdb704dde442c7","sha512":"70a3dc032bf974cfcff00d6b609a8997750c6fae184f535f52351313a9bf0982ca29db7299597d624ae0bec6866a5820ca1622ade6d28075040291c77871e18d","ssdeep":"","tlshash":"0681ad54e0ccec5b49a2d79e10f7af0f4d1c052ed65b57336e08f39a7484b48f92a169","size":3903,"data":"","first_seen":"2026-06-22T20:43:44.61299Z","last_seen":"2026-07-12T19:40:21.499768Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[Widget] WebSocket connected","filename":"https://kleinanzeigen-rechnung.857219983.net/widget.js","line_number":342,"column_number":17},{"level":"log","text":"[Widget] WebSocket connected","filename":"https://kleinanzeigen-rechnung.857219983.net/widget.js","line_number":342,"column_number":17},{"level":"log","text":"[Widget] WebSocket connected","filename":"https://kleinanzeigen-rechnung.857219983.net/widget.js","line_number":342,"column_number":17},{"level":"log","text":"[Widget] WebSocket connected","filename":"https://kleinanzeigen-rechnung.857219983.net/widget.js","line_number":342,"column_number":17},{"level":"log","text":"[Widget] WebSocket connected","filename":"https://kleinanzeigen-rechnung.857219983.net/widget.js","line_number":342,"column_number":17}]},"http":[{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/assets/BRytNTGI.js","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kleinanzeigen-rechnung.857219983.net/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026device=desktop\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f","date":"2026-07-12T19:39:49.966Z","timestamp":1783885189966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /assets/BRytNTGI.js HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 12 Jul 2026 19:39:49 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":142054,"size_decoded":46957,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (37524)","md5":"281eb9fb86997323869c8b0f8d973bb9","sha1":"2824353b232e3a29921ca218255e1fd73973948d","sha256":"4ab0b643decc99f8bb63b355304b31c9c1d4725ff87eb696837a4c4db7343418","sha512":"e671a8a6719863cd8f314b571e2d86e6b4a169ed86a9549fb25837fadb95ebec393dd40d015c94fab664d6a5c4abe43617219eeb4e376b5fc41142d3f3baf884","ssdeep":"1536:PYVaLvMO+yCsemgVXoERzbZ46nNkKvJCghjbwverG4V1CdCuFSfb1/ZSf:WaL0ORtj6pG6NxvnhjEMxVCCuoDtZi","tlshash":"e3d31be831beb6626ba34675106f1507733c29131c4c4861a611fdae77fa40a90bbfed","first_seen":"2026-06-25T14:00:32.523942Z","last_seen":"2026-07-12T19:40:21.46057Z","times_seen":7,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/agent-settings","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026device=desktop\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f","date":"2026-07-12T19:39:50.327Z","timestamp":1783885190327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /api/agent-settings HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:39:50 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":1877260,"size_decoded":1410308,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"26b67dd7e7c196cc1d0bd3e7386e80d1","sha1":"d72c6e4eae203f36422733115504f83c6d073970","sha256":"6e294196e87a91884142fc37bb9ab08c03ae96218586a3de4c5e0426c2951a56","sha512":"bb6614b930f6d3878044ecf3bbea9c80d8cc0c6a64cbcd7cd2e37e1b62e352409870115397bb3a1a903f061a0288f7d80650d95a90e64a6ca323aa842b4da465","ssdeep":"24576:OuxBCoAJasVvZmc2ExCp/MUcPsTh945/A/DHVFsuV9:V3CJoExI7r/rVp","tlshash":"4e252341da27dc9f070467fc365a5a8f3fd05964dca8a2f152f29c86e5923a8723e334","first_seen":"2026-06-22T20:43:44.603267Z","last_seen":"2026-07-12T19:40:21.462406Z","times_seen":7,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026device=desktop\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:39:49.627Z","timestamp":1783885189627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /widget?sessionId=997f345b980a97f44399d17f0206152a\u0026device=desktop\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0, private\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://connect.facebook.net https://www.facebook.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://www.facebook.com https://*.facebook.com https://www.google-analytics.com https://*.googleusercontent.com https://*.gstatic.com https://*.kleinanzeigen.de https://*.ebay-kleinanzeigen.de; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' wss: https://www.facebook.com https://*.facebook.com https://connect.facebook.net; frame-src 'self' https://www.facebook.com https://*.facebook.com; media-src 'self' blob: data:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 12 Jul 2026 19:39:49 GMT\r\nexpires: 0\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3644,"size_decoded":2810,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1432)","md5":"9a7a502c9d67248c464890e44d96633d","sha1":"76a378bade637a2395555bccfa368cd342ac7b7b","sha256":"3b2906e8fae4fb13afdd69d3355c4bd77911a238c20ce2e8afaf9bf08b192f21","sha512":"c97eca8eb3cfcca322b00243e8e2772ce26d4ce0563b9b48e09cae423c5f8a1197493d1b0da4d62681dbd7c200fc07499ab054a9080d9e5267c0263aeec3c835","ssdeep":"","tlshash":"147134de985a487630216175b9d1be064402f14f46fac8a0b49ee55bcfc4bccc863f2d","first_seen":"2026-07-06T19:50:02.876842Z","last_seen":"2026-07-12T19:40:21.464251Z","times_seen":6,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/assets/QzDH6Cl8.js","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kleinanzeigen-rechnung.857219983.net/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026device=desktop\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f","date":"2026-07-12T19:39:49.967Z","timestamp":1783885189967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /assets/QzDH6Cl8.js HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 12 Jul 2026 19:39:49 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":33240,"size_decoded":10816,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (33239)","md5":"d6b64b4a821cfe9573910800bbc3d58c","sha1":"b689e6a276214ed61fbabcdca3f858279b30460e","sha256":"b44dbf716abaa7adad5ead5de3c48e48a33037312dd5f0e23f3d06231cfbdf08","sha512":"b0d62f33a80eace7bcc5a03caa32156fb60259018af269598865c740e0f54622443b2afa44add8a65eb25eec477387b17eb6d6aa0f7a4cc3b4d33b1a114e7864","ssdeep":"768:EgHBKh2j470wWYR29fsWGlCPFm3tLFfMxJthka8YzcXd+H+iZaEDI/QA9ni8gux2:E+3A2URfN19ni8u","tlshash":"55e2959a7142a2273ad1c491dc3e4125e2346d14340a802cb9adade7f953dceb9bfb35","first_seen":"2026-06-25T14:00:32.538143Z","last_seen":"2026-07-12T19:40:21.46634Z","times_seen":7,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/track-visit","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026device=desktop\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f","date":"2026-07-12T19:39:50.188Z","timestamp":1783885190188,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"POST /api/track-visit HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 207\r\nOrigin: https://kleinanzeigen-rechnung.857219983.