{"report_id":"9de89bc0-c5a3-483b-88a5-0e4016ff8c86","version":6,"status":"done","tags":[],"date":"2026-05-31T23:57:01Z","url":{"schema":"https","addr":"ofincredvorn-de.live/","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"172.67.133.126","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ofincredvorn-de.live/","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"title":"Ofin Credvorn | Offizielle Plattform für KI-gestütztes Trading","dom":{"size":58448,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (31372)","md5":"c18887bfe5c113e220840e897af4f4ab","sha1":"94588311b9aefc71798f811d6a11c6df2508d856","sha256":"0d7b64b07285d2285476e75a47226d0e090cd0f78a8706ec7e01608ed30ef472","sha512":"aa9d78abaedb08eca0e3612164d159c3b1b8e0b0d66f2aaa6ee32d8add987bb80bbe55e256e297ebf8acdd12b8bc868172b9ea79ae73ca501c1b88f55fefb217","ssdeep":"1536:o5LAEF5DgcQdhQIPQuaQQrjBoQKXQOKN17nuTjBmNL8NdLfDcvLCOIhIFgfEN:o5LAOGd4LgGHvT7nuTjBmNL2dLDO2BI/","tlshash":"aa4329f2a5f05673128f07c8fa1baa08fcdb53de9b45ce49709dcad41bda891d2ca044","dom_hash":"domhash43fabfa8f6f45e6f8b3f2aa1a30ccf5b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ofincredvorn-de.live/","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"172.67.133.126","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-05T23:57:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-31T23:56:38Z","timestamp":1780271798,"ip_dst":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":39156,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)","source":"{\"timestamp\":\"2026-05-31T23:56:38.420432+0000\",\"flow_id\":956471142946109,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":39156,\"dest_ip\":\"34.117.59.81\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025331,\"rev\":5,\"signature\":\"ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)\",\"category\":\"Device Retrieving External IP Address Detected\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Linux\",\"Mac_OSX\",\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2018_02_07\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0043\"],\"mitre_tactic_name\":[\"Reconnaissance\"],\"mitre_technique_id\":[\"T1590\"],\"mitre_technique_name\":[\"Gather_Victim_Network_Information\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_09_19\"]}},\"tls\":{\"sni\":\"ipinfo.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":911,\"bytes_toclient\":3413,\"start\":\"2026-05-31T23:56:38.365885+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"player.vimeo.com","ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-12-15","domain_rank":132,"first_seen":"2013-09-26T03:16:08Z","last_seen":"2026-05-25T07:27:45.98212Z","alert_count":0,"request_count":10,"received_data":147552,"sent_data":5350,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-05-25T07:23:13.533444Z","alert_count":0,"request_count":1,"received_data":18799,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"f.vimeocdn.com","ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2010-04-21","domain_rank":25524,"first_seen":"2014-04-09T18:24:34Z","last_seen":"2026-05-27T16:35:16.597861Z","alert_count":0,"request_count":11,"received_data":6344322,"sent_data":5072,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"i.vimeocdn.com","ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2010-04-21","domain_rank":24258,"first_seen":"2014-03-27T22:24:57Z","last_seen":"2026-05-25T07:28:27.044404Z","alert_count":0,"request_count":10,"received_data":121355,"sent_data":5206,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-31T22:42:17.707694Z","alert_count":0,"request_count":4,"received_data":375210,"sent_data":1934,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-31T22:21:48.210615Z","alert_count":0,"request_count":1,"received_data":7013,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ofincredvorn-de.live","ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-31T23:46:22.965245Z","last_seen":"2026-05-31T23:46:22.965245Z","alert_count":48,"request_count":48,"received_data":661009,"sent_data":55859,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.1.