{"report_id":"7dc992c2-8db8-4729-a4b8-f05d6f08a69a","version":6,"status":"done","tags":[],"date":"2026-05-28T12:32:03Z","url":{"schema":"http","addr":"konto-freigabe.de","fqdn":"konto-freigabe.de","domain":"konto-freigabe.de","tld":"de"},"ip":{"addr":"138.226.236.169","port":0,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"final":{"url":{"schema":"https","addr":"konto-freigabe.de/blocked","fqdn":"konto-freigabe.de","domain":"konto-freigabe.de","tld":"de"},"title":"PayPal","dom":{"size":6523,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6523), with no line terminators","md5":"95f8c4cc3623951861d6b34172a40ed2","sha1":"060badd089df2fe6cfc25a7d875ce1c0c2e14fdc","sha256":"e0f792aff5d2efc733a23a3e07779597073f786f07771ae65d4b1ebf7ec74dd0","sha512":"e7cb0ee88813bb5bc5cdbfcec2e923626fc81a9bdf0f61ff94dfb2a283e2eabe81ab68d5e1fbb263fa9687d6a208402f78e1a4fe59bca50f60127535220406c7","ssdeep":"96:uW/ZuwzFn+0ggvcx9YfCE2BcH+EOXfmwTIiXVpZifDZ17cg1xqzcfxm+fEqOcKx1:uW/ZusFnE21MJ5i9KgnqzcJmyS","tlshash":"bfd1307aa805dd4bec6a7e59013e6c3e54cdc47f4ba4cda886ddce1407028be6b96dc0","dom_hash":"domhash29ce1c574f5c3039263e11632b91d4f3","first_seen":"2026-05-28T12:32:08.323298Z","last_seen":"2026-05-28T12:32:08.323298Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"konto-freigabe.de","fqdn":"konto-freigabe.de","domain":"konto-freigabe.de","tld":"de"},"ip":{"addr":"138.226.236.169","port":0,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-02T12:32:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-28","alert":"Phishing Block","trigger":"konto-freigabe.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"konto-freigabe.de","ip":{"addr":"138.226.236.169","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-28T12:32:04.274534Z","last_seen":"2026-05-28T12:32:04.274534Z","alert_count":72,"request_count":12,"received_data":353306,"sent_data":5637,"comment":"","tags":null,"fingerprints":[{"name":"Phusion Passenger:6.1.1","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"konto-freigabe.de/_next/static/chunks/main-app-9ac25a0ba3057099.js","fqdn":"konto-freigabe.de","domain":"konto-freigabe.de","tld":"de"},"ip":{"addr":"138.226.236.169","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"8be99c3c8bd0c3698ecdd50752364ec0","sha1":"2dd83931d6410b006cd9a7643b94c071b2b3e979","sha256":"eab7e8e7d8c90cbefa408f51f531cfc072283032508b76aa2841eee44f0fdf42","sha512":"ae25839021cd205d7418d68162c40477660736218e44997a54b569ed59c9ec68cea17c7b14ddb8fd8523e3d2a3fad31da27a56b0a033c855eef7d3d8907d21e4","ssdeep":"","tlshash":"02f082992b4c701f2913ad24fde35c2e255e416428a718901a14ddb12c33aa8d3f1c39","size":461,"data":"","first_seen":"2026-05-28T12:32:08.334122Z","last_seen":"2026-05-28T12:32:08.334122Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konto-freigabe.de/blocked","fqdn":"konto-freigabe.de","domain":"konto-freigabe.de","tld":"de"},"ip":{"addr":"138.226.236.169","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"b40cdc025a72d0b516bd11d9ef0a1776","sha1":"9cd34b30af473b8071638d82dcacef0373194aaf","sha256":"43ef2d3ec8d5b620ec8c5fc2bfc14c3a9836620f75a0a14a0c025ab753cf6f68","sha512":"ffad498a0fda3194476aee567df0b821e3c4886662a0dc72a53e8289c98fc3187b991df3da95f0bc2fe1b238d3478ccfac9d39a23fa2e7928ff3be8461110af9","ssdeep":"","tlshash":"3aa001f190d29c69e43741ab687511161bac490d0109014123a198e91162a098f48e8e","size":72,"data":"","first_seen":"2023-10-09T10:35:22Z","last_seen":"2026-08-11T17:47:36.996711Z","times_seen":101100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konto-freigabe.de/blocked","fqdn":"konto-freigabe.de","domain":"konto-freigabe.de","tld":"de"},"ip":{"addr":"138.226.236.169","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"250cace04695a661121ad0565e7402f5","sha1":"d18f79788704d1d408810e6e386ad47b49b61bee","sha256":"ad312c8a3943db7e449c653cbab42e924a527cdcccd514be3e75869a511bae9e","sha512":"55a3ec2dafffdbee61f51cf4f0334c437963a29113d44e41eaf675b81f6fad562ffee5ebb3cb3aa5a948c08a9b10d7da985955f4ebc4028fe36cedea23c50e20","ssdeep":"","tlshash":"19a01258c100dc1545304806002e0805908cc60e0250045857a4c78940008fa0349d84","size":86,"data":"","first_seen":"2026-05-28T12:32:08.351979Z","last_seen":"2026-07-07T15:24:23.160464Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