{"report_id":"7de323da-4e7b-447b-ad34-788f1b74eee0","version":0,"status":"done","tags":[],"date":"2026-09-03T03:35:26Z","url":{"schema":"https","addr":"bigbauer.com/","fqdn":"bigbauer.com","domain":"bigbauer.com","tld":"com"},"ip":{"addr":"217.160.0.36","port":0,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"bigbauer.com/","fqdn":"bigbauer.com","domain":"bigbauer.com","tld":"com"},"title":"Login","dom":{"size":1504,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (545)","md5":"4623e0aeca34d379fd38f5f3ed2b4bfb","sha1":"241b5c33d9eb3776108fe35dca4ba0fd4b77f07a","sha256":"f0b60cda17b0f4ad0ba6b97563fb7f48a0312feaea876dade2d497d6fd9e45bc","sha512":"f047e9bad71655877a7b9a4861e1beafd1e85d0c5dae8038c364b1e3be54db54e624e9d72c52ee998e03e0b182b3df8de72009e575d39c7f874705c0a4d422f9","ssdeep":"","tlshash":"8e311a6b1c1531f0913730e09adeb1d4a8724213b019dc6034fe47809f1ab8ba83ebbb","dom_hash":"domhashfa4e7b6f8cb7df86507b6096c4a90d4d","first_seen":"2026-09-03T03:35:46.752068Z","last_seen":"2026-09-03T03:35:46.752068Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bigbauer.com/","fqdn":"bigbauer.com","domain":"bigbauer.com","tld":"com"},"ip":{"addr":"217.160.0.36","port":0,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-08T03:35:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bigbauer.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"bigbauer.com","ip":{"addr":"217.160.0.36","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"domain_registered":"2000-10-19","domain_rank":0,"first_seen":"2021-01-28T12:59:06Z","last_seen":"2026-09-03T00:44:07.948849Z","alert_count":55,"request_count":11,"received_data":473725,"sent_data":5325,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Snowplow Analytics","description":"Snowplow is an open-source behavioral data management platform for businesses.","website":"https://snowplowanalytics.com","common_platform_enumeration":"","icon":"Snowplow.svg","categories":["Analytics","IaaS"]}]},{"fqdn":"img.ui-portal.de","ip":{"addr":"96.6.16.192","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"unknown","domain_rank":261536,"first_seen":"2012-07-10T19:45:09Z","last_seen":"2026-09-03T00:44:08.482453Z","alert_count":0,"request_count":1,"received_data":37325,"sent_data":549,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bigbauer.com/Mobile%20Login_files/eic.js.download","fqdn":"bigbauer.com","domain":"bigbauer.com","tld":"com"},"ip":{"addr":"217.160.0.36","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"09e0e16ca0343dcf589d1401ee0affb3","sha1":"19e457ca522d59aa83e1de313781972654b25326","sha256":"037d2f3dde88d30af81cc355ef86a1a192a0ce781da44b9c89419092c66fdc7f","sha512":"6e3e9bf8665bef4ae9e20ac354c0eb85aba492020273d35d5be0921babb0be64fe10499f94e4a5c6e2392f15c53eb296195f8a3413788872318127a310181300","ssdeep":"192:TFPJzhU0ZQ5HClbn+kbL99GDm+r63nmHkFR9:TFB9oiFJL991+rAR","tlshash":"52125206ac129ceac8773378df536214fd3d1067b14693a47a8cd6405fbc992e238f99","size":9088,"data":"","first_seen":"2023-03-07T01:27:30Z","last_seen":"2026-09-03T03:35:46.766332Z","times_seen":464,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigbauer.com/Mobile%20Login_files/mas-asp.js.download","fqdn":"bigbauer.com","domain":"bigbauer.com","tld":"com"},"ip":{"addr":"217.160.0.36","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"93c078b96d0ccabafe5670de4749c9ae","sha1":"53c57b81825094814835419534ea4107459791d1","sha256":"28011a8eeb628e510419e81b2e4f0aeb1f74ec8122b8f3375951eeba1317b8d8","sha512":"28aa59d993cc8d1f22fbe8c846eabdc16fbf950371c3ec46a844391f606b3cf2d03f20d3f68eeac7bfcbd4231560b18e2a326739efb7751c7f4170ab599378d4","ssdeep":"","tlshash":"7b71b85e1a6871220733b3019b479a49fbb18a2f1161b81b76fc57c61f72b09b061daf","size":3548,"data":"","first_seen":"2023-03-13T16:31:23Z","last_seen":"2026-