{"report_id":"8bd23e45-81fc-4859-9bc6-6571849e9b50","version":0,"status":"done","tags":["dhl","logistics","phishing"],"date":"2026-09-22T20:44:11Z","url":{"schema":"http","addr":"feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en","fqdn":"feierverki.com","domain":"feierverki.com","tld":"com"},"ip":{"addr":"87.236.16.58","port":0,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en","fqdn":"feierverki.com","domain":"feierverki.com","tld":"com"},"title":"DHL","dom":{"size":8249,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"59c045fb2c4b6a2e0be0e2d7c7d69b02","sha1":"64f7c5498af3144a405d28fbe066bc5723808787","sha256":"66156ba2c7e6e0af10f25aa564cbdf6ff5ae4e4a716b9d0fd761d63c8f003d4b","sha512":"26e03107e14a05b26542d733f30138eee32a58009cc6be4f4571d35c96958b844858d3a5b88e137c338b3fc95998073f3be94033ed676a817895eac28da9dac9","ssdeep":"96:ycGe9oN3WgXCOpy7jQ2CFxEmaR05aDbaYaxI/ARAVuZjJhtzwqeC9heiY9:fGe9oNGcHFFxerijxICAVuZjJhtztY9","tlshash":"34020f2058f5547a0193809aaeb52b1bbe92c603c64e6b0235ad5bcc2fc7d87cd6370d","dom_hash":"domhash1b868f0da3276ce110a0e9a2060b92fe","first_seen":"2026-03-25T09:30:29.935647Z","last_seen":"2026-09-22T20:44:13.249677Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en","fqdn":"feierverki.com","domain":"feierverki.com","tld":"com"},"ip":{"addr":"87.236.16.58","port":0,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-27T20:44:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"feierverki.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - DHL","verdict":"phishing","severity":"medium","comment":"Associated with DHL phishing","tags":["dhl","logistics","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - DHL","verdict":"phishing","severity":"medium","comment":"Associated with DHL phishing","tags":["dhl","logistics","phishing"],"meta":null}]},"summary":[{"fqdn":"feierverki.com","ip":{"addr":"87.236.16.58","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"domain_registered":"2010-01-19","domain_rank":0,"first_seen":"2026-09-13T05:22:54.132339Z","last_seen":"2026-09-22T01:37:47.12646Z","alert_count":22,"request_count":11,"received_data":145647,"sent_data":7244,"comment":"","tags":null,"fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.1","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP:8.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-20T23:08:06.309324Z","alert_count":0,"request_count":3,"received_data":263497,"sent_data":1635,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-09-21T00:42:51.292364Z","alert_count":0,"request_count":1,"received_data":285953,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-20T23:17:00.144243Z","alert_count":0,"request_count":4,"received_data":583700,"sent_data":2119,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - DHL","verdict":"phishing","severity":"medium","comment":"Associated with DHL phishing","tags":["dhl","logistics","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6baf57f25796c332144ed58a2a0cd9ee","sha1":"f7fd0f3dc84b2cf93bf81e832505a673f354e0a3","sha256":"82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd","sha512":"5ff6240d9ca34dfe30c9cd95cb5e981823c7c0063cad9258f8f3a0a24663401da684844524272410673a6325fd78db0f7e7d0fcd3844b8db3eb9aa2613908ee8","ssdeep":"1536:Qmw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU178:VwXza3YCl45wZODZTbYR8","tlshash":"cc73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80663,"data":"","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-09-23T01:57:41.320436Z","times_seen":22488,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"12e87d2f3a4c8b347ab13a0764d420a3","sha1":"4be715e11048c057fdf2ee0fbbfad4dbf3504c55","sha256":"78a85aca2f0b110c29e0d2b137e09f0a1fb7a8e554b499f740d6744dc8962cfe","sha512":"fa4d699e582de05d47f0beeddf3f79a37fca3bea3bf083447174db9e8250fc5d95a835615a86a256697f3841eff47b1583151a556f886e264f50941f17f63167","ssdeep":"6144:gwsmYhct1SS+TC1lmhTzeKRYcYmD2zK8USJsdZQ/coLGVFyy/RgL/uiOgeNTIPfz:FuYcYmD4/cZQ/coLGVFyCJTiPf7AqqAV","tlshash":"e954a3d8f78d112e423231aaad2e12cdbb7dd171561454aefd4d497c24a083c83baf7a","size":285314,"data":"","first_seen":"2023-09-15T16:51:13Z","last_seen":"2026-09-23T01:37:54.432561Z","times_seen":18400,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.16/jquery.mask.