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":207,"data":"{\"sessionId\":\"997f345b980a97f44399d17f0206152a\",\"hostname\":\"kleinanzeigen-rechnung.857219983.net\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"referrer\":\"\"}"}},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 11\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:39:50 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":11,"size_decoded":500,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-07-12T23:25:47.82818Z","times_seen":15117,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/poll-commands/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:39:50.512Z","timestamp":1783885190512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /api/poll-commands/05284973 HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:39:50 GMT\r\nexpires: 0\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":605,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-07-12T19:40:21.471024Z","times_seen":93,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/poll-commands/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:40:02.382Z","timestamp":1783885202382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /api/poll-commands/05284973 HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:40:02 GMT\r\nexpires: 0\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":605,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-07-12T19:40:21.471024Z","times_seen":93,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/poll-commands/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:40:11.970Z","timestamp":1783885211970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /api/poll-commands/05284973 HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:40:12 GMT\r\nexpires: 0\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":605,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-07-12T19:40:21.471024Z","times_seen":93,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/kl-image/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:39:49.399Z","timestamp":1783885189399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /api/kl-image/05284973 HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-length: 117943\r\ncontent-type: image/jpeg\r\ndate: Sun, 12 Jul 2026 19:39:49 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":117943,"size_decoded":118444,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 913x960, components 3","md5":"1c3dd2a3efc4cc3619b3434a395a35bc","sha1":"8a290e40b61ff800b181a7e9ae2b2e6f2f5eda11","sha256":"6105661bc1f98715d39dcb731dfbf021836d8efbd27bf8a01bf7d94449a293a2","sha512":"d0161667b001ebf0179c5b82ad637db3f34a85e1588ed9d90d2ba584a31b009612593194e0d4d65e096b8816ae290adb2f4ae4e705723353691d28bf82936614","ssdeep":"3072:UWiSr+LTsfNaoSl0kgvoQtpTuzCFZlUnt9C:UWia+LANVSzmyzCFZlUtQ","tlshash":"75b3128712d2e96e6e0e66c786b8171db0042757d962f7730239284af0f82b46f17b5e","first_seen":"2026-07-11T03:43:29.108109Z","last_seen":"2026-07-12T19:40:21.474093Z","times_seen":3,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/visitor-heartbeat","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:39:49.441Z","timestamp":1783885189441,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"POST /api/visitor-heartbeat HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 252\r\nOrigin: https://kleinanzeigen-rechnung.857219983.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":252,"data":"{\"sessionId\":\"05284973\",\"currentPath\":\"/getpayment/05284973\",\"fullUrl\":\"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973\",\"pageTitle\":\"50 Servietten in Bayern - Piding | kleinanzeigen.de\",\"domain\":\"kleinanzeigen-rechnung.857219983.net\"}"}},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 11\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:39:49 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":11,"size_decoded":500,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-07-12T23:25:47.82818Z","times_seen":15117,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/assets/CZLQBWjE.js","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kleinanzeigen-rechnung.857219983.net/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026device=desktop\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f","date":"2026-07-12T19:39:49.973Z","timestamp":1783885189973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /assets/CZLQBWjE.js HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 12 Jul 2026 19:39:49 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":113794,"size_decoded":39097,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8d0a75bdce4de4b06c0ab2aac3c317e5","sha1":"6dd078dd4cf3be327fe4009face8ef397b95f12c","sha256":"9e4eb9830637a743f6d84f97a3e52c135ce2fab5f360eb3f8b165eed2de11369","sha512":"952265592318bec31dc6d4bec5485f94968d768e850a78936bd6de6e4802a532181fb4b2ed14739bebb123ed4e8738bd589c75d5b99a741b02aea12a16624ce0","ssdeep":"3072:M5pC598HFII5uhP/a6YGPUp+dxvvc/FBezMI:M8gHFIX/BYGMGxvMFBe7","tlshash":"e2b308c5b2917521c3d688e9c0bf0741b73729883409c0acb63dadcb7d6154a66bbb7e","first_seen":"2026-06-25T14:00:32.539069Z","last_seen":"2026-07-12T19:40:21.47703Z","times_seen":7,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/poll-commands/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:39:54.911Z","timestamp":1783885194911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /api/poll-commands/05284973 HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:39:54 GMT\r\nexpires: 0\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":605,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-07-12T19:40:21.471024Z","times_seen":93,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/poll-commands/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:40:01.315Z","timestamp":1783885201315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /api/poll-commands/05284973 HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:40:01 GMT\r\nexpires: 0\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":605,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-07-12T19:40:21.471024Z","times_seen":93,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/visitor-heartbeat","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:40:04.444Z","timestamp":1783885204444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"POST /api/visitor-heartbeat HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 252\r\nOrigin: https://kleinanzeigen-rechnung.857219983.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":252,"data":"{\"sessionId\":\"05284973\",\"currentPath\":\"/getpayment/05284973\",\"fullUrl\":\"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973\",\"pageTitle\":\"50 Servietten in Bayern - Piding | kleinanzeigen.de\",\"domain\":\"kleinanzeigen-rechnung.857219983.net\"}"}},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 11\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:40:04 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11,"size_decoded":500,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-07-12T23:25:47.82818Z","times_seen":15117,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/poll-commands/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:40:14.100Z","timestamp":1783885214100,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /api/poll-commands/05284973 HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:40:14 GMT\r\nexpires: 0\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":605,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-07-12T19:40:21.471024Z","times_seen":93,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/widget/product?sessionId=997f345b980a97f44399d17f0206152a","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026device=desktop\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f","date":"2026-07-12T19:39:50.329Z","timestamp":1783885190329,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /api/widget/product?sessionId=997f345b980a97f44399d17f0206152a HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-headers: Content-Type, Accept\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\ncontent-length: 71\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:39:50 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":71,"size_decoded":725,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5d701f334498d43de9b6b354810e2985","sha1":"df87c782678ec297852d8d1fd6a3252454577403","sha256":"e2a50dac936dcaf2d9634404b299ceb14c47cbb897d8b9a6ea92a61e3023460b","sha512":"5db318a666ac0f80e55be4732ef881af493651c1af012ca4ce7077ea41a216b07b21f2d31256ade9e66ce7b4bb1ea41e203d7f5041ec73854afc6fa111a2ad35","ssdeep":"","tlshash":"35a022c2c0302eef0b3000f0208a228afc03b0080ae08e000223e0288032202220aec8","first_seen":"2026-07-11T03:43:29.122067Z","last_seen":"2026-07-12T19:40:21.47797Z","times_seen":3,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/poll-commands/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:39:51.691Z","timestamp":1783885191691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /api/poll-commands/05284973 HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:39:51 GMT\r\nexpires: 0\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":605,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-07-12T19:40:21.471024Z","times_seen":93,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/poll-commands/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:39:53.845Z","timestamp":1783885193845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /api/poll-commands/05284973 HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:39:53 GMT\r\nexpires: 0\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":16,"size_decoded":605,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-07-12T19:40:21.471024Z","times_seen":93,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/widget/heartbeat","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:39:59.633Z","timestamp":1783885199633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"POST /api/widget/heartbeat HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 175\r\nOrigin: https://kleinanzeigen-rechnung.857219983.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":175,"data":"{\"activeMs\":10000,\"path\":\"/getpayment/05284973\",\"scrollDepth\":0,\"clickCount\":0,\"sessionId\":\"997f345b980a97f44399d17f0206152a\",\"visitorId\":\"v_f66e8852d45bc9434d02da6b4dba754f\"}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-headers: Content-Type, Accept\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\ncontent-length: 11\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:39:59 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":665,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-07-12T23:25:47.82818Z","times_seen":15117,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/widget.js","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:39:49.405Z","timestamp":1783885189405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /widget.js HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 12 Jul 2026 19:39:49 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":27602,"size_decoded":9589,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (382)","md5":"7ee27f254b245456f85d8b6b19ed34b7","sha1":"891cedc5598f9cf4c457d0f64460b90feea3e9e3","sha256":"d41102ae0fc8a5f755a95a0af047fff26c0d7fc6197fb5687cfcdb02be5d45da","sha512":"75c9376f7b2db4bff11f955fbe63450d0f71c11e69311fce3b6d8d1707c0826866c2547ace962b85d152b5837ac2bb2236eb5600ca3a1be8d350e2b36773ac97","ssdeep":"384:9Y887Vor8Qqj/q6ynkGoH3Pz9j4u+fpVQ49AhLG4Px:mnS4Q6GnDKz9j+SqC","tlshash":"8bc2d65eb9e61235ad23b07a672f30047332d0132688dd107c9d97946fd5a6902bafee","first_seen":"2026-06-25T14:00:32.528983Z","last_seen":"2026-07-12T19:40:21.480343Z","times_seen":7,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Architects+Daughter\u0026family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026family=Fira+Code:wght@300..700\u0026family=Geist+Mono:wght@100..900\u0026family=Geist:wght@100..900\u0026family=IBM+Plex+Mono:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026family=IBM+Plex+Sans:ital,wght@0,100..700;1,100..700\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=JetBrains+Mono:ital,wght@0,100..800;1,100..800\u0026family=Libre+Baskerville:ital,wght@0,400;0,700;1,400\u0026family=Lora:ital,wght@0,400..700;1,400..700\u0026family=Merriweather:ital,opsz,wght@0,18..144,300..900;1,18..144,300..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Outfit:wght@100..900\u0026family=Oxanium:wght@200..800\u0026family=Playfair+Display:ital,wght@0,400..900;1,400..900\u0026family=Plus+Jakarta+Sans:ital,wght@0,200..800;1,200..800\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Roboto+Mono:ital,wght@0,100..700;1,100..700\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026family=Source+Code+Pro:ital,wght@0,200..900;1,200..900\u0026family=Source+Serif+4:ital,opsz,wght@0,8..60,200..900;1,8..60,200..900\u0026family=Space+Grotesk:wght@300..700\u0026family=Space+Mono:ital,wght@0,400;0,700;1,400;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kleinanzeigen-rechnung.857219983.net/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026device=desktop\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f","date":"2026-07-12T19:39:49.961Z","timestamp":1783885189961,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css2?family=Architects+Daughter\u0026family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026family=Fira+Code:wght@300..700\u0026family=Geist+Mono:wght@100..900\u0026family=Geist:wght@100..900\u0026family=IBM+Plex+Mono:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026family=IBM+Plex+Sans:ital,wght@0,100..700;1,100..700\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=JetBrains+Mono:ital,wght@0,100..800;1,100..800\u0026family=Libre+Baskerville:ital,wght@0,400;0,700;1,400\u0026family=Lora:ital,wght@0,400..700;1,400..700\u0026family=Merriweather:ital,opsz,wght@0,18..144,300..900;1,18..144,300..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Outfit:wght@100..900\u0026family=Oxanium:wght@200..800\u0026family=Playfair+Display:ital,wght@0,400..900;1,400..900\u0026family=Plus+Jakarta+Sans:ital,wght@0,200..800;1,200..800\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Roboto+Mono:ital,wght@0,100..700;1,100..700\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026family=Source+Code+Pro:ital,wght@0,200..900;1,200..900\u0026family=Source+Serif+4:ital,opsz,wght@0,8..60,200..900;1,8..60,200..900\u0026family=Space+Grotesk:wght@300..700\u0026family=Space+Mono:ital,wght@0,400;0,700;1,400;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 12 Jul 2026 19:39:50 GMT\r\ndate: Sun, 12 Jul 2026 19:39:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":145856,"size_decoded":8135,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"194d9b4264ae31301c9ddcebe7065ca4","sha1":"bc9e7d59e1021aaf4915478b6a459f2ece1dd060","sha256":"82fd0d181927fff9a997dcd3b61fc25d4df92e3bdf91f33bfd01a85b6b2ddf1a","sha512":"73f5e8fce63b94fb920634148e6eaa75736473b467c07e4eb3e9345f60d4fa2b64fd750bbcb25cffce3e06b10b9bbd661bea08826580ca24c5585fa9ec683073","ssdeep":"768:CtFCevmEAr+gCS5xFJNGo6n3wafwe0utoEA3mknCiFyg2UfIUk+H00YNRYj7V3Et:5VXPNo6mACNqHvDyWNpQ9","tlshash":"efe31e91042b9004eb831cc233cfbe36ee4ea2657444d579affe1d99ac9bc265364b1d","first_seen":"2026-06-09T04:03:47.231468Z","last_seen":"2026-07-12T20:09:17.249936Z","times_seen":101,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":47,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://kleinanzeigen-rechnung.857219983.net/ws/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:39:49.979Z","timestamp":1783885189979,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /ws/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kleinanzeigen-rechnung.857219983.net\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: h2NhDCyBXHfIRrG4+4v+RQ==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nSec-Websocket-Accept: OwvbXzDDhBum+Tcvpx8Q9jqa4Jg=\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains\r\nDate: Sun, 12 Jul 2026 19:39:50 GMT\r\nVia: 1.1 google\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nAlt-Svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":279,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-12T23:55:34.736619Z","times_seen":17199564,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":58,"connect":71,"send":0,"wait":68,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kleinanzeigen-rechnung.857219983.net/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026device=desktop\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f","date":"2026-07-12T19:39:51.610Z","timestamp":1783885191610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://kleinanzeigen-rechnung.857219983.