{"report_id":"9b8887d5-5af6-458b-aab9-b287d2e9e303","version":0,"status":"done","tags":[],"date":"2026-07-20T19:03:53Z","url":{"schema":"http","addr":"aaalen.de","fqdn":"aaalen.de","domain":"aaalen.de","tld":"de"},"ip":{"addr":"185.53.179.146","port":0,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"aaalen.de/","fqdn":"aaalen.de","domain":"aaalen.de","tld":"de"},"title":"aaalen.de","dom":{"size":821,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"e985446f998ccb70b515cee288e5f4c6","sha1":"95b4f58309d727ef22e4e5c4b475ec31dc57ce31","sha256":"fcb3a3cda541d38bef30c48cd2ee1196a2675ad03c2f1a8d03dfad6545fc7c8b","sha512":"489d2729fb3ca961f5d422a5b5f48791afbd249a80117b5279a9083fde09a4627114444c0f78f8e8356d33e3f80515f5e7d9d4c28095aef3cea689b13a8a2460","ssdeep":"","tlshash":"4e01bd459062980f34524bf6dccab86cc8969c0fc41d2cc0ba16519a8fdafaa897375d","dom_hash":"domhash6c21f228e1268722dc16d1665aa7dc24","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"aaalen.de","fqdn":"aaalen.de","domain":"aaalen.de","tld":"de"},"ip":{"addr":"185.53.179.146","port":0,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-24T19:03:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"aaalen.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"aaalen.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"aaalen.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"aaalen.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"euob.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.dynadot.com","ip":{"addr":"104.16.240.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2002-10-30","domain_rank":107519,"first_seen":"2012-05-31T09:11:59Z","last_seen":"2026-07-17T07:10:06.574166Z","alert_count":0,"request_count":1,"received_data":4039,"sent_data":564,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"obseu.northwavepoint.com","ip":{"addr":"3.248.162.96","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2026-01-28","domain_rank":0,"first_seen":"2026-04-16T09:06:21.210986Z","last_seen":"2026-07-16T16:44:12.075329Z","alert_count":8,"request_count":8,"received_data":7593,"sent_data":6772,"comment":"","tags":null,"fingerprints":null},{"fqdn":"aaalen.de","ip":{"addr":"185.53.179.146","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":12,"request_count":3,"received_data":13065,"sent_data":1668,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}]},{"fqdn":"yfdpco4.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-03-20","domain_rank":0,"first_seen":"2026-04-02T14:19:52.929311Z","last_seen":"2026-07-17T17:52:53.017468Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":739,"comment":"","tags":null,"fingerprints":null},{"fqdn":"euob.northwavepoint.com","ip":{"addr":"13.249.8.64","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-01-28","domain_rank":0,"first_seen":"2026-04-16T09:06:21.216693Z","last_seen":"2026-07-16T16:44:12.181642Z","alert_count":1,"request_count":1,"received_data":137483,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"euob.northwavepoint.com/sxp/i/636f8b858f681acb7bfa6f583a96630a.js","fqdn":"euob.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"13.249.8.64","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2ffb55616adb6f2fbd62bdf1ca1e143","sha1":"2243accac3a67f3800c06be18ab4377b60b92855","sha256":"ed1771161d3cab3bcd650907a478b0f8cab62a85f344dccf9eb2ca9612f6d8d0","sha512":"d0301447e611b33f4e58b2ea859f441d292217ed6f369d9922274c73fc327ecfe947f460c77d86125cfcaa4d37377c556a7b1666176831344c176ece157d8285","ssdeep":"1536:sD+RPQb5SEwvAu5DWeBPU4HLonMbVGhe3qM87961QCixUcnYtB/l7PsXWIo6MWmD:sCRP/AuZWyjqu1QCtveXolS0tsnWBypO","tlshash":"ffd3d7ddf2e27025039320a5017f411ae27b1e553c4b8290d5bae9d4ac7ce8e957bfac","size":136959,"data":"","first_seen":"2026-07-12T15:20:00.665395Z","last_seen":"2026-07-21T15:36:27.188797Z","times_seen":1744,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaalen.de/","fqdn":"aaalen.de","domain":"aaalen.de","tld":"de"},"ip":{"addr":"185.53.179.146","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"eval","is_inline":false,"md5":"6559111e4eae643ce013ce0821e91a02","sha1":"fa1086c9aa2cb2d14f5c13bceefe21511bcdae5a","sha256":"d72255f7e5ea4dfdf9821df800356367d0bc7df07ecd103bb660018cb1e4f400","sha512":"a6e3e096076dc152b69e95709dad8925c9c2799c23ad226b9ce7b6ee78936bea7300b66c92821ea0728ce7433d4f53787f27f5e7101f97e4d882be0a461fc051","ssdeep":"","tlshash":"407000000380020020c80233a200882af228003c00030200c008888800a808002080c2","size":25,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-07-21T16:22:33.585573Z","times_seen":394514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaalen.de/a9622c26-045f-49f1-9342-2e6073a1062e","fqdn":"aaalen.de","domain":"aaalen.de","tld":"de"},"ip":{"addr":"185.53.179.146","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"","is_inline":false,"md5":"d4114717a84f3134981467ea38f0d22e","sha1":"b6b23aed4dfcc8a2f7cfdce002551dd75254e97e","sha256":"a6fd230cc0a1817b22d9d5bcdffbcd4909e5f583f04db99bd639c18c7b8aae4f","sha512":"5542e3cab1cf05a936c85bae9a5ac4f2cf50400077f3e001db1f3032809caeb06711c18b48f905