{"report_id":"86bb1743-bed2-4b24-bf22-1e69a820021d","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2026-04-19T00:40:17Z","url":{"schema":"http","addr":"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link/","fqdn":"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link","domain":"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link","tld":"ipfs.dweb.link"},"ip":{"addr":"209.94.90.3","port":0,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link/","fqdn":"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link","domain":"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link","tld":"ipfs.dweb.link"},"title":"DKB Banking","dom":{"size":34703,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2681)","md5":"6d6d84659753dff0eb3e623c84216be5","sha1":"0d0eeeabb5ceae3fd29a0df0f324d9c551745431","sha256":"4622d493de78012120dbb0f0f78ce9142c76504e4cf52add860d332ab144ac20","sha512":"187996d1478dff67c97b57d59c56e78a1e0392cf51cec48fc1eec093f3e090a4078dbdcdec9c97ce09648f34578595bade1792b5e9d3a8b714a402362d898207","ssdeep":"384:BLgqUAraAIk2OSht8x4pXZ6aPbCxQZChuludzFgG:rrFCYaUWpkuG","tlshash":"7bf2d61322b30829b513a4ac6baba75637369003e10ad9287fac5719cf57ec4d8777dc","dom_hash":"domhashe5b99909fa4487f3ecf03a07611fa9bb","first_seen":"2026-04-18T13:00:40.576648Z","last_seen":"2026-04-19T00:40:20.497325Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link/","fqdn":"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link","domain":"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link","tld":"ipfs.dweb.link"},"ip":{"addr":"209.94.90.3","port":0,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-24T00:40:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":2,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-19T00:39:55Z","timestamp":1776559195,"ip_dst":{"addr":"209.94.90.2","port":443,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":59884,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET HUNTING Observed IPFS Gateway Domain (ipfs .dweb .link) in TLS SNI","source":"{\"timestamp\":\"2026-04-19T00:39:55.500707+0000\",\"flow_id\":1810473206646790,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":59884,\"dest_ip\":\"209.94.90.2\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045146,\"rev\":1,\"signature\":\"ET HUNTING Observed IPFS Gateway Domain (ipfs .dweb .link) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_04_21\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_21\"]}},\"tls\":{\"sni\":\"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":976,\"bytes_toclient\":2715,\"start\":\"2026-04-19T00:39:55.493574+0000\"}}"}],"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-04-19","alert":"Detects file containing Telegram Bot API","trigger":"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-18","alert":"Phishing Block","trigger":"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-12T22:16:45.621325Z","alert_count":0,"request_count":1,"received_data":8833,"sent_data":598,"comment":"","tags":null,"fingerprints":null},{"fqdn":"banking.dkb.de","ip":{"addr":"185.85.1.163","port":443,"asn":20546,"as":"SOPRADO GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":2988046,"first_seen":"2017-02-01T09:47:29Z","last_seen":"2026-04-18T13:00:31.615741Z","alert_count":0,"request_count":8,"received_data":237877,"sent_data":4895,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link","ip":{"addr":"209.94.90.2","port":443,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"domain_registered":"2017-02-24","domain_rank":0,"first_seen":"2026-04-18T13:00:30.596824Z","last_seen":"2026-04-18T13:00:30.596824Z","alert_count":5,"request_count":1,"received_data":36049,"sent_data":543,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"IPFS","description":"IPFS is a peer-to-peer