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc290e6c3aeecf5021dd82ad8df2512a","sha1":"fb983aecd3940e8ebbfe5e74c8099cee9223c957","sha256":"2a0db34dc14ef4b5ce73b230701c7561e5012667a4c9cb274ecab646e1474995","sha512":"a47546a57ec5ff6ef267421263e5558f250b0296c3943d3f5f4ae019b4ea084ed6156e4c7b3353586fdd9e1b5b06e202cec7745903e0a44e111012eff94a8287","ssdeep":"192:cd227YJcI/iarixR4aCSfZrkiqVNReFevZA8A/A:cdaJ39e74boZrkVVjeFexA8AY","tlshash":"b502e8d5329670b253b371e901bf020bebb7afa156de4814d61a94e0ae74f890053f7e","size":8327,"data":"","first_seen":"2023-03-07T01:06:41Z","last_seen":"2026-09-23T02:39:37.809584Z","times_seen":13236,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en","fqdn":"feierverki.com","domain":"feierverki.com","tld":"com"},"ip":{"addr":"87.236.16.58","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"c67c046432fcb05d6867088fbcfdf467","sha1":"a00eaf75d189d2266ca19ebcdb1c72300f818663","sha256":"bdb65fd3482b8059f361526cc49314ef56cfa52a3c8f3169e2d99bd87f14eff5","sha512":"a76a2817a7a8c31b6712fd19da8bda7315a339b7ffa5ec661f988a55337837c8f707d05a26eaab75d29ed1a813a5202f4da27a10185a154c2fdabfff561d147c","ssdeep":"","tlshash":"1501d63cf275168511b764a25aef8b5579119e1b50984c01382d3cc82f8cb24c5b2e16","size":756,"data":"","first_seen":"2026-07-24T12:11:29.452859Z","last_seen":"2026-09-22T20:44:13.26985Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en","fqdn":"feierverki.com","domain":"feierverki.com","tld":"com"},"ip":{"addr":"87.236.16.58","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-22T20:43:36.101Z","timestamp":1790109816101,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feierverki.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 06:04:08 GMT","end":"Mon, 07 Dec 2026 06:04:07 GMT"},"fingerprint":{"sha1":"E4:1B:B4:92:29:C7:1E:E0:DF:70:D1:85:A6:B7:A3:A4:59:F5:7E:F1","sha256":"7C:00:54:6B:15:DC:CF:F1:1B:0C:E3:7F:C0:26:C7:A8:D4:FF:47:D3:D3:5A:5D:F1:19:BB:7D:9A:23:9E:38:3C"}}},"request":{"raw":"GET /wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en HTTP/1.1\r\nHost: feierverki.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 20:43:36 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.33\r\nset-cookie: PHPSESSID=c07898a7a9e81d0949cac6eb2fad058c; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"c07898a7a9e81d0949cac6eb2fad058c","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=c07898a7a9e81d0949cac6eb2fad058c; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.1","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP:8.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":8484,"size_decoded":2505,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"53e889b8bc8b00a7bf5b9b4e86354bf9","sha1":"3f391471528e2d845b9a22a1a90aeeff06e1832a","sha256":"56ea991aeed1f78c635de774aee9e585d888cb5235f5a04a7c1972e122e3f4e1","sha512":"d1f28e91ebae872fde9ebd363cf5afbc4271026c9eac6d187b98a445d8b12f041fd1cac46d617e5c843d0535ac07df502ec392b38af3df106b56b5413964c885","ssdeep":"96:gbM91Np5WgPCVYOV0+Fg3xUFaAuO0UZ/jgIMh0xNVK2CGBBfKtC9heii:YM91NmUiFrFaHatjgIMUNVK2CGBBif","tlshash":"7502cb2059d4546a007381949fb16b9aff95c203e74e4b8235ae2bcf2ff7d45cd63a48","first_seen":"2026-03-25T09:30:29.937246Z","last_seen":"2026-09-22T20:44:13.250578Z","times_seen":4,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":2,"connect":38,"send":0,"wait":68,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"feierverki.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - DHL","verdict":"phishing","severity":"medium","comment":"Associated with DHL phishing","tags":["dhl","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en","date":"2026-09-22T20:43:36.623Z","timestamp":1790109816623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feierverki.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:43:36 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 62667\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FY%2Bx%2BHLAmyUzHTt1FNBxgjIjp45ojsHV0tCV04puQ4xxvm4wKmjgjvWeEBEaGdCn2IIkHOceV%2FFSCKhCi1Wqz9bdNkBL5NTYfkB3WbvUJJs8zmd9TLTWT9bWi%2Bi5agUwzjJeKnFf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3f424920cd3569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18752\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102025,"size_decoded":19757,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-09-23T01:26:08.454564Z","times_seen":62508,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":3,"connect":21,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en","date":"2026-09-22T20:43:36.632Z","timestamp":1790109816632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.7.1.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feierverki.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-45a82\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 22 Sep 2026 20:43:36 GMT\r\nage: 4802059\r\nx-served-by: cache-lga21985-LGA, cache-bma-essb1270028-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 8295, 5764\r\nx-timer: S1790109817.670697,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 83619\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":285314,"size_decoded":84258,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"12e87d2f3a4c8b347ab13a0764d420a3","sha1":"4be715e11048c057fdf2ee0fbbfad4dbf3504c55","sha256":"78a85aca2f0b110c29e0d2b137e09f0a1fb7a8e554b499f740d6744dc8962cfe","sha512":"fa4d699e582de05d47f0beeddf3f79a37fca3bea3bf083447174db9e8250fc5d95a835615a86a256697f3841eff47b1583151a556f886e264f50941f17f63167","ssdeep":"6144:gwsmYhct1SS+TC1lmhTzeKRYcYmD2zK8USJsdZQ/coLGVFyy/RgL/uiOgeNTIPfz:FuYcYmD4/cZQ/coLGVFyCJTiPf7AqqAV","tlshash":"e954a3d8f78d112e423231aaad2e12cdbb7dd171561454aefd4d497c24a083c83baf7a","first_seen":"2023-09-15T16:51:13Z","last_seen":"2026-09-23T01:37:54.432561Z","times_seen":18400,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":9,"receive":11,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.16/jquery.mask.