df013031b67cdcb516fc5d8d35f971ee6f8ddbbe2f75c19e1f","ssdeep":"","tlshash":"42014d0ce53c1b54835b191336cff608e03b1648798ba0a841aac4884eb9ed710127fa","size":779,"data":"","first_seen":"2026-07-20T19:03:57.414088Z","last_seen":"2026-07-20T19:03:57.414088Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaalen.de/","fqdn":"aaalen.de","domain":"aaalen.de","tld":"de"},"ip":{"addr":"185.53.179.146","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"eval","is_inline":false,"md5":"b326b5062b2f0e69046810717534cb09","sha1":"5ffe533b830f08a0326348a9160afafc8ada44db","sha256":"b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b","sha512":"9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de","ssdeep":"","tlshash":"5430000000000000000000000000300c00000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-07-21T16:22:33.592098Z","times_seen":424905,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaalen.de/","fqdn":"aaalen.de","domain":"aaalen.de","tld":"de"},"ip":{"addr":"185.53.179.146","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"eval","is_inline":false,"md5":"889ca9e2c79a3ce7aaadbcdfd0ce4ef5","sha1":"b05c2c051bae71f80cb8c289e5a42d4f96d323fa","sha256":"6477acf082d26199b6ce8346b93149b1b999233d9fe76b0340ebf43317cf98f8","sha512":"122a494d50a5e8077cdda40e8d6edb442bb9d89fff078852aad7f84fe24f1c58fe693f0388ca6c9453d1b33036da0b9c4e9fb394a18268e254d306ffc2ca57a3","ssdeep":"","tlshash":"46a002d4b4ed8125564583390104d91cf936c934c0d5701873f0466ca6e700a53610b2","size":62,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-07-21T16:22:33.589561Z","times_seen":394554,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaalen.de/","fqdn":"aaalen.de","domain":"aaalen.de","tld":"de"},"ip":{"addr":"185.53.179.146","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"eval","is_inline":false,"md5":"e5d8c139688b25ef77b263d88ea99150","sha1":"7abc9c61c4966543f66d150c0155bfac575f86a7","sha256":"53e5f34ac520035c7f124076d1e68c70a85c83cf68a339fa713b872b54126148","sha512":"1cd4eb192d987ea1b21f3b553eea3881c807f8bf4a5299982675d57314a0eaa084db1722c38d02eb73178660ecb1ca3667a795a512527f843f2526dc0a99dc20","ssdeep":"","tlshash":"7440000000003000033c0000000000c0000c00000000000000000c00030000000c0000","size":7,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-07-21T16:22:33.59493Z","times_seen":394562,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"Failure callback complete.","filename":"https://aaalen.de/","line_number":161,"column_number":21}]},"http":[{"url":{"schema":"https","addr":"www.dynadot.com/tr/mainsite2023/navbar-logo-dark-2023.png","fqdn":"www.dynadot.com","domain":"dynadot.com","tld":"com"},"ip":{"addr":"104.16.240.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaalen.de/","date":"2026-07-20T19:03:18.637Z","timestamp":1784574198637,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"dynadot.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 21:31:36 GMT","end":"Tue, 06 Oct 2026 22:31:11 GMT"},"fingerprint":{"sha1":"3F:F4:B3:6D:1F:65:F5:C2:C6:8C:89:57:05:7F:9D:32:8E:58:13:20","sha256":"9A:9B:CA:60:9A:4E:AE:FD:F0:0E:FD:42:73:72:3B:6B:18:A9:55:B7:1B:F6:F2:0F:86:3D:4F:22:71:18:66:1A"}}},"request":{"raw":"GET /tr/mainsite2023/navbar-logo-dark-2023.png HTTP/1.1\r\nHost: www.dynadot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaalen.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 20 Jul 2026 19:03:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3318\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=2592000\r\ncache-control: public, max-age=1209600\r\nexpires: Mon, 03 Aug 2026 19:03:18 GMT\r\netag: 1784453499916\r\naccess-control-allow-origin: www.dynadot.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\nage: 120644\r\ncf-polished: ok, orig_size=4843\r\ncf-bgj: imgq:85,h2pri\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 413;u=5;i=?0)\r\nvary: accept, accept-encoding\r\naccept-ranges: bytes\r\ncf-ray: a1e439a59a2e56b9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3318,"size_decoded":4039,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bce105441f8f9f5d125820899c94b29c","sha1":"491e1a9d39a0b13d33c73c678a929a3e691edd2a","sha256":"dfbf68028deb4a5284734e9845fd0e91af4a27a7302d34910038a18e6940ce79","sha512":"27f5e61d8a23cc671f990e7a74258b630541af858b315a32cbafb86c35fa5502dbb02fbdd7f95e7c59fc1002cfb5690792698797cb1f95a50f3cda64f7386d33","ssdeep":"","tlshash":"81616cb1c920e7cd1f299b5ee219f2c35f168c5c6ab80f5618460a588cf80e4dd65388","first_seen":"2026-03-06T16:52:39.720048Z","last_seen":"2026-07-21T15:19:07.171765Z","times_seen":6010,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":19,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/mon","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"3.248.162.96","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aaalen.de/","date":"2026-07-20T19:03:20.169Z","timestamp":1784574200169,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sun, 28 Jun 2026 00:00:00 GMT","end":"Sat, 26 