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"ipinfo.io","ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2013-04-23","domain_rank":1327,"first_seen":"2013-12-16T07:25:53Z","last_seen":"2026-05-27T18:05:04.167221Z","alert_count":0,"request_count":1,"received_data":907,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"player.vimeo.com/video/1142047251?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a5b4d5d3e4b011a5ab11c586f797d44","sha1":"648e005b908e068c567f5236736ea923480a8c08","sha256":"49653c792dd94bb881bb47fde59c3036d1009d19d8151b3894b09419eb4bc8e3","sha512":"2b77f66e9146c05f5f3644a72921d4efca6173c1b265c7201a2d2dd0c9231d11770440a844889ff56a84a02b2310ef81a9f05e9d960bd4562ddfd83ce56be77f","ssdeep":"","tlshash":"8211c0214210b872459ea5970297d30d7013666ecb06c78c412a9559207c9d7b3aabbe","size":877,"data":"","first_seen":"2023-05-30T16:19:13Z","last_seen":"2026-06-06T23:30:17.537836Z","times_seen":41228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141150276?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a5b4d5d3e4b011a5ab11c586f797d44","sha1":"648e005b908e068c567f5236736ea923480a8c08","sha256":"49653c792dd94bb881bb47fde59c3036d1009d19d8151b3894b09419eb4bc8e3","sha512":"2b77f66e9146c05f5f3644a72921d4efca6173c1b265c7201a2d2dd0c9231d11770440a844889ff56a84a02b2310ef81a9f05e9d960bd4562ddfd83ce56be77f","ssdeep":"","tlshash":"8211c0214210b872459ea5970297d30d7013666ecb06c78c412a9559207c9d7b3aabbe","size":877,"data":"","first_seen":"2023-05-30T16:19:13Z","last_seen":"2026-06-06T23:30:17.537836Z","times_seen":41228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141149756?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a5b4d5d3e4b011a5ab11c586f797d44","sha1":"648e005b908e068c567f5236736ea923480a8c08","sha256":"49653c792dd94bb881bb47fde59c3036d1009d19d8151b3894b09419eb4bc8e3","sha512":"2b77f66e9146c05f5f3644a72921d4efca6173c1b265c7201a2d2dd0c9231d11770440a844889ff56a84a02b2310ef81a9f05e9d960bd4562ddfd83ce56be77f","ssdeep":"","tlshash":"8211c0214210b872459ea5970297d30d7013666ecb06c78c412a9559207c9d7b3aabbe","size":877,"data":"","first_seen":"2023-05-30T16:19:13Z","last_seen":"2026-06-06T23:30:17.537836Z","times_seen":41228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141149756?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c7d423ab068912d65e68c63d0dda9256","sha1":"6d97e67f6e2c067e861e680808b5e14ff1e1f955","sha256":"2c33d1c68d20d1c145ea95379d3df663196ce934e3fbb3c60d99d15287808c2c","sha512":"09bf7dcd1d009b7ab558e572517186f2c3aeafe44430d461f2a5fcba4e983440fd4f77c436fc0e3f4b09717699d419277639af7ae09b0c16ce748234312dd757","ssdeep":"","tlshash":"51c0c0ce1c13fe740064cd8a1b1448c3c00d00811000c7d7e009355c1339ffb831d0d4","size":184,"data":"","first_seen":"2026-03-11T05:06:54.858405Z","last_seen":"2026-06-01T10:05:26.908509Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141150276?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"021f8449da0b4dff2a75171dfbe01793","sha1":"136d127748fcf6695da99218ff58e7b5eabe3487","sha256":"38f8a9f74e2c40ac009261c07ef5d73afcc09c2d66f663a746baa78b448ba31b","sha512":"ba7b9b506af55ccccc3e3fe0e16390c4466efabe734fb3717bfa59b75c65c1fdd4010bcd6d9745fda45ceae9efe4356e358647d7235d3d789371ff9478f3cf74","ssdeep":"","tlshash":"50c0c06fc402f46c34b084ed04342c8de74200002032e133b4328b8d0327afedc241b4","size":184,"data":"","first_seen":"2026-03-11T05:06:54.83434Z","last_seen":"2026-06-01T10:05:26.918387Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipinfo.io/?callback=jQuery311023261692022646185_1780271798113\u0026_=1780271798114","fqdn":"ipinfo.io","domain":"ipinfo.io","tld":"io"},"ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a40b305b3deb3071db8f430bffc3471a","sha1":"0cb9f05adfae1b24161eb6e758eb909a2b13647b","sha256":"b4168a7473d9c618574113f1093e3fdab6c9272835e0f9261e0c9da49fc8e90c","sha512":"df21d15ec561c7440a7e5bf1153b62c5ce871944d5d594c799f1c42543547a9bf953936507d27215ccfe47d94eb4782dd14b5c4e898f230f5e80bc850b08b2e2","ssdeep":"","tlshash":"370170bb54781f3aaabe454c440b8f0a326c692b028175968ea65b2c14495b760f476e","size":674,"data":"","first_seen":"2026-05-31T23:57:12.305849Z","last_seen":"2026-05-31T23:57:12.305849Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141149756?