09-03T03:35:46.764475Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigbauer.com/Mobile%20Login_files/login-adaptive.js.download","fqdn":"bigbauer.com","domain":"bigbauer.com","tld":"com"},"ip":{"addr":"217.160.0.36","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f69877fd3874eb42a6fdc79bcaef3734","sha1":"1840198e6c9df30b7749c0c67d28ed3981a3c90f","sha256":"9f50bc1e5f6f3284430b0d2d7d846e94af1b6ec91078253d6b58dffb71af7268","sha512":"0368eb815d5c01461836f88a212b891709c9111eaf55c7089dbe40e5574a0bea47c265c23a568664c49a6e29688a3497044230754ef0f76c499ad3305626ec84","ssdeep":"6144:T/e2SaoJ/2LXyYtTtfWpDY8HxZ4gzQvRFUREK/lok3PEQzAXGUScUMObWrdq0oST:dLXHtTtQxBr/lXlhSksDyj1Fa","tlshash":"d754308d69f710158533b07e9fafa2087679c0570508ee187d4d66a06fa483896faffc","size":282718,"data":"","first_seen":"2023-03-13T16:31:23Z","last_seen":"2026-09-03T03:35:46.760065Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigbauer.com/","fqdn":"bigbauer.com","domain":"bigbauer.com","tld":"com"},"ip":{"addr":"217.160.0.36","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"179ad46787107347dd6af7746ef082ef","sha1":"8c7dbe394b75ce1fe216deab13423a2dc3aaefa4","sha256":"594f485dcbc99653f41021b1da8bd14ba24085c72a453c7d9e743150fc595adf","sha512":"a11c3898dcc00e2a2bfaffa7eeca3594170dc31ed7a6731b9c52927b11dfc8ba4a77521b50030768b845cac4ca28145d56286c8c3cbaa06075a9f79985b41eb7","ssdeep":"","tlshash":"c09002004882168320a194643357604345a2428a15548441385d82051f53100c0a0488","size":54,"data":"","first_seen":"2026-09-03T00:44:08.615823Z","last_seen":"2026-09-03T03:35:46.772258Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigbauer.com/Mobile%20Login_files/mobile-apps.js.download","fqdn":"bigbauer.com","domain":"bigbauer.com","tld":"com"},"ip":{"addr":"217.160.0.36","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5fabb9450ad16fc28e130e4a86f6215","sha1":"93ff9fde813f3fe633e4c71bf2dfcec7d53e4b02","sha256":"b88c4d7d9af57ef0d7048e5d6b3c95254c8140c2752d7d62fa7e0889c03d5388","sha512":"a92b95823230140ef2dd66fae1f8bfe77a69ea736ef44a4d91abbee462b675a0904113e600d024780adf5c62470fc93881c772e2a1f322084ceb7c7ef369c005","ssdeep":"","tlshash":"3841e1673669113ec9da634784749158f83cd838a7d388ab7c9984d968c8d0a2b70ef5","size":1990,"data":"","first_seen":"2023-03-13T16:31:23Z","last_seen":"2026-09-03T03:35:46.761165Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigbauer.com/Mobile%20Login_files/pl-m-frame-asp.html","fqdn":"bigbauer.com","domain":"bigbauer.com","tld":"com"},"ip":{"addr":"217.160.0.36","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"0671687abab9951daf4b41106c116048","sha1":"0489a37b63dbcf6c9be26f30235f80d5932a11d8","sha256":"968f16955e18ead8e59abb0d2abc5fa43e34331a0f32dab240693a86acdec719","sha512":"158c2b1bae19e853010538263c96c289a28603c07effaba08d7007d3fa1eaf2411dd6311d5d0f8c13839b67e6dea08959b9e82f3766c621f72ecf34b0d36ee98","ssdeep":"","tlshash":"060199ab9a5a2a709433b032cfcfb2403833421306085d503a6d87c0bf25d0fe81a6c5","size":662,"data":"","first_seen":"2026-09-03T00:44:08.614828Z","last_seen":"2026-09-03T03:35:46.773328Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigbauer.com/Mobile%20Login_files/lt","fqdn":"bigbauer.com","domain":"bigbauer.com","tld":"com"},"ip":{"addr":"217.160.0.36","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"680408f8813f8ce478da66e0615e9baa","sha1":"5dd36cccc34fd2bf61b5008e95014ec309d76bbf","sha256":"c79831d809c25cd6e16f0484f07797112717213d2b7335a1edfcf386d2aa7397","sha512":"254071f559c1918746661bedf164736453ce216c3c9487396dd38059a0d65f71834753ea51fc0c62564e5eead79ccf52e7524c82532579e48b35f0dcc21c2fdf","ssdeep":"","tlshash":"7a7000800002232a020000200030c2b028b88020e8022200020b080000a08082802c00","size":19,"data":"","first_seen":"2023-03-07T12:28:35Z","last_seen":"2026-09-03T03:35:46.756071Z","times