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62460\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 16:48:36 GMT\r\nexpires: Mon, 12 Jul 2027 16:48:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 10275\r\nlast-modified: Wed, 10 Sep 2025 16:30:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":62460,"size_decoded":63272,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62460, version 1.0","md5":"4c04ee82dc1deb4f32b244195d258e9b","sha1":"9bd2bc9c6f54075acd20589f87c17a73e3ab07b3","sha256":"ab72fd10c9ac5633c1f9ae4267864b674596062e023458e02973080bd1098904","sha512":"43bd417c75382fbcad7a44c73db7ec8e883bb505b63215ec67488eb205b61acd94031d5740bdf70cf413fcb126ac6a567b4c71831eeb063e5643fa0adc704895","ssdeep":"1536:Hjv9lkTtdw0aS3yPvWdfDSFdW6KK8zPJ86DQMBXQX:Hz9ceS3y2FDSFdRKNzPJj5gX","tlshash":"8753028264d3489c8c8b69d354847f1c707ef88fc1b88995a8e33ca14d4b1e6e85ad7f","first_seen":"2025-09-11T19:26:36.805532Z","last_seen":"2026-07-12T23:53:16.474183Z","times_seen":22336,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":31,"send":0,"wait":17,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/widget/heartbeat","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026device=desktop\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f","date":"2026-07-12T19:40:01.251Z","timestamp":1783885201251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"POST /api/widget/heartbeat HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 113\r\nOrigin: https://kleinanzeigen-rechnung.857219983.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":113,"data":"{\"sessionId\":\"997f345b980a97f44399d17f0206152a\",\"activeMs\":10000,\"path\":\"/widget\",\"scrollDepth\":0,\"clickCount\":0}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-headers: Content-Type, Accept\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\ncontent-length: 11\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:40:01 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":11,"size_decoded":665,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-07-12T23:25:47.82818Z","times_seen":15117,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/poll-commands/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:39:59.180Z","timestamp":1783885199180,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /api/poll-commands/05284973 HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:39:59 GMT\r\nexpires: 0\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":16,"size_decoded":605,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-07-12T19:40:21.471024Z","times_seen":93,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://kleinanzeigen-rechnung.857219983.net/ws/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:40:05.446Z","timestamp":1783885205446,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /ws/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kleinanzeigen-rechnung.857219983.net\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: gkUBPykHsdJWoeFjIxu/Nw==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nSec-Websocket-Accept: BVE5dJNVX4fM1YeKb6mK5/eI+YI=\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains\r\nDate: Sun, 12 Jul 2026 19:40:05 GMT\r\nVia: 1.1 google\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nAlt-Svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":279,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-12T23:55:34.736619Z","times_seen":17199564,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":13,"send":0,"wait":66,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/poll-commands/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:40:08.772Z","timestamp":1783885208772,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /api/poll-commands/05284973 HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:40:08 GMT\r\nexpires: 0\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":16,"size_decoded":605,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-07-12T19:40:21.471024Z","times_seen":93,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://kleinanzeigen-rechnung.857219983.net/ws/chat?sessionId=997f345b980a97f44399d17f0206152a","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kleinanzeigen-rechnung.857219983.net/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026device=desktop\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f","date":"2026-07-12T19:39:50.332Z","timestamp":1783885190332,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /ws/chat?sessionId=997f345b980a97f44399d17f0206152a HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kleinanzeigen-rechnung.857219983.net\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: bCXot3Ie2wiphOz6Z6287A==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nSec-Websocket-Accept: Mp4S0jz/PuL6Ispfo74/fCNGO6o=\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains\r\nDate: Sun, 12 Jul 2026 19:39:50 GMT\r\nVia: 1.1 google\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":304,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-12T23:55:34.736619Z","times_seen":17199564,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":78,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/poll-commands/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:40:05.576Z","timestamp":1783885205576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /api/poll-commands/05284973 HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:40:05 GMT\r\nexpires: 0\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":605,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-07-12T19:40:21.471024Z","times_seen":93,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/getpayment/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T19:39:48.648Z","timestamp":1783885188648,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /getpayment/05284973 HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-store, no-cache, must-revalidate, private\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://connect.facebook.net https://www.facebook.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://www.facebook.com https://*.facebook.com https://www.google-analytics.com https://*.googleusercontent.com https://*.gstatic.com https://*.kleinanzeigen.de https://*.ebay-kleinanzeigen.de; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' wss: https://www.facebook.com https://*.facebook.com https://connect.facebook.net; frame-src 'self' https://www.facebook.com https://*.facebook.com; media-src 'self' blob: data:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:39:49 GMT\r\nexpires: 0\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nset-cookie: cs_sid=997f345b980a97f44399d17f0206152a; Path=/; Max-Age=2592000; SameSite=Lax\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":94211,"size_decoded":29866,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39705)","md5":"b751844740384c0d23820c2435cb16ce","sha1":"0dc7e9b2c621609b23e07f9c839e8f4deb08eae1","sha256":"84d2ef9d54bca5eb8ada8ade9fee882171f41011cae88d3ea6e3f68f72b76c6d","sha512":"68cc4918cfe9c3961785d0513af3a34f828687d73454f4deeb639944fb319f7dad1225d67e0ff036b3858f9f7ce194d0d3571ab41fed851984332357404809a5","ssdeep":"768:F+E4ciE8uo0wQr8f+bAGCB3DWapbDaaDc7p/dbAkZkQEy0FgoqvV:8E4cgQrY+bdw3nbeaDct/dEkKQlFoqvV","tlshash":"1d935eb4f144217fe487cbb865d2fe8b260b92d7d70547a4f46b29d0ca899ca4523f88","first_seen":"2026-07-12T19:40:21.483959Z","last_seen":"2026-07-12T19:40:21.483959Z","times_seen":1,"resource_available":true,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":284,"connect":13,"send":0,"wait":156,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/listing-visit","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:39:49.415Z","timestamp":1783885189415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"POST /api/listing-visit HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 24\r\nOrigin: https://kleinanzeigen-rechnung.857219983.