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5b8103cb4d9753627ed7d6be9e1deec8","sha1":"0a6c80ea694a9177a9c4b2c500106d6e0645ddf2","sha256":"e8f2b8c1cbb71503e4e40d3a26ec8fafaa71a58af375fe4351eb339fc70a1740","sha512":"fb75a47eef98da7ccf31f65a4accb257278291b669aaa2eddee57851218e6d2323e625a146b198ae3185d7a0e7f186f7cb5a1f84d10ac0e706f152e2b8f35d55","ssdeep":"192:/jdjEqjDojDmqjDcjDLmkiOobSc512g0xt63qkNdLfi/gQos5sQoz:eommoKLmkiOobzv2gstnkNdLfiIQos5O","tlshash":"0652e862aae58e37c7c8e84c0e0efe0c5496929aedc49e4895d6ef0c54bfd82671f141","size":13653,"data":"","first_seen":"2026-05-31T23:57:12.345068Z","last_seen":"2026-05-31T23:57:12.345068Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141149904?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a5b4d5d3e4b011a5ab11c586f797d44","sha1":"648e005b908e068c567f5236736ea923480a8c08","sha256":"49653c792dd94bb881bb47fde59c3036d1009d19d8151b3894b09419eb4bc8e3","sha512":"2b77f66e9146c05f5f3644a72921d4efca6173c1b265c7201a2d2dd0c9231d11770440a844889ff56a84a02b2310ef81a9f05e9d960bd4562ddfd83ce56be77f","ssdeep":"","tlshash":"8211c0214210b872459ea5970297d30d7013666ecb06c78c412a9559207c9d7b3aabbe","size":877,"data":"","first_seen":"2023-05-30T16:19:13Z","last_seen":"2026-06-06T23:30:17.537836Z","times_seen":41228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1142047251?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c2b06967460c2730c2d2abe52436110b","sha1":"4c0707d124c9f196c6b41fff23906efa9644829f","sha256":"3bbf2cdb8bed2f736be4e35d8b84ea9fa8cebb1c1e32a23440b6ee012871f7f0","sha512":"318a156de4f148ec2e9f9804e334fcb6b1a352484e354f8d70dab0b8411f5bd8ab116d4c7eb9f62fad6a08a8fc7e34b133bb2b6eae31580b705ff67850161270","ssdeep":"","tlshash":"53c080f70801bdfc0e73e54d18541ca499834319783690165d0946ce5327fd693942e4","size":184,"data":"","first_seen":"2026-03-11T05:06:54.838352Z","last_seen":"2026-06-01T10:05:26.911914Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.51/js/player.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c301d158f9af06e0f26b40c10b53322","sha1":"a66df2c8892d8e883bf01d11f735245c240a1f16","sha256":"b31f9796802f6c19e09c2952e1827dd69bb2c5a042817d4ee8e462b9862bda1b","sha512":"2f17b599df4f79d1d0014125e0c4d14da023c8ab1cc8dec7036dceeed4625396d9b254331b0b3b617d24fe5528ed20769c4d34362a3561f96a38198b52ce18e8","ssdeep":"12288:lUBIPdKt8tmxp9QEH16+1TSDwjd4L+RRYPTMGZ274VNYy6KWp835MKKAbZTLYE/g:n8t8whH16+1TSDwkkUHcjs8yjFk","tlshash":"04156bd672c2f43181d645a5e17b1203b33e1b9cb80d865cb03daddc2a9e545a2bbbf4","size":892956,"data":"","first_seen":"2026-05-25T15:52:34.450023Z","last_seen":"2026-06-02T11:35:28.342392Z","times_seen":1068,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-06-06T23:08:30.675153Z","times_seen":164717,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"26d834e45c8fc8aedbf0bdce95ca21f7","sha1":"a152163a6b3df68831c032ca8a25cb520777ef8f","sha256":"75a7a2af32d3783a53d05456f04fcc524f759ba911f973be44d1ec4a455c1528","sha512":"e9a852f38c6f511577ccbdd47dc406ce8991335ab7fd96018ba78f2ebcffd2ad46cfb291060018108ea6c72e97379b93bfb3f36f804641ea0c7528cb3c9f560c","ssdeep":"","tlshash":"81114948a6f638715133b2729baf62c6667a2c939444cc893eac85482f807d406719cb","size":896,"data":"","first_seen":"2026-05-31T23:15:32.84029Z","last_seen":"2026-06-01T10:05:26.913085Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/frontend/assets/de/js/lazyload.min.js","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02904458ba58d516134326a81c45c920","sha1":"bdbef500dae9927c7018801285d8b07d4aaef92d","sha256":"482427969bb13fb83dd24449a53868f8f51239ad684606639991592972bdd234","sha512":"3198a5ad2e3bb2f4814916b73f0a7316dd070184e201a40b8c53eb98473b3d791b71fb2c399e6f8f3ae6be8045532dc6659ff9cf590cd62bedb61345721e8ec4","ssdeep":"192:Wrr573s4TW1IDJTspjUAEA/UcdvM5khyLPkO21RnaUhklOx0dek7jQMiZtjpSNju:Wrrps4TW1IDqUAEEM5WeUaQFlbtN7","tlshash":"bc52cb8ba2f22438531bf024692bcd097315608f5899ae923d1d626b5f49b39f7f4fc4","size":13751,"data":"","first_seen":"2026-05-03T18:32:03.559102Z","last_seen":"2026-06-01T10:05:26.850593Z","times_seen":813,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/frontend/assets/de/js/sliders.js","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67dd1e2333e167a77697aca034eb3df6","sha1":"306594dfb8433db362be7a689933e0eeca162f48","sha256":"eede0d06