_seen":167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigbauer.com/Mobile%20Login_files/jquery-2.2.4-ver-2F6B11A7E914718E0290410E85366FE9.js.download","fqdn":"bigbauer.com","domain":"bigbauer.com","tld":"com"},"ip":{"addr":"217.160.0.36","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85578,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-03T06:08:53.617315Z","times_seen":295979,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bigbauer.com/Mobile%20Login_files/lt","fqdn":"bigbauer.com","domain":"bigbauer.com","tld":"com"},"ip":{"addr":"217.160.0.36","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigbauer.com/Mobile%20Login_files/pl-m-frame-asp.html","date":"2026-09-03T03:34:52.078Z","timestamp":1788406492078,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bigbauer.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Tue, 10 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:1D:F3:67:07:F5:8C:92:70:C2:3E:88:9A:F9:59:89:E5:FD:1E:AD","sha256":"C6:14:51:EA:D5:B3:28:36:B5:0B:07:64:F9:F9:02:42:F9:1C:FC:D1:F9:C9:6C:01:3D:92:B0:AC:56:B9:DA:92"}}},"request":{"raw":"GET /Mobile%20Login_files/lt HTTP/1.1\r\nHost: bigbauer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigbauer.com/Mobile%20Login_files/pl-m-frame-asp.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 19\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 989\r\ndate: Thu, 03 Sep 2026 03:34:52 GMT\r\nserver: Apache\r\nlast-modified: Tue, 03 Dec 2019 16:02:50 GMT\r\netag: \"13-598ced3f09e80\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":19,"size_decoded":304,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"680408f8813f8ce478da66e0615e9baa","sha1":"5dd36cccc34fd2bf61b5008e95014ec309d76bbf","sha256":"c79831d809c25cd6e16f0484f07797112717213d2b7335a1edfcf386d2aa7397","sha512":"254071f559c1918746661bedf164736453ce216c3c9487396dd38059a0d65f71834753ea51fc0c62564e5eead79ccf52e7524c82532579e48b35f0dcc21c2fdf","ssdeep":"","tlshash":"7a7000800002232a020000200030c2b028b88020e8022200020b080000a08082802c00","first_seen":"2023-03-07T12:28:35Z","last_seen":"2026-09-03T03:35:46.756071Z","times_seen":167,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bigbauer.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigbauer.com/","fqdn":"bigbauer.com","domain":"bigbauer.com","tld":"com"},"ip":{"addr":"217.160.0.36","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-03T03:34:47.634Z","timestamp":1788406487634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bigbauer.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Tue, 10 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:1D:F3:67:07:F5:8C:92:70:C2:3E:88:9A:F9:59:89:E5:FD:1E:AD","sha256":"C6:14:51:EA:D5:B3:28:36:B5:0B:07:64:F9:F9:02:42:F9:1C:FC:D1:F9:C9:6C:01:3D:92:B0:AC:56:B9:DA:92"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bigbauer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 999\r\ndate: Thu, 03 Sep 2026 03:34:51 GMT\r\nserver: Apache\r\nlast-modified: Wed, 04 Dec 2019 20:41:22 GMT\r\netag: W/\"1744-598e6d5e4e080\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Snowplow Analytics","description":"Snowplow is an open-source behavioral data management platform for businesses.","website":"https://snowplowanalytics.com","common_platform_enumeration":"","icon":"Snowplow.svg","categories":["Analytics","IaaS"]}],"data":{"size":5956,"size_decoded":2379,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (467)","md5":"bfdac355e404e61e8aba7d4f50fb2a7a","sha1":"c54f96ceebf281ed82adede431e3ac9ab4d5ff19","sha256":"b835baa0df334f16080424bb6f6e688490797fa1d7e3ae49b4117f32aa386ad6","sha512":"bec45e0f96559ebb4cb5c8f426bc35c28f9757d062f6fbd85df4396c2aab0a95eff6aa3a1314482bc464d320951af5b16f4c0e52c885e133fc9f2e8400426dc5","ssdeep":"96:OL/Hb3LqLzZLaKBt8xtWGU4+5UU4TzLeLNLbVM:O/3azNCxthSITehS","tlshash":"66c1751170f85827607380d6b2e257166eddd617c2928e84b5fc02ae5febedb58c322c","first_seen":"2023-05-02T15:27:39Z","last_seen":"2026-09-03T03:35:46.757616Z","times_seen":11,"resource_available":false,"data":null}},"time_used":3886,"timings":{"blocked":-1,"dns":35,"connect":35,"send":0,"wait":46,"receive":0,"ssl":3769},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bigbauer.