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"78:BE:CE:E1:1E:2D:BE:84:57:73:8B:EF:2E:9C:F8:3D:33:8D:A9:A2","sha256":"BB:04:C7:48:F5:C8:EF:CC:FA:58:10:30:C5:4F:C5:9F:2E:4B:55:18:41:80:55:9A:B6:24:8A:BE:F6:CA:70:B2"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 3803\r\nOrigin: https://aaalen.de\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaalen.de/\r\nCookie: cg_uuid=ecc1487db1e59730417ad0eb2decd341\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3803,"data":"e=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\u0026cri=pa9Nrvsjag\u0026sf=0\u0026dc=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\u0026cp=1\u0026gtm=-\u0026gac=-\u0026uvid=ecfef71b53d9482b1ecddabbdfed0dcd501b9a68\u0026tb=1%7C7%2C46\u0026gi=17%2C1635\u0026ich=1\u0026ws=1280x973\u0026wos=1280x1024\u0026ver=13\u0026fi=46\u0026ti=1002\u0026mo=0\u0026pn=2592\u0026spn=1590\u0026sck=V7mhxtM2F4Nut7bU%3AxHW%2FznLpTA2MTYrBnKDwN29Obqfmgeb8SNRcwFyt%2BwVzd%2BQQwmEF%2FsKkxP2lWhb%2BzmrWGqysYTMR5UenTPRJBr3IQ6mOFeyRXDfP5%2BFKW5vJZT4q3Ow3CLOxAo322J5rmmuWzd84mgwcL1K%2FDg9osBYl0B0aArx6McjWNluviIx7o4D2ZeAPngG6dEfKV3XwcFcbJ31YBa3QamnFmG2c7uop3OowXqmjaJyoAznRKIvjERTorsmbSNpTpssP%2F2qvpRaGK1Y4eBaWyMUDP617PwW8yTzJFZQUsHXP%2BuOdPEBwTU5PiQSu5IJLDNf5IjmByp8MCEQ9dDN7gIpifqHshJASoAa8%2BaMvu9BXpNaX%2BOvwmqtupXybiTfv7Do5HDL%2FEp6vcsHx9b4TCSadFQZ0LmvOZZEVz1u6a%2FghtXmydeZOea6CpUbvzrGYP2RRyg1xVHBDbuQLMkKeQeBCfn62W1QJfJe0CUd0CeZ10Qj5jLZeeYRnkXPn0zv6oB03N%2BSpJv8vyygNWNtQ0eg9%2BzAzdw3ZvQVRtpmmLqr16CjVE0SL0WXMwsahXOZbMD0NotHwclIw4UPpEPKSavuAi297o%2BHVOSvDxufbguFByCRQrJB6MAa9nrkLWPwLA%2FNm4rdknofGHVdRUZT60cHOKnoeuqR%2Fj7vDqVj9qHuYIw68ApAZcBbfRqgx7mllkO5l5BXiUblYaThm9c8mX4cfTPo%3D%3A%2FE8wq5C8ytXnZCrq%2BCYK2A%3D%3D\u0026fp=1002\u0026f_mt=\u0026s_mt=\u0026t_mt=\u0026l_mt=\u0026m_mt=0"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://aaalen.de\r\ncontent-type: application/json\r\ndate: Mon, 20 Jul 2026 19:03:20 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":4673,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/mon","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"3.248.162.96","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aaalen.de/","date":"2026-07-20T19:03:22.172Z","timestamp":1784574202172,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sun, 28 Jun 2026 00:00:00 GMT","end":"Sat, 26 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"78:BE:CE:E1:1E:2D:BE:84:57:73:8B:EF:2E:9C:F8:3D:33:8D:A9:A2","sha256":"BB:04:C7:48:F5:C8:EF:CC:FA:58:10:30:C5:4F:C5:9F:2E:4B:55:18:41:80:55:9A:B6:24:8A:BE:F6:CA:70:B2"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 3017\r\nOrigin: https://aaalen.de\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaalen.de/\r\nCookie: cg_uuid=ecc1487db1e59730417ad0eb2decd341\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3017,"data":"e=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\u0026cri=pa9Nrvsjag\u0026sf=0\u0026dc=\u0026cp=3\u0026gtm=-\u0026gac=-\u0026uvid=ecfef71b53d9482b1ecddabbdfed0dcd501b9a68\u0026tb=1%7C7%2C46\u0026gi=17%2C1635\u0026ich=0\u0026ws=1280x973\u0026wos=1280x1024\u0026ver=13\u0026fi=46\u0026ti=3006\u0026mo=0\u0026pn=4596\u0026spn=1590\u0026sck=V7mhxtM2F4Nut7bU%3AxHW%2FznLpTA2MTYrBnKDwN29Obqfmgeb8SNRcwFyt%2BwVzd%2BQQwmEF%2FsKkxP2lWhb%2BzmrWGqysYTMR5UenTPRJBr3IQ6mOFeyRXDfP5%2BFKW5vJZT4q3Ow3CLOxAo322J5rmmuWzd84mgwcL1K%2FDg9osBYl0B0aArx6McjWNluviIx7o4D2ZeAPngG6dEfKV3XwcFcbJ31YBa3QamnFmG2c7uop3OowXqmjaJyoAznRKIvjERTorsmbSNpTpssP%2F2qvpRaGK1Y4eBaWyMUDP617PwW8yTzJFZQUsHXP%2BuOdPEBwTU5PiQSu5IJLDNf5IjmByp8MCEQ9dDN7gIpifqHshJASoAa8%2BaMvu9BXpNaX%2BOvwmqtupXybiTfv7Do5HDL%2FEp6vcsHx9b4TCSadFQZ0LmvOZZEVz1u6a%2FghtXmydeZOea6CpUbvzrGYP2RRyg1xVHBDbuQLMkKeQeBCfn62W1QJfJe0CUd0CeZ10Qj5jLZeeYRnkXPn0zv6oB03N%2BSpJv8vyygNWNtQ0eg9%2BzAzdw3ZvQVRtpmmLqr16CjVE0SL0WXMwsahXOZbMD0NotHwclIw4UPpEPKSavuAi297o%2BHVOSvDxufbguFByCRQrJB6MAa9nrkLWPwLA%2FNm4rdknofGHVdRUZT60cHOKnoeuqR%2Fj7vDqVj9qHuYIw68ApAZcBbfRqgx7mllkO5l5BXiUblYaThm9c8mX4cfTPo%3D%3A%2FE8wq5C8ytXnZCrq%2BCYK2A%3D%3D\u0026fp=1002\u0026f_mt=\u0026s_mt=\u0026t_mt=\u0026l_mt=\u0026m_mt=0\u0026snt=1"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://aaalen.de\r\ncontent-type: application/json\r\ndate: Mon, 20 Jul 2026 19:03:22 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":3887,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/mon","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"3.248.162.96","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aaalen.de/","date":"2026-07-20T19:03:24.184Z","timestamp":1784574204184,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sun, 28 Jun 2026 00:00:00 GMT","end":"Sat, 26 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"78:BE:CE:E1:1E:2D:BE:84:57:73:8B:EF:2E:9C:F8:3D:33:8D:A9:A2","sha256":"BB:04:C7:48:F5:C8:EF:CC:FA:58:10:30:C5:4F:C5:9F:2E:4B:55:18:41:80:55:9A:B6:24:8A:BE:F6:CA:70:B2"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 3017\r\nOrigin: https://aaalen.de\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaalen.de/\r\nCookie: cg_uuid=ecc1487db1e59730417ad0eb2decd341\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3017,"data":"e=37dfbd8ee84e001262eac232ee4683949225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d57138d642f17070100b1eabfd72e30d69183042b3e18f6646541c2628b70cd166556709256085861565e93bb624866a230e362881df0c669f2063aff592e7e10c84ffe1fbe85ddcd3cb82d19f97adea954659005344163588b934131b723f8b388a75f45af34d0fd60b47d8b74c14e851538c9745bad4b01473cb52d3ea7dfa2f46cff1ab458da17f85e3975bddc273b7d70588661979d00e07360abc8ee3d4f7a23d6862f208a902a476811275843b88f2f646307b6e65b3bd9eae72482e70d214c2eaca1a4c09d7fbfdd8b08e355955d3a65cfba9ce6a23497dcb369c22112c3a79c3e1215f0606ca08c0621ac84e97e9d5ebb02f2c712dd509a9e2e986d6b88cd72c7778cc0bca69de5e20538b47ae7f8a577433ebfd2608ca611a14f547fa84f469782c39091b2c527cb6a88c8fbc868e9787c24947f3bd4ccd10e6990e979eb59a7b04b8751a87349091b8e3d9b1ddfc8a93ff6c734c408ec8adfcd6c83550435bd52541d3e4c7de6a268b349c2e78164fdde2abdde6cde82c8f07688bcf174603ed0a9110495f7195442acd5b367a7269bea5cefe032b37ca0339d4fd514d7ab3cdb1b27e4ad907a3e3f60002c175d17aae28470d302b741495f2ae4a946df991810e3b1dfbbbd70dfe4e4fd84e4b2f84b4e3fe75a8fb6586a9f5e6c1bd666416c65f67aa96a04cbebc064967dde2589ab30d0b90f916712222805600e9fc6e0c7217c549b045892d2dda7adcc530482adbb7d92a26f698c974b687bf383d84820b02f815a981ee236930cbe9a72fbb34193d9ca88c72e66b79c60719e64e5c8e9ff04967e35080493604755b6a75e86e40abefdc1a21d87f9dc48556d31d769f247b849a0c52ccf66512b533b637ee6528a843451b866c8b9f167d88c11c51619c56a1e5afee9954248f263b7ce46c80d5a6d56ae7968dbbddd68d7456acbc142dd808eaec41b8503377742ab287b409692104eee69a5eccb2e8ed0f01c1d21f3782a0918dd570db3dbfc121291616dc1d7da03dbdebad34b7df963ea156057d05c7c3c8685465381d5e2d5fea04ca269e47cdf25dd9d5b92b8ea2136f39411818cb4b7c4f0d6c92850cea27c138935cc4fc102fdf673fbddc7c779a09ac7aab81f2c86ebadec1c8226ca0d5121472ad89a2b51853bbe0292c940f4557db43216dc2ca1c92a26f23b621b57c0a89e70c5821e7765577392cf9ee3cf71ca44f9f1677dc7900a1a53102b6d78b261e6882409ade29287b1f8f5e5aec53aeae7c703383e143920386c5c961c1355e7b9ecf37fe9c86d468b9f45ad9551ca\u0026cri=pa9Nrvsjag\u0026sf=0\u0026dc=\u0026cp=5\u0026gtm=-\u0026gac=-\u0026uvid=ecfef71b53d9482b1ecddabbdfed0dcd501b9a68\u0026tb=1%7C7%2C46\u0026gi=17%2C1635\u0026ich=0\u0026ws=1280x973\u0026wos=1280x1024\u0026ver=13\u0026fi=46\u0026ti=5013\u0026mo=0\u0026pn=6602\u0026spn=1590\u0026sck=V7mhxtM2F4Nut7bU%3AxHW%2FznLpTA2MTYrBnKDwN29Obqfmgeb8SNRcwFyt%2BwVzd%2BQQwmEF%2FsKkxP2lWhb%2BzmrWGqysYTMR5UenTPRJBr3IQ6mOFeyRXDfP5%2BFKW5vJZT4q3Ow3CLOxAo322J5rmmuWzd84mgwcL1K%2FDg9osBYl0B0aArx6McjWNluviIx7o4D2ZeAPngG6dEfKV3XwcFcbJ31YBa3QamnFmG2c7uop3OowXqmjaJyoAznRKIvjERTorsmbSNpTpssP%2F2qvpRaGK1Y4eBaWyMUDP617PwW8yTzJFZQUsHXP%2BuOdPEBwTU5PiQSu5IJLDNf5IjmByp8MCEQ9dDN7gIpifqHshJASoAa8%2BaMvu9BXpNaX%2BOvwmqtupXybiTfv7Do5HDL%2FEp6vcsHx9b4TCSadFQZ0LmvOZZEVz1u6a%2FghtXmydeZOea6CpUbvzrGYP2RRyg1xVHBDbuQLMkKeQeBCfn62W1QJfJe0CUd0CeZ10Qj5jLZeeYRnkXPn0zv6oB03N%2BSpJv8vyygNWNtQ0eg9%2BzAzdw3ZvQVRtpmmLqr16CjVE0SL0WXMwsahXOZbMD0NotHwclIw4UPpEPKSavuAi297o%2BHVOSvDxufbguFByCRQrJB6MAa9nrkLWPwLA%2FNm4rdknofGHVdRUZT60cHOKnoeuqR%2Fj7vDqVj9qHuYIw68ApAZcBbfRqgx7mllkO5l5BXiUblYaThm9c8mX4cfTPo%3D%3A%2FE8wq5C8ytXnZCrq%2BCYK2A%3D%3D\u0026fp=1002\u0026f_mt=\u0026s_mt=\u0026t_mt=\u0026l_mt=\u0026m_mt=0\u0026snt=1"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://aaalen.de\r\ncontent-type: application/json\r\ndate: Mon, 20 Jul 2026 19:03:24 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":3887,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/mon","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"3.248.162.96","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aaalen.de/","date":"2026-07-20T19:03:49.281Z","timestamp":1784574229281,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sun, 28 Jun 2026 00:00:00 GMT","end":"Sat, 26 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"78:BE:CE:E1:1E:2D:BE:84:57:73:8B:EF:2E:9C:F8:3D:33:8D:A9:A2","sha256":"BB:04:C7:48:F5:C8:EF:CC:FA:58:10:30:C5:4F:C5:9F:2E:4B:55:18:41:80:55:9A:B6:24:8A:BE:F6:CA:70:B2"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 3020\r\nOrigin: https://aaalen.de\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaalen.de/\r\nCookie: cg_uuid=ecc1487db1e59730417ad0eb2decd341\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3020,"data":"e=37dfbd8ee84e001262eac232ee4683949225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d57138d642f17070100b1eabfd72e30d69183042b3e18f6646541c2628b70cd166556709256085861565e93bb624866a230e362881df0c669f2063aff592e7e10c84ffe1fbe85ddcd3cb82d19f97adea954659005344163588b934131b723f8b388a75f45af34d0fd60b47d8b74c14e851538c9745bad4b01473cb52d3ea7dfa2f46cff1ab458da17f85e3975bddc273b7d70588661979d00e07360abc8ee3d4f7a23d6862f208a902a476811275843b88f2f646307b6e65b3bd9eae72482e70d214c2eaca1a4c09d7fbfdd8b08e355955d3a65cfba9ce6a23497dcb369c22112c3a79c3e1215f0606ca08c0621ac84e97e9d5ebb02f2c712dd509a9e2e986d6b88cd72c7778cc0bca69de5e20538b47ae7f8a577433ebfd2608ca611a14f547fa84f469782c39091b2c527cb6a88c8fbc868e9787c24947f3bd4ccd10e6990e979eb59a7b04b8751a87349091b8e3d9b1ddfc8a93ff6c734c408ec8adfcd6c83550435bd52541d3e4c7de6a268b349c2e78164fdde2abdde6cde82c8f07688bcf174603ed0a9110495f7195442acd5b367a7269bea5cefe032b37ca0339d4fd514d7ab3cdb1b27e4ad907a3e3f60002