konto-freigabe.de/blocked","fqdn":"konto-freigabe.de","domain":"konto-freigabe.de","tld":"de"},"ip":{"addr":"138.226.236.169","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"f14baf7b5a1b08b19a95dd81b4efcd0a","sha1":"29efa239d35411d69ddcfcd1ebc833bd26f7301e","sha256":"42cadf198fe7e110c3cac1a273f10543dce145b72294ed590ab284834234e706","sha512":"7e729db5181175c840ba18a0f258ee2561bdb44c1fe220e1cadb2065ccbca5943ee4f54b684d13e5a3de2082634beb159da2d0c0210901b021ab3a0ca117ff3c","ssdeep":"","tlshash":"38f07d55f280c883f823bb0743273d3b4dd9f87b0064e088941d94b79a32e36cab8983","size":629,"data":"","first_seen":"2026-05-28T12:32:08.353336Z","last_seen":"2026-05-28T12:32:08.353336Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konto-freigabe.de/_next/static/chunks/app/error-604789d1fd91c911.js","fqdn":"konto-freigabe.de","domain":"konto-freigabe.de","tld":"de"},"ip":{"addr":"138.226.236.169","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"627f4aff1b55a628f93c20560e7c203f","sha1":"06fa1e19148467e9ae9ad12c85456c62c01d752b","sha256":"8df37ef02518ff7ed1d4229d2a6501ad06b7fdcaffa87ab42076423e0733f0fa","sha512":"ab9971167ffecb6743cfc58b917feb411f7e5dd95a849621c5cdad180f3067b205e23a99486989a0a8ad1351c37beffc990d67e848de25987bf99ce272c203f4","ssdeep":"","tlshash":"ea3140153584b948fda785ac717f884c74a71828b27d6df563399c7222a20f53b33bd8","size":1529,"data":"","first_seen":"2026-05-28T12:32:08.338441Z","last_seen":"2026-05-28T12:32:08.338441Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konto-freigabe.de/blocked","fqdn":"konto-freigabe.de","domain":"konto-freigabe.de","tld":"de"},"ip":{"addr":"138.226.236.169","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"6c4107099b36f5c8eda1dd4342231a71","sha1":"0747ba4ca0bba6f5e84d23beec1de4beb0ff19c2","sha256":"75e6a9cb79ebd59973a14643ac665837650c11d3d1102d060015da2687b70ef3","sha512":"293de279c49a10cfb15757c014ffce2ff0af24ab2ee2b24ed5173b036f7cb32ef14e29f13e9d0ed719450215e49252d48d5fee4f6524319f375e74073406cabc","ssdeep":"","tlshash":"a581c87e2009dd8ffd9a3d59017eac3a64ce816b0796deb886d8ce050a4247e2797dc0","size":4070,"data":"","first_seen":"2026-05-28T12:32:08.354675Z","last_seen":"2026-05-28T12:32:08.354675Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konto-freigabe.de/_next/static/chunks/webpack-c81f7fd28659d64f.js","fqdn":"konto-freigabe.de","domain":"konto-freigabe.de","tld":"de"},"ip":{"addr":"138.226.236.169","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"48a0efa196e3561eba1491f20e632cbb","sha1":"b385022103992d75cfb2027770d4539bf9a918ef","sha256":"1bdb0dd87714cecd54db2509fc17767ce17b4606ee0eec9faca0871ab8fd87ca","sha512":"8e540715546e6692a68eda2cc987c811c2428e2250cf32864ed201364c34f1f9c2e99150aec534e7668a092424dcd4b23f929c0dac9c48ed7b8be73d7f724bc3","ssdeep":"","tlshash":"5e7196dd71a1f8ba1783a4a1043f9456f23f28b2281ee4a0cb25d8f5fc355488513fa8","size":3557,"data":"","first_seen":"2025-03-01T02:35:14.23303Z","last_seen":"2026-08-10T03:35:18.40586Z","times_seen":181,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konto-freigabe.de/blocked","fqdn":"konto-freigabe.de","domain":"konto-freigabe.de","tld":"de"},"ip":{"addr":"138.226.236.169","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"d97e17074b03b6451718fb2972abbde5","sha1":"6172194e7b230e0d4547e7b8f26e41fa10152de5","sha256":"fde77db2d079845f6654c42bdcf5733b0e0d9fe12c9ebd3ddd0927b5a54daf23","sha512":"4448f4e2378c4ffbbaec0c71fd03ea2414262421714d6791faeeb50c7dd2c05026682f2dec171d2d06fb8f263474dde42475f5267ff0166167f8764d720969ba","ssdeep":"","tlshash":"81e07da1dc42de19db975f360c3f1c7831ddc77d5246914694c2cd645882a314ee2ec8","size":332,"data":"","first_seen":"2026-05-28T12:32:08.358057Z","last_seen":"2026-07-29T03:21:38.638593Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konto-freigabe.de/_next/static/chunks/app/layout-0a86ebd4a66f435c.js","fqdn":"konto-freigabe.de","domain":"konto-freigabe.de","tld":"de"},"ip":{"addr":"138.226.236.169","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"11d75b3590681a30c4eeae92becb92ef","sha1":"f725a264791a01e823598a50664e2a8c0bb50e81","sha256":"ac3afb023d6d64eb47ae339c03a8434f6f6239a62fee8ed4d8bf83b1715800da","sha512":"356e8e8a122b45cb33178f3347f40cf22073b09692e0eb59be1d77ecf626eaa7faba