{"report_id":"580e73b8-225c-4b38-bdc6-30fabafbe558","version":0,"status":"done","tags":[],"date":"2026-08-08T01:02:54Z","url":{"schema":"http","addr":"schweiz-axaych79.de/cc.php","fqdn":"schweiz-axaych79.de","domain":"schweiz-axaych79.de","tld":"de"},"ip":{"addr":"82.38.4.75","port":0,"asn":5089,"as":"Virgin Media","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"schweiz-axaych79.de/cc.php","fqdn":"schweiz-axaych79.de","domain":"schweiz-axaych79.de","tld":"de"},"title":"schweiz-axaych79.de/cc.php","dom":{"size":2468,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"b4cbd4fad5fb202105f9d5bb2219c4b3","sha1":"c910919e181de2faae73567fdf0c5a4ef4d38ac6","sha256":"24585f815a02df6207da8071d01b63a601ded795a5068815a96e4ffbdbdd5c7c","sha512":"d26145c1ebc2040ec8040ec630170d274ef2a90e9bcd9553c5c948521cb41ec885eec17c2dc9b7dce10dc8a791d643d60fc54203644f9e4ecbf7e0a15ca79ba7","ssdeep":"","tlshash":"b151bc2015e4093fd8d186946970ae1e2dd2eb23e7879484b2ed5bc28ff1de2cc07139","dom_hash":"domhashd60c97f82de070c29dbdb2836e307dfc","first_seen":"2026-01-26T19:44:10.927068Z","last_seen":"2026-08-08T01:47:04.734931Z","times_seen":9,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"schweiz-axaych79.de/cc.php","fqdn":"schweiz-axaych79.de","domain":"schweiz-axaych79.de","tld":"de"},"ip":{"addr":"82.38.4.75","port":0,"asn":5089,"as":"Virgin Media","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-12T01:02:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"schweiz-axaych79.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"schweiz-axaych79.de","ip":{"addr":"82.38.4.75","port":443,"asn":5089,"as":"Virgin Media","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-07T18:08:59.135461Z","last_seen":"2026-08-07T18:08:59.135461Z","alert_count":4,"request_count":4,"received_data":12340,"sent_data":2010,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-08-02T22:44:21.067894Z","alert_count":0,"request_count":2,"received_data":97863,"sent_data":994,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-12T10:22:02.892729Z","times_seen":185244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.16/jquery.mask.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc290e6c3aeecf5021dd82ad8df2512a","sha1":"fb983aecd3940e8ebbfe5e74c8099cee9223c957","sha256":"2a0db34dc14ef4b5ce73b230701c7561e5012667a4c9cb274ecab646e1474995","sha512":"a47546a57ec5ff6ef267421263e5558f250b0296c3943d3f5f4ae019b4ea084ed6156e4c7b3353586fdd9e1b5b06e202cec7745903e0a44e111012eff94a8287","ssdeep":"192:cd227YJcI/iarixR4aCSfZrkiqVNReFevZA8A/A:cdaJ39e74boZrkVVjeFexA8AY","tlshash":"b502e8d5329670b253b371e901bf020bebb7afa156de4814d61a94e0ae74f890053f7e","size":8327,"data":"","first_seen":"2023-03-07T01:06:41Z","last_seen":"2026-08-11T22:25:17.309941Z","times_seen":12940,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"schweiz-axaych79.de/cc.php","fqdn":"schweiz-axaych79.de","domain":"schweiz-axaych79.de","tld":"de"},"ip":{"addr":"82.38.4.75","port":443,"asn":5089,"as":"Virgin Media","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"41ef8790590f90c8ddee3afe246e1609","sha1":"1365ccabe1de5b630b35ab89af011f78218fa8d5","sha256":"98e8a199f450b8025df01f3807c3292ef0b3e1095d28e1f565bdda286f600e5f","sha512":"7ca5d19258e2abd77605caccd5c244f068ea2b0a4938b9fd517c69ca172fa0f89d82976f33830b899e1cbf4130d68ba7a5bc91c3295db21ee3af4f3bd5a59888","ssdeep":"","tlshash":"02b009460bd10a0ee8f0288d502431fcb0c8bb2a23f0d8da6c284a889585e303909133","size":104,"data":"","first_seen":"2026-06-08T17:01:41.167751Z","last_seen":"2026-08-08T01:47:04.740136Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"schweiz-axaych79.de/res/cc.css","fqdn":"schweiz-axaych79.de","domain":"schweiz-axaych79.de","tld":"de"},"ip":{"addr":"82.38.4.75","port":443,"asn":5089,"as":"Virgin Media","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://schweiz-axaych79.de/cc.php","date":"2026-08-08T01:02:27.968Z","timestamp":1786150947968,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"schweiz-axaych79.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 08:32:49 GMT","end":"Thu, 05 Nov 2026 08:32:48 GMT"},"fingerprint":{"sha1":"B3:AB:F0:7D:03:5C:E1:CF:28:7A:74:5B:34:2F:B9:01:EA:54:DB:93","sha256":"2D:1A:9E:52:02:F2:D8:BA:2B:DB:C7:90:4A:83:D6:E1:2D:85:82:1F:0D:6C:71:09:57:F8:C1:21:6F:0B:A7:4F"}}},"request":{"raw":"GET /res/cc.css HTTP/1.1\r\nHost: schweiz-axaych79.