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigbauer.com/Mobile%20Login_files/jquery-2.2.4-ver-2F6B11A7E914718E0290410E85366FE9.js.download","fqdn":"bigbauer.com","domain":"bigbauer.com","tld":"com"},"ip":{"addr":"217.160.0.36","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigbauer.com/","date":"2026-09-03T03:34:51.716Z","timestamp":1788406491716,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bigbauer.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Tue, 10 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:1D:F3:67:07:F5:8C:92:70:C2:3E:88:9A:F9:59:89:E5:FD:1E:AD","sha256":"C6:14:51:EA:D5:B3:28:36:B5:0B:07:64:F9:F9:02:42:F9:1C:FC:D1:F9:C9:6C:01:3D:92:B0:AC:56:B9:DA:92"}}},"request":{"raw":"GET /Mobile%20Login_files/jquery-2.2.4-ver-2F6B11A7E914718E0290410E85366FE9.js.download HTTP/1.1\r\nHost: bigbauer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigbauer.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ncontent-length: 85578\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 998\r\ndate: Thu, 03 Sep 2026 03:34:51 GMT\r\nserver: Apache\r\nlast-modified: Tue, 03 Dec 2019 16:02:50 GMT\r\netag: \"14e4a-598ced3f09e80\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":85578,"size_decoded":85900,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-03T06:08:53.617315Z","times_seen":295979,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bigbauer.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigbauer.com/Mobile%20Login_files/login-adaptive.js.download","fqdn":"bigbauer.com","domain":"bigbauer.com","tld":"com"},"ip":{"addr":"217.160.0.36","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigbauer.com/","date":"2026-09-03T03:34:51.719Z","timestamp":1788406491719,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bigbauer.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Tue, 10 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:1D:F3:67:07:F5:8C:92:70:C2:3E:88:9A:F9:59:89:E5:FD:1E:AD","sha256":"C6:14:51:EA:D5:B3:28:36:B5:0B:07:64:F9:F9:02:42:F9:1C:FC:D1:F9:C9:6C:01:3D:92:B0:AC:56:B9:DA:92"}}},"request":{"raw":"GET /Mobile%20Login_files/login-adaptive.js.download HTTP/1.1\r\nHost: bigbauer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigbauer.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ncontent-length: 282718\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 996\r\ndate: Thu, 03 Sep 2026 03:34:51 GMT\r\nserver: Apache\r\nlast-modified: Tue, 03 Dec 2019 16:02:50 GMT\r\netag: \"4505e-598ced3f09e80\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":282718,"size_decoded":283041,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"f69877fd3874eb42a6fdc79bcaef3734","sha1":"1840198e6c9df30b7749c0c67d28ed3981a3c90f","sha256":"9f50bc1e5f6f3284430b0d2d7d846e94af1b6ec91078253d6b58dffb71af7268","sha512":"0368eb815d5c01461836f88a212b891709c9111eaf55c7089dbe40e5574a0bea47c265c23a568664c49a6e29688a3497044230754ef0f76c499ad3305626ec84","ssdeep":"6144:T/e2SaoJ/2LXyYtTtfWpDY8HxZ4gzQvRFUREK/lok3PEQzAXGUScUMObWrdq0oST:dLXHtTtQxBr/lXlhSksDyj1Fa","tlshash":"d754308d69f710158533b07e9fafa2087679c0570508ee187d4d66a06fa483896faffc","first_seen":"2023-03-13T16:31:23Z","last_seen":"2026-09-03T03:35:46.760065Z","times_seen":31,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bigbauer.