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en","date":"2026-09-22T20:43:36.635Z","timestamp":1790109816635,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/jquery.mask/1.14.16/jquery.mask.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feierverki.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:43:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 63180\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:11:47 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2BveDFEL5Sa8Swhdjj4KnNWjsZLGK7D%2Fe7bucLAw9iGLvmjY4yROPWrHhGJXW36OCxFDeeJsJ3zCbSTfA5spUQ%2BOloL31Cqyujk4q5rPa2SDynAF9IvzkRKuvXdBE%2BJ7R0Ohdarw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3f424920cd4569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3074\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8327,"size_decoded":4092,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (542)","md5":"cc290e6c3aeecf5021dd82ad8df2512a","sha1":"fb983aecd3940e8ebbfe5e74c8099cee9223c957","sha256":"2a0db34dc14ef4b5ce73b230701c7561e5012667a4c9cb274ecab646e1474995","sha512":"a47546a57ec5ff6ef267421263e5558f250b0296c3943d3f5f4ae019b4ea084ed6156e4c7b3353586fdd9e1b5b06e202cec7745903e0a44e111012eff94a8287","ssdeep":"192:cd227YJcI/iarixR4aCSfZrkiqVNReFevZA8A/A:cdaJ39e74boZrkVVjeFexA8AY","tlshash":"b502e8d5329670b253b371e901bf020bebb7afa156de4814d61a94e0ae74f890053f7e","first_seen":"2023-03-07T01:06:41Z","last_seen":"2026-09-23T02:39:37.809584Z","times_seen":13236,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/Asstes/imgs/social1.png","fqdn":"feierverki.com","domain":"feierverki.com","tld":"com"},"ip":{"addr":"87.236.16.58","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en","date":"2026-09-22T20:43:36.654Z","timestamp":1790109816654,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feierverki.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 06:04:08 GMT","end":"Mon, 07 Dec 2026 06:04:07 GMT"},"fingerprint":{"sha1":"E4:1B:B4:92:29:C7:1E:E0:DF:70:D1:85:A6:B7:A3:A4:59:F5:7E:F1","sha256":"7C:00:54:6B:15:DC:CF:F1:1B:0C:E3:7F:C0:26:C7:A8:D4:FF:47:D3:D3:5A:5D:F1:19:BB:7D:9A:23:9E:38:3C"}}},"request":{"raw":"GET /wp-includes/fonts/css/v2/images/css/2026/js/Asstes/imgs/social1.png HTTP/1.1\r\nHost: feierverki.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en\r\nCookie: PHPSESSID=c07898a7a9e81d0949cac6eb2fad058c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 20:43:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 2923\r\nlast-modified: Sun, 13 Sep 2026 14:08:14 GMT\r\netag: \"6aa6ae4e-b6b\"\r\nexpires: Thu, 22 Oct 2026 20:43:36 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2923,"size_decoded":3236,"mime_type":"image/png","magic":"PNG image data, 278 x 49, 8-bit/color RGBA, non-interlaced","md5":"da8a70abc10eae66800020f8406b67bd","sha1":"37ad97aa3eb36ca7771cc2eeafd39fa5493ce633","sha256":"95ea9aa124a0f8e037c19a04eb82b03bfccd85205ad217d83d57156f58732630","sha512":"48d97a236f27a3ea01fd8072a7c7ad97c12ab3b743156c5babbcc8a3745dfae7d7803eb4ea13308a8856f8dc13bf641b614262ab746c713be11a12c1b7c920cf","ssdeep":"","tlshash":"59513ae3fdcefa52266c8952787b4b20505a0de606bd8142e4d731f5aef0dead1182c5","first_seen":"2025-10-01T23:01:46.961675Z","last_seen":"2026-09-22T20:44:13.254104Z","times_seen":34,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"feierverki.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - DHL","verdict":"phishing","severity":"medium","comment":"Associated with DHL phishing","tags":["dhl","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en","date":"2026-09-22T20:43:36.779Z","timestamp":1790109816779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://feierverki.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 20:43:36 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\npriority: u=5,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 65640\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t7hMBCTVPTZmpp6twoA15LYCOIJHS1Xux%2BJAwNieQPhpVq7qOv5fdd1rqqP0JqaCFOmup4csClZHpXv2I4EWVrNA1jwDKE4BeN0jgLYYQ%2BYa19BHpAo%2FgE8j67tBVTZ1t5lTH2qT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3f42492ecea569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 150124\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150124,"size_decoded":151122,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150124, version 772.256","md5":"c64278386c2bbb5e293e11b94ca2f6d1","sha1":"6b99aa650bd12a36caa14e0127435d8f4cd3ba73","sha256":"7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880","sha512":"0ccdc1515510d902c0b4a48b863c48bad86e1f766b1f9c890a64e28d91ee7c6d488241c531fc094d15b29c211da71e092587a987e24ee8e67ef8ea99c284e821","ssdeep":"3072:7sCbk7w0ZXdkN6iMjif3Lr7x7wAtf+D7gDk1feXDLnurWHqrNIuv5n0:7sCbkFZXdC7MaLr9w2mIY1feXXurWyNW","tlshash":"28e3123cf2c6d486735f5aeadb79636894fd0a2e74ecc67d26b982112048f828174d1d","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-09-23T01:26:08.431444Z","times_seen":47213,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/Asstes/Font/87e19a40c3490ac4b8b09e60d0d19b9a.woff2","fqdn":"feierverki.com","domain":"feierverki.com","tld":"com"},"ip":{"addr":"87.236.16.58","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en","date":"2026-09-22T20:43:36.781Z","timestamp":1790109816781,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feierverki.