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":24,"data":"{\"listingId\":\"05284973\"}"}},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 33\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:39:49 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":33,"size_decoded":522,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5404be700e8ff1caec92295571a52ec1","sha1":"493131101340e7d494f76b5ebf5a200b0636a229","sha256":"f64846395ecdb1a98d2144c45381dfb71e43678c009288bcfad3caddf9767110","sha512":"8ee14133ae61e8eb3c80c7170d43cd0543eea0c64e3070f3e1b956681a6176f21ca6de6aacadd456d0c6135256ae6a97d7449beb78424c95293f1d29e3671034","ssdeep":"","tlshash":"ef80008b82cc2030cce00a200320bf320a2e883300e2a08c200cb8a0033e00a822a80b","first_seen":"2026-06-22T20:43:44.609275Z","last_seen":"2026-07-12T19:40:21.486163Z","times_seen":8,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/widget/identity","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:39:49.511Z","timestamp":1783885189511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"POST /api/widget/identity HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://kleinanzeigen-rechnung.857219983.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"aliases\":[{\"type\":\"session\",\"value\":\"997f345b980a97f44399d17f0206152a\"},{\"type\":\"cs_sid\",\"value\":\"997f345b980a97f44399d17f0206152a\"}]}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-headers: Content-Type, Accept\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\ncontent-length: 50\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:39:49 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":50,"size_decoded":704,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a258315747b854bff10230d305b51471","sha1":"7f8779cab9cdb4eee47b5baa171235a3248f8b9c","sha256":"81415c692ab2f72578e3387f5d4673c46cd415893ed35eb0fedb9205beca4d94","sha512":"2245f996c7583b1d9f0db23d2f2fd5cda1dea76efe3c8031d599e5519868e498396c8bbbdeab18c6427b62f823fb87acb561fc1baee05f37f92d2bcbfc09e21e","ssdeep":"","tlshash":"3490025444d5526409159216546009022441678295c5d854c0557581659ae618a96753","first_seen":"2026-07-12T19:40:21.487251Z","last_seen":"2026-07-12T19:40:21.487251Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/poll-commands/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:40:04.512Z","timestamp":1783885204512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /api/poll-commands/05284973 HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:40:04 GMT\r\nexpires: 0\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":605,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-07-12T19:40:21.471024Z","times_seen":93,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.412838191.net/getpayment/05284973","fqdn":"kleinanzeigen-rechnung.412838191.net","domain":"412838191.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T19:39:48.240Z","timestamp":1783885188240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.412838191.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 16:37:06 GMT","end":"Mon, 28 Sep 2026 16:37:05 GMT"},"fingerprint":{"sha1":"34:B5:64:6B:A7:B3:66:25:FE:94:46:EB:DF:ED:AA:52:37:15:DC:C0","sha256":"74:C9:6B:54:8E:C1:9C:E5:76:45:AF:6A:68:AD:9A:77:49:17:37:A1:F8:3F:EE:F7:31:E5:51:21:9B:3E:47:5F"}}},"request":{"raw":"GET /getpayment/05284973 HTTP/1.1\r\nHost: kleinanzeigen-rechnung.412838191.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ncache-control: no-store, no-cache, must-revalidate, max-age=0, private\r\ncontent-length: 93\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://connect.facebook.net https://www.facebook.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://www.facebook.com https://*.facebook.com https://www.google-analytics.com https://*.googleusercontent.com https://*.gstatic.com https://*.kleinanzeigen.de https://*.ebay-kleinanzeigen.de; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' wss: https://www.facebook.com https://*.facebook.com https://connect.facebook.net; frame-src 'self' https://www.facebook.com https://*.facebook.com; media-src 'self' blob: data:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:39:48 GMT\r\nexpires: 0\r\nlocation: https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nset-cookie: cs_sid=3c50a76b7acbea2878e742baec86f188; Path=/; SameSite=Lax; Max-Age=2592000; Secure\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-12T23:55:34.736619Z","times_seen":17199564,"resource_available":true,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":225,"connect":13,"send":0,"wait":119,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.412838191.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.412838191.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.412838191.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.412838191.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/poll-commands/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:39:49.417Z","timestamp":1783885189417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /api/poll-commands/05284973 HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:39:49 GMT\r\nexpires: 0\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":16,"size_decoded":605,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-07-12T19:40:21.471024Z","times_seen":93,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/widget/track","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:39:49.620Z","timestamp":1783885189620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"POST /api/widget/track HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 545\r\nOrigin: https://kleinanzeigen-rechnung.857219983.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":545,"data":"{\"url\":\"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973\",\"referrer\":\"\",\"title\":\"50 Servietten in Bayern - Piding | kleinanzeigen.de\",\"isFirstVisit\":true,\"utm\":{\"utm_source\":\"\",\"utm_medium\":\"\",\"utm_campaign\":\"\",\"utm_term\":\"\",\"utm_content\":\"\"},\"landingPath\":\"/getpayment/05284973\",\"device\":{\"deviceType\":\"desktop\",\"browser\":\"Firefox\",\"os\":\"Windows\",\"platform\":\"Linux x86_64\",\"screenWidth\":1280,\"screenHeight\":1024,\"language\":\"en-US\"},\"sessionId\":\"997f345b980a97f44399d17f0206152a\",\"visitorId\":\"v_f66e8852d45bc9434d02da6b4dba754f\"}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-headers: Content-Type, Accept\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:39:49 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":16,"size_decoded":670,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-07-12T23:55:11.915126Z","times_seen":173282,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/assets/CXVPiTs1.js","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kleinanzeigen-rechnung.857219983.net/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026device=desktop\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f","date":"2026-07-12T19:39:50.104Z","timestamp":1783885190104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /assets/CXVPiTs1.js HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 12 Jul 2026 19:39:50 