ab82379d31524d842f64e1ac779e3b3e5b0b57c026290af86649b706","sha512":"7fc94d65c296988603ad1d10539e40a52db78e8ddea794bc22ecd118084675d2fb7fb3ee16aeac57a10443e95af4db7a2a55ce5b0bbe1d2b425163bcfb553f07","ssdeep":"96:hWrrPGI8yDdWTAAOxlfWG0eTnCa9JeUW7Y:hWvPG/eeA5xlZCa2M","tlshash":"ec910366303223358a6742edae0bcc41e2dad0477905d581f58e471a8fc6faca6e5dfc","size":4454,"data":"","first_seen":"2026-05-03T18:34:41.351704Z","last_seen":"2026-06-01T10:05:26.849255Z","times_seen":732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/frontend/assets/de/js/scripts.js?v=20260329-card-hover-fix","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d354f602a5b263b97eac602760c62394","sha1":"33973424627c0d76c9edbc6d3f392f3d212ff2d0","sha256":"786294d98bb03e5aed3f5ff961478f6f8e2bb7c6e2a0de226fccb5ea1ff4db7e","sha512":"6b55970482004d47791fc61844e68c390bd87f2f309db4788520c0de0b898351f6bb6c8751ecef535450850dc115ee619ac93fe72dece868fa03cb4619486f8e","ssdeep":"96:5v5UUOUNrDeAAePtSx+Px7v0PwckyEeiK6jYikhez8rs:5vaUOUNrDeAHVSx8x70XkyEeiK6cths","tlshash":"b2d10e7a7af604364133019f9b9f85592a113087ba09faae3f4cd2041fc97ac54f1be9","size":6226,"data":"","first_seen":"2026-05-09T07:41:35.231964Z","last_seen":"2026-06-01T10:05:26.876324Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1142047251?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3067041fb6a7b1d9981158fd1de2ec7","sha1":"f84f3830d5edf9c1ce0f43c3fdd49f2205b39329","sha256":"af190edbeedd4e75e07c5c83ed72c7ca39fdede07c8407b88b4b2491bc2895dc","sha512":"ecdebad72a18c624900e2091aff395a7484d7936388ac80f7c7e06e6e37d34d69302ebdc18420d0a481311082383ee41791e0b7d0b4346832193a4ebb6b74438","ssdeep":"384:MhFTKCK9TK4KO9aX6oIE9BstnkNdLfiZoNdf:MhRKCK5K4KO4X8EekNdLfyE","tlshash":"21522aa3b6e46d358bc91e8c0e5a7c0d44e4649b0ec8e59e5ad68e1c01ffa653b0b348","size":13661,"data":"","first_seen":"2026-05-31T23:57:12.347754Z","last_seen":"2026-05-31T23:57:12.347754Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.51/js/player.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c301d158f9af06e0f26b40c10b53322","sha1":"a66df2c8892d8e883bf01d11f735245c240a1f16","sha256":"b31f9796802f6c19e09c2952e1827dd69bb2c5a042817d4ee8e462b9862bda1b","sha512":"2f17b599df4f79d1d0014125e0c4d14da023c8ab1cc8dec7036dceeed4625396d9b254331b0b3b617d24fe5528ed20769c4d34362a3561f96a38198b52ce18e8","ssdeep":"12288:lUBIPdKt8tmxp9QEH16+1TSDwjd4L+RRYPTMGZ274VNYy6KWp835MKKAbZTLYE/g:n8t8whH16+1TSDwkkUHcjs8yjFk","tlshash":"04156bd672c2f43181d645a5e17b1203b33e1b9cb80d865cb03daddc2a9e545a2bbbf4","size":892956,"data":"","first_seen":"2026-05-25T15:52:34.450023Z","last_seen":"2026-06-02T11:35:28.342392Z","times_seen":1068,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.12.5/build/js/utils.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e654fbae22a0762fa384b61fd03f1679","sha1":"3f2dc491443ab4d9dbf6abee895d8140196f0aab","sha256":"93c8dd85421914d3c09fdacc4b77730595202004a1d8c9ef7639c7551157bda6","sha512":"af44d0ca2f0ca731ecb7e535963c694710a3e887c8bbdfc95066f1fab72d5c5da66313e9097498d246b93a04a1b642fd65d591e80d325a72bb0f7bf5a5f8da6e","ssdeep":"3072:TklM0tDKjFs3OwPss3MwPky0zOt62xFMfM+dhvo4sUifhNyf4LtXKtofQVkmDmVu:TklMmDOW0IxFMfM+dMGou","tlshash":"fe44f0ebd63c973ba1d87b35968eb3cd5a8cbca3c858567826c3b54f52784e0706c205","size":268720,"data":"","first_seen":"2026-02-13T03:24:00.128548Z","last_seen":"2026-06-05T10:07:59.101497Z","times_seen":950,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.51/js/vendor.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"3e6cb7907b3bb24aa5b1a7482cb0c2a0","sha1":"2ede8cdcdfe0563eca5f73a51d63021f865d0097","sha256":"de1befcea3c34e111929d81d7fa0a511766e4429db742329de97475df99a36f9","sha512":"065e19f5eca254d4a93aadf0d6f150409b508ff630a67a84f716cd1e31cd0912c9eb06c8f8552935dcbfd6d18adf4afd7d0c1edd17158eb40716326020c3fabb","ssdeep":"6144:lxrQb8XM5U5dAbYwlkc9IERRcRDZx12r/g5lpc:lx/85ucTcPrLm","tlshash":"5c64e7dcb2d6f07143e764a6403f200bf23a5e15a84d8454e26ae4d57cb9a4e823bf7d","size":327216,"data":"","first_seen":"2026-05-25T15:52:34.485083Z","last_seen":"2026-06-02T11:35:28.281566Z","times_seen":1067,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.51/js/vendor.