{"report_id":"7b921355-9c9f-403c-b4c7-11b51628347a","version":0,"status":"done","tags":[],"date":"2026-06-19T12:36:06Z","url":{"schema":"http","addr":"meine-zustellplanung.com","fqdn":"meine-zustellplanung.com","domain":"meine-zustellplanung.com","tld":"com"},"ip":{"addr":"158.94.209.86","port":0,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"meine-zustellplanung.com/404","fqdn":"meine-zustellplanung.com","domain":"meine-zustellplanung.com","tld":"com"},"title":"meine-zustellplanung.com/","dom":{"size":15776,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (14899)","md5":"9f6a3f85c4ebd331e419118fa0ff50c8","sha1":"53fc34eb97954ba83b3ca00ad41aa821bc186f9c","sha256":"5102137f364c42305430549f4a9c19f54dd540348733e7f29b08f2e5ad3aa168","sha512":"d5465e24c871fa53761be99fab1d82ae0ff349e8b419f44cec415bbc9ac058badf72dc224cd188a3da8db0aac6c18b6137c2886ea277c99a08717c42d02027dd","ssdeep":"192:LxgpOxWp35nTtXC2s1Bpu0qN4QOigg/JpcXTTruLxksc64JyhOq7vm3:LuOx05nrGPKJgg8T4xksc64Jysq7vS","tlshash":"03624684b41c12746d3fab01dec8973cd125b8426f624866a10e088fe9d7ff639e5f96","dom_hash":"domhashb0a25a418c48172c911c8395106b3cd1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"meine-zustellplanung.com","fqdn":"meine-zustellplanung.com","domain":"meine-zustellplanung.com","tld":"com"},"ip":{"addr":"158.94.209.86","port":0,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-24T12:36:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-19","alert":"Phishing Block","trigger":"meine-zustellplanung.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"meine-zustellplanung.com","ip":{"addr":"158.94.209.86","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-06-18","domain_rank":0,"first_seen":"2026-06-19T12:36:08.679696Z","last_seen":"2026-06-19T12:36:08.679696Z","alert_count":42,"request_count":7,"received_data":1243182,"sent_data":3431,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-14T22:22:05.140579Z","alert_count":0,"request_count":2,"received_data":33133,"sent_data":1108,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"meine-zustellplanung.com/assets/index-CDBXoWxl.js","fqdn":"meine-zustellplanung.com","domain":"meine-zustellplanung.com","tld":"com"},"ip":{"addr":"158.94.209.86","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc058f07faa6a50661b6f2b963e99e67","sha1":"26d44a45c55dbcd16816c8c199f55ee03e4b7194","sha256":"51a351c56b6dde343f13454d84cb723a6fc30db43a4b67813e640f90bbd0c042","sha512":"894501c4aa6c99d16e7f0bba7bc691bbf2ef89a7fd31979d157fc6f1b0f5140dfcf376b1af6f5ea8528ecfda44154af0453aed266ac9904e7ec518ce17af38a3","ssdeep":"24576:B3tHpfVjKTQG4jzYt/VXrt67Dx/wqmlnum3vrzDB7Fd73ZXKs15f:RtlVjKTQG4jz4NXrt67Dx/wqmlnum3vB","tlshash":"d5357ea471907aad9eb705d4947f4005b23e1e54e81e88d0f07ce8aa2b70456b6b7ffc","size":1136356,"data":"","first_seen":"2026-05-22T11:10:36.067404Z","last_seen":"2026-06-19T13:17:09.42071Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"meine-zustellplanung.com/sanctum/csrf-cookie","fqdn":"meine-zustellplanung.com","domain":"meine-zustellplanung.com","tld":"com"},"ip":{"addr":"158.94.209.86","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://meine-zustellplanung.com/","date":"2026-06-19T12:35:45.421Z","timestamp":1781872545421,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meine-zustellplanung.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 15:05:37 GMT","end":"Wed, 16 Sep 2026 15:05:36 GMT"},"fingerprint":{"sha1":"77:E4:CA:A1:22:2C:60:60:E9:AB:87:58:EA:75:46:C4:D3:4C:8D:B0","sha256":"B2:66:49:3E:BC:E0:DF:4A:EE:CD:FB:95:B1:DB:54:76:76:61:2E:CD:15:A4:50:CA:9A:3F:E7:A6:E9:D8:CA:CF"}}},"request":{"raw":"GET /sanctum/csrf-cookie HTTP/1.1\r\nHost: meine-zustellplanung.