c175d17aae28470d302b741495f2ae4a946df991810e3b1dfbbbd70dfe4e4fd84e4b2f84b4e3fe75a8fb6586a9f5e6c1bd666416c65f67aa96a04cbebc064967dde2589ab30d0b90f916712222805600e9fc6e0c7217c549b045892d2dda7adcc530482adbb7d92a26f698c974b687bf383d84820b02f815a981ee236930cbe9a72fbb34193d9ca88c72e66b79c60719e64e5c8e9ff04967e35080493604755b6a75e86e40abefdc1a21d87f9dc48556d31d769f247b849a0c52ccf66512b533b637ee6528a843451b866c8b9f167d88c11c51619c56a1e5afee9954248f263b7ce46c80d5a6d56ae7968dbbddd68d7456acbc142dd808eaec41b8503377742ab287b409692104eee69a5eccb2e8ed0f01c1d21f3782a0918dd570db3dbfc121291616dc1d7da03dbdebad34b7df963ea156057d05c7c3c8685465381d5e2d5fea04ca269e47cdf25dd9d5b92b8ea2136f39411818cb4b7c4f0d6c92850cea27c138935cc4fc102fdf673fbddc7c779a09ac7aab81f2c86ebadec1c8226ca0d5121472ad89a2b51853bbe0292c940f4557db43216dc2ca1c92a26f23b621b57c0a89e70c5821e7765577392cf9ee3cf71ca44f9f1677dc7900a1a53102b6d78b261e6882409ade29287b1f8f5e5aec53aeae7c703383e143920386c5c961c1355e7b9ecf37fe9c86d468b9f45ad9551ca\u0026cri=pa9Nrvsjag\u0026sf=0\u0026dc=\u0026cp=30\u0026gtm=-\u0026gac=-\u0026uvid=ecfef71b53d9482b1ecddabbdfed0dcd501b9a68\u0026tb=1%7C7%2C46\u0026gi=17%2C1635\u0026ich=0\u0026ws=1280x973\u0026wos=1280x1024\u0026ver=13\u0026fi=46\u0026ti=30112\u0026mo=0\u0026pn=31701\u0026spn=1590\u0026sck=V7mhxtM2F4Nut7bU%3AxHW%2FznLpTA2MTYrBnKDwN29Obqfmgeb8SNRcwFyt%2BwVzd%2BQQwmEF%2FsKkxP2lWhb%2BzmrWGqysYTMR5UenTPRJBr3IQ6mOFeyRXDfP5%2BFKW5vJZT4q3Ow3CLOxAo322J5rmmuWzd84mgwcL1K%2FDg9osBYl0B0aArx6McjWNluviIx7o4D2ZeAPngG6dEfKV3XwcFcbJ31YBa3QamnFmG2c7uop3OowXqmjaJyoAznRKIvjERTorsmbSNpTpssP%2F2qvpRaGK1Y4eBaWyMUDP617PwW8yTzJFZQUsHXP%2BuOdPEBwTU5PiQSu5IJLDNf5IjmByp8MCEQ9dDN7gIpifqHshJASoAa8%2BaMvu9BXpNaX%2BOvwmqtupXybiTfv7Do5HDL%2FEp6vcsHx9b4TCSadFQZ0LmvOZZEVz1u6a%2FghtXmydeZOea6CpUbvzrGYP2RRyg1xVHBDbuQLMkKeQeBCfn62W1QJfJe0CUd0CeZ10Qj5jLZeeYRnkXPn0zv6oB03N%2BSpJv8vyygNWNtQ0eg9%2BzAzdw3ZvQVRtpmmLqr16CjVE0SL0WXMwsahXOZbMD0NotHwclIw4UPpEPKSavuAi297o%2BHVOSvDxufbguFByCRQrJB6MAa9nrkLWPwLA%2FNm4rdknofGHVdRUZT60cHOKnoeuqR%2Fj7vDqVj9qHuYIw68ApAZcBbfRqgx7mllkO5l5BXiUblYaThm9c8mX4cfTPo%3D%3A%2FE8wq5C8ytXnZCrq%2BCYK2A%3D%3D\u0026fp=1002\u0026f_mt=\u0026s_mt=\u0026t_mt=\u0026l_mt=\u0026m_mt=0\u0026snt=1"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://aaalen.de\r\ncontent-type: application/json\r\ndate: Mon, 20 Jul 2026 19:03:49 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":3890,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aaalen.de/","fqdn":"aaalen.de","domain":"aaalen.de","tld":"de"},"ip":{"addr":"185.53.179.146","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-20T19:03:17.596Z","timestamp":1784574197596,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaalen.de","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Jun 2026 07:18:53 GMT","end":"Sun, 27 Sep 2026 07:18:52 GMT"},"fingerprint":{"sha1":"89:0B:00:51:E2:1A:A4:F9:C6:E2:8B:C9:E9:B6:C9:4C:18:6C:04:80","sha256":"46:EF:53:5D:49:E7:87:7F:5E:A2:D7:B3:FF:EE:B0:DF:28:B8:E0:56:E9:98:AD:4F:95:FB:FD:C2:15:F5:36:CD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: aaalen.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile\r\naccept-ch-lifetime: 30\r\nalt-svc: h3=\":8443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 20 Jul 2026 19:03:18 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy, 0.0 Caddy\r\nx-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_B38NdgYa2cmQFZBX0cQqFPi+YViS68AzR/62/iTuxXoCfYkHrfPc7tXizRP/Pt8hC8i5Ze7XBeLvEou7aA9L8w==\r\nx-domain: aaalen.de\r\nx-language: norwegian\r\nx-pcrew-blocked-reason: \r\nx-pcrew-ip-organization: Blix Solutions\r\nx-redirect: skenzo\r\nx-subdomain: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":11672,"size_decoded":4774,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (328)","md5":"cc847d4133dd09aa55c79b350f2bf170","sha1":"2140210fdab30bfb193ee749ae3bba47988a0fac","sha256":"ebae2f4fb8d877a3c115eca65d460e0639c5be216f0de0394040eda3a098d4fc","sha512":"116f915c04269368193c99098c276f684028d77c966bbbb7f331b228dbdef712bb214c3107c2a9509ffadefbcd19140ecca07668b30c70cc886a90fcf4780af4","ssdeep":"192:iYoHSiF0zA5GYJcNaeKDQOJdt+oyveGq4W6lFoFgMo5oYc8YoHsfOBro2Tc/e:iYoHSiFDnohHq4bFoFgMk9YoHsfO2/e","tlshash":"a832d8577ae31519740b90988baba38532559007970acca8feec71bccf4c5d465b3f9c","first_seen":"2026-07-20T19:03:57.405631Z","last_seen":"2026-07-20T19:03:57.405631Z","times_seen":1,"resource_available":true,"data":null}},"time_used":647,"timings":{"blocked":-1,"dns":5,"connect":102,"send":0,"wait":120,"receive":0,"ssl":419},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"aaalen.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"aaalen.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"aaalen.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"aaalen.