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"3e6cb7907b3bb24aa5b1a7482cb0c2a0","sha1":"2ede8cdcdfe0563eca5f73a51d63021f865d0097","sha256":"de1befcea3c34e111929d81d7fa0a511766e4429db742329de97475df99a36f9","sha512":"065e19f5eca254d4a93aadf0d6f150409b508ff630a67a84f716cd1e31cd0912c9eb06c8f8552935dcbfd6d18adf4afd7d0c1edd17158eb40716326020c3fabb","ssdeep":"6144:lxrQb8XM5U5dAbYwlkc9IERRcRDZx12r/g5lpc:lx/85ucTcPrLm","tlshash":"5c64e7dcb2d6f07143e764a6403f200bf23a5e15a84d8454e26ae4d57cb9a4e823bf7d","size":327216,"data":"","first_seen":"2026-05-25T15:52:34.485083Z","last_seen":"2026-06-02T11:35:28.281566Z","times_seen":1067,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/frontend/assets/de/js/config.js","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d4b19fc39d88043bdbb9c096f385843","sha1":"6f41533a8c20e52830c28f9d4cc62e354fc29969","sha256":"ac1a70193e1bc0e8a7ba774ccfbb01a2b0906ec4478d3c94b8dd49eba94b34d8","sha512":"cab9965c797644d298334f1c0bc6a51f5fe22286f97b038839ce5e29777d97ec56bd89466b361f4193466d0b1b76ba997b9943b8b7821bb42b9295e2e34d6e01","ssdeep":"","tlshash":"c401d06fc17488032df2129eba462b29f512423f076cc06a71bd516c2f7a26fd6471c1","size":782,"data":"","first_seen":"2026-05-03T18:32:03.512014Z","last_seen":"2026-06-01T10:05:26.838465Z","times_seen":790,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/embla-carousel@8.6.0/embla-carousel.umd.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccc433e7e2ed8017b86837389e278027","sha1":"ac157e8dec8dddbd9b768674968422d629d59bd9","sha256":"f05b5dbfe37d79b636b9db74ad04ed5e99b4bce369d781b0fb38b0b2ac619e66","sha512":"a62638d1120d541d148cb4714759538c9fa838a93009f3dfa1b840bdd731b3fdb2b201c677ead9c177c5f33af1dfd60ad34bdca57d41bdef2ee957fdfd3a7482","ssdeep":"384:pW3WT2X/jBbU6N/LHq0GFZGPow0Ov7NijEUE2Uy1s2B4fUXH9y0ApP:E3SmrRU6N/LHq0WZGPdzSEGKssAAP","tlshash":"c782b7ec70c2b062639724f9503f9109f37b1881384e9550e678e9e63cb606e9677f9e","size":17946,"data":"","first_seen":"2025-04-09T07:37:23.81801Z","last_seen":"2026-06-06T16:26:27.576514Z","times_seen":1397,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141149904?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eadd09b1f4a508f73f38fa41781db1ec","sha1":"b8c86205c7e70ddc322dcf63b699739bc9eaf898","sha256":"de4d86dd3f43c79520f7933c8b0b05d608f759a12ddc874320be0293cfb247b1","sha512":"51802867be0f5799a0dbfbfe5978111672ad4adf5a92dd40b5291d4f8295608bcf95d9feccbd60885b14a9b137306146fcb517350d419ede4a0338dd4c5ba428","ssdeep":"","tlshash":"edc0c02b0d40f86c08a281c2182879cfc50f04123073c333bb28038b131eaf667a85c0","size":184,"data":"","first_seen":"2026-03-11T05:06:54.845633Z","last_seen":"2026-06-01T10:05:26.917768Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/frontend/assets/de/js/geo.js","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9c760269aeea47905f4d33aaf740c3a","sha1":"14120a6947ffad92c5f9e886b485ec65b3bed3ee","sha256":"556384cb09c3f07d6576faea9d370459e288fbfbe44b1c5e847b2db9dab5690c","sha512":"b594df48a2e062a0618a0443ca35e4b7bcdf55eb2599b8fe782016f29b198210ab39b46e017121f150e27fa14918c37ec05c62c00752e61914b095aa1c087946","ssdeep":"","tlshash":"fd01496552b6466040e771cada6fa2601435e40b374dd8ea7a9f43480f8991dc2b27dd","size":825,"data":"","first_seen":"2026-05-03T18:34:41.313902Z","last_seen":"2026-06-01T10:05:26.858129Z","times_seen":785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141150117?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a5b4d5d3e4b011a5ab11c586f797d44","sha1":"648e005b908e068c567f5236736ea923480a8c08","sha256":"49653c792dd94bb881bb47fde59c3036d1009d19d8151b3894b09419eb4bc8e3","sha512":"2b77f66e9146c05f5f3644a72921d4efca6173c1b265c7201a2d2dd0c9231d11770440a844889ff56a84a02b2310ef81a9f05e9d960bd4562ddfd83ce56be77f","ssdeep":"","tlshash":"8211c0214210b872459ea5970297d30d7013666ecb06c78c412a9559207c9d7b3aabbe","size":877,"data":"","first_seen":"2023-05-30T16:19:13Z","last_seen":"2026-06-06T23:30:17.537836Z","times_seen":41228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.51/js/player.