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meine-zustellplanung.com/404\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 19 Jun 2026 12:34:46 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 10 Mar 2026 19:23:34 GMT\r\nETag: \"1f4-64cb07492d980-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 302\r\nKeep-Alive: timeout=2, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":500,"size_decoded":646,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"99cd90ab4646970cd4c37db42852b78c","sha1":"a8ff86d8ebbd0b1234974ac4a9a5e2be5c5dd9f3","sha256":"af0c18f91369c62b3adb8e0da316bf3beeebc5ef83769c002e7a40dadbbcbc7a","sha512":"c2524ffdf20eaa884d47df57bd9969f8fd8fff7f48c631789271ef68b8462a7d3a59d595505b19957f5d1ddf0d30f1c7a6e0ab154307c1988aeeefc1498b0a5b","ssdeep":"","tlshash":"aff09e0284e08d0952304254aec1fa044a97ea478349ad0972aa60be4fc0bc2cedf4bc","first_seen":"2026-05-22T11:10:36.061121Z","last_seen":"2026-06-19T13:17:09.416758Z","times_seen":7,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-19","alert":"Phishing Block","trigger":"meine-zustellplanung.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meine-zustellplanung.com/","fqdn":"meine-zustellplanung.com","domain":"meine-zustellplanung.com","tld":"com"},"ip":{"addr":"158.94.209.86","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-19T12:35:42.844Z","timestamp":1781872542844,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meine-zustellplanung.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 15:05:37 GMT","end":"Wed, 16 Sep 2026 15:05:36 GMT"},"fingerprint":{"sha1":"77:E4:CA:A1:22:2C:60:60:E9:AB:87:58:EA:75:46:C4:D3:4C:8D:B0","sha256":"B2:66:49:3E:BC:E0:DF:4A:EE:CD:FB:95:B1:DB:54:76:76:61:2E:CD:15:A4:50:CA:9A:3F:E7:A6:E9:D8:CA:CF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: meine-zustellplanung.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 19 Jun 2026 12:34:43 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 10 Mar 2026 19:23:34 GMT\r\nETag: \"1f4-64cb07492d980-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 302\r\nKeep-Alive: timeout=2, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":500,"size_decoded":647,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"99cd90ab4646970cd4c37db42852b78c","sha1":"a8ff86d8ebbd0b1234974ac4a9a5e2be5c5dd9f3","sha256":"af0c18f91369c62b3adb8e0da316bf3beeebc5ef83769c002e7a40dadbbcbc7a","sha512":"c2524ffdf20eaa884d47df57bd9969f8fd8fff7f48c631789271ef68b8462a7d3a59d595505b19957f5d1ddf0d30f1c7a6e0ab154307c1988aeeefc1498b0a5b","ssdeep":"","tlshash":"aff09e0284e08d0952304254aec1fa044a97ea478349ad0972aa60be4fc0bc2cedf4bc","first_seen":"2026-05-22T11:10:36.061121Z","last_seen":"2026-06-19T13:17:09.416758Z","times_seen":7,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":12,"connect":59,"send":0,"wait":69,"receive":0,"ssl":123},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-19","alert":"Phishing Block","trigger":"meine-zustellplanung.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meine-zustellplanung.com/assets/index-CDBXoWxl.js","fqdn":"meine-zustellplanung.com","domain":"meine-zustellplanung.com","tld":"com"},"ip":{"addr":"158.94.209.86","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meine-zustellplanung.com/","date":"2026-06-19T12:35:43.423Z","timestamp":1781872543423,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meine-zustellplanung.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 15:05:37 GMT","end":"Wed, 16 Sep 2026 15:05:36 GMT"},"fingerprint":{"sha1":"77:E4:CA:A1:22:2C:60:60:E9:AB:87:58:EA:75:46:C4:D3:4C:8D:B0","sha256":"B2:66:49:3E:BC:E0:DF:4A:EE:CD:FB:95:B1:DB:54:76:76:61:2E:CD:15:A4:50:CA:9A:3F:E7:A6:E9:D8:CA:CF"}}},"request":{"raw":"GET /assets/index-CDBXoWxl.js HTTP/1.1\r\nHost: meine-zustellplanung.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meine-zustellplanung.