hypermedia protocol that provides a distributed hypermedia web.","website":"https://ipfs.tech/","common_platform_enumeration":"","icon":"IPFS.svg","categories":["Network storage"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-12T22:20:19.752051Z","alert_count":0,"request_count":1,"received_data":4289,"sent_data":531,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link/","fqdn":"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link","domain":"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link","tld":"ipfs.dweb.link"},"ip":{"addr":"209.94.90.2","port":443,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"md5":"fcc30da48ccc4efed6387c9ab8ed74e0","sha1":"70199937e323d71cd3f379bda70770945e95f6f7","sha256":"63dc222b39cf220e942c921336e60ee09e4d183516c2b422221c94ec46afd857","sha512":"f66565f9bb0c28ec41549bf5ef1a412c2a1895c9a26ba302c758985fee2e4662465f9e5111d02a9c6b51c10e399dbf114265ec32a3b426a07cfe0103c985d5a6","size":7999,"token":"8750126810:AAExKBMgdNQ0KlZeJ-yVwe79OW8VALujlfw","is_revoked":false,"bot":{"token":"8750126810:AAExKBMgdNQ0KlZeJ-yVwe79OW8VALujlfw","user_id":"8750126810","username":"dkb101_bot","first_name":"DKB","last_name":"","chat":{"chat_id":"6765442620","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":1}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link/","fqdn":"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link","domain":"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link","tld":"ipfs.dweb.link"},"ip":{"addr":"209.94.90.2","port":443,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fcc30da48ccc4efed6387c9ab8ed74e0","sha1":"70199937e323d71cd3f379bda70770945e95f6f7","sha256":"63dc222b39cf220e942c921336e60ee09e4d183516c2b422221c94ec46afd857","sha512":"f66565f9bb0c28ec41549bf5ef1a412c2a1895c9a26ba302c758985fee2e4662465f9e5111d02a9c6b51c10e399dbf114265ec32a3b426a07cfe0103c985d5a6","ssdeep":"96:HZjujOiNoOn5h0WcBCWP8WjypWcEb3dCjCCcWYCMRdaQ6kapaiVCNWgdbxopqAxq:HZjAog5hI3EmS1yaQnapHcNWgmFgEdan","tlshash":"d2f11f2630b72d7906f765be234fe1017b65a0037901da543e2c97564f2be81e87b3ea","size":7999,"data":"","first_seen":"2026-04-18T13:00:40.592624Z","last_seen":"2026-04-19T00:40:20.520796Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-04-19","alert":"Detects file containing Telegram Bot API","trigger":"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link/","date":"2026-04-19T00:39:55.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 18 Apr 2026 02:00:42 GMT\r\nexpires: Sun, 18 Apr 2027 02:00:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 81553\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-08-22T06:25:22.966005Z","times_seen":296309,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":57,"dns":1,"connect":7,"send":0,"wait":9,"receive":1,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"banking.dkb.de/assets/apple-icon-180x180.png","fqdn":"banking.dkb.de","domain":"dkb.de","tld":"de"},"ip":{"addr":"185.85.1.163","port":443,"asn":20546,"as":"SOPRADO GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link/","date":"2026-04-19T00:39:56.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banking.dkb.de","organization":"Deutsche Kreditbank AG"},"issuer":{"commonName":"DKB CA 1O1","organization":"Deutsche Kreditbank AG"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 25 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E1:DB:12:C2:A5:89:6B:DE:47:86:CD:8D:4D:96:70:B5:8A:C6:33:6C","sha256":"8B:6B:07:75:58:EB:DB:FB:B6:3B:B9:23:75:22:83:B7:37:00:0C:E6:D0:C6:BC:CD:55:BF:3E:D7:12:E6:7C:35"}}},"request":{"raw":"GET /assets/apple-icon-180x180.png HTTP/1.1\r\nHost: banking.dkb.