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigbauer.com/Mobile%20Login_files/mobile-apps.js.download","fqdn":"bigbauer.com","domain":"bigbauer.com","tld":"com"},"ip":{"addr":"217.160.0.36","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigbauer.com/","date":"2026-09-03T03:34:51.726Z","timestamp":1788406491726,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bigbauer.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Tue, 10 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:1D:F3:67:07:F5:8C:92:70:C2:3E:88:9A:F9:59:89:E5:FD:1E:AD","sha256":"C6:14:51:EA:D5:B3:28:36:B5:0B:07:64:F9:F9:02:42:F9:1C:FC:D1:F9:C9:6C:01:3D:92:B0:AC:56:B9:DA:92"}}},"request":{"raw":"GET /Mobile%20Login_files/mobile-apps.js.download HTTP/1.1\r\nHost: bigbauer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigbauer.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ncontent-length: 1990\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 993\r\ndate: Thu, 03 Sep 2026 03:34:51 GMT\r\nserver: Apache\r\nlast-modified: Tue, 03 Dec 2019 16:02:50 GMT\r\netag: \"7c6-598ced3f09e80\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1990,"size_decoded":2309,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e5fabb9450ad16fc28e130e4a86f6215","sha1":"93ff9fde813f3fe633e4c71bf2dfcec7d53e4b02","sha256":"b88c4d7d9af57ef0d7048e5d6b3c95254c8140c2752d7d62fa7e0889c03d5388","sha512":"a92b95823230140ef2dd66fae1f8bfe77a69ea736ef44a4d91abbee462b675a0904113e600d024780adf5c62470fc93881c772e2a1f322084ceb7c7ef369c005","ssdeep":"","tlshash":"3841e1673669113ec9da634784749158f83cd838a7d388ab7c9984d968c8d0a2b70ef5","first_seen":"2023-03-13T16:31:23Z","last_seen":"2026-09-03T03:35:46.761165Z","times_seen":32,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bigbauer.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigbauer.com/Mobile%20Login_files/mas-asp.js.download","fqdn":"bigbauer.com","domain":"bigbauer.com","tld":"com"},"ip":{"addr":"217.160.0.36","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigbauer.com/","date":"2026-09-03T03:34:51.720Z","timestamp":1788406491720,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bigbauer.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Tue, 10 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:1D:F3:67:07:F5:8C:92:70:C2:3E:88:9A:F9:59:89:E5:FD:1E:AD","sha256":"C6:14:51:EA:D5:B3:28:36:B5:0B:07:64:F9:F9:02:42:F9:1C:FC:D1:F9:C9:6C:01:3D:92:B0:AC:56:B9:DA:92"}}},"request":{"raw":"GET /Mobile%20Login_files/mas-asp.js.download HTTP/1.1\r\nHost: bigbauer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigbauer.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ncontent-length: 3548\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 995\r\ndate: Thu, 03 Sep 2026 03:34:51 GMT\r\nserver: Apache\r\nlast-modified: Tue, 03 Dec 2019 16:02:50 GMT\r\netag: \"ddc-598ced3f09e80\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3548,"size_decoded":3867,"mime_type":"text/javascript","magic":"HTML document, ASCII text, with very long lines (561), with CRLF line terminators","md5":"93c078b96d0ccabafe5670de4749c9ae","sha1":"53c57b81825094814835419534ea4107459791d1","sha256":"28011a8eeb628e510419e81b2e4f0aeb1f74ec8122b8f3375951eeba1317b8d8","sha512":"28aa59d993cc8d1f22fbe8c846eabdc16fbf950371c3ec46a844391f606b3cf2d03f20d3f68eeac7bfcbd4231560b18e2a326739efb7751c7f4170ab599378d4","ssdeep":"","tlshash":"7b71b85e1a6871220733b3019b479a49fbb18a2f1161b81b76fc57c61f72b09b061daf","first_seen":"2023-03-13T16:31:23Z","last_seen":"2026-09-03T03:35:46.764475Z","times_seen":35,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bigbauer.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigbauer.com/Mobile%20Login_files/eic.js.download","fqdn":"bigbauer.com","domain":"bigbauer.com","tld":"com"},"ip":{"addr":"217.160.0.36","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigbauer.com/","date":"2026-09-03T03:34:51.721Z","timestamp":1788406491721,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bigbauer.