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aaalen.de/ae39e9fa-9cd2-4524-95f1-34179b61637e/eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0._WLCtw3M6VLfle7qVoJktw983_NnheNwWWZZ7SzNy4e0uaq54NUdrA.29-jZGF1bWFaZI71vehmMA.Hug0Q7tW0bDUFTX6twpk8dxwxdmJ22Bmm-wG2Lq4pweNHZICw09uXm-ZWiStFGKbyuWtFD4bJ5PZxtRiTOze6fmWNfi97LbN97u6eRAp4g0.5lUX5nUzpGQrTE1sL4aaOg","fqdn":"aaalen.de","domain":"aaalen.de","tld":"de"},"ip":{"addr":"185.53.179.146","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aaalen.de/","date":"2026-07-20T19:03:18.631Z","timestamp":1784574198631,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaalen.de","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Jun 2026 07:18:53 GMT","end":"Sun, 27 Sep 2026 07:18:52 GMT"},"fingerprint":{"sha1":"89:0B:00:51:E2:1A:A4:F9:C6:E2:8B:C9:E9:B6:C9:4C:18:6C:04:80","sha256":"46:EF:53:5D:49:E7:87:7F:5E:A2:D7:B3:FF:EE:B0:DF:28:B8:E0:56:E9:98:AD:4F:95:FB:FD:C2:15:F5:36:CD"}}},"request":{"raw":"GET /ae39e9fa-9cd2-4524-95f1-34179b61637e/eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0._WLCtw3M6VLfle7qVoJktw983_NnheNwWWZZ7SzNy4e0uaq54NUdrA.29-jZGF1bWFaZI71vehmMA.Hug0Q7tW0bDUFTX6twpk8dxwxdmJ22Bmm-wG2Lq4pweNHZICw09uXm-ZWiStFGKbyuWtFD4bJ5PZxtRiTOze6fmWNfi97LbN97u6eRAp4g0.5lUX5nUzpGQrTE1sL4aaOg HTTP/1.1\r\nHost: aaalen.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaalen.de/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 201 \r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nalt-svc: h3=\":8443\"; ma=2592000\r\ndate: Mon, 20 Jul 2026 19:03:18 GMT\r\nserver: Caddy\r\nvia: 1.1 Caddy\r\nx-log-success: 6a5e70f6629159ecdaf28901\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":309,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"aaalen.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"aaalen.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"aaalen.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"aaalen.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aaalen.de/favicon.ico","fqdn":"aaalen.de","domain":"aaalen.de","tld":"de"},"ip":{"addr":"185.53.179.146","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaalen.de/","date":"2026-07-20T19:03:18.743Z","timestamp":1784574198743,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaalen.de","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Jun 2026 07:18:53 GMT","end":"Sun, 27 Sep 2026 07:18:52 GMT"},"fingerprint":{"sha1":"89:0B:00:51:E2:1A:A4:F9:C6:E2:8B:C9:E9:B6:C9:4C:18:6C:04:80","sha256":"46:EF:53:5D:49:E7:87:7F:5E:A2:D7:B3:FF:EE:B0:DF:28:B8:E0:56:E9:98:AD:4F:95:FB:FD:C2:15:F5:36:CD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: aaalen.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaalen.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":8443\"; ma=2592000\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Mon, 20 Jul 2026 19:03:18 GMT\r\netag: \"dfu820j7awxu0\"\r\nlast-modified: Wed, 21 Jan 2026 11:14:12 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":309,"mime_type":"image/vnd.microsoft.icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"aaalen.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"aaalen.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"aaalen.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"aaalen.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yfdpco4.com/sk-park.php?pid=9PO15V947\u0026dn=aaalen.de\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026requrl=http%3A%2F%2Faaalen.de%2F\u0026al=en-US%2Cen%3Bq%3D0.9","fqdn":"yfdpco4.com","domain":"yfdpco4.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://aaalen.de/","date":"2026-07-20T19:03:18.767Z","timestamp":1784574198767,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /sk-park.php?pid=9PO15V947\u0026dn=aaalen.de\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026requrl=http%3A%2F%2Faaalen.de%2F\u0026al=en-US%2Cen%3Bq%3D0.9 HTTP/1.1\r\nHost: yfdpco4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaalen.de/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/ct","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"3.248.162.96","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aaalen.de/","date":"2026-07-20T19:03:18.976Z","timestamp":1784574198976,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sun, 28 Jun 2026 00:00:00 GMT","end":"Sat, 26 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"78:BE:CE:E1:1E:2D:BE:84:57:73:8B:EF:2E:9C:F8:3D:33:8D:A9:A2","sha256":"BB:04:C7:48:F5:C8:EF:CC:FA:58:10:30:C5:4F:C5:9F:2E:4B:55:18:41:80:55:9A:B6:24:8A:BE:F6:CA:70:B2"}}},"request":{"raw":"POST /ct HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 4515\r\nOrigin: https://aaalen.de\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaalen.de/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4515,"data":"id=92098\u0026url=https%3A%2F%2Faaalen.de%2F\u0026sf=0\u0026tpi=\u0026ch=AdsDeli%20-%20iFrame\u0026uvid=ecfef71b53d9482b1ecddabbdfed0dcd501b9a68\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1784574198958\u0026hl=2\u0026op=0\u0026ag=2881387774\u0026rand=141961695911700800082898192665727005298790075106952857702098878226619120221586388691809928918\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=linux%20x86_64\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=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\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=pa9Nrvsjag\u0026pto=1384\u0026ver=66\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1784574198.UbQ39CArrjoY4hLk\u0026suid=1.1784574198.DTjZyzNkKkjFYdir\u0026tuid=1.1784574198.4b1slyRZZKRFQ1tx\u0026sid=1.1784574198959.IHVVeWJgccP6gIME\u0026fbc=-\u0026gtm=-\u0026it=6%2C961%2C156\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=\u0026sck=-\u0026io=aGA2Oi15fzZz"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://aaalen.de\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Mon, 