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 19 Jun 2026 12:34:44 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 10 Mar 2026 19:23:34 GMT\r\nETag: \"1156e4-64cb07492d980-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=2, max=99\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1136356,"size_decoded":345687,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34669)","md5":"a93e8515c21324e535d07806b4c5f645","sha1":"c11c2b0ebe8635515f292067adb6210d2ae3271e","sha256":"311d2a79400037b85c063b8144828ec29fb9594757a4c024f6b11d6252def5d1","sha512":"33962ee549b88f0d343a42d4ae8b6a68ec1a97106dac93a2d62d8c781e7e0b31dd599ebc24dfa70891d5dab6ca18e6985cc06cb10d2d9ebec927f8eccf7e3180","ssdeep":"24576:B3tHpfVjKTQG4jzYt/VXrt67Dx/wqmlnum3vrzDB7Fd73Z0:RtlVjKTQG4jz4NXrt67Dx/wqmlnum3vs","tlshash":"15258ea4b19076ad9fb705e4547f4009723e1e54e81e88e0f07ce8aa2b70456b677fec","first_seen":"2026-06-19T12:36:12.113397Z","last_seen":"2026-06-19T13:17:09.417383Z","times_seen":3,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":241,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-19","alert":"Phishing Block","trigger":"meine-zustellplanung.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meine-zustellplanung.com/assets/index-CdUVNY_o.css","fqdn":"meine-zustellplanung.com","domain":"meine-zustellplanung.com","tld":"com"},"ip":{"addr":"158.94.209.86","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://meine-zustellplanung.com/","date":"2026-06-19T12:35:43.425Z","timestamp":1781872543425,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meine-zustellplanung.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 15:05:37 GMT","end":"Wed, 16 Sep 2026 15:05:36 GMT"},"fingerprint":{"sha1":"77:E4:CA:A1:22:2C:60:60:E9:AB:87:58:EA:75:46:C4:D3:4C:8D:B0","sha256":"B2:66:49:3E:BC:E0:DF:4A:EE:CD:FB:95:B1:DB:54:76:76:61:2E:CD:15:A4:50:CA:9A:3F:E7:A6:E9:D8:CA:CF"}}},"request":{"raw":"GET /assets/index-CdUVNY_o.css HTTP/1.1\r\nHost: meine-zustellplanung.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meine-zustellplanung.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 19 Jun 2026 12:34:44 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 10 Mar 2026 19:23:34 GMT\r\nETag: \"18e09-64cb07492d980-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PleskLin\r\nContent-Length: 16963\r\nKeep-Alive: timeout=2, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":101897,"size_decoded":17311,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3914ed9bf72eec3a92b1dac2b1ed7f44","sha1":"a97c68632d46347ca63244acfa914b3b0919deb6","sha256":"69cbac30a0df43049407ecf16273b65cc50a26f4e21333a54de12f0e101b5d4b","sha512":"df473e63b82e86f7015ee3ecf28dc13f1c37c621ed84238d39d60d54f8ee114238ff7491743c62196184eb2b9f66ca41237452c0756653356c6ff1d40ad53544","ssdeep":"1536:QEBgs1M4oBMkIe6by5eGGBxgQZ75FXRQH:QEBgs1M45kIby5eGGBxgQZ75FXqH","tlshash":"aba354389a55603b7c17a5f4d29ca96de52ff1d0de3a47faac820220a7e23f70d57610","first_seen":"2025-12-28T06:03:00.81147Z","last_seen":"2026-06-19T13:17:09.418293Z","times_seen":19,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":59,"send":0,"wait":73,"receive":59,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-19","alert":"Phishing Block","trigger":"meine-zustellplanung.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://meine-zustellplanung.com/","date":"2026-06-19T12:35:43.916Z","timestamp":1781872543916,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meine-zustellplanung.