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c301d158f9af06e0f26b40c10b53322","sha1":"a66df2c8892d8e883bf01d11f735245c240a1f16","sha256":"b31f9796802f6c19e09c2952e1827dd69bb2c5a042817d4ee8e462b9862bda1b","sha512":"2f17b599df4f79d1d0014125e0c4d14da023c8ab1cc8dec7036dceeed4625396d9b254331b0b3b617d24fe5528ed20769c4d34362a3561f96a38198b52ce18e8","ssdeep":"12288:lUBIPdKt8tmxp9QEH16+1TSDwjd4L+RRYPTMGZ274VNYy6KWp835MKKAbZTLYE/g:n8t8whH16+1TSDwkkUHcjs8yjFk","tlshash":"04156bd672c2f43181d645a5e17b1203b33e1b9cb80d865cb03daddc2a9e545a2bbbf4","size":892956,"data":"","first_seen":"2026-05-25T15:52:34.450023Z","last_seen":"2026-06-02T11:35:28.342392Z","times_seen":1068,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.12.5/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"584b32aaa35c260a3b4ddacfce274a42","sha1":"324ecf2536f3781db1f77ed454bf3c271594454f","sha256":"990fdaa51ed5c86f92d670ab5a79dbf7415f34900dc2f443c5a03dca94479475","sha512":"bca5c9cdfd2562a5a1d31e26c974022172e14ebd599e30d3daf091d27a266a820a025b2ea1e1329bf18be3489c51aafca5025db638631452fee03afedd8f8a26","ssdeep":"768:mYJ0FRsgH7XpwJxK6jk4ixVDQtwnixrUT2PXIh+vH/kvzas:mcgHl6Q4ixVDQAsrcGgmHMas","tlshash":"f603b52d6316672babfd8155f4e4a582de6f7a460944886c3dac8fcb0098dc379b3734","size":40669,"data":"","first_seen":"2025-11-18T18:36:54.272556Z","last_seen":"2026-06-05T10:07:59.100576Z","times_seen":970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.8.3/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7657299ef4e0a3abdc478c0b9d7075aa","sha1":"25138af863e2ad69bb09af4e93009449f2e75ccb","sha256":"8e184485db8b6a8a741dd831f7bae84644eedf8f0c371172e69721e1236a7cd1","sha512":"eb5e7ae63fb48ea7b543f7339625284b3cc5477b6c8be03667714ebab1eb7c493a1445bae46348d992a4477a2080634c532b16c7b6ae4102e1524e51ab142b6b","ssdeep":"768:U+h03XVqC/iPIqXpwJxsyysdjx2nmY249lHGIw:UiPIsy/tWHG","tlshash":"c0f2f9aeb3646637abfd82a270e54403ae6f79444604043d78bc8ede1399dd171f6b38","size":34586,"data":"","first_seen":"2025-10-21T03:51:56.40324Z","last_seen":"2026-06-06T23:43:02.176394Z","times_seen":1354,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141150276?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"be7acf54a6127261cb5fa40eba48213a","sha1":"81e68da95cb94dcfc15eb24034b1e4bcdedcb861","sha256":"bf66a24d90d1a2e13dc24eaa72c41209080670785f3646bca2b258d9d2c592bb","sha512":"d051b2509d2d415fa3662fe41247d1bf3fbe818da753b455f321674fc79b51b7b5ab2281ab39a78fb87c94a5887126631db642aac368a84706f0bab8ef658dc5","ssdeep":"384:2UsgokUsMskokts1sfoRib9stnkNdLfi18eeoNnek:bsgoVsMskoes1sCiskNdLf+8eea","tlshash":"ae520a63f5c88d3e63c44acc1c6ebc0c2499614bfec2db9d58e78e88897fda62706155","size":13666,"data":"","first_seen":"2026-05-31T23:57:12.349259Z","last_seen":"2026-05-31T23:57:12.349259Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.51/js/player.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c301d158f9af06e0f26b40c10b53322","sha1":"a66df2c8892d8e883bf01d11f735245c240a1f16","sha256":"b31f9796802f6c19e09c2952e1827dd69bb2c5a042817d4ee8e462b9862bda1b","sha512":"2f17b599df4f79d1d0014125e0c4d14da023c8ab1cc8dec7036dceeed4625396d9b254331b0b3b617d24fe5528ed20769c4d34362a3561f96a38198b52ce18e8","ssdeep":"12288:lUBIPdKt8tmxp9QEH16+1TSDwjd4L+RRYPTMGZ274VNYy6KWp835MKKAbZTLYE/g:n8t8whH16+1TSDwkkUHcjs8yjFk","tlshash":"04156bd672c2f43181d645a5e17b1203b33e1b9cb80d865cb03daddc2a9e545a2bbbf4","size":892956,"data":"","first_seen":"2026-05-25T15:52:34.450023Z","last_seen":"2026-06-02T11:35:28.342392Z","times_seen":1068,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141149904?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"806c340beb2a3a8970ab1c3b2713eee3","sha1":"c5c76af05fd77faed80765efdab42f3b590a4a1b","sha256":"9dfc27a4e57df57d010c00c14f10e57b4f3299b259669983eadab5f57bde4258","sha512":"9c5245ccc87b1b10ecaf6327440483730d253d9778834877efa3e2f1f5e19aa3b3dc7f62a31ff1b3084fa8d495343873939ea55da88eb0a22a33078d9e4afccf","ssdeep":"384:mC0CqCdFSQR2NFRS+RS92NFSMSYHoubAustnkNdLfilohCft:iCqCvlI5Sor1lbWkNdLfsF","tlshash":"b052e973b9d5dd30cfc855884d1e6e0a61ab726a7ec4cbdc96c3898c42bf9a61709144","size":13633,"data":"","first_seen":"2026-05-31T23:57:12.350706Z","last_seen":"2026-05-31T23:57:12.350706Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141149756?