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":46803,"size_decoded":16699,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (27981)","md5":"654a676bb2d6f7bcec381e26693b8bc9","sha1":"329b84eeff199a18b7c597e66d7263e57caa40e2","sha256":"3e6b00ddfb85352042b0f01c43d81ab40f0b6f861577fcce6a79fb661af1d31e","sha512":"6e49de7c422fde85a1187bfc3bb197dbaf6b5b4361d1840c368694d598ecaec2b50b39026aaca52f7a7aa9939d6c0dc32ee9f51493d1fcc84c79d87d480dbfd0","ssdeep":"768:bdvnqvURWd7dk9FStJpgURKolnL6KRMcy+wXUp8/J3GvJ5aepTPKDWCoUUTn:bNqvN7dksJGYjYrJdwDaepTiDmUUTn","tlshash":"2623090fc61029324a8702d67e8f599976ba2c55375049e24fdcc02e13f5bef913b6ea","first_seen":"2026-06-22T20:43:44.611658Z","last_seen":"2026-07-12T19:40:21.490129Z","times_seen":8,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/kl-image/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kleinanzeigen-rechnung.857219983.net/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026device=desktop\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f","date":"2026-07-12T19:39:50.480Z","timestamp":1783885190480,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /api/kl-image/05284973 HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-length: 117943\r\ncontent-type: image/jpeg\r\ndate: Sun, 12 Jul 2026 19:39:50 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":117943,"size_decoded":118444,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 913x960, components 3","md5":"1c3dd2a3efc4cc3619b3434a395a35bc","sha1":"8a290e40b61ff800b181a7e9ae2b2e6f2f5eda11","sha256":"6105661bc1f98715d39dcb731dfbf021836d8efbd27bf8a01bf7d94449a293a2","sha512":"d0161667b001ebf0179c5b82ad637db3f34a85e1588ed9d90d2ba584a31b009612593194e0d4d65e096b8816ae290adb2f4ae4e705723353691d28bf82936614","ssdeep":"3072:UWiSr+LTsfNaoSl0kgvoQtpTuzCFZlUnt9C:UWia+LANVSzmyzCFZlUtQ","tlshash":"75b3128712d2e96e6e0e66c786b8171db0042757d962f7730239284af0f82b46f17b5e","first_seen":"2026-07-11T03:43:29.108109Z","last_seen":"2026-07-12T19:40:21.474093Z","times_seen":3,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://kleinanzeigen-rechnung.857219983.net/ws/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:39:55.191Z","timestamp":1783885195191,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /ws/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kleinanzeigen-rechnung.857219983.net\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: SZBe6Ymzf625LzAM2nmhzQ==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nSec-Websocket-Accept: 0AnlkBRUdG+HJnqJUyBRBkS2ViQ=\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains\r\nDate: Sun, 12 Jul 2026 19:39:55 GMT\r\nVia: 1.1 google\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nAlt-Svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":279,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-12T23:55:34.736619Z","times_seen":17199564,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":14,"send":0,"wait":69,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/poll-commands/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:39:58.112Z","timestamp":1783885198112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /api/poll-commands/05284973 HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:39:58 GMT\r\nexpires: 0\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":605,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-07-12T19:40:21.471024Z","times_seen":93,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/poll-commands/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:40:07.707Z","timestamp":1783885207707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /api/poll-commands/05284973 HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:40:07 GMT\r\nexpires: 0\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":16,"size_decoded":605,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-07-12T19:40:21.471024Z","times_seen":93,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/assets/ows9L6Hu.js","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kleinanzeigen-rechnung.857219983.net/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026device=desktop\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f","date":"2026-07-12T19:39:49.969Z","timestamp":1783885189969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /assets/ows9L6Hu.js HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 12 Jul 2026 19:39:50 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":147080,"size_decoded":45225,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bfd754324d16f1d97dca2efac4271377","sha1":"f634add36f6cdcde56d031019540973c7f048531","sha256":"8a304c4da1a948fe185168d573dac0a004071da3fa09d068406b139c7258a30b","sha512":"d877b3bb19c162049fbb7621e1c39f0346e626fbe94876c3c39e8aa4df1cd2d9cf37ffc55add70d18348c8c37cb7a6dda45167a789bafa8c2bc06ce79b08ba3f","ssdeep":"1536:pFbylsY99jvqpym5ogt1DONp1wYxgXS3FpUQ5bgHN1nVSvMe42/gwWQzGVQTF/V+:Dbyr9NgSb+Uu2vOh","tlshash":"e0e32ada305274b0dbad4986817f813c77371950300e51a0f13d9e6c39a9692e6bbfee","first_seen":"2026-07-06T19:50:02.87848Z","last_seen":"2026-07-12T19:40:21.491143Z","times_seen":6,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/assets/DycGZxfS.css","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kleinanzeigen-rechnung.857219983.net/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026device=desktop\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f","date":"2026-07-12T19:39:49.981Z","timestamp":1783885189981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /assets/DycGZxfS.css HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Sun, 12 Jul 2026 19:39:50 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":123633,"size_decoded":19513,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c8f799b5967609cd7c8a9bef3b06bf7b","sha1":"21556eb9732ecd22c367b3a608338a6fcda58dd2","sha256":"5e09e13766804c8514549ba4bfddcca4791a856aec89f7002b243360996e7699","sha512":"27585ebdb1c7c778061c49a17a99d9715610cc180695acd795177b687243996c9d9e14cfa9b73ff79fbdbe0b527aec7dbfead9fa903d3fbae125b6075f496fd1","ssdeep":"3072:oVogeh7Mhc+gbw0I+9PtfKhR9U7VQW52w8gXY8MUz2eueGqfc378VQZkt5FhykEg:oVogeh7Mhc+gbw0I+9PtfKhR9U7VQW5z","tlshash":"60c3422d6a54503f3c6790f9d28cb9ace21bb1c0df3e56eabc86522067d23f25d97604","first_seen":"2026-07-06T19:50:02.895396Z","last_seen":"2026-07-12T19:40:21.493808Z","times_seen":6,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/widget/heartbeat","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026device=desktop\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f","date":"2026-07-12T19:39:50.333Z","timestamp":1783885190333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"POST /api/widget/heartbeat HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 113\r\nOrigin: https://kleinanzeigen-rechnung.857219983.