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: myracloud\r\ndate: Sun, 19 Apr 2026 00:39:56 GMT\r\ncontent-type: image/png\r\nvary: origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15811200\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: max-age=3600\r\nlast-modified: Wed, 01 Apr 2026 14:37:30 GMT\r\netag: W/\"4e2-19d497a6010\"\r\nexpires: Sun, 19 Apr 2026 01:06:13 GMT\r\nx-cdn: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1250,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"b31bd47e5ec51237866753fece208a53","sha1":"25f132ecb06ac569a061a5d1df731dd18283caff","sha256":"7e9fdc0e0afe97ecab2a61462bb2b53e7244fff51eb35f542676b4becfccbb89","sha512":"5a383b3279b71bfab575442ab4663467a0028a8a5aedaf47e09b4184a3caa482339e03634ea5b21ecc8a0222c9bebc7ea2c78b9c88e57385159363ec3d5b89b1","ssdeep":"","tlshash":"3d21e511724c383023d63b6ef0326245b487195895fe12ec21a9621001c436cfde8f12","first_seen":"2024-07-05T01:08:37Z","last_seen":"2026-04-19T00:40:20.502432Z","times_seen":11,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"banking.dkb.de/assets/dkb-logo.svg","fqdn":"banking.dkb.de","domain":"dkb.de","tld":"de"},"ip":{"addr":"185.85.1.163","port":443,"asn":20546,"as":"SOPRADO GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link/","date":"2026-04-19T00:39:56.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banking.dkb.de","organization":"Deutsche Kreditbank AG"},"issuer":{"commonName":"DKB CA 1O1","organization":"Deutsche Kreditbank AG"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 25 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E1:DB:12:C2:A5:89:6B:DE:47:86:CD:8D:4D:96:70:B5:8A:C6:33:6C","sha256":"8B:6B:07:75:58:EB:DB:FB:B6:3B:B9:23:75:22:83:B7:37:00:0C:E6:D0:C6:BC:CD:55:BF:3E:D7:12:E6:7C:35"}}},"request":{"raw":"GET /assets/dkb-logo.svg HTTP/1.1\r\nHost: banking.dkb.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: myracloud\r\ndate: Sun, 19 Apr 2026 00:39:56 GMT\r\ncontent-type: image/svg+xml\r\nvary: origin, accept-encoding\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15811200\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: max-age=3600\r\nlast-modified: Wed, 01 Apr 2026 14:37:30 GMT\r\netag: W/\"388-19d497a6010\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 19 Apr 2026 01:38:57 GMT\r\nx-cdn: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":904,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"977a57a85d9576d4ff299c571425a34b","sha1":"c7efdffd625acfaa0daee5e57a4c9f817fdeea14","sha256":"8c282992f91c5bd6e477d4d63e29cb2a5930337b0a6b21a054d0ba6cb3043972","sha512":"caa4e3a0c7832af6465844d405db95644e1d53d13fee3afb9fe22b875b844fb1e2ab377ce2bf68b8d0b554e635919455d866a2d31b67a63bd35d7ad5b53e2474","ssdeep":"","tlshash":"5a11c0d8a2698bb95c56e364af6960352c4951cf6008335ce7d19e75f49d0eb4c90fd0","first_seen":"2024-07-05T01:08:37Z","last_seen":"2026-04-19T00:40:20.503595Z","times_seen":6,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"banking.dkb.de/assets/DKBEuclid-Semibold-WebXL-DWBeL81K.woff","fqdn":"banking.dkb.de","domain":"dkb.de","tld":"de"},"ip":{"addr":"185.85.1.163","port":443,"asn":20546,"as":"SOPRADO GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link/","date":"2026-04-19T00:39:56.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banking.dkb.de","organization":"Deutsche Kreditbank AG"},"issuer":{"commonName":"DKB CA 1O1","organization":"Deutsche Kreditbank AG"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 25 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E1:DB:12:C2:A5:89:6B:DE:47:86:CD:8D:4D:96:70:B5:8A:C6:33:6C","sha256":"8B:6B:07:75:58:EB:DB:FB:B6:3B:B9:23:75:22:83:B7:37:00:0C:E6:D0:C6:BC:CD:55:BF:3E:D7:12:E6:7C:35"}}},"request":{"raw":"GET /assets/DKBEuclid-Semibold-WebXL-DWBeL81K.woff HTTP/1.1\r\nHost: banking.dkb.