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://schweiz-axaych79.de/cc.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 01:02:27 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 04 Jul 2026 19:07:46 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 6257\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6257,"size_decoded":6498,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"761a1b47fd394db559f7f615ef493262","sha1":"53b2a87adc88d9b38c1de6c03018b7e69779c690","sha256":"1aa83aeb0acf20c6a7fb7b928e984e8efae368f7c9a090d00cdc39e8f9bf4581","sha512":"41a4db2225f69e37e297f4dd9fcef02f51b4b41bc0ff03fb4c094df46bb017993ced232694f8b71a7127909b724d4ae79e84ad142614702e767761c6e3b788ff","ssdeep":"192:SSwAIAiXg4TbfeR8ZhZlUHJzQB7HQgF0qU:OyRj5","tlshash":"88d1d05dda16024a9133e654dfa2024ddb925017db47a3593eece2a4cfbb268d360fcc","first_seen":"2026-08-07T18:09:03.248056Z","last_seen":"2026-08-08T01:47:04.736555Z","times_seen":3,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"schweiz-axaych79.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://schweiz-axaych79.de/cc.php","date":"2026-08-08T01:02:28.148Z","timestamp":1786150948148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://schweiz-axaych79.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 08 Aug 2026 01:02:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27446\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Tue, 29 Aug 2023 04:36:11 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3yf%2BwpskkGJuMa5A9FiI2RFi6tvAXuXVX4ADRMqddkmPBTU%2FCuLhpFRqdOM6CCCJHAnjbtp200MKBO66eqiPTvVhgYDMNFeSD3BNOqjKzHdZL0%2F3KXrgIWLMZmMD30mYu6ymUXGE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a27a98820b8fb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87533,"size_decoded":28451,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-12T10:22:02.892729Z","times_seen":185244,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":3,"connect":12,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.16/jquery.mask.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://schweiz-axaych79.de/cc.php","date":"2026-08-08T01:02:28.150Z","timestamp":1786150948150,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/jquery.mask/1.14.16/jquery.mask.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://schweiz-axaych79.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 08 Aug 2026 01:02:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3074\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:11:47 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T3Gx0sVQfV9aBNqwqGCquEXVjAHA9Oqd9tz7FIquwWDyd2lSYC00wb5O542oG84Rc9TTP571nziBIMvqT8XU0t2Ry44IHhO47Qm3lUR5tAE8stTVfjU9kEjI9pJDrvrbn2l3wIVT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a27a98820b91b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8327,"size_decoded":4072,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (542)","md5":"cc290e6c3aeecf5021dd82ad8df2512a","sha1":"fb983aecd3940e8ebbfe5e74c8099cee9223c957","sha256":"2a0db34dc14ef4b5ce73b230701c7561e5012667a4c9cb274ecab646e1474995","sha512":"a47546a57ec5ff6ef267421263e5558f250b0296c3943d3f5f4ae019b4ea084ed6156e4c7b3353586fdd9e1b5b06e202cec7745903e0a44e111012eff94a8287","ssdeep":"192:cd227YJcI/iarixR4aCSfZrkiqVNReFevZA8A/A:cdaJ39e74boZrkVVjeFexA8AY","tlshash":"b502e8d5329670b253b371e901bf020bebb7afa156de4814d61a94e0ae74f890053f7e","first_seen":"2023-03-07T01:06:41Z","last_seen":"2026-08-11T22:25:17.309941Z","times_seen":12940,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"schweiz-axaych79.de/res/img/logo.png","fqdn":"schweiz-axaych79.de","domain":"schweiz-axaych79.de","tld":"de"},"ip":{"addr":"82.38.4.75","port":443,"asn":5089,"as":"Virgin Media","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://schweiz-axaych79.de/cc.php","date":"2026-08-08T01:02:28.154Z","timestamp":1786150948154,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"schweiz-axaych79.