095d6266726e699479c875c70629ac1414408e3c62ad0bcc29e8521cc826","ssdeep":"192:RyZIVIgjT4w6TWCSJq4RY1HjJZz7pKzLMJHoxHpL6:Ryu0wuSJqueD/Hs/YHoxHpW","tlshash":"4e022ccf325878a557db15bde27b5404a13b8a48280d04a0f3f2dc66344ae5ad336fdd","size":8691,"data":"","first_seen":"2026-05-28T12:32:08.349182Z","last_seen":"2026-05-28T12:32:08.349182Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konto-freigabe.de/_next/static/chunks/117-f9bf0cc16936e653.js","fqdn":"konto-freigabe.de","domain":"konto-freigabe.de","tld":"de"},"ip":{"addr":"138.226.236.169","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"793be48b503ddc3b5bcaba96361c7e84","sha1":"035410aa1815f8fcd8ce8bd99f18655bde3819a3","sha256":"4b9abd79e3e16a44cbc1a96e14bddb9f31e8c3b66e6332a251d6b77b4531b05f","sha512":"9af5a5347cce2b30a2d812ea4642654998634b88aac676c58f626789f95c4e79424472d85091af92f9d2be806d6f9a9c1b9ff3e2136cedc301fd8acde81b0b23","ssdeep":"768:fO9P55eNwbSlPftVDK//d9icrEAKH1ag8xxqKjj3fOpDKdlr/NaO8Qr93UsGoROz:Uiw2l+Wc3mY5jFdl/iPsibn2kJ51oCv7","tlshash":"6bc3d8ba71d0f8e2079744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","size":124362,"data":"","first_seen":"2026-02-10T12:48:53.828874Z","last_seen":"2026-07-29T03:21:38.626786Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"konto-freigabe.de/_next/static/chunks/fd9d1056-f09744c5e9674c7b.js","fqdn":"konto-freigabe.de","domain":"konto-freigabe.de","tld":"de"},"ip":{"addr":"138.226.236.169","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"d70ea42503ecdf865cc5b50951e7a260","sha1":"d6024cc44a508c5e42bccc99aa6939490273b3a3","sha256":"b8bddf9481d859d648e1e050f8322eb3defe3dd3f9bd13f4c44dd6f2ecf5ab80","sha512":"c38885a712287d6c88b14f3a78df8b03c671a1e8fe71ec680edad591b056eabd5cc510e7cf2b565d94779bbb258ca49068d31adb94d343d59c653c57e77035ee","ssdeep":"1536:PVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Ggum:3zug758kkEiXjOAprX2wd5WjguGOK","tlshash":"50f3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","size":172834,"data":"","first_seen":"2025-01-18T11:47:06.649614Z","last_seen":"2026-08-11T17:41:01.086987Z","times_seen":4633,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"konto-freigabe.de/api/security-check","fqdn":"konto-freigabe.de","domain":"konto-freigabe.de","tld":"de"},"ip":{"addr":"138.226.236.169","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://konto-freigabe.de/blocked","date":"2026-05-28T12:31:43.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konto-freigabe.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:22:09 GMT","end":"Tue, 25 Aug 2026 20:22:08 GMT"},"fingerprint":{"sha1":"A3:CF:12:60:89:5E:EE:08:E5:68:0F:DA:3E:BA:A1:F5:34:94:C5:AE","sha256":"A3:08:CA:BF:A4:7A:45:B2:7F:B5:05:E2:2E:57:D9:56:F6:4A:F0:CB:88:E1:AA:64:2B:1E:AC:9C:43:C4:76:46"}}},"request":{"raw":"POST /api/security-check HTTP/1.1\r\nHost: konto-freigabe.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://konto-freigabe.de/blocked\r\nContent-Type: application/json\r\nContent-Length: 90\r\nOrigin: https://konto-freigabe.de\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":90,"data":"{\"challenge\":{\"mouseMovements\":0,\"touchEvents\":0,\"timeOnPage\":0},\"fingerprint\":\"6741388e\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 12:31:43 GMT\r\ncontent-type: application/json\r\nvary: RSC,Next-Router-State-Tree,Next-Router-Prefetch\r\nstatus: 200 OK\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-powered-by: Phusion Passenger(R) 6.1.1, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Phusion Passenger:6.1.1","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":290,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c36a9ae7cd84eb8548ebebde12c4fbbb","sha1":"67e39360d3316a5775506143bd3c3eb12e08973a","sha256":"9127a0dbbb46d7da269122f92f058e32fadaaabf31167116e84a2b9528ba0903","sha512":"39a906d2fa8f068dc56ac42c649a9dfeaff144bdced0f673d267883b57dc4106a6c8558a5890f850e876fd109f7f74d2cef845affba49dee7d630e6d3d933617","ssdeep":"","tlshash":"47d0c70e20286e7cd03e0388a40abf178e7d86336100b20af8dc9949a8f32ab000100b","first_seen":"2026-05-28T12:32:08.329509Z","last_seen":"2026-05-28T12:32:08.329509Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-28","alert":"Phishing Block","trigger":"konto-freigabe.