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 06:04:08 GMT","end":"Mon, 07 Dec 2026 06:04:07 GMT"},"fingerprint":{"sha1":"E4:1B:B4:92:29:C7:1E:E0:DF:70:D1:85:A6:B7:A3:A4:59:F5:7E:F1","sha256":"7C:00:54:6B:15:DC:CF:F1:1B:0C:E3:7F:C0:26:C7:A8:D4:FF:47:D3:D3:5A:5D:F1:19:BB:7D:9A:23:9E:38:3C"}}},"request":{"raw":"GET /wp-includes/fonts/css/v2/images/css/2026/js/Asstes/Font/87e19a40c3490ac4b8b09e60d0d19b9a.woff2 HTTP/1.1\r\nHost: feierverki.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/Asstes/css/style.css\r\nCookie: PHPSESSID=c07898a7a9e81d0949cac6eb2fad058c\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 20:43:36 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 44972\r\nlast-modified: Sun, 13 Sep 2026 14:08:14 GMT\r\netag: \"6aa6ae4e-afac\"\r\nexpires: Thu, 22 Oct 2026 20:43:36 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44972,"size_decoded":45300,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 44972, version 1.0","md5":"314498217c394eb2b93c694449fe7864","sha1":"8a1093d8e052674e66862fd120e1f5970d8124b5","sha256":"c695b4a0a5d92346ea6c41ce4a643a63cf9144f9e9d8f0d8a9b89dc87b91b7c6","sha512":"c353c379631d90ea8d3b54bb28948881c3b730e8de1b17edd4bae248b63fc60c57c9464aa33af468db9b4691fa37bda6a416600969e80816a19760bbed2db493","ssdeep":"768:cYCCQwMgcNazMTUdgoY9sI66p3o6TtDJEUxf3T1iX6OQLgEZykehon:8hVUdSv6y3o6DEUBxiqOdEZykYon","tlshash":"9913f17c6643d46bec871e8b02df0e8347767b6422ac76c2b5b31e375c8a4820d64e4a","first_seen":"2025-10-01T23:01:46.958469Z","last_seen":"2026-09-22T20:44:13.255827Z","times_seen":41,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"feierverki.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - DHL","verdict":"phishing","severity":"medium","comment":"Associated with DHL phishing","tags":["dhl","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en","date":"2026-09-22T20:43:36.619Z","timestamp":1790109816619,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.3.1/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feierverki.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.3.1\r\nx-jsd-version-type: version\r\netag: W/\"38d97-sT73BUPXDB7H/dVqXrydfWQCOFE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 22 Sep 2026 20:43:36 GMT\r\nage: 3412020\r\nx-served-by: cache-fra-etou8220022-FRA, cache-bma-essb1270026-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 33026\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232855,"size_decoded":33807,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"896192cc65e20f1fcc6d792b5b9a4626","sha1":"b13ef70543d70c1ec7fdd56a5ebc9d7d64023851","sha256":"d939d21f27010c09b6c2966681d8b4cfcd64ca418f240922518f967fded16ef6","sha512":"67f75e7f9cf9bb6691f3d3aecd873198327406777957570aa8111bbcb3a250d59d83d3d079756f5cb23dd1213840e1c695f2ea5270cd540632662f14c144e659","ssdeep":"1536:EZCtjXbn98fOdRfvO5wlP7Qy9A37zV98IsY/ElV6V6pz600I41r:/tjT98fNV98mI6V6pz600I41r","tlshash":"d53481d6f590317d9ca7c1499681fefd896fa985cb1209aaf003776807cabd30962dcc","first_seen":"2023-08-02T23:07:40Z","last_seen":"2026-09-22T20:44:13.26052Z","times_seen":7044,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":9,"receive":9,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/remixicon@3.5.0/fonts/remixicon.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en","date":"2026-09-22T20:43:36.624Z","timestamp":1790109816624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/remixicon@3.5.0/fonts/remixicon.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feierverki.