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: myracloud\r\ndate: Sun, 19 Apr 2026 00:39:56 GMT\r\ncontent-type: font/woff\r\nvary: origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15811200\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: max-age=3600\r\nlast-modified: Wed, 01 Apr 2026 14:37:45 GMT\r\netag: W/\"d130-19d497a9aa8\"\r\nexpires: Sun, 19 Apr 2026 01:36:37 GMT\r\nx-cdn: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53552,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 53552, version 0.0","md5":"60dee2eb048efbc50fa1877109668725","sha1":"c0f8d48c7de90e15ec9099410375f827c4069c93","sha256":"03fb1b7a352746b532ef287c826c1839a6b1e4ea843e4bf0fac44c468c1b8d50","sha512":"9a05b593297e0f604112b35476b608004bb5b2af77051dc616c6d622a817e2d6e22534e00759dc94c247c47d2aef7c110519a3bef6d7a4551467cf202909a71c","ssdeep":"1536:gYJZtjphNuMzkcOk9TgBx/lzKGcpNMUy+kfabG2it:zJZ9jNuCTwx/OYybG2it","tlshash":"0d33f27236836f03d2f92eff44c61e571e7222b97a658ac137d2b5555c3a9c421cac8c","first_seen":"2026-04-19T00:40:20.504542Z","last_seen":"2026-04-19T00:40:20.504542Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"banking.dkb.de/assets/DKBEuclid-Bold-WebXL-D8IyQEWQ.woff","fqdn":"banking.dkb.de","domain":"dkb.de","tld":"de"},"ip":{"addr":"185.85.1.163","port":443,"asn":20546,"as":"SOPRADO GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link/","date":"2026-04-19T00:39:56.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banking.dkb.de","organization":"Deutsche Kreditbank AG"},"issuer":{"commonName":"DKB CA 1O1","organization":"Deutsche Kreditbank AG"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 25 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E1:DB:12:C2:A5:89:6B:DE:47:86:CD:8D:4D:96:70:B5:8A:C6:33:6C","sha256":"8B:6B:07:75:58:EB:DB:FB:B6:3B:B9:23:75:22:83:B7:37:00:0C:E6:D0:C6:BC:CD:55:BF:3E:D7:12:E6:7C:35"}}},"request":{"raw":"GET /assets/DKBEuclid-Bold-WebXL-D8IyQEWQ.woff HTTP/1.1\r\nHost: banking.dkb.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: myracloud\r\ndate: Sun, 19 Apr 2026 00:39:56 GMT\r\ncontent-type: font/woff\r\nvary: origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15811200\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: max-age=3600\r\nlast-modified: Wed, 01 Apr 2026 14:37:45 GMT\r\netag: W/\"cc28-19d497a9aa8\"\r\nexpires: Sun, 19 Apr 2026 01:36:37 GMT\r\nx-cdn: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32768,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 52264, version 0.0","md5":"905c20f15eaacf7b2b7b9f69643b370a","sha1":"1daad38bf7428a303760870e419a4670f8d44717","sha256":"af7d5fadc9f0a20437c1b5f34d05b3f79e59d493ffe713bbb7f534a9985cdb9a","sha512":"442c7ff79cdb7485a7b055280fafbd5cece81bd3f79c994590a9622152c374ac03a272e1008036a8968992c867ba9723e38d07babfe8a27fadc91cde750dc97c","ssdeep":"768:6iCEKZJshDVpCD5562D17s5MraKmlvI9sPn+AKIc6gK9I:6LrZmsd1Dls54aKo+yc6gK9I","tlshash":"33e2d0481f6b815af3956cf77c9107f4f6a2116adbb2e1835dd0b82865e23d81c631ca","first_seen":"2026-04-19T00:40:20.506954Z","last_seen":"2026-04-19T00:40:20.506954Z","times_seen":1,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link/","fqdn":"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link","domain":"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link","tld":"ipfs.dweb.link"},"ip":{"addr":"209.94.90.2","port":443,"asn":40680,"as":"PROTOCOL","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-19T00:39:55.