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":113,"data":"{\"sessionId\":\"997f345b980a97f44399d17f0206152a\",\"activeMs\":10000,\"path\":\"/widget\",\"scrollDepth\":0,\"clickCount\":0}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-headers: Content-Type, Accept\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\ncontent-length: 11\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:39:50 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11,"size_decoded":665,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-07-12T23:25:47.82818Z","times_seen":15117,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/poll-commands/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:39:52.780Z","timestamp":1783885192780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /api/poll-commands/05284973 HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:39:52 GMT\r\nexpires: 0\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":605,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-07-12T19:40:21.471024Z","times_seen":93,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/poll-commands/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:39:55.976Z","timestamp":1783885195976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /api/poll-commands/05284973 HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:39:56 GMT\r\nexpires: 0\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":16,"size_decoded":605,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-07-12T19:40:21.471024Z","times_seen":93,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/poll-commands/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:40:10.903Z","timestamp":1783885210903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /api/poll-commands/05284973 HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:40:10 GMT\r\nexpires: 0\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":16,"size_decoded":605,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-07-12T19:40:21.471024Z","times_seen":93,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/poll-commands/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:40:13.034Z","timestamp":1783885213034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /api/poll-commands/05284973 HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:40:13 GMT\r\nexpires: 0\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":605,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-07-12T19:40:21.471024Z","times_seen":93,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/fl-lock.webp","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:39:49.408Z","timestamp":1783885189408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /fl-lock.webp HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 61062\r\ncontent-type: image/webp\r\ndate: Sun, 12 Jul 2026 19:39:49 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":61062,"size_decoded":61566,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"29d99016c2969b3ed39e36b3caea0733","sha1":"272c1818eba460c1baef8b16d6ca030653e53139","sha256":"8a9574317a8b7948a3bd637c78c815d9342e16be4025ea2887028cc9d0bb2941","sha512":"562c71f86a94f63b00013bb3f9a553f1d9dc78356db25e8d77bfe7e97c5412f7dd6504ea91bc03c935cd939adb0158403beca87695ca60f28f9660a612a91806","ssdeep":"1536:MJSla+dIIC2zlPmSSHCAnb408yWhvI4ExV/Vrn7skyy:sSxy2ziHdb49yWhvQVr7rH","tlshash":"c753f223633c4f61f03c74bf1d51a2d6c79855bbc38cad9d558630869b7ce0a39168ab","first_seen":"2026-06-25T14:00:32.528119Z","last_seen":"2026-07-12T19:40:21.496152Z","times_seen":6,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/poll-commands/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:40:03.448Z","timestamp":1783885203448,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /api/poll-commands/05284973 HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:40:03 GMT\r\nexpires: 0\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":16,"size_decoded":605,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-07-12T19:40:21.471024Z","times_seen":93,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/widget/heartbeat","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026device=desktop\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f","date":"2026-07-12T19:40:11.249Z","timestamp":1783885211249,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"POST /api/widget/heartbeat HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 113\r\nOrigin: https://kleinanzeigen-rechnung.857219983.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":113,"data":"{\"sessionId\":\"997f345b980a97f44399d17f0206152a\",\"activeMs\":10000,\"path\":\"/widget\",\"scrollDepth\":0,\"clickCount\":0}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-headers: Content-Type, Accept\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\ncontent-length: 11\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:40:11 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":665,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-07-12T23:25:47.82818Z","times_seen":15117,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/assets/yDzCUUn5.js","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kleinanzeigen-rechnung.857219983.net/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026device=desktop\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f","date":"2026-07-12T19:39:49.964Z","timestamp":1783885189964,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /assets/yDzCUUn5.js HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 12 Jul 2026 19:39:49 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":181129,"size_decoded":43369,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64595)","md5":"1726fe829864ad9de8b59be9d6b28ca9","sha1":"448a0ff3468adb87e6936934342ca29b4323e3bb","sha256":"02f8816a912c3dd0ae769ef3fe12a9cb8691eea3f714f51fe6101b9a4f8db1ba","sha512":"6a41a2271eeb0d1a4f4f92bb8b59af3a61e280e4fd20dda48f488577af4e6f4c5baf83ba5fc514a5a36a0d33ad969db4d01b0bb77cd5245697b1958c906e6641","ssdeep":"3072:P+SeZttBdrxNM+OdMfCEZ6t5KwKhoPLJhN286x+:PsbdrxNM+J8KwKuPLN286s","tlshash":"bf042b05f042afbdee6b09e5b83ea004b01a5f55db3f89e1f0bf6425166845b76633c8","first_seen":"2026-07-06T19:50:02.890735Z","last_seen":"2026-07-12T19:40:21.49705Z","times_seen":6,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/poll-commands/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:40:06.642Z","timestamp":1783885206642,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /api/poll-commands/05284973 HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:40:06 GMT\r\nexpires: 0\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":16,"size_decoded":605,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-07-12T19:40:21.471024Z","times_seen":93,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/assets/1rpN--U6.js","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kleinanzeigen-rechnung.857219983.net/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026device=desktop\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f","date":"2026-07-12T19:39:49.971Z","timestamp":1783885189971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /assets/1rpN--U6.js HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 12 Jul 2026 19:39:49 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35017,"size_decoded":11720,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (35016)","md5":"029fe306eccacbec87499daeba2b42ff","sha1":"8d28ccdcff56309a01e35f6d28e14b77dc1f75f2","sha256":"ef714150abf06ff9b3041afc44bfe02e01dc462216140642a1e319138316edda","sha512":"a56352a43d7cf41b6adb1050470051277b33036cf10d282f54f1abd5534c6d0bc77f504f71c3f204c85263fd203c78ca60dae39162d8a0e62ea1f1e9c789b728","ssdeep":"768:MTA9R0qk7PAhszvMG9+fTIz9LLwoSyuz534Hzia1qMrzlTHW5D5NPb6bspZ/hEtg:6pTpItH2SPHEBpW0tGHCS9v0ssvSR","tlshash":"9df284af8fcd125f5806e6881e1bb0104fee63b9338e8892e50f9532d696543dda3f15","first_seen":"2026-07-06T19:50:02.886347Z","last_seen":"2026-07-12T19:40:21.497889Z","times_seen":6,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://kleinanzeigen-rechnung.857219983.net/ws/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:40:10.564Z","timestamp":1783885210564,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /ws/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kleinanzeigen-rechnung.857219983.net\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: jUb/aXQW7I6qLf3ZEiv1Zg==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nSec-Websocket-Accept: dfUs1U8S7/6lsE67gDyWlFmYFMc=\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains\r\nDate: Sun, 12 Jul 2026 19:40:10 GMT\r\nVia: 1.1 