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 3.5.0\r\nx-jsd-version-type: version\r\netag: W/\"1e1f5-48QJs2Ev7WXpvZWlpyTMbKw/aZY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 22 Sep 2026 20:43:36 GMT\r\nage: 665593\r\nx-served-by: cache-fra-eddf8230220-FRA, cache-bma-essb1270026-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 15663\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":123381,"size_decoded":16443,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a1502679c4edcf458b19dce1380a0f79","sha1":"e3c409b3612fed65e9bd95a5a724cc6cac3f6996","sha256":"3319df8b9c28451700b6dc398868f64e5554b3cb164d188bf6f0cac6b6e39793","sha512":"1d75d1d25db23301c3ac3cb125bacc0fd78bbcf7b7cf7a8bdcf3dea33353b221c9104371c7c0c7d82c66574e62c06d1dc28cf99f8810650c982d436dd567607e","ssdeep":"1536:Ykcvr8vn4cYzgKvP1IqRCwNd1l3JclUaqM2GSsRotP:Y58v4cYcKZ7clA","tlshash":"42c3c8beea4f45801702e8d66367278163b9b67dc9817c7ad413788df3c766883862dc","first_seen":"2023-09-03T13:15:01Z","last_seen":"2026-09-22T20:44:13.261197Z","times_seen":2069,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":11,"send":0,"wait":9,"receive":9,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/Asstes/css/style.css","fqdn":"feierverki.com","domain":"feierverki.com","tld":"com"},"ip":{"addr":"87.236.16.58","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en","date":"2026-09-22T20:43:36.626Z","timestamp":1790109816626,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feierverki.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 06:04:08 GMT","end":"Mon, 07 Dec 2026 06:04:07 GMT"},"fingerprint":{"sha1":"E4:1B:B4:92:29:C7:1E:E0:DF:70:D1:85:A6:B7:A3:A4:59:F5:7E:F1","sha256":"7C:00:54:6B:15:DC:CF:F1:1B:0C:E3:7F:C0:26:C7:A8:D4:FF:47:D3:D3:5A:5D:F1:19:BB:7D:9A:23:9E:38:3C"}}},"request":{"raw":"GET /wp-includes/fonts/css/v2/images/css/2026/js/Asstes/css/style.css HTTP/1.1\r\nHost: feierverki.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en\r\nCookie: PHPSESSID=c07898a7a9e81d0949cac6eb2fad058c\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 20:43:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 13 Sep 2026 14:08:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa6ae4e-7de3\"\r\nexpires: Tue, 29 Sep 2026 20:43:36 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32227,"size_decoded":4069,"mime_type":"text/css","magic":"ASCII text, with very long lines (375)","md5":"4409a36e7d4ac8d508a0da9fd3e57754","sha1":"f0b80af553f9ce14fdb07fb70ef52a53b01845f5","sha256":"51a3b937023ef6a16c096c3e2a0e4584f10a803c3c4bc067597e248edbe6bf6b","sha512":"5a3962a262e98f03a8a9e70eed24ff6c397325247ceff22ba00e4331d025e1b775f92db39f5658a561b13b7caf9dfe8e0148c6b2bbf8b1a779975fc30d11aa45","ssdeep":"768:H/FrJ9JoJnIFTFe6OnxWfnJW5tWrqynNWYUF+FKn8:f9hWIJI6yMvE5orq+IYUU88","tlshash":"34e2105645a2261574079c2d76c22b513b6cc033a10eeff6bddd60accfc978a92b239d","first_seen":"2025-10-05T06:33:19.904027Z","last_seen":"2026-09-22T20:44:13.261771Z","times_seen":38,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"feierverki.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - DHL","verdict":"phishing","severity":"medium","comment":"Associated with DHL phishing","tags":["dhl","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/Asstes/imgs/dhl-logo.svg","fqdn":"feierverki.com","domain":"feierverki.com","tld":"com"},"ip":{"addr":"87.236.16.58","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en","date":"2026-09-22T20:43:36.643Z","timestamp":1790109816643,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feierverki.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 06:04:08 GMT","end":"Mon, 07 Dec 2026 06:04:07 GMT"},"fingerprint":{"sha1":"E4:1B:B4:92:29:C7:1E:E0:DF:70:D1:85:A6:B7:A3:A4:59:F5:7E:F1","sha256":"7C:00:54:6B:15:DC:CF:F1:1B:0C:E3:7F:C0:26:C7:A8:D4:FF:47:D3:D3:5A:5D:F1:19:BB:7D:9A:23:9E:38:3C"}}},"request":{"raw":"GET /wp-includes/fonts/css/v2/images/css/2026/js/Asstes/imgs/dhl-logo.svg HTTP/1.1\r\nHost: feierverki.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en\r\nCookie: PHPSESSID=c07898a7a9e81d0949cac6eb2fad058c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 20:43:36 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 17 Sep 2026 23:42:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aac7af9-45b\"\r\nexpires: Tue, 29 Sep 2026 20:43:36 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1115,"size_decoded":791,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"49f7f53c23aa1eb45750b60e35e5bc74","sha1":"96cf78724b37f4b95cd03133ea268e5c606cd90c","sha256":"b78e80294922b4d581c5fb0004296f7c71666a9dc47919b8a831332dc2819658","sha512":"0d376537372571fb6edb4cf49e1a8781a3a72b4d91c73fe8a312190173086e4537ffa319dfa0b85a5e253e7ab6f174c30f16ec285d600038cafbfd2e1a0a74bf","ssdeep":"","tlshash":"8c210bb8b2f4e37ba90ccbd84f7ec078246650f981d04649bda21b605b104e6c0af9da","first_seen":"2025-10-23T21:20:59.31917Z","last_seen":"2026-09-22T20:44:13.263002Z","times_seen":4,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"feierverki.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - DHL","verdict":"phishing","severity":"medium","comment":"Associated with DHL phishing","tags":["dhl","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/Asstes/imgs/bars.png","fqdn":"feierverki.com","domain":"feierverki.com","tld":"com"},"ip":{"addr":"87.236.16.58","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en","date":"2026-09-22T20:43:36.645Z","timestamp":1790109816645,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feierverki.