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dweb.link","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 09:13:50 GMT","end":"Tue, 23 Jun 2026 09:13:49 GMT"},"fingerprint":{"sha1":"E4:E5:CB:94:AF:7D:7B:B9:48:19:52:85:EE:98:A4:F7:A3:2B:F8:F9","sha256":"E6:4B:F4:6F:F6:FB:73:86:74:EB:C5:7E:EF:BE:A1:A2:55:BF:12:94:F8:8A:25:4E:67:54:7F:C2:59:71:CF:0E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Apr 2026 00:39:55 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\ncf-ray: 9ee7dadbebe0b503-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 41986\r\ncache-control: public, max-age=29030400, immutable\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: Content-Type, Range, User-Agent, X-Requested-With\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: Content-Length, Content-Range, X-Chunked-Output, X-Ipfs-Path, X-Ipfs-Roots, X-Stream-Output\r\nx-ipfs-path: /ipfs/bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te/\r\nx-ipfs-pop: rainbow-rbx-16-102\r\nx-ipfs-roots: bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te\r\nx-robots-tag: noindex, nofollow\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"IPFS","description":"IPFS is a peer-to-peer hypermedia protocol that provides a distributed hypermedia web.","website":"https://ipfs.tech/","common_platform_enumeration":"","icon":"IPFS.svg","categories":["Network storage"]}],"data":{"size":35231,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2681)","md5":"8192bfc0b3cce6ba676048df8b640789","sha1":"57161e1fb39182795343da95d44c53c674ed9635","sha256":"66df73bae256ee3cf74ea4ac8c841c548b9086fdaab3dca38144ddba40560953","sha512":"64ec5bf741b06a50b54221d15f8f6b1a2e2cd857e7b7a846fd9d094715d093454648a3431cedd657a5ff1fc5e130d670fca0e894ce9d238da0c770dbb89e8e35","ssdeep":"384:2LgqUAraAIk2OSht8x4pkZ/5P73xQZChuludzFgI:2rFCYaY5YkuI","tlshash":"f2f2f71322b30869a517a47c6baba71637369003e10ad9283fec57198f47ec4d977bdc","first_seen":"2026-04-18T13:00:40.585499Z","last_seen":"2026-04-19T00:40:20.509395Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":34,"dns":19,"connect":1,"send":0,"wait":30,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-04-19","alert":"Detects file containing Telegram Bot API","trigger":"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-18","alert":"Phishing Block","trigger":"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link/","date":"2026-04-19T00:39:55.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Poppins:wght@500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 19 Apr 2026 00:39:55 GMT\r\ndate: Sun, 19 Apr 2026 00:39:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3603,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"742bdf6185bd1e02658d56bc2cc71cd4","sha1":"b2a2a5dc92470b9b683c85e57597bee31ba83737","sha256":"885c6c1aad6bfc1e488b1d5fa7f2641df71f5622fdbf26fe06faafb41c00b6c5","sha512":"73e47d6599ec7cd88c560352ed0b54cadb2ddd01a7d4bfeecd308ff8fe64c6c704dca88fb32870371e68a33a4b6b1f156b76349f14a14ea40f4bd299ee3af6ed","ssdeep":"","tlshash":"6b71afd1087be1049b831cc223cf7d36ee1e92557410e5786bfd0c98adabc25436272d","first_seen":"2025-09-23T12:05:07.081722Z","last_seen":"2026-08-19T18:20:44.718505Z","times_seen":211,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":54,"dns":1,"connect":7,"send":0,"wait":18,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"banking.dkb.de/assets/DKBEuclid-Regular-WebXL-Cr8achUI.woff2","fqdn":"banking.dkb.de","domain":"dkb.de","tld":"de"},"ip":{"addr":"185.85.1.163","port":443,"asn":20546,"as":"SOPRADO GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link/","date":"2026-04-19T00:39:55.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banking.dkb.de","organization":"Deutsche Kreditbank AG"},"issuer":{"commonName":"DKB CA 1O1","organization":"Deutsche Kreditbank AG"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 25 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E1:DB:12:C2:A5:89:6B:DE:47:86:CD:8D:4D:96:70:B5:8A:C6:33:6C","sha256":"8B:6B:07:75:58:EB:DB:FB:B6:3B:B9:23:75:22:83:B7:37:00:0C:E6:D0:C6:BC:CD:55:BF:3E:D7:12:E6:7C:35"}}},"request":{"raw":"GET /assets/DKBEuclid-Regular-WebXL-Cr8achUI.woff2 HTTP/1.1\r\nHost: banking.dkb.