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konto-freigabe.de/","fqdn":"konto-freigabe.de","domain":"konto-freigabe.de","tld":"de"},"ip":{"addr":"138.226.236.169","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-28T12:31:42.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konto-freigabe.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:22:09 GMT","end":"Tue, 25 Aug 2026 20:22:08 GMT"},"fingerprint":{"sha1":"A3:CF:12:60:89:5E:EE:08:E5:68:0F:DA:3E:BA:A1:F5:34:94:C5:AE","sha256":"A3:08:CA:BF:A4:7A:45:B2:7F:B5:05:E2:2E:57:D9:56:F6:4A:F0:CB:88:E1:AA:64:2B:1E:AC:9C:43:C4:76:46"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: konto-freigabe.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\nserver: nginx\r\ndate: Thu, 28 May 2026 12:31:42 GMT\r\ncontent-length: 8\r\nlocation: /blocked\r\nstatus: 307 Temporary Redirect\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-powered-by: Phusion Passenger(R) 6.1.1, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Phusion Passenger:6.1.1","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":6792,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T17:57:29.880101Z","times_seen":17840789,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":73,"dns":28,"connect":20,"send":0,"wait":37,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-28","alert":"Phishing Block","trigger":"konto-freigabe.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konto-freigabe.de/_next/static/chunks/117-f9bf0cc16936e653.js","fqdn":"konto-freigabe.de","domain":"konto-freigabe.de","tld":"de"},"ip":{"addr":"138.226.236.169","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://konto-freigabe.de/blocked","date":"2026-05-28T12:31:42.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konto-freigabe.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:22:09 GMT","end":"Tue, 25 Aug 2026 20:22:08 GMT"},"fingerprint":{"sha1":"A3:CF:12:60:89:5E:EE:08:E5:68:0F:DA:3E:BA:A1:F5:34:94:C5:AE","sha256":"A3:08:CA:BF:A4:7A:45:B2:7F:B5:05:E2:2E:57:D9:56:F6:4A:F0:CB:88:E1:AA:64:2B:1E:AC:9C:43:C4:76:46"}}},"request":{"raw":"GET /_next/static/chunks/117-f9bf0cc16936e653.js HTTP/1.1\r\nHost: konto-freigabe.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konto-freigabe.de/blocked\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 12:31:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 20 May 2026 19:40:43 GMT\r\netag: W/\"1e5ca-19e46e79678\"\r\nstatus: 200 OK\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-powered-by: Phusion Passenger(R) 6.1.1, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Phusion Passenger:6.1.1","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124362,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"793be48b503ddc3b5bcaba96361c7e84","sha1":"035410aa1815f8fcd8ce8bd99f18655bde3819a3","sha256":"4b9abd79e3e16a44cbc1a96e14bddb9f31e8c3b66e6332a251d6b77b4531b05f","sha512":"9af5a5347cce2b30a2d812ea4642654998634b88aac676c58f626789f95c4e79424472d85091af92f9d2be806d6f9a9c1b9ff3e2136cedc301fd8acde81b0b23","ssdeep":"768:fO9P55eNwbSlPftVDK//d9icrEAKH1ag8xxqKjj3fOpDKdlr/NaO8Qr93UsGoROz:Uiw2l+Wc3mY5jFdl/iPsibn2kJ51oCv7","tlshash":"6bc3d8ba71d0f8e2079744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","first_seen":"2026-02-10T12:48:53.828874Z","last_seen":"2026-07-29T03:21:38.626786Z","times_seen":76,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-28","alert":"Phishing Block","trigger":"konto-freigabe.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konto-freigabe.de/_next/static/chunks/main-app-9ac25a0ba3057099.js","fqdn":"konto-freigabe.de","domain":"konto-freigabe.de","tld":"de"},"ip":{"addr":"138.226.236.169","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://konto-freigabe.de/blocked","date":"2026-05-28T12:31:42.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konto-freigabe.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:22:09 GMT","end":"Tue, 25 Aug 2026 20:22:08 GMT"},"fingerprint":{"sha1":"A3:CF:12:60:89:5E:EE:08:E5:68:0F:DA:3E:BA:A1:F5:34:94:C5:AE","sha256":"A3:08:CA:BF:A4:7A:45:B2:7F:B5:05:E2:2E:57:D9:56:F6:4A:F0:CB:88:E1:AA:64:2B:1E:AC:9C:43:C4:76:46"}}},"request":{"raw":"GET /_next/static/chunks/main-app-9ac25a0ba3057099.js HTTP/1.1\r\nHost: konto-freigabe.