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 06:04:08 GMT","end":"Mon, 07 Dec 2026 06:04:07 GMT"},"fingerprint":{"sha1":"E4:1B:B4:92:29:C7:1E:E0:DF:70:D1:85:A6:B7:A3:A4:59:F5:7E:F1","sha256":"7C:00:54:6B:15:DC:CF:F1:1B:0C:E3:7F:C0:26:C7:A8:D4:FF:47:D3:D3:5A:5D:F1:19:BB:7D:9A:23:9E:38:3C"}}},"request":{"raw":"GET /wp-includes/fonts/css/v2/images/css/2026/js/Asstes/imgs/bars.png HTTP/1.1\r\nHost: feierverki.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en\r\nCookie: PHPSESSID=c07898a7a9e81d0949cac6eb2fad058c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 20:43:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 383\r\nlast-modified: Sun, 13 Sep 2026 14:08:14 GMT\r\netag: \"6aa6ae4e-17f\"\r\nexpires: Thu, 22 Oct 2026 20:43:36 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":383,"size_decoded":695,"mime_type":"image/png","magic":"PNG image data, 26 x 27, 8-bit/color RGBA, non-interlaced","md5":"5ab9b7ba8aabe89c77350be3e1b0668c","sha1":"b743cbb026567d1a24584554b07f1b24713d1a47","sha256":"f63f591ae070863c8538f7bd4e666b98fd83dfbec2c1deef3016d22b0eb681e2","sha512":"b2402c8ceeba178bc169cdb572dddc7a1c8e685de80257ec752f6757fbadb9cd1c481543f7b7f59a4b8bdbbeaf7e381d6081d08c4e59e871e95f6c9a895fd2c0","ssdeep":"","tlshash":"a0e0f1d14b50c5aeccc6251d0ab202202155557fda416159fc1ca221484cee88948d43","first_seen":"2025-10-01T23:01:46.959542Z","last_seen":"2026-09-22T20:44:13.264047Z","times_seen":34,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"feierverki.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - DHL","verdict":"phishing","severity":"medium","comment":"Associated with DHL phishing","tags":["dhl","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en","date":"2026-09-22T20:43:36.630Z","timestamp":1790109816630,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feierverki.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.3.2\r\nx-jsd-version-type: version\r\netag: W/\"13b17-9/0PPchLLPk7+B6DJQWmc/NU4KM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 22 Sep 2026 20:43:36 GMT\r\nage: 668797\r\nx-served-by: cache-fra-etou8220020-FRA, cache-bma-essb1270026-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24440\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80663,"size_decoded":25234,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"6baf57f25796c332144ed58a2a0cd9ee","sha1":"f7fd0f3dc84b2cf93bf81e832505a673f354e0a3","sha256":"82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd","sha512":"5ff6240d9ca34dfe30c9cd95cb5e981823c7c0063cad9258f8f3a0a24663401da684844524272410673a6325fd78db0f7e7d0fcd3844b8db3eb9aa2613908ee8","ssdeep":"1536:Qmw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU178:VwXza3YCl45wZODZTbYR8","tlshash":"cc73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-09-23T01:57:41.320436Z","times_seen":22488,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":18,"receive":2,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/Asstes/imgs/arrow.png","fqdn":"feierverki.com","domain":"feierverki.com","tld":"com"},"ip":{"addr":"87.236.16.58","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en","date":"2026-09-22T20:43:36.648Z","timestamp":1790109816648,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feierverki.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 06:04:08 GMT","end":"Mon, 07 Dec 2026 06:04:07 GMT"},"fingerprint":{"sha1":"E4:1B:B4:92:29:C7:1E:E0:DF:70:D1:85:A6:B7:A3:A4:59:F5:7E:F1","sha256":"7C:00:54:6B:15:DC:CF:F1:1B:0C:E3:7F:C0:26:C7:A8:D4:FF:47:D3:D3:5A:5D:F1:19:BB:7D:9A:23:9E:38:3C"}}},"request":{"raw":"GET /wp-includes/fonts/css/v2/images/css/2026/js/Asstes/imgs/arrow.png HTTP/1.1\r\nHost: feierverki.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en\r\nCookie: PHPSESSID=c07898a7a9e81d0949cac6eb2fad058c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 20:43:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 332\r\nlast-modified: Sun, 13 Sep 2026 14:08:14 GMT\r\netag: \"6aa6ae4e-14c\"\r\nexpires: Thu, 22 Oct 2026 20:43:36 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":332,"size_decoded":644,"mime_type":"image/png","magic":"PNG image data, 30 x 18, 8-bit/color RGBA, non-interlaced","md5":"4ef052c4d0483400a08d278e845ef323","sha1":"02f4be9e0c30d7f7620cf18e05042a36e5d9cc0e","sha256":"c0df4910c3743c61ac514f3c69ef16602e804ce8c586936fc351860dc16ba3e9","sha512":"f136f2aca774fc8245aa8fc497de4676dec852369813088478216bf313c69e1c0008ee6a8817757763f2501eab95e11db2bd7a3a7c149382820d162dcc5c8453","ssdeep":"","tlshash":"65e0268659082af5ae0ab566678b184176a6909e2172601c3d64c536062899959eb232","first_seen":"2025-10-01T23:01:46.963503Z","last_seen":"2026-09-22T20:44:13.265021Z","times_seen":34,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"feierverki.