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a51c5ecf68ae51eed056ceb3392d0da9","sha1":"20291ab3301a78657a1ff25a0b56b72bf33389f8","sha256":"533c2248356dd75c4dff28df1c56a1d10699aa83a3121ba9ec37f72c98c0f268","sha512":"424469890f9b2a28a5ae91348af867b7a8c44e18809acff658d312dc2a2d4868bdb7aff9bf19c1d1eaaa26951a72f0c6f16783da1e35fcf5afc9b9c9eb6c967a","ssdeep":"","tlshash":"0d51ab7aa442f43a12310ce9f77b2316707636d87906a360e02e789c385dc23d627bcd","size":2657,"data":"","first_seen":"2025-12-02T19:38:07.208192Z","last_seen":"2026-06-06T23:44:54.409178Z","times_seen":22315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1142047251?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a51c5ecf68ae51eed056ceb3392d0da9","sha1":"20291ab3301a78657a1ff25a0b56b72bf33389f8","sha256":"533c2248356dd75c4dff28df1c56a1d10699aa83a3121ba9ec37f72c98c0f268","sha512":"424469890f9b2a28a5ae91348af867b7a8c44e18809acff658d312dc2a2d4868bdb7aff9bf19c1d1eaaa26951a72f0c6f16783da1e35fcf5afc9b9c9eb6c967a","ssdeep":"","tlshash":"0d51ab7aa442f43a12310ce9f77b2316707636d87906a360e02e789c385dc23d627bcd","size":2657,"data":"","first_seen":"2025-12-02T19:38:07.208192Z","last_seen":"2026-06-06T23:44:54.409178Z","times_seen":22315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141150276?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a51c5ecf68ae51eed056ceb3392d0da9","sha1":"20291ab3301a78657a1ff25a0b56b72bf33389f8","sha256":"533c2248356dd75c4dff28df1c56a1d10699aa83a3121ba9ec37f72c98c0f268","sha512":"424469890f9b2a28a5ae91348af867b7a8c44e18809acff658d312dc2a2d4868bdb7aff9bf19c1d1eaaa26951a72f0c6f16783da1e35fcf5afc9b9c9eb6c967a","ssdeep":"","tlshash":"0d51ab7aa442f43a12310ce9f77b2316707636d87906a360e02e789c385dc23d627bcd","size":2657,"data":"","first_seen":"2025-12-02T19:38:07.208192Z","last_seen":"2026-06-06T23:44:54.409178Z","times_seen":22315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1142047251?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e500be2456c7adccd83f363e52ef5bd","sha1":"327c9f69248844f40f89b9ade646394c825f2a28","sha256":"95c35c2edce177114158dda90aa3f769080a60b08e437651df026a422da4c17d","sha512":"58094149c2d3150b0a3fe9dbb13d2f054ddc31c5cb439985aa7221aa321577dd128d97f2d5044300c5767fdf2aec18d9d77c54fdcdd33185f3987732586aaa16","ssdeep":"","tlshash":"4eb0223ba8a00028b83a88c0220a238038300002ac0ae300e0ac220c2238f030022ac2","size":129,"data":"","first_seen":"2023-05-30T16:19:14Z","last_seen":"2026-06-06T23:30:17.541835Z","times_seen":40776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141150117?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fef25afbc60ca03d319c6cf2f120c5ca","sha1":"3d5b9db2a1b8c62f53262a5ff126254fd0bea62b","sha256":"bec416e5d18edbf7fbac8d1c11be501351e7179cc8203d12354bdd2afb16f833","sha512":"6e2a2dabc47cf8644e204500b214a94777045ed3148bf8a4360fa0c0bca92cef072be7514c89196e4bf79574f0b831e493fb90309abe5f79132e2bf218dabdf2","ssdeep":"","tlshash":"0dc0127a4442e8a945958aa65a2a2ce6c68500012551c136e506559c732a9bbd745050","size":184,"data":"","first_seen":"2026-03-11T05:06:54.840474Z","last_seen":"2026-06-01T10:05:26.911218Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141150117?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"33d03591bf6f3ed710b09b415b4af14b","sha1":"5d3fb2b5cf94b121a755f545de2930bca16fe687","sha256":"f5953a50e07a74bc1d1f6a209f82bed13125536efb96e01d09775aee03beee02","sha512":"e1184691df3725d00c1ac36d2c566321bc929ad2d848e14b3c54be18c68ff6615a5b2233f850760be233cc86971919d7a901b26b8761812f93f2363e5a73ce88","ssdeep":"384:OUQHnUHTjUSmGol95MjstnkNdLfiooL+QR:+nuTjBmNLPkNdLfDcR","tlshash":"5152f7b36bd58d34e7c8998c0e5f7d0e40ba524a6f80df6e9ad78d9c40afc52730a154","size":13666,"data":"","first_seen":"2026-05-31T23:57:12.353189Z","last_seen":"2026-05-31T23:57:12.353189Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141149904?