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konto-freigabe.de/blocked\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 12:31:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 20 May 2026 19:40:43 GMT\r\netag: W/\"1cd-19e46e79678\"\r\nstatus: 200 OK\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-powered-by: Phusion Passenger(R) 6.1.1, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Phusion Passenger:6.1.1","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":461,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (461), with no line terminators","md5":"8be99c3c8bd0c3698ecdd50752364ec0","sha1":"2dd83931d6410b006cd9a7643b94c071b2b3e979","sha256":"eab7e8e7d8c90cbefa408f51f531cfc072283032508b76aa2841eee44f0fdf42","sha512":"ae25839021cd205d7418d68162c40477660736218e44997a54b569ed59c9ec68cea17c7b14ddb8fd8523e3d2a3fad31da27a56b0a033c855eef7d3d8907d21e4","ssdeep":"","tlshash":"02f082992b4c701f2913ad24fde35c2e255e416428a718901a14ddb12c33aa8d3f1c39","first_seen":"2026-05-28T12:32:08.334122Z","last_seen":"2026-05-28T12:32:08.334122Z","times_seen":1,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-28","alert":"Phishing Block","trigger":"konto-freigabe.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konto-freigabe.de/_next/static/chunks/app/error-604789d1fd91c911.js","fqdn":"konto-freigabe.de","domain":"konto-freigabe.de","tld":"de"},"ip":{"addr":"138.226.236.169","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://konto-freigabe.de/blocked","date":"2026-05-28T12:31:42.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konto-freigabe.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:22:09 GMT","end":"Tue, 25 Aug 2026 20:22:08 GMT"},"fingerprint":{"sha1":"A3:CF:12:60:89:5E:EE:08:E5:68:0F:DA:3E:BA:A1:F5:34:94:C5:AE","sha256":"A3:08:CA:BF:A4:7A:45:B2:7F:B5:05:E2:2E:57:D9:56:F6:4A:F0:CB:88:E1:AA:64:2B:1E:AC:9C:43:C4:76:46"}}},"request":{"raw":"GET /_next/static/chunks/app/error-604789d1fd91c911.js HTTP/1.1\r\nHost: konto-freigabe.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konto-freigabe.de/blocked\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 12:31:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 20 May 2026 19:40:43 GMT\r\netag: W/\"5f9-19e46e79678\"\r\nstatus: 200 OK\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-powered-by: Phusion Passenger(R) 6.1.1, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Phusion Passenger:6.1.1","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1529,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1525), with no line terminators","md5":"627f4aff1b55a628f93c20560e7c203f","sha1":"06fa1e19148467e9ae9ad12c85456c62c01d752b","sha256":"8df37ef02518ff7ed1d4229d2a6501ad06b7fdcaffa87ab42076423e0733f0fa","sha512":"ab9971167ffecb6743cfc58b917feb411f7e5dd95a849621c5cdad180f3067b205e23a99486989a0a8ad1351c37beffc990d67e848de25987bf99ce272c203f4","ssdeep":"","tlshash":"ea3140153584b948fda785ac717f884c74a71828b27d6df563399c7222a20f53b33bd8","first_seen":"2026-05-28T12:32:08.338441Z","last_seen":"2026-05-28T12:32:08.338441Z","times_seen":1,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-28","alert":"Phishing Block","trigger":"konto-freigabe.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konto-freigabe.de/favicon.svg","fqdn":"konto-freigabe.de","domain":"konto-freigabe.de","tld":"de"},"ip":{"addr":"138.226.236.169","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://konto-freigabe.de/blocked","date":"2026-05-28T12:31:42.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konto-freigabe.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:22:09 GMT","end":"Tue, 25 Aug 2026 20:22:08 GMT"},"fingerprint":{"sha1":"A3:CF:12:60:89:5E:EE:08:E5:68:0F:DA:3E:BA:A1:F5:34:94:C5:AE","sha256":"A3:08:CA:BF:A4:7A:45:B2:7F:B5:05:E2:2E:57:D9:56:F6:4A:F0:CB:88:E1:AA:64:2B:1E:AC:9C:43:C4:76:46"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: konto-freigabe.