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 12:35:43 GMT\r\ndate: Fri, 19 Jun 2026 12:35:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17689,"size_decoded":1563,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"30e76aaeae29f594433bc728a08b4d8f","sha1":"ac1b677b4d702295e7802802376ddd8c84acbc13","sha256":"395e51e3dc84faf99710da8cf316e573703addd6eb598e1b334eff76653e820d","sha512":"93b1661d34210abbdb2c6cca46bb229254b615ba07c05dbcadb65199b9d1e61e18dbb4302236e89188ddc34be20528f503f6140358f82385b1f0e621f93ec4d8","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kV:8KYXuM0p2+g7GQK","tlshash":"b1828892002ba400ab971dc233cf7f3aaece10896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T05:09:40.151737Z","last_seen":"2026-06-19T16:45:42.567431Z","times_seen":4448,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":33,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meine-zustellplanung.com/api/client/1d32b03e9c49/ban","fqdn":"meine-zustellplanung.com","domain":"meine-zustellplanung.com","tld":"com"},"ip":{"addr":"158.94.209.86","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://meine-zustellplanung.com/","date":"2026-06-19T12:35:45.497Z","timestamp":1781872545497,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meine-zustellplanung.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 15:05:37 GMT","end":"Wed, 16 Sep 2026 15:05:36 GMT"},"fingerprint":{"sha1":"77:E4:CA:A1:22:2C:60:60:E9:AB:87:58:EA:75:46:C4:D3:4C:8D:B0","sha256":"B2:66:49:3E:BC:E0:DF:4A:EE:CD:FB:95:B1:DB:54:76:76:61:2E:CD:15:A4:50:CA:9A:3F:E7:A6:E9:D8:CA:CF"}}},"request":{"raw":"POST /api/client/1d32b03e9c49/ban HTTP/1.1\r\nHost: meine-zustellplanung.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://meine-zustellplanung.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meine-zustellplanung.com/404\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 19 Jun 2026 12:34:46 GMT\r\nServer: Apache\r\nCache-Control: no-cache, private\r\nAccess-Control-Allow-Origin: https://meine-zustellplanung.com\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nX-Powered-By: PHP/8.3.31, PleskLin\r\nKeep-Alive: timeout=2, max=96\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":39,"size_decoded":413,"mime_type":"application/json","magic":"JSON text data","md5":"dd0f02ebb496a2a43b5f07dba889ffca","sha1":"e5892563bf3facf01bcb12e0ef3212f7ca2d9d90","sha256":"6b29e21072911a4716612c6dfad5807a9478c5949bc555e34e8583e5741edea4","sha512":"68e22c27254f33a66dfad93f93ffec84d6d6876035dd3e4466a7e0c2127b39f5016de0878d277cae9c5d228278127a82fb404759e38bb368a40447e9699bf3bb","ssdeep":"","tlshash":"2390040011053d7ccf41050175505110435050c057d13cd704ccc0cd037c40f010d504","first_seen":"2025-09-21T23:35:37.814632Z","last_seen":"2026-06-19T13:17:09.414373Z","times_seen":36,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-19","alert":"Phishing Block","trigger":"meine-zustellplanung.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Cairo:wght@200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://meine-zustellplanung.com/","date":"2026-06-19T12:35:43.913Z","timestamp":1781872543913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Cairo:wght@200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meine-zustellplanung.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 12:35:44 GMT\r\ndate: Fri, 19 Jun 2026 12:35:44 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14096,"size_decoded":1490,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"a86aa96ffaa8b405d1cb608f518d1bee","sha1":"1fe21b7fa0a8fbc4572ad5a2f81176e843529a0d","sha256":"004f3428e27787113262ee7aa439faa7c8b4b2b4dad3764da25cdb5a960f6f11","sha512":"78e5af769c38d2745a5fb8ae2ae192c573e8d1e368e922bba7288a763ef2940af3764cac9dbc0e39233310e91e796ef91e85597eaaacc15f75ea6f8ee2692a9c","ssdeep":"192:sbCl0374bClb3UlbCl63JGbClp3aDbClw338bClX3QZbClW3VqbCl132O:flulzlklJlClflolp","tlshash":"1852add00c1e4184bf475dc2638d6e23ee0ee1956494886cabfd2b8b9cabc27739575c","first_seen":"2025-09-17T03:23:35.233299Z","last_seen":"2026-06-19T13:17:09.415433Z","times_seen":557,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":2,"connect":17,"send":0,"wait":35,"receive":2,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meine-zustellplanung.com/api/check/1d32b03e9c49","fqdn":"meine-zustellplanung.com","domain":"meine-zustellplanung.com","tld":"com"},"ip":{"addr":"158.94.209.86","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://meine-zustellplanung.com/","date":"2026-06-19T12:35:44.306Z","timestamp":1781872544306,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meine-zustellplanung.