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: myracloud\r\ndate: Sun, 19 Apr 2026 00:39:56 GMT\r\ncontent-type: font/woff2\r\nvary: origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15811200\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: max-age=3600\r\nlast-modified: Wed, 01 Apr 2026 14:37:45 GMT\r\netag: W/\"93bc-19d497a9aa8\"\r\nexpires: Sun, 19 Apr 2026 01:38:53 GMT\r\nx-cdn: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15977,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37820, version 1.0","md5":"e2167f16298e5917494dd2e3c83f6093","sha1":"2ae371573801b0916cab5a2d8a3299098ed8c66e","sha256":"7b397c3d0d41e18d059089206633be7f7a4742e3fe2f02336b34503ea7a43dde","sha512":"650e0945036b621b8c21cb64022de9fd8ef8f794898ef041a691c92d4d6d33baf62785aa4c9b2919f4e97f3987d9ad4aefb8d86d9ce49fd91a43bb0e0a495a02","ssdeep":"192:p440jKHpNt9NuhXioeZel9oOQ+YYRUmsPt8SskVbRKRDI5smxcmfNTRMteA9rOE8:u9jKJNt9whSfsMON+mK8TWuExB1TC5ox","tlshash":"6c72c08f34da672a5d936465308fb55690a02e2f365212e413f63e441b50688ebd917f","first_seen":"2026-04-18T13:00:40.578874Z","last_seen":"2026-04-19T00:40:20.513685Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1066,"timings":{"blocked":381,"dns":118,"connect":124,"send":0,"wait":288,"receive":15,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"banking.dkb.de/assets/DKBEuclid-Bold-WebXL-COwwzvNX.woff2","fqdn":"banking.dkb.de","domain":"dkb.de","tld":"de"},"ip":{"addr":"185.85.1.163","port":443,"asn":20546,"as":"SOPRADO GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link/","date":"2026-04-19T00:39:55.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banking.dkb.de","organization":"Deutsche Kreditbank AG"},"issuer":{"commonName":"DKB CA 1O1","organization":"Deutsche Kreditbank AG"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 25 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E1:DB:12:C2:A5:89:6B:DE:47:86:CD:8D:4D:96:70:B5:8A:C6:33:6C","sha256":"8B:6B:07:75:58:EB:DB:FB:B6:3B:B9:23:75:22:83:B7:37:00:0C:E6:D0:C6:BC:CD:55:BF:3E:D7:12:E6:7C:35"}}},"request":{"raw":"GET /assets/DKBEuclid-Bold-WebXL-COwwzvNX.woff2 HTTP/1.1\r\nHost: banking.dkb.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: myracloud\r\ndate: Sun, 19 Apr 2026 00:39:56 GMT\r\ncontent-type: font/woff2\r\nvary: origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15811200\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: max-age=3600\r\nlast-modified: Wed, 01 Apr 2026 14:37:45 GMT\r\netag: W/\"918c-19d497a9aa8\"\r\nexpires: Sun, 19 Apr 2026 01:14:37 GMT\r\nx-cdn: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37260,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37260, version 1.0","md5":"f9b7de55f40603017b6531f3d4a814a9","sha1":"6640ce8a64bd4a0ae964e112c4b978698a09d1ac","sha256":"46f0bf7b4f9680b3bb7a4bcbcc566ecec0d332df772e19a683a229534d5408b9","sha512":"1b5845ecb546d2567d25f384c51fa7e273792ea4c872fcdcb4aa358ffc1e2dd99b3548e5a68fc0868f8e0473da1b65deafbc99d7e6b177bf3416be2ae5e9783f","ssdeep":"768:iABhTQos/rLJV3o9dUj++s4t0j+1ORKNGz7P4pF2gdU:HhEb//L3oA+2t0iORKNGXPVeU","tlshash":"47f2f14ed7a5db26dcefda50aac7cbc490603404277dcfbfc8e9c9d65909c8840919ab","first_seen":"2024-03-19T21:50:20Z","last_seen":"2026-07-23T15:16:24.666838Z","times_seen":23,"resource_available":false,"data":null}},"time_used":1011,"timings":{"blocked":358,"dns":102,"connect":121,"send":0,"wait":294,"receive":0,"ssl":132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"banking.dkb.de/assets/DKBEuclid-Semibold-WebXL--wxowF2P.woff2","fqdn":"banking.dkb.de","domain":"dkb.de","tld":"de"},"ip":{"addr":"185.85.1.163","port":443,"asn":20546,"as":"SOPRADO GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link/","date":"2026-04-19T00:39:55.