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konto-freigabe.de/blocked\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\nserver: nginx\r\ndate: Thu, 28 May 2026 12:31:42 GMT\r\ncontent-length: 8\r\nlocation: /blocked\r\nstatus: 307 Temporary Redirect\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-powered-by: Phusion Passenger(R) 6.1.1, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Phusion Passenger:6.1.1","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":6792,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T17:57:29.880101Z","times_seen":17840789,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-28","alert":"Phishing Block","trigger":"konto-freigabe.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konto-freigabe.de/blocked","fqdn":"konto-freigabe.de","domain":"konto-freigabe.de","tld":"de"},"ip":{"addr":"138.226.236.169","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://konto-freigabe.de/blocked","date":"2026-05-28T12:31:43.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konto-freigabe.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:22:09 GMT","end":"Tue, 25 Aug 2026 20:22:08 GMT"},"fingerprint":{"sha1":"A3:CF:12:60:89:5E:EE:08:E5:68:0F:DA:3E:BA:A1:F5:34:94:C5:AE","sha256":"A3:08:CA:BF:A4:7A:45:B2:7F:B5:05:E2:2E:57:D9:56:F6:4A:F0:CB:88:E1:AA:64:2B:1E:AC:9C:43:C4:76:46"}}},"request":{"raw":"GET /blocked HTTP/1.1\r\nHost: konto-freigabe.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://konto-freigabe.de/blocked\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 12:31:43 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: s-maxage=31536000, stale-while-revalidate\r\nvary: RSC,Next-Router-State-Tree,Next-Router-Prefetch\r\nx-nextjs-cache: HIT\r\netag: W/\"il9og13ntu58g\"\r\nstatus: 200 OK\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-powered-by: Phusion Passenger(R) 6.1.1, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Phusion Passenger:6.1.1","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":6792,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6791), with no line terminators","md5":"5216d9a596dba4e7aa1a817703d71545","sha1":"b35e5b5cfb4a59e61e1a5744d0e0ddcf05a6135c","sha256":"a67fa8b01f56a4f77988e3faf93e971500123867f9dd2423e6d8ffb9ba58aadf","sha512":"c1198b71a41e155ab94a8f25d8113eefbea588dba838885a94cfb3a8ee89394442a9b112af8a05fbdf6ddae6259fb91810bd56357cf9581ab58fa9a0f0053975","ssdeep":"96:qy/MPO1zpinb6dXC0ggvcx9YfCE2BcH+EOXfmwTIiXVpZifDZ17cg1xqzcfxm+fO:j/UOxsn8I21MJ5i9KgnqzcJmyO","tlshash":"c5e1527aa805dd4bec667d59013e6c3e54cdc47f4ba5cda8c6dcce140b428ba6ba2dc0","first_seen":"2026-05-28T12:32:08.341778Z","last_seen":"2026-05-28T12:32:08.341778Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-28","alert":"Phishing Block","trigger":"konto-freigabe.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konto-freigabe.de/blocked","fqdn":"konto-freigabe.de","domain":"konto-freigabe.de","tld":"de"},"ip":{"addr":"138.226.236.169","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-28T12:31:42.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konto-freigabe.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:22:09 GMT","end":"Tue, 25 Aug 2026 20:22:08 GMT"},"fingerprint":{"sha1":"A3:CF:12:60:89:5E:EE:08:E5:68:0F:DA:3E:BA:A1:F5:34:94:C5:AE","sha256":"A3:08:CA:BF:A4:7A:45:B2:7F:B5:05:E2:2E:57:D9:56:F6:4A:F0:CB:88:E1:AA:64:2B:1E:AC:9C:43:C4:76:46"}}},"request":{"raw":"GET /blocked HTTP/1.1\r\nHost: konto-freigabe.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 12:31:42 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: s-maxage=31536000, stale-while-revalidate\r\nvary: RSC,Next-Router-State-Tree,Next-Router-Prefetch\r\nx-nextjs-cache: HIT\r\netag: W/\"il9og13ntu58g\"\r\nstatus: 200 OK\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-powered-by: Phusion Passenger(R) 6.1.1, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Phusion Passenger:6.1.1","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6792,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6791), with no line terminators","md5":"5216d9a596dba4e7aa1a817703d71545","sha1":"b35e5b5cfb4a59e61e1a5744d0e0ddcf05a6135c","sha256":"a67fa8b01f56a4f77988e3faf93e971500123867f9dd2423e6d8ffb9ba58aadf","sha512":"c1198b71a41e155ab94a8f25d8113eefbea588dba838885a94cfb3a8ee89394442a9b112af8a05fbdf6ddae6259fb91810bd56357cf9581ab58fa9a0f0053975","ssdeep":"96:qy/MPO1zpinb6dXC0ggvcx9YfCE2BcH+EOXfmwTIiXVpZifDZ17cg1xqzcfxm+fO:j/UOxsn8I21MJ5i9KgnqzcJmyO","tlshash":"c5e1527aa805dd4bec667d59013e6c3e54cdc47f4ba5cda8c6dcce140b428ba6ba2dc0","first_seen":"2026-05-28T12:32:08.341778Z","last_seen":"2026-05-28T12:32:08.341778Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-28","alert":"Phishing Block","trigger":"konto-freigabe.