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Tue, 10 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:1D:F3:67:07:F5:8C:92:70:C2:3E:88:9A:F9:59:89:E5:FD:1E:AD","sha256":"C6:14:51:EA:D5:B3:28:36:B5:0B:07:64:F9:F9:02:42:F9:1C:FC:D1:F9:C9:6C:01:3D:92:B0:AC:56:B9:DA:92"}}},"request":{"raw":"GET /Mobile%20Login_files/eic.js.download HTTP/1.1\r\nHost: bigbauer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigbauer.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ncontent-length: 9088\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 994\r\ndate: Thu, 03 Sep 2026 03:34:51 GMT\r\nserver: Apache\r\nlast-modified: Tue, 03 Dec 2019 16:02:50 GMT\r\netag: \"2380-598ced3f09e80\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9088,"size_decoded":9408,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1112), with CRLF line terminators","md5":"09e0e16ca0343dcf589d1401ee0affb3","sha1":"19e457ca522d59aa83e1de313781972654b25326","sha256":"037d2f3dde88d30af81cc355ef86a1a192a0ce781da44b9c89419092c66fdc7f","sha512":"6e3e9bf8665bef4ae9e20ac354c0eb85aba492020273d35d5be0921babb0be64fe10499f94e4a5c6e2392f15c53eb296195f8a3413788872318127a310181300","ssdeep":"192:TFPJzhU0ZQ5HClbn+kbL99GDm+r63nmHkFR9:TFB9oiFJL991+rAR","tlshash":"52125206ac129ceac8773378df536214fd3d1067b14693a47a8cd6405fbc992e238f99","first_seen":"2023-03-07T01:27:30Z","last_seen":"2026-09-03T03:35:46.766332Z","times_seen":464,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bigbauer.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigbauer.com/Mobile%20Login_files/base-ver-CD35950B24ACACDA6F5D338BDD74BF56.css","fqdn":"bigbauer.com","domain":"bigbauer.com","tld":"com"},"ip":{"addr":"217.160.0.36","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bigbauer.com/","date":"2026-09-03T03:34:51.718Z","timestamp":1788406491718,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bigbauer.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Tue, 10 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:1D:F3:67:07:F5:8C:92:70:C2:3E:88:9A:F9:59:89:E5:FD:1E:AD","sha256":"C6:14:51:EA:D5:B3:28:36:B5:0B:07:64:F9:F9:02:42:F9:1C:FC:D1:F9:C9:6C:01:3D:92:B0:AC:56:B9:DA:92"}}},"request":{"raw":"GET /Mobile%20Login_files/base-ver-CD35950B24ACACDA6F5D338BDD74BF56.css HTTP/1.1\r\nHost: bigbauer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigbauer.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-length: 67540\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 997\r\ndate: Thu, 03 Sep 2026 03:34:51 GMT\r\nserver: Apache\r\nlast-modified: Wed, 04 Dec 2019 20:39:00 GMT\r\netag: \"107d4-598e6cd6e2100\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":67540,"size_decoded":67855,"mime_type":"text/css","magic":"ASCII text, with very long lines (4332)","md5":"f9d485ffedee947526cce96fde4e5c4e","sha1":"df95f00ee0312dd0e2fda7dda77ec9c3d882767b","sha256":"43b2c11ff55719b51ecac8838d1936868af8a8dadab851f9a5f14b5e9d5c782f","sha512":"3f077d1c854297f752cb4fddc00d7f80cea43e38f3af3ff3c176f027ab4a4c8649485fa7e80c6cfd64fa37e7d9be5e61a1945c99d7a1b9a248a9b2b6d32804bc","ssdeep":"1536:/31tTtunqRPINg1gJYF+ePRU25AUfXBsf:XtCNAPR55AUfmf","tlshash":"f86395526b722c15f42391a47bee5aa523284013d10f9d28bfde76bc8fcd59095b3b8c","first_seen":"2023-05-02T15:27:22Z","last_seen":"2026-09-03T03:35:46.768034Z","times_seen":35,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bigbauer.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigbauer.com/Mobile%20Login_files/pl-m-frame-asp.html","fqdn":"bigbauer.com","domain":"bigbauer.com","tld":"com"},"ip":{"addr":"217.160.0.36","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://bigbauer.com/","date":"2026-09-03T03:34:51.992Z","timestamp":1788406491992,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bigbauer.