google\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nAlt-Svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":279,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-12T23:55:34.736619Z","times_seen":17199564,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":13,"send":0,"wait":67,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/assets/DPz9ax8H.js","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kleinanzeigen-rechnung.857219983.net/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026device=desktop\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f","date":"2026-07-12T19:39:50.182Z","timestamp":1783885190182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /assets/DPz9ax8H.js HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 12 Jul 2026 19:39:50 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":512284,"size_decoded":132980,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (51553)","md5":"5777f3fae808210077cc6d8358bf6b6c","sha1":"d59b029ab883ac2bc00785b5c5ba11a87ab13d51","sha256":"6bf8381258c6986aede1cd2c121c4388e9c05637f3d23b03d609b139aa15ebbc","sha512":"6d4dc70b09c0955fdd455f6954db0ffd9edaae313d8ce1af8ea9060ab501ae4761ad554386c81a017b936006df8a9d26832bfa852aeb29bb0b65f5e44d12543e","ssdeep":"6144:CM/g58Oa53YLIgEcTZpmXRfH43oBel2Kcqn8SW9NnE:G2IMgTZpmXRfY3oBlZ9NE","tlshash":"6ab41b84b19578a64386c2e5ec37520163392d59350c80b8fb3ce8e77a74f46b277bb6","first_seen":"2026-07-06T19:50:02.887204Z","last_seen":"2026-07-12T19:40:21.498827Z","times_seen":5,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/poll-commands/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:39:57.046Z","timestamp":1783885197046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /api/poll-commands/05284973 HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:39:57 GMT\r\nexpires: 0\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":605,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-07-12T19:40:21.471024Z","times_seen":93,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://kleinanzeigen-rechnung.857219983.net/ws/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:40:00.313Z","timestamp":1783885200313,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /ws/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kleinanzeigen-rechnung.857219983.net\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: PLqliiuHXHxcg9W1NcQ3Eg==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nSec-Websocket-Accept: xHXMdwv3exhCE2wMbwc4g9oEAYY=\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains\r\nDate: Sun, 12 Jul 2026 19:40:00 GMT\r\nVia: 1.1 google\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":304,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-12T23:55:34.736619Z","times_seen":17199564,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":13,"send":0,"wait":69,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/notify-page","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:39:49.439Z","timestamp":1783885189439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"POST /api/notify-page HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 44\r\nOrigin: https://kleinanzeigen-rechnung.857219983.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":44,"data":"{\"sessionId\":\"05284973\",\"page\":\"getpayment\"}"}},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 11\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:39:49 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":500,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-07-12T23:25:47.82818Z","times_seen":15117,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/assets/Bpbfi9Ji.js","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kleinanzeigen-rechnung.857219983.net/widget?sessionId=997f345b980a97f44399d17f0206152a\u0026device=desktop\u0026visitorId=v_f66e8852d45bc9434d02da6b4dba754f","date":"2026-07-12T19:39:50.185Z","timestamp":1783885190185,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /assets/Bpbfi9Ji.js HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 12 Jul 2026 19:39:50 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3903,"size_decoded":1828,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (3902)","md5":"7d161138773f12fe5152c00581dacef2","sha1":"6e1383b33852340c6f6a99a866017e75397bfc4a","sha256":"b56292ecb6d1e6feb6ebcf4e4c9a0f2e19d299f6e709753380fdb704dde442c7","sha512":"70a3dc032bf974cfcff00d6b609a8997750c6fae184f535f52351313a9bf0982ca29db7299597d624ae0bec6866a5820ca1622ade6d28075040291c77871e18d","ssdeep":"","tlshash":"0681ad54e0ccec5b49a2d79e10f7af0f4d1c052ed65b57336e08f39a7484b48f92a169","first_seen":"2026-06-22T20:43:44.61299Z","last_seen":"2026-07-12T19:40:21.499768Z","times_seen":7,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/poll-commands/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:40:00.248Z","timestamp":1783885200248,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /api/poll-commands/05284973 HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:40:00 GMT\r\nexpires: 0\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":16,"size_decoded":605,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-07-12T19:40:21.471024Z","times_seen":93,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/widget/heartbeat","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:40:09.633Z","timestamp":1783885209633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"POST /api/widget/heartbeat HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 175\r\nOrigin: https://kleinanzeigen-rechnung.857219983.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":175,"data":"{\"activeMs\":10000,\"path\":\"/getpayment/05284973\",\"scrollDepth\":0,\"clickCount\":0,\"sessionId\":\"997f345b980a97f44399d17f0206152a\",\"visitorId\":\"v_f66e8852d45bc9434d02da6b4dba754f\"}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-headers: Content-Type, Accept\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\ncontent-length: 11\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:40:09 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":11,"size_decoded":665,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-07-12T23:25:47.82818Z","times_seen":15117,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleinanzeigen-rechnung.857219983.net/api/poll-commands/05284973","fqdn":"kleinanzeigen-rechnung.857219983.net","domain":"857219983.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kleinanzeigen-rechnung.857219983.net/getpayment/05284973","date":"2026-07-12T19:40:09.838Z","timestamp":1783885209838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleinanzeigen-rechnung.857219983.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 10:09:00 GMT","end":"Thu, 08 Oct 2026 10:08:59 GMT"},"fingerprint":{"sha1":"64:65:8A:D1:FF:34:DD:65:9D:3A:29:CC:B3:70:E8:B3:A0:8E:4E:8C","sha256":"E5:BD:AB:C9:00:DA:CB:62:B9:AE:9D:DC:C5:4D:A1:0A:D9:1B:CC:98:1F:5E:5D:D1:34:94:BC:0F:EC:89:11:5B"}}},"request":{"raw":"GET /api/poll-commands/05284973 HTTP/1.1\r\nHost: kleinanzeigen-rechnung.857219983.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs_sid=997f345b980a97f44399d17f0206152a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 19:40:09 GMT\r\nexpires: 0\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=()\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":605,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8414b7a99469c3ceb2d71fb08fca47c3","sha1":"2428398c2c03b4bc83e6d1dcad69bd0a4bdac022","sha256":"839e0951ad9cf42d348ea21d0fc25878430b42259cf072aa08e754a20ea71f83","sha512":"a943a88f55ddf11019452225fb2450f32f74b7bedc1c0bd832b0e72c776044c4b427e9b481f5c5c105a25c9346f6516a3fe45ebf5985dd64389562b8d92899da","ssdeep":"","tlshash":"34600000c0fc00030000000000cc300c03cf030300030cc30033ff0000c003000300c0","first_seen":"2026-03-05T10:02:57.784959Z","last_seen":"2026-07-12T19:40:21.471024Z","times_seen":93,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kleinanzeigen-rechnung.857219983.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}