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konto-freigabe.de/_next/static/css/b11e9c5d2e42cc3f.css","fqdn":"konto-freigabe.de","domain":"konto-freigabe.de","tld":"de"},"ip":{"addr":"138.226.236.169","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://konto-freigabe.de/blocked","date":"2026-05-28T12:31:42.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konto-freigabe.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:22:09 GMT","end":"Tue, 25 Aug 2026 20:22:08 GMT"},"fingerprint":{"sha1":"A3:CF:12:60:89:5E:EE:08:E5:68:0F:DA:3E:BA:A1:F5:34:94:C5:AE","sha256":"A3:08:CA:BF:A4:7A:45:B2:7F:B5:05:E2:2E:57:D9:56:F6:4A:F0:CB:88:E1:AA:64:2B:1E:AC:9C:43:C4:76:46"}}},"request":{"raw":"GET /_next/static/css/b11e9c5d2e42cc3f.css HTTP/1.1\r\nHost: konto-freigabe.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konto-freigabe.de/blocked\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 12:31:42 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 20 May 2026 19:40:43 GMT\r\netag: W/\"2765-19e46e79678\"\r\nstatus: 200 OK\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-powered-by: Phusion Passenger(R) 6.1.1, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Phusion Passenger:6.1.1","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10085,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (7792)","md5":"8360acf394974d80d7a28bbf671edd14","sha1":"0ba54e216ff3f8674d641ea7916aec93a3b99491","sha256":"30aa196ebac925866060107f285291ef04745880f8ff89b0ffdedbd1de6fa89a","sha512":"e5d989754376590be4dd09854289591f4dcc500891ce3ac108021e6ff41ab85b3280f5640a38618e8e7a50f47adff81c8ac1f9e5b28ab3c0428081647892cb5d","ssdeep":"192:Y7JXYS7JXYzGw28xsfBMk1Ve9NJe+4o2WjawXm:GHrw5Kje93B/2aT2","tlshash":"9322c662a2101036bd23c4f7e9d4ba49b015a1c3ea3fcbbaf5856100f7d71f619e6704","first_seen":"2026-05-28T12:32:08.345872Z","last_seen":"2026-07-07T15:24:23.136057Z","times_seen":17,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-28","alert":"Phishing Block","trigger":"konto-freigabe.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konto-freigabe.de/_next/static/chunks/webpack-c81f7fd28659d64f.js","fqdn":"konto-freigabe.de","domain":"konto-freigabe.de","tld":"de"},"ip":{"addr":"138.226.236.169","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://konto-freigabe.de/blocked","date":"2026-05-28T12:31:42.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konto-freigabe.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:22:09 GMT","end":"Tue, 25 Aug 2026 20:22:08 GMT"},"fingerprint":{"sha1":"A3:CF:12:60:89:5E:EE:08:E5:68:0F:DA:3E:BA:A1:F5:34:94:C5:AE","sha256":"A3:08:CA:BF:A4:7A:45:B2:7F:B5:05:E2:2E:57:D9:56:F6:4A:F0:CB:88:E1:AA:64:2B:1E:AC:9C:43:C4:76:46"}}},"request":{"raw":"GET /_next/static/chunks/webpack-c81f7fd28659d64f.js HTTP/1.1\r\nHost: konto-freigabe.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konto-freigabe.de/blocked\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 12:31:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 20 May 2026 19:40:43 GMT\r\netag: W/\"de5-19e46e79678\"\r\nstatus: 200 OK\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-powered-by: Phusion Passenger(R) 6.1.1, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Phusion Passenger:6.1.1","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3557,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3557), with no line terminators","md5":"48a0efa196e3561eba1491f20e632cbb","sha1":"b385022103992d75cfb2027770d4539bf9a918ef","sha256":"1bdb0dd87714cecd54db2509fc17767ce17b4606ee0eec9faca0871ab8fd87ca","sha512":"8e540715546e6692a68eda2cc987c811c2428e2250cf32864ed201364c34f1f9c2e99150aec534e7668a092424dcd4b23f929c0dac9c48ed7b8be73d7f724bc3","ssdeep":"","tlshash":"5e7196dd71a1f8ba1783a4a1043f9456f23f28b2281ee4a0cb25d8f5fc355488513fa8","first_seen":"2025-03-01T02:35:14.23303Z","last_seen":"2026-08-10T03:35:18.40586Z","times_seen":181,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-28","alert":"Phishing Block","trigger":"konto-freigabe.