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 15:05:37 GMT","end":"Wed, 16 Sep 2026 15:05:36 GMT"},"fingerprint":{"sha1":"77:E4:CA:A1:22:2C:60:60:E9:AB:87:58:EA:75:46:C4:D3:4C:8D:B0","sha256":"B2:66:49:3E:BC:E0:DF:4A:EE:CD:FB:95:B1:DB:54:76:76:61:2E:CD:15:A4:50:CA:9A:3F:E7:A6:E9:D8:CA:CF"}}},"request":{"raw":"GET /api/check/1d32b03e9c49 HTTP/1.1\r\nHost: meine-zustellplanung.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meine-zustellplanung.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 19 Jun 2026 12:34:46 GMT\r\nServer: Apache\r\nCache-Control: no-cache, private\r\nVary: Origin\r\nX-Powered-By: PHP/8.3.31, PleskLin\r\nKeep-Alive: timeout=2, max=98\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":47,"size_decoded":318,"mime_type":"application/json","magic":"JSON text data","md5":"8238a2ac91153276a785bae22f21e796","sha1":"26096e553ff885c41100b95832a12f1ff402329f","sha256":"7aa7d4d87571bfb6d7438ea5383500be553717d3b20af0cda6e12fb6b35c9b05","sha512":"bd246b769d83f4c643c6980bab30a83e7ebc07eb3d0063ba13239f79a16eb70bd55126553c79c1a766317c50083ef730fcb6bed64088b97678b5823bb3f17b2a","ssdeep":"","tlshash":"4290040d434405cfd5d317505d340c0011c041d0fc103f04dd74457557730c55c5304d","first_seen":"2025-12-31T05:46:40.226048Z","last_seen":"2026-06-19T13:17:09.418918Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1097,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1097,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-19","alert":"Phishing Block","trigger":"meine-zustellplanung.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meine-zustellplanung.com/vite.svg","fqdn":"meine-zustellplanung.com","domain":"meine-zustellplanung.com","tld":"com"},"ip":{"addr":"158.94.209.86","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meine-zustellplanung.com/","date":"2026-06-19T12:35:44.408Z","timestamp":1781872544408,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meine-zustellplanung.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 15:05:37 GMT","end":"Wed, 16 Sep 2026 15:05:36 GMT"},"fingerprint":{"sha1":"77:E4:CA:A1:22:2C:60:60:E9:AB:87:58:EA:75:46:C4:D3:4C:8D:B0","sha256":"B2:66:49:3E:BC:E0:DF:4A:EE:CD:FB:95:B1:DB:54:76:76:61:2E:CD:15:A4:50:CA:9A:3F:E7:A6:E9:D8:CA:CF"}}},"request":{"raw":"GET /vite.svg HTTP/1.1\r\nHost: meine-zustellplanung.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://meine-zustellplanung.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 19 Jun 2026 12:34:45 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 10 Mar 2026 19:23:34 GMT\r\nETag: \"5d9-64cb07492d980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1497\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=2, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1497,"size_decoded":1794,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8e3a10e157f75ada21ab742c022d5430","sha1":"f7f39d7237b791a945d52a5cd7a8fb365f313366","sha256":"4a748afd443918bb16591c834c401dae33e87861ab5dbad0811c3a3b4a9214fb","sha512":"fbf065e26d907454cb432a17d831f448e1c3df0f33cd681ccc52b63e5bc26bc9e4de08591a2de579e5b05219fcffd3b4d4261ada6fa55299e731343df860488d","ssdeep":"","tlshash":"2031451fda7fd4fec0a6cb48e612b047962c30d95e41c5b4d9845f0e64a19f17c0aa64","first_seen":"2023-05-18T16:20:30Z","last_seen":"2026-06-19T17:17:42.842987Z","times_seen":5664,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-19","alert":"Phishing Block","trigger":"meine-zustellplanung.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"meine-zustellplanung.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}