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banking.dkb.de","organization":"Deutsche Kreditbank AG"},"issuer":{"commonName":"DKB CA 1O1","organization":"Deutsche Kreditbank AG"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 25 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E1:DB:12:C2:A5:89:6B:DE:47:86:CD:8D:4D:96:70:B5:8A:C6:33:6C","sha256":"8B:6B:07:75:58:EB:DB:FB:B6:3B:B9:23:75:22:83:B7:37:00:0C:E6:D0:C6:BC:CD:55:BF:3E:D7:12:E6:7C:35"}}},"request":{"raw":"GET /assets/DKBEuclid-Semibold-WebXL--wxowF2P.woff2 HTTP/1.1\r\nHost: banking.dkb.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: myracloud\r\ndate: Sun, 19 Apr 2026 00:39:56 GMT\r\ncontent-type: font/woff2\r\nvary: origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15811200\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: max-age=3600\r\nlast-modified: Wed, 01 Apr 2026 14:37:45 GMT\r\netag: W/\"962c-19d497a9aa8\"\r\nexpires: Sun, 19 Apr 2026 00:49:25 GMT\r\nx-cdn: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38444, version 1.0","md5":"b49fb46f15cc27de9d743236bdd5951a","sha1":"50b3fa678c7ee4facbcc4077ae5f66e77be3d0c2","sha256":"cc785cdd4278b3c1f7b82cb0d88e02102384df793010b1b2d16fc05da26205f8","sha512":"06051413b336089a95fce3b07982b4f7ed8870f53e74f480d3ff70ef0f2b6512daf406673dea2f071a92d0b508f029b916574fb101a6c9d2c18dda2f3e7a6a51","ssdeep":"768:ltaTdXBalblZS/aU4pj8JBM8exYoGmu0ZkKJfZtO11ZfL:2RGbyCU418bcu0zrOfN","tlshash":"5a03f144f42800e3db97143b9ba8150f97a1673e6b8e1e486d3d5c49032d2f5b687bbc","first_seen":"2023-10-03T01:37:26Z","last_seen":"2026-07-23T17:16:33.020097Z","times_seen":42,"resource_available":false,"data":null}},"time_used":857,"timings":{"blocked":322,"dns":96,"connect":106,"send":0,"wait":212,"receive":0,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"banking.dkb.de/assets/DKBEuclid-Regular-WebXL-CQj0p09Q.woff","fqdn":"banking.dkb.de","domain":"dkb.de","tld":"de"},"ip":{"addr":"185.85.1.163","port":443,"asn":20546,"as":"SOPRADO GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link/","date":"2026-04-19T00:39:56.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banking.dkb.de","organization":"Deutsche Kreditbank AG"},"issuer":{"commonName":"DKB CA 1O1","organization":"Deutsche Kreditbank AG"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 25 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E1:DB:12:C2:A5:89:6B:DE:47:86:CD:8D:4D:96:70:B5:8A:C6:33:6C","sha256":"8B:6B:07:75:58:EB:DB:FB:B6:3B:B9:23:75:22:83:B7:37:00:0C:E6:D0:C6:BC:CD:55:BF:3E:D7:12:E6:7C:35"}}},"request":{"raw":"GET /assets/DKBEuclid-Regular-WebXL-CQj0p09Q.woff HTTP/1.1\r\nHost: banking.dkb.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bafybeiexzi23pmadezdhed67ssgomesyooyaq3fpabkzmynpj6h2c5g2te.ipfs.dweb.link/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: myracloud\r\ndate: Sun, 19 Apr 2026 00:39:56 GMT\r\ncontent-type: font/woff\r\nvary: origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15811200\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: max-age=3600\r\nlast-modified: Wed, 01 Apr 2026 14:37:45 GMT\r\netag: W/\"cf94-19d497a9aa8\"\r\nexpires: Sun, 19 Apr 2026 01:36:37 GMT\r\nx-cdn: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53140,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 53140, version 0.0","md5":"7a00eb842ed7d1b59dcc42c3e60dd8d7","sha1":"65c5c32a49565b9d14025e63beab3b6872b817fc","sha256":"b275250bdc5a747463ea77ebab67736272577b24c6cd5653df4df72607866f3b","sha512":"07249e6921c6af4c5647ddc211d3fafa134efcb54dd0e194a6d64e268a9bcff6aa696a7c5aa3b5b21db09396a75d431d7cea5e3455ff875a66e6566f22c7fad1","ssdeep":"768:5bKZJrrMha8K7Vk5PISJ5jOGAz1vzNgitEdHifPlVd4W7Ns+DM/QRGHpIfmYfGsh:YZVMh+hk5R4X17LnPl7M/aGH2fxfGtIt","tlshash":"b333f1a00c9f4212561e98bd46fb97f92da02074d62353d4ffa3f82d58f659c43af849","first_seen":"2026-04-18T13:00:40.582702Z","last_seen":"2026-04-19T00:40:20.518484Z","times_seen":2,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}