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Tue, 10 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:1D:F3:67:07:F5:8C:92:70:C2:3E:88:9A:F9:59:89:E5:FD:1E:AD","sha256":"C6:14:51:EA:D5:B3:28:36:B5:0B:07:64:F9:F9:02:42:F9:1C:FC:D1:F9:C9:6C:01:3D:92:B0:AC:56:B9:DA:92"}}},"request":{"raw":"GET /Mobile%20Login_files/pl-m-frame-asp.html HTTP/1.1\r\nHost: bigbauer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigbauer.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 992\r\ndate: Thu, 03 Sep 2026 03:34:52 GMT\r\nserver: Apache\r\nlast-modified: Tue, 03 Dec 2019 16:02:50 GMT\r\netag: W/\"4c3-598ced3f09e80\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Snowplow Analytics","description":"Snowplow is an open-source behavioral data management platform for businesses.","website":"https://snowplowanalytics.com","common_platform_enumeration":"","icon":"Snowplow.svg","categories":["Analytics","IaaS"]}],"data":{"size":1219,"size_decoded":1007,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"35de0d13c96d930ad914c4d6cf38350a","sha1":"4f7dd92bfba40d487ea52e8b6b56b54d23a9800f","sha256":"c73b7d9a7c0d934996b85e741ed6a1f4def4762902776f9c92ac4372ef33b0f2","sha512":"433f46059bfb013d71efdb74916b4887fc7b04f40c75e12d8353bafcee1d4309e058638ccb42c104e53527c86f3c700b69cfc4ab30519561e18a4e975f463ccb","ssdeep":"","tlshash":"772121eb1d56593095317061cedff208283b42123245cd6035fd9184ef2cb4fe856695","first_seen":"2023-05-02T15:27:22Z","last_seen":"2026-09-03T03:35:46.769766Z","times_seen":12,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bigbauer.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ui-portal.de/cd/ci/gmx.net/favicon.ico","fqdn":"img.ui-portal.de","domain":"ui-portal.de","tld":"de"},"ip":{"addr":"96.6.16.192","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigbauer.com/","date":"2026-09-03T03:34:52.037Z","timestamp":1788406492037,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.ui-portal.de","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 18 Dec 2025 00:00:00 GMT","end":"Thu, 17 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CA:19:28:4A:25:5F:18:C4:65:E1:BB:5C:C7:1F:97:76:87:18:50:B6","sha256":"87:8D:79:16:8E:17:40:40:9B:99:B8:E2:1A:D7:CE:52:56:25:72:55:32:4D:CA:14:AC:69:61:F2:B9:3A:F8:E9"}}},"request":{"raw":"GET /cd/ci/gmx.net/favicon.ico HTTP/1.1\r\nHost: img.ui-portal.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigbauer.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Tue, 30 Jan 2018 10:09:40 GMT\r\netag: \"90be-563fb8f8ee100\"\r\naccept-ranges: bytes\r\nserver: Apache\r\ncontent-length: 37054\r\ncontent-type: image/x-icon\r\ncache-control: public, max-age=287\r\ndate: Thu, 03 Sep 2026 03:34:52 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":37054,"size_decoded":37325,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"99459cf22d06dfb4d9e48d0a958f70f3","sha1":"85ac702d993bd00f5ac38754109a1afbaad19258","sha256":"ec16b4f46cfa2ee185077885a7af4e144c4442242c30f1e2f0d1234e1b67c4f4","sha512":"2c87daf86ed5c7f603aa64208e8deb3b572d32a7ff9aad4b815e22823569140bedb858246c3bf6aa4622e7d4d0bcc303be11266bff0bab22f311a73d38d2ce7c","ssdeep":"192:EqKu8/rSo5iCA9XS+16hpRAXgMxSS0JjrOQkWzlvoleq:6uqrt50XSGAR+hxSS2lw","tlshash":"eaf2a4c6a936c42bf3a88a30517dff354a992e53e71466e15501b4e93733b32e01839f","first_seen":"2023-05-02T15:27:22Z","last_seen":"2026-09-03T03:35:46.771054Z","times_seen":229,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":47,"connect":2,"send":0,"wait":3,"receive":2,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigbauer.com/Mobile%20Login_files/eic.js.download","fqdn":"bigbauer.com","domain":"bigbauer.com","tld":"com"},"ip":{"addr":"217.160.0.36","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigbauer.com/Mobile%20Login_files/pl-m-frame-asp.html","date":"2026-09-03T03:34:52.072Z","timestamp":1788406492072,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bigbauer.