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - DHL","verdict":"phishing","severity":"medium","comment":"Associated with DHL phishing","tags":["dhl","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/Asstes/imgs/glo-footer-logo.svg","fqdn":"feierverki.com","domain":"feierverki.com","tld":"com"},"ip":{"addr":"87.236.16.58","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en","date":"2026-09-22T20:43:36.650Z","timestamp":1790109816650,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feierverki.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 06:04:08 GMT","end":"Mon, 07 Dec 2026 06:04:07 GMT"},"fingerprint":{"sha1":"E4:1B:B4:92:29:C7:1E:E0:DF:70:D1:85:A6:B7:A3:A4:59:F5:7E:F1","sha256":"7C:00:54:6B:15:DC:CF:F1:1B:0C:E3:7F:C0:26:C7:A8:D4:FF:47:D3:D3:5A:5D:F1:19:BB:7D:9A:23:9E:38:3C"}}},"request":{"raw":"GET /wp-includes/fonts/css/v2/images/css/2026/js/Asstes/imgs/glo-footer-logo.svg HTTP/1.1\r\nHost: feierverki.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en\r\nCookie: PHPSESSID=c07898a7a9e81d0949cac6eb2fad058c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 20:43:36 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 17 Sep 2026 23:42:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aac7af9-ffd\"\r\nexpires: Tue, 29 Sep 2026 20:43:36 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4093,"size_decoded":2195,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9300de94272ac6e50db41ca0a9d886a0","sha1":"e99e98d6699407d0d1fa8a2441d880b50f467c00","sha256":"5370b4132505e74d58dc73f7f6966854a92db8ef769cf354674cdce249a61b0e","sha512":"909b6e41e3ed376307e68359b442ebce9bbdd44b089cf7f7e935a32ea89b4360a4075d569af3c1ab574158660d089a71ba6b9a3fcc4815f2b44e06e6ea27d6b9","ssdeep":"","tlshash":"0e8187c3b324a2ade80fcfcd2e7fb97a161ee0f8995105d69a93475441838f5d860ec0","first_seen":"2026-09-22T01:37:45.369269Z","last_seen":"2026-09-22T20:44:13.26557Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"feierverki.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - DHL","verdict":"phishing","severity":"medium","comment":"Associated with DHL phishing","tags":["dhl","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/Asstes/imgs/socil.png","fqdn":"feierverki.com","domain":"feierverki.com","tld":"com"},"ip":{"addr":"87.236.16.58","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en","date":"2026-09-22T20:43:36.652Z","timestamp":1790109816652,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feierverki.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 06:04:08 GMT","end":"Mon, 07 Dec 2026 06:04:07 GMT"},"fingerprint":{"sha1":"E4:1B:B4:92:29:C7:1E:E0:DF:70:D1:85:A6:B7:A3:A4:59:F5:7E:F1","sha256":"7C:00:54:6B:15:DC:CF:F1:1B:0C:E3:7F:C0:26:C7:A8:D4:FF:47:D3:D3:5A:5D:F1:19:BB:7D:9A:23:9E:38:3C"}}},"request":{"raw":"GET /wp-includes/fonts/css/v2/images/css/2026/js/Asstes/imgs/socil.png HTTP/1.1\r\nHost: feierverki.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en\r\nCookie: PHPSESSID=c07898a7a9e81d0949cac6eb2fad058c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 20:43:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 2068\r\nlast-modified: Sun, 13 Sep 2026 14:08:14 GMT\r\netag: \"6aa6ae4e-814\"\r\nexpires: Thu, 22 Oct 2026 20:43:36 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2068,"size_decoded":2381,"mime_type":"image/png","magic":"PNG image data, 211 x 35, 8-bit/color RGBA, non-interlaced","md5":"100e0073ac78663152ee0a2baab7e383","sha1":"114de850793f2f559f3767bc57c3ba1f5a294031","sha256":"940d1e5ea17978b5d4797ac268477b8c96f6a9846a9f415669b099a293d48b8d","sha512":"3c1367174719588cf4c10aa6e3ffe554a3fcf371ba3fda9ee6947e506f04399810afff3614b0756218b6aaeb6492aab858bb9252b734ae65d20cef63e6f5c4f1","ssdeep":"","tlshash":"e34109b907e82402c003de44776a80b5e3b56c5ce02955e138aed671ee86fb0cd29a51","first_seen":"2025-10-01T23:01:46.95742Z","last_seen":"2026-09-22T20:44:13.266538Z","times_seen":34,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"feierverki.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - DHL","verdict":"phishing","severity":"medium","comment":"Associated with DHL phishing","tags":["dhl","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/Asstes/Font/09f26a8eb1dadd127a2318e34a2d3b38.woff2","fqdn":"feierverki.com","domain":"feierverki.com","tld":"com"},"ip":{"addr":"87.236.16.58","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en","date":"2026-09-22T20:43:36.775Z","timestamp":1790109816775,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feierverki.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 06:04:08 GMT","end":"Mon, 07 Dec 2026 06:04:07 GMT"},"fingerprint":{"sha1":"E4:1B:B4:92:29:C7:1E:E0:DF:70:D1:85:A6:B7:A3:A4:59:F5:7E:F1","sha256":"7C:00:54:6B:15:DC:CF:F1:1B:0C:E3:7F:C0:26:C7:A8:D4:FF:47:D3:D3:5A:5D:F1:19:BB:7D:9A:23:9E:38:3C"}}},"request":{"raw":"GET /wp-includes/fonts/css/v2/images/css/2026/js/Asstes/Font/09f26a8eb1dadd127a2318e34a2d3b38.woff2 HTTP/1.1\r\nHost: feierverki.