20 Jul 2026 19:03:19 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\nset-cookie: cg_uuid=ecc1487db1e59730417ad0eb2decd341; Max-Age=29030400; Path=/; Expires=Mon, 21 Jun 2027 19:03:19 GMT; HttpOnly; Secure; SameSite=None\r\ntiming-allow-origin: https://aaalen.de\r\ncontent-length: 2162\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":5083,"size_decoded":2764,"mime_type":"application/json","magic":"JSON text data","md5":"c693781e529e47d16dd4951af7b04034","sha1":"04cc72dc900717b34883f0e8fcf836ad8df6383f","sha256":"b929a4c1d76dca0fc307c28634c0682cd2a46988d117607eb75fca3a61847a03","sha512":"077dfebd6ef640680355e43f0216e1d5be8ad3ca2c67a1effa03f56fbe97095a5c9f4b072e191ce4049ea94dfa46a33a06783a8cfcf939756717aa77254fbbd7","ssdeep":"96:1/iSNdMdIvRBiFnlqw+VJF5DZ/iZNdMdIvRBiFnlqw+VJF5DdipirYgCZdAeF:1/dNdl7Ssw+VxN/+Ndl7Ssw+VxHMnAY","tlshash":"96a12a34530f8ab522fd7529cb0def6922e5937756c63c4f90a7b3d901d76440d46822","first_seen":"2026-07-20T19:03:57.408461Z","last_seen":"2026-07-20T19:03:57.408461Z","times_seen":1,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":0,"dns":3,"connect":33,"send":0,"wait":64,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/tracker/tc_imp.gif?e=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\u0026cri=pa9Nrvsjag\u0026ts=210\u0026cb=1784574199168","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"3.248.162.96","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aaalen.de/","date":"2026-07-20T19:03:19.172Z","timestamp":1784574199172,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sun, 28 Jun 2026 00:00:00 GMT","end":"Sat, 26 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"78:BE:CE:E1:1E:2D:BE:84:57:73:8B:EF:2E:9C:F8:3D:33:8D:A9:A2","sha256":"BB:04:C7:48:F5:C8:EF:CC:FA:58:10:30:C5:4F:C5:9F:2E:4B:55:18:41:80:55:9A:B6:24:8A:BE:F6:CA:70:B2"}}},"request":{"raw":"GET /tracker/tc_imp.gif?e=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\u0026cri=pa9Nrvsjag\u0026ts=210\u0026cb=1784574199168 HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaalen.de/\r\nCookie: cg_uuid=ecc1487db1e59730417ad0eb2decd341\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ndate: Mon, 20 Jul 2026 19:03:19 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-length: 43\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43,"size_decoded":270,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"db04c7b378cb2db912c3ba8a5a774ee3","sha1":"dee34bd86c3484d31002182aa2b7caa4699126b8","sha256":"98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a","sha512":"826225fc21717d8861a05b9d2f959539aad2d2b131b2afed75d88fbca535e1b0d5a0da8ac69713a0876a0d467848a37a0a7f926aeafad8cf28201382d16466ab","ssdeep":"","tlshash":"6490000bca888002caa2c0302b8883022b88b0320228832e80bc30a8ee3b3a20c02000","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-21T16:22:33.582447Z","times_seen":410537,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/mon","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"3.248.162.96","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aaalen.de/","date":"2026-07-20T19:03:29.229Z","timestamp":1784574209229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sun, 28 Jun 2026 00:00:00 GMT","end":"Sat, 26 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"78:BE:CE:E1:1E:2D:BE:84:57:73:8B:EF:2E:9C:F8:3D:33:8D:A9:A2","sha256":"BB:04:C7:48:F5:C8:EF:CC:FA:58:10:30:C5:4F:C5:9F:2E:4B:55:18:41:80:55:9A:B6:24:8A:BE:F6:CA:70:B2"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 3020\r\nOrigin: https://aaalen.de\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaalen.de/\r\nCookie: cg_uuid=ecc1487db1e59730417ad0eb2decd341\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3020,"data":"e=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\u0026cri=pa9Nrvsjag\u0026sf=0\u0026dc=\u0026cp=10\u0026gtm=-\u0026gac=-\u0026uvid=ecfef71b53d9482b1ecddabbdfed0dcd501b9a68\u0026tb=1%7C7%2C46\u0026gi=17%2C1635\u0026ich=0\u0026ws=1280x973\u0026wos=1280x1024\u0026ver=13\u0026fi=46\u0026ti=10063\u0026mo=0\u0026pn=11652\u0026spn=1590\u0026sck=V7mhxtM2F4Nut7bU%3AxHW%2FznLpTA2MTYrBnKDwN29Obqfmgeb8SNRcwFyt%2BwVzd%2BQQwmEF%2FsKkxP2lWhb%2BzmrWGqysYTMR5UenTPRJBr3IQ6mOFeyRXDfP5%2BFKW5vJZT4q3Ow3CLOxAo322J5rmmuWzd84mgwcL1K%2FDg9osBYl0B0aArx6McjWNluviIx7o4D2ZeAPngG6dEfKV3XwcFcbJ31YBa3QamnFmG2c7uop3OowXqmjaJyoAznRKIvjERTorsmbSNpTpssP%2F2qvpRaGK1Y4eBaWyMUDP617PwW8yTzJFZQUsHXP%2BuOdPEBwTU5PiQSu5IJLDNf5IjmByp8MCEQ9dDN7gIpifqHshJASoAa8%2BaMvu9BXpNaX%2BOvwmqtupXybiTfv7Do5HDL%2FEp6vcsHx9b4TCSadFQZ0LmvOZZEVz1u6a%2FghtXmydeZOea6CpUbvzrGYP2RRyg1xVHBDbuQLMkKeQeBCfn62W1QJfJe0CUd0CeZ10Qj5jLZeeYRnkXPn0zv6oB03N%2BSpJv8vyygNWNtQ0eg9%2BzAzdw3ZvQVRtpmmLqr16CjVE0SL0WXMwsahXOZbMD0NotHwclIw4UPpEPKSavuAi297o%2BHVOSvDxufbguFByCRQrJB6MAa9nrkLWPwLA%2FNm4rdknofGHVdRUZT60cHOKnoeuqR%2Fj7vDqVj9qHuYIw68ApAZcBbfRqgx7mllkO5l5BXiUblYaThm9c8mX4cfTPo%3D%3A%2FE8wq5C8ytXnZCrq%2BCYK2A%3D%3D\u0026fp=1002\u0026f_mt=\u0026s_mt=\u0026t_mt=\u0026l_mt=\u0026m_mt=0\u0026snt=1"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://aaalen.de\r\ncontent-type: application/json\r\ndate: Mon, 20 Jul 2026 19:03:29 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":3890,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/mon","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"3.248.162.96","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aaalen.de/","date":"2026-07-20T19:03:34.235Z","timestamp":1784574214235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sun, 28 Jun 2026 00:00:00 GMT","end":"Sat, 26 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"78:BE:CE:E1:1E:2D:BE:84:57:73:8B:EF:2E:9C:F8:3D:33:8D:A9:A2","sha256":"BB:04:C7:48:F5:C8:EF:CC:FA:58:10:30:C5:4F:C5:9F:2E:4B:55:18:41:80:55:9A:B6:24:8A:BE:F6:CA:70:B2"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 3020\r\nOrigin: https://aaalen.de\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaalen.de/\r\nCookie: cg_uuid=ecc1487db1e59730417ad0eb2decd341\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3020,"data":"e=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\u0026cri=pa9Nrvsjag\u0026sf=0\u0026dc=\u0026cp=15\u0026gtm=-\u0026gac=-\u0026uvid=ecfef71b53d9482b1ecddabbdfed0dcd501b9a68\u0026tb=1%7C7%2C46\u0026gi=17%2C1635\u0026ich=0\u0026ws=1280x973\u0026wos=1280x1024\u0026ver=13\u0026fi=46\u0026ti=15068\u0026mo=0\u0026pn=16658\u0026spn=1590\u0026sck=V7mhxtM2F4Nut7bU%3AxHW%2FznLpTA2MTYrBnKDwN29Obqfmgeb8SNRcwFyt%2BwVzd%2BQQwmEF%2FsKkxP2lWhb%2BzmrWGqysYTMR5UenTPRJBr3IQ6mOFeyRXDfP5%2BFKW5vJZT4q3Ow3CLOxAo322J5rmmuWzd84mgwcL1K%2FDg9osBYl0B0aArx6McjWNluviIx7o4D2ZeAPngG6dEfKV3XwcFcbJ31YBa3QamnFmG2c7uop3OowXqmjaJyoAznRKIvjERTorsmbSNpTpssP%2F2qvpRaGK1Y4eBaWyMUDP617PwW8yTzJFZQUsHXP%2BuOdPEBwTU5PiQSu5IJLDNf5IjmByp8MCEQ9dDN7gIpifqHshJASoAa8%2BaMvu9BXpNaX%2BOvwmqtupXybiTfv7Do5HDL%2FEp6vcsHx9b4TCSadFQZ0LmvOZZEVz1u6a%2FghtXmydeZOea6CpUbvzrGYP2RRyg1xVHBDbuQLMkKeQeBCfn62W1QJfJe0CUd0CeZ10Qj5jLZeeYRnkXPn0zv6oB03N%2BSpJv8vyygNWNtQ0eg9%2BzAzdw3ZvQVRtpmmLqr16CjVE0SL0WXMwsahXOZbMD0NotHwclIw4UPpEPKSavuAi297o%2BHVOSvDxufbguFByCRQrJB6MAa9nrkLWPwLA%2FNm4rdknofGHVdRUZT60cHOKnoeuqR%2Fj7vDqVj9qHuYIw68ApAZcBbfRqgx7mllkO5l5BXiUblYaThm9c8mX4cfTPo%3D%3A%2FE8wq5C8ytXnZCrq%2BCYK2A%3D%3D\u0026fp=1002\u0026f_mt=\u0026s_mt=\u0026t_mt=\u0026l_mt=\u0026m_mt=0\u0026snt=1"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://aaalen.de\r\ncontent-type: application/json\r\ndate: Mon, 20 Jul 2026 19:03:34 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":3890,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"euob.northwavepoint.com/sxp/i/636f8b858f681acb7bfa6f583a96630a.js","fqdn":"euob.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"13.249.8.64","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aaalen.de/","date":"2026-07-20T19:03:18.629Z","timestamp":1784574198629,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 29 Jan 2026 00:00:00 GMT","end":"Sat, 27 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"CC:B5:FD:45:6E:B8:DC:24:11:6A:30:38:E9:1D:FB:81:45:2E:FA:8D","sha256":"32:3C:54:8F:1C:33:6B:BE:0F:39:18:D6:DB:E7:61:78:95:9A:27:61:E7:33:FF:DA:F0:5E:F5:B4:82:D5:5E:A7"}}},"request":{"raw":"GET /sxp/i/636f8b858f681acb7bfa6f583a96630a.js HTTP/1.1\r\nHost: euob.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aaalen.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 51307\r\ncontent-encoding: gzip\r\nserver: Caddy\r\ndate: Mon, 20 Jul 2026 15:16:59 GMT\r\ncache-control: max-age=43200\r\nexpires: Tue, 21 Jul 2026 03:16:42 GMT\r\netag: \"216ff-IkOsysOmfzgAwGvhirQ3e2C5KFU\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 020995a9de07e6c1689726f8f3e99de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: 6ylAl3LtWmLBEWoqZO1ns-zSh5U5hzhsF9iGSHoyaxtfdce0Jb_Rng==\r\nage: 13596\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":136959,"size_decoded":51831,"mime_type":"text/javascript; charset=utf-8","magic":"data","md5":"e2ffb55616adb6f2fbd62bdf1ca1e143","sha1":"2243accac3a67f3800c06be18ab4377b60b92855","sha256":"ed1771161d3cab3bcd650907a478b0f8cab62a85f344dccf9eb2ca9612f6d8d0","sha512":"d0301447e611b33f4e58b2ea859f441d292217ed6f369d9922274c73fc327ecfe947f460c77d86125cfcaa4d37377c556a7b1666176831344c176ece157d8285","ssdeep":"1536:sD+RPQb5SEwvAu5DWeBPU4HLonMbVGhe3qM87961QCixUcnYtB/l7PsXWIo6MWmD:sCRP/AuZWyjqu1QCtveXolS0tsnWBypO","tlshash":"ffd3d7ddf2e27025039320a5017f411ae27b1e553c4b8290d5bae9d4ac7ce8e957bfac","first_seen":"2026-07-12T15:20:00.665395Z","last_seen":"2026-07-21T15:36:27.188797Z","times_seen":1744,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":15,"connect":9,"send":0,"wait":10,"receive":8,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"euob.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}