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konto-freigabe.de/_next/static/chunks/fd9d1056-f09744c5e9674c7b.js","fqdn":"konto-freigabe.de","domain":"konto-freigabe.de","tld":"de"},"ip":{"addr":"138.226.236.169","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://konto-freigabe.de/blocked","date":"2026-05-28T12:31:42.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konto-freigabe.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:22:09 GMT","end":"Tue, 25 Aug 2026 20:22:08 GMT"},"fingerprint":{"sha1":"A3:CF:12:60:89:5E:EE:08:E5:68:0F:DA:3E:BA:A1:F5:34:94:C5:AE","sha256":"A3:08:CA:BF:A4:7A:45:B2:7F:B5:05:E2:2E:57:D9:56:F6:4A:F0:CB:88:E1:AA:64:2B:1E:AC:9C:43:C4:76:46"}}},"request":{"raw":"GET /_next/static/chunks/fd9d1056-f09744c5e9674c7b.js HTTP/1.1\r\nHost: konto-freigabe.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konto-freigabe.de/blocked\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 12:31:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 20 May 2026 19:40:43 GMT\r\netag: W/\"2a322-19e46e79678\"\r\nstatus: 200 OK\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-powered-by: Phusion Passenger(R) 6.1.1, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Phusion Passenger:6.1.1","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":172834,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d70ea42503ecdf865cc5b50951e7a260","sha1":"d6024cc44a508c5e42bccc99aa6939490273b3a3","sha256":"b8bddf9481d859d648e1e050f8322eb3defe3dd3f9bd13f4c44dd6f2ecf5ab80","sha512":"c38885a712287d6c88b14f3a78df8b03c671a1e8fe71ec680edad591b056eabd5cc510e7cf2b565d94779bbb258ca49068d31adb94d343d59c653c57e77035ee","ssdeep":"1536:PVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Ggum:3zug758kkEiXjOAprX2wd5WjguGOK","tlshash":"50f3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","first_seen":"2025-01-18T11:47:06.649614Z","last_seen":"2026-08-11T17:41:01.086987Z","times_seen":4633,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-28","alert":"Phishing Block","trigger":"konto-freigabe.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"konto-freigabe.de/_next/static/chunks/app/layout-0a86ebd4a66f435c.js","fqdn":"konto-freigabe.de","domain":"konto-freigabe.de","tld":"de"},"ip":{"addr":"138.226.236.169","port":443,"asn":0,"as":"","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://konto-freigabe.de/blocked","date":"2026-05-28T12:31:42.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"konto-freigabe.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:22:09 GMT","end":"Tue, 25 Aug 2026 20:22:08 GMT"},"fingerprint":{"sha1":"A3:CF:12:60:89:5E:EE:08:E5:68:0F:DA:3E:BA:A1:F5:34:94:C5:AE","sha256":"A3:08:CA:BF:A4:7A:45:B2:7F:B5:05:E2:2E:57:D9:56:F6:4A:F0:CB:88:E1:AA:64:2B:1E:AC:9C:43:C4:76:46"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-0a86ebd4a66f435c.js HTTP/1.1\r\nHost: konto-freigabe.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://konto-freigabe.de/blocked\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 12:31:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 20 May 2026 19:40:43 GMT\r\netag: W/\"21f3-19e46e79678\"\r\nstatus: 200 OK\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-powered-by: Phusion Passenger(R) 6.1.1, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Phusion Passenger:6.1.1","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8691,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8691), with no line terminators","md5":"11d75b3590681a30c4eeae92becb92ef","sha1":"f725a264791a01e823598a50664e2a8c0bb50e81","sha256":"ac3afb023d6d64eb47ae339c03a8434f6f6239a62fee8ed4d8bf83b1715800da","sha512":"356e8e8a122b45cb33178f3347f40cf22073b09692e0eb59be1d77ecf626eaa7faba095d6266726e699479c875c70629ac1414408e3c62ad0bcc29e8521cc826","ssdeep":"192:RyZIVIgjT4w6TWCSJq4RY1HjJZz7pKzLMJHoxHpL6:Ryu0wuSJqueD/Hs/YHoxHpW","tlshash":"4e022ccf325878a557db15bde27b5404a13b8a48280d04a0f3f2dc66344ae5ad336fdd","first_seen":"2026-05-28T12:32:08.349182Z","last_seen":"2026-05-28T12:32:08.349182Z","times_seen":1,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-28","alert":"Phishing Block","trigger":"konto-freigabe.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"konto-freigabe.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}