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 08:32:49 GMT","end":"Thu, 05 Nov 2026 08:32:48 GMT"},"fingerprint":{"sha1":"B3:AB:F0:7D:03:5C:E1:CF:28:7A:74:5B:34:2F:B9:01:EA:54:DB:93","sha256":"2D:1A:9E:52:02:F2:D8:BA:2B:DB:C7:90:4A:83:D6:E1:2D:85:82:1F:0D:6C:71:09:57:F8:C1:21:6F:0B:A7:4F"}}},"request":{"raw":"GET /res/img/logo.png HTTP/1.1\r\nHost: schweiz-axaych79.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://schweiz-axaych79.de/cc.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 01:02:28 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 21 Oct 2025 17:01:40 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2264\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2264,"size_decoded":2506,"mime_type":"image/png","magic":"PNG image data, 101 x 99, 8-bit/color RGBA, non-interlaced","md5":"54dbf217d9015185fc68550f598b18ec","sha1":"ce7129af5fbc46611ed6c57c60aba78a2c4a9baa","sha256":"d5822efaa8e9370951b9d2a1f58d3e334d24126dffcf241a4e295c942ec29f7a","sha512":"5931b80dff32e13a2e670133c025b24cc8fb6e31137f02c39775125a09639febd7acf1a62563f7918d2df2542a6e190967549fe0933a8d240d3ecd5cdd291004","ssdeep":"","tlshash":"77411b44f6c2e8dc9d033daf61b735528b1f3bc96638e89aed1371119ee0602b824912","first_seen":"2025-12-25T17:22:51.963123Z","last_seen":"2026-08-08T01:47:04.738748Z","times_seen":176,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"schweiz-axaych79.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"schweiz-axaych79.de/favicon.ico","fqdn":"schweiz-axaych79.de","domain":"schweiz-axaych79.de","tld":"de"},"ip":{"addr":"82.38.4.75","port":443,"asn":5089,"as":"Virgin Media","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://schweiz-axaych79.de/cc.php","date":"2026-08-08T01:02:28.276Z","timestamp":1786150948276,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"schweiz-axaych79.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 08:32:49 GMT","end":"Thu, 05 Nov 2026 08:32:48 GMT"},"fingerprint":{"sha1":"B3:AB:F0:7D:03:5C:E1:CF:28:7A:74:5B:34:2F:B9:01:EA:54:DB:93","sha256":"2D:1A:9E:52:02:F2:D8:BA:2B:DB:C7:90:4A:83:D6:E1:2D:85:82:1F:0D:6C:71:09:57:F8:C1:21:6F:0B:A7:4F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: schweiz-axaych79.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://schweiz-axaych79.de/cc.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 08 Aug 2026 01:02:28 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":555,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-12T10:40:27.593427Z","times_seen":56701,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"schweiz-axaych79.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"schweiz-axaych79.de/cc.php","fqdn":"schweiz-axaych79.de","domain":"schweiz-axaych79.de","tld":"de"},"ip":{"addr":"82.38.4.75","port":443,"asn":5089,"as":"Virgin Media","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-08T01:02:27.180Z","timestamp":1786150947180,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"schweiz-axaych79.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 08:32:49 GMT","end":"Thu, 05 Nov 2026 08:32:48 GMT"},"fingerprint":{"sha1":"B3:AB:F0:7D:03:5C:E1:CF:28:7A:74:5B:34:2F:B9:01:EA:54:DB:93","sha256":"2D:1A:9E:52:02:F2:D8:BA:2B:DB:C7:90:4A:83:D6:E1:2D:85:82:1F:0D:6C:71:09:57:F8:C1:21:6F:0B:A7:4F"}}},"request":{"raw":"GET /cc.php HTTP/1.1\r\nHost: schweiz-axaych79.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 01:02:27 GMT\r\nServer: Apache\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2538,"size_decoded":1127,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"b4cc2e44045922dcecd7de1e46f38f45","sha1":"91f3b7e7f4fea80df23bf0864fed0156917ebd4c","sha256":"ef768913a4145f08c732bad6f7815822871af966772ac3c05ea2731025ccbe67","sha512":"a2edea7c901e8c37436f61860a4aad5a7c57a41a33aa29c2e20f15abeae4ee6e90f1a9ed8bc814debc4d61c86b439fee8560f14c1981ea8828e92b1abb970d2e","ssdeep":"","tlshash":"6f517c6024d60c2fd9b386b45860abdeee92d213d7879a44b1ec27c36ff2d15cd47168","first_seen":"2026-01-26T19:44:10.931265Z","last_seen":"2026-08-08T01:47:04.735731Z","times_seen":9,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":0,"dns":204,"connect":20,"send":0,"wait":338,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"schweiz-axaych79.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}