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Tue, 10 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:1D:F3:67:07:F5:8C:92:70:C2:3E:88:9A:F9:59:89:E5:FD:1E:AD","sha256":"C6:14:51:EA:D5:B3:28:36:B5:0B:07:64:F9:F9:02:42:F9:1C:FC:D1:F9:C9:6C:01:3D:92:B0:AC:56:B9:DA:92"}}},"request":{"raw":"GET /Mobile%20Login_files/eic.js.download HTTP/1.1\r\nHost: bigbauer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigbauer.com/Mobile%20Login_files/pl-m-frame-asp.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ncontent-length: 9088\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 991\r\ndate: Thu, 03 Sep 2026 03:34:52 GMT\r\nserver: Apache\r\nlast-modified: Tue, 03 Dec 2019 16:02:50 GMT\r\netag: \"2380-598ced3f09e80\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9088,"size_decoded":9408,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1112), with CRLF line terminators","md5":"09e0e16ca0343dcf589d1401ee0affb3","sha1":"19e457ca522d59aa83e1de313781972654b25326","sha256":"037d2f3dde88d30af81cc355ef86a1a192a0ce781da44b9c89419092c66fdc7f","sha512":"6e3e9bf8665bef4ae9e20ac354c0eb85aba492020273d35d5be0921babb0be64fe10499f94e4a5c6e2392f15c53eb296195f8a3413788872318127a310181300","ssdeep":"192:TFPJzhU0ZQ5HClbn+kbL99GDm+r63nmHkFR9:TFB9oiFJL991+rAR","tlshash":"52125206ac129ceac8773378df536214fd3d1067b14693a47a8cd6405fbc992e238f99","first_seen":"2023-03-07T01:27:30Z","last_seen":"2026-09-03T03:35:46.766332Z","times_seen":464,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bigbauer.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigbauer.com/Mobile%20Login_files/mas-asp.js.download","fqdn":"bigbauer.com","domain":"bigbauer.com","tld":"com"},"ip":{"addr":"217.160.0.36","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigbauer.com/Mobile%20Login_files/pl-m-frame-asp.html","date":"2026-09-03T03:34:52.075Z","timestamp":1788406492075,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bigbauer.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Tue, 10 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:1D:F3:67:07:F5:8C:92:70:C2:3E:88:9A:F9:59:89:E5:FD:1E:AD","sha256":"C6:14:51:EA:D5:B3:28:36:B5:0B:07:64:F9:F9:02:42:F9:1C:FC:D1:F9:C9:6C:01:3D:92:B0:AC:56:B9:DA:92"}}},"request":{"raw":"GET /Mobile%20Login_files/mas-asp.js.download HTTP/1.1\r\nHost: bigbauer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bigbauer.com/Mobile%20Login_files/pl-m-frame-asp.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ncontent-length: 3548\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 990\r\ndate: Thu, 03 Sep 2026 03:34:52 GMT\r\nserver: Apache\r\nlast-modified: Tue, 03 Dec 2019 16:02:50 GMT\r\netag: \"ddc-598ced3f09e80\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3548,"size_decoded":3867,"mime_type":"text/javascript","magic":"HTML document, ASCII text, with very long lines (561), with CRLF line terminators","md5":"93c078b96d0ccabafe5670de4749c9ae","sha1":"53c57b81825094814835419534ea4107459791d1","sha256":"28011a8eeb628e510419e81b2e4f0aeb1f74ec8122b8f3375951eeba1317b8d8","sha512":"28aa59d993cc8d1f22fbe8c846eabdc16fbf950371c3ec46a844391f606b3cf2d03f20d3f68eeac7bfcbd4231560b18e2a326739efb7751c7f4170ab599378d4","ssdeep":"","tlshash":"7b71b85e1a6871220733b3019b479a49fbb18a2f1161b81b76fc57c61f72b09b061daf","first_seen":"2023-03-13T16:31:23Z","last_seen":"2026-09-03T03:35:46.764475Z","times_seen":35,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bigbauer.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bigbauer.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}