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/Asstes/css/style.css\r\nCookie: PHPSESSID=c07898a7a9e81d0949cac6eb2fad058c\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 20:43:36 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 44328\r\nlast-modified: Sun, 13 Sep 2026 14:08:14 GMT\r\netag: \"6aa6ae4e-ad28\"\r\nexpires: Thu, 22 Oct 2026 20:43:36 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44328,"size_decoded":44656,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 44328, version 1.0","md5":"3c865038f338c1f412bbe89e4baaac05","sha1":"7b0a891b39974f33ef0b2908321a5ec8ba3e2c33","sha256":"c7b8c87bf64ee30ba502a1c6ea17710ddcfaa4aedec047d73026f6201af1d1e1","sha512":"dd303f7a17adb5e82b81d16e00a7de8970443d0e463acb30a916f6489a2548bd317f698b348f2f9f01d9e4042e10bb6ad6e9d94e609276cb31f5a7d119cad18c","ssdeep":"768:ZXw+453KxaM5vveai1RLNk7qiND1SHVH7ZP/H7x/u9j9UIIYQyqMzElUx+:ZXwD4auKNk2KDAdFPfEj9uYQyqmE","tlshash":"9013f1bc9f90898dfe5a1f119b0c01fe8b6e66f8700d06d61d391988d626c1adc0b9fc","first_seen":"2025-10-01T23:01:46.950364Z","last_seen":"2026-09-22T20:44:13.267699Z","times_seen":41,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"feierverki.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - DHL","verdict":"phishing","severity":"medium","comment":"Associated with DHL phishing","tags":["dhl","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/remixicon@3.5.0/fonts/remixicon.woff2?t=1690730386070","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en","date":"2026-09-22T20:43:36.778Z","timestamp":1790109816778,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/remixicon@3.5.0/fonts/remixicon.woff2?t=1690730386070 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://feierverki.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/remixicon@3.5.0/fonts/remixicon.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 143720\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 3.5.0\r\nx-jsd-version-type: version\r\netag: W/\"23168-v1UW3MYZ+EWM8MIIc0fjGC2QYss\"\r\naccept-ranges: bytes\r\nage: 425499\r\ndate: Tue, 22 Sep 2026 20:43:36 GMT\r\nx-served-by: cache-fra-etou8220050-FRA, cache-bma-essb1270025-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":143720,"size_decoded":144446,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 143720, version 1.0","md5":"a36fc087e9d4a3bdf4a2577e764f05c8","sha1":"bf5516dcc619f8458cf0c2087347e3182d9062cb","sha256":"b0d0b7e5101a1b8a54268b9188da520d19d74df9b35714a8ddb5987fad990591","sha512":"379f56d459d7e9c87d158e72bbfbd2f90a636f17f03ba7c0d4861e0c3d0bef167c8473637de46555c24037462d999610b89940a8260c02317f5c397bff51e549","ssdeep":"3072:vcLAcNn+1IXUlF3GvqJMc6jJDQ6CgX9OIsrQWdeosyQq9PR9gdbE:UkO+1IXUr3Gv1ZJDf9OISVepqzWdbE","tlshash":"05e31242d0c44bf943052f9fe961ee334ef862e731a37694f55af3c4962a35a631922c","first_seen":"2023-09-03T13:15:01Z","last_seen":"2026-09-22T20:44:13.268744Z","times_seen":1101,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":11,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/Asstes/imgs/favicon.ico","fqdn":"feierverki.com","domain":"feierverki.com","tld":"com"},"ip":{"addr":"87.236.16.58","port":443,"asn":198610,"as":"Beget LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en","date":"2026-09-22T20:43:36.897Z","timestamp":1790109816897,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"feierverki.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 06:04:08 GMT","end":"Mon, 07 Dec 2026 06:04:07 GMT"},"fingerprint":{"sha1":"E4:1B:B4:92:29:C7:1E:E0:DF:70:D1:85:A6:B7:A3:A4:59:F5:7E:F1","sha256":"7C:00:54:6B:15:DC:CF:F1:1B:0C:E3:7F:C0:26:C7:A8:D4:FF:47:D3:D3:5A:5D:F1:19:BB:7D:9A:23:9E:38:3C"}}},"request":{"raw":"GET /wp-includes/fonts/css/v2/images/css/2026/js/Asstes/imgs/favicon.ico HTTP/1.1\r\nHost: feierverki.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://feierverki.com/wp-includes/fonts/css/v2/images/css/2026/js/details.php?lang=en\r\nCookie: PHPSESSID=c07898a7a9e81d0949cac6eb2fad058c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-reuseport/1.21.1\r\ndate: Tue, 22 Sep 2026 20:43:36 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1150\r\nlast-modified: Sun, 13 Sep 2026 14:08:14 GMT\r\netag: \"6aa6ae4e-47e\"\r\nexpires: Thu, 22 Oct 2026 20:43:36 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":1466,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"d8106bf3a1d00ab43b01e6e3c92500eb","sha1":"202b5e8654ab1b28351378293bca3b9d844cc29b","sha256":"9ada5709e264c31b04a05bd85448a9bd5e91925e8d83df5cef0762ec97cc283e","sha512":"3a77cbe48e27af035abcd70f0ae679195bb1b210eb02bbd86d3db270349fcc6f9b5ad8da10ff97f786865b18657531197d8a4e0d2ff1f08a2f117b2c1422ae89","ssdeep":"","tlshash":"78219a38ae408488ce98d135cdc2e5a20116af839e2119c763cc3f82764389ddfb3e06","first_seen":"2023-04-26T08:39:49Z","last_seen":"2026-09-22T20:58:30.318215Z","times_seen":3226,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"feierverki.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - DHL","verdict":"phishing","severity":"medium","comment":"Associated with DHL phishing","tags":["dhl","logistics","phishing"],"meta":null}]}}]}