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a51c5ecf68ae51eed056ceb3392d0da9","sha1":"20291ab3301a78657a1ff25a0b56b72bf33389f8","sha256":"533c2248356dd75c4dff28df1c56a1d10699aa83a3121ba9ec37f72c98c0f268","sha512":"424469890f9b2a28a5ae91348af867b7a8c44e18809acff658d312dc2a2d4868bdb7aff9bf19c1d1eaaa26951a72f0c6f16783da1e35fcf5afc9b9c9eb6c967a","ssdeep":"","tlshash":"0d51ab7aa442f43a12310ce9f77b2316707636d87906a360e02e789c385dc23d627bcd","size":2657,"data":"","first_seen":"2025-12-02T19:38:07.208192Z","last_seen":"2026-06-06T23:44:54.409178Z","times_seen":22315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d12fbf423be11a6cbb182347434c4afa","sha1":"0aa09bef655f16695e30d6b6a7a295790133666c","sha256":"ecaefcf27677ce17ab364ee2e3ba50baf2a81e558ac98bfc986fa3a35885971a","sha512":"4a9779595bda509c70d6020d60c591f4bacad326b50f0e481403964a1197381e4a457da0265b446bc0753e941e98c8bdd214738e949f60e89feae688f035998b","ssdeep":"96:LmycuN9WnLBfRanrYzTcy7uSQbUMjBnz0t4Ci0ZyAtXpaS2ckX2yAU1P/+T:Lmy77WnLNR+RTbSPi0ZyAofGy9P/+T","tlshash":"0712634e29f6171da973317e3bcfa401711664371848ed427e9c0b901fc89a976e2bc9","size":9295,"data":"","first_seen":"2026-05-31T23:46:32.282355Z","last_seen":"2026-05-31T23:57:12.354016Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141149904?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e500be2456c7adccd83f363e52ef5bd","sha1":"327c9f69248844f40f89b9ade646394c825f2a28","sha256":"95c35c2edce177114158dda90aa3f769080a60b08e437651df026a422da4c17d","sha512":"58094149c2d3150b0a3fe9dbb13d2f054ddc31c5cb439985aa7221aa321577dd128d97f2d5044300c5767fdf2aec18d9d77c54fdcdd33185f3987732586aaa16","ssdeep":"","tlshash":"4eb0223ba8a00028b83a88c0220a238038300002ac0ae300e0ac220c2238f030022ac2","size":129,"data":"","first_seen":"2023-05-30T16:19:14Z","last_seen":"2026-06-06T23:30:17.541835Z","times_seen":40776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.51/js/vendor.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"3e6cb7907b3bb24aa5b1a7482cb0c2a0","sha1":"2ede8cdcdfe0563eca5f73a51d63021f865d0097","sha256":"de1befcea3c34e111929d81d7fa0a511766e4429db742329de97475df99a36f9","sha512":"065e19f5eca254d4a93aadf0d6f150409b508ff630a67a84f716cd1e31cd0912c9eb06c8f8552935dcbfd6d18adf4afd7d0c1edd17158eb40716326020c3fabb","ssdeep":"6144:lxrQb8XM5U5dAbYwlkc9IERRcRDZx12r/g5lpc:lx/85ucTcPrLm","tlshash":"5c64e7dcb2d6f07143e764a6403f200bf23a5e15a84d8454e26ae4d57cb9a4e823bf7d","size":327216,"data":"","first_seen":"2026-05-25T15:52:34.485083Z","last_seen":"2026-06-02T11:35:28.281566Z","times_seen":1067,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/dashboard-assets/js/disclaimer.js","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d31bf8a0967d5a38631c38691e66540c","sha1":"f4e654b84b034023b5e3db513087dd9205bd49ba","sha256":"d6712b0ff373f0cf02d1c81ff5a6fb945b47d5d173f02e41d1da28eee52b39d5","sha512":"3d4f2750a27f99297636d2e655b9d157d70113d304085e8ff716a907a7abd01252fbbc7ea521f695b6ec31bcb7a9198e0fc378ee71480a52abe2ab83f94b8181","ssdeep":"","tlshash":"58014c9e79e236b1a2c7eb7c19ab530566314003d11c85053d2c6262afa4f6816b3bc9","size":854,"data":"","first_seen":"2026-05-03T18:32:03.521288Z","last_seen":"2026-06-01T10:05:26.897724Z","times_seen":813,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141150117?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a51c5ecf68ae51eed056ceb3392d0da9","sha1":"20291ab3301a78657a1ff25a0b56b72bf33389f8","sha256":"533c2248356dd75c4dff28df1c56a1d10699aa83a3121ba9ec37f72c98c0f268","sha512":"424469890f9b2a28a5ae91348af867b7a8c44e18809acff658d312dc2a2d4868bdb7aff9bf19c1d1eaaa26951a72f0c6f16783da1e35fcf5afc9b9c9eb6c967a","ssdeep":"","tlshash":"0d51ab7aa442f43a12310ce9f77b2316707636d87906a360e02e789c385dc23d627bcd","size":2657,"data":"","first_seen":"2025-12-02T19:38:07.208192Z","last_seen":"2026-06-06T23:44:54.409178Z","times_seen":22315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.51/js/player.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c301d158f9af06e0f26b40c10b53322","sha1":"a66df2c8892d8e883bf01d11f735245c240a1f16","sha256":"b31f9796802f6c19e09c2952e1827dd69bb2c5a042817d4ee8e462b9862bda1b","sha512":"2f17b599df4f79d1d0014125e0c4d14da023c8ab1cc8dec7036dceeed4625396d9b254331b0b3b617d24fe5528ed20769c4d34362a3561f96a38198b52ce18e8","ssdeep":"12288:lUBIPdKt8tmxp9QEH16+1TSDwjd4L+RRYPTMGZ274VNYy6KWp835MKKAbZTLYE/g:n8t8whH16+1TSDwkkUHcjs8yjFk","tlshash":"04156bd672c2f43181d645a5e17b1203b33e1b9cb80d865cb03daddc2a9e545a2bbbf4","size":892956,"data":"","first_seen":"2026-05-25T15:52:34.450023Z","last_seen":"2026-06-02T11:35:28.342392Z","times_seen":1068,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141149756?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e500be2456c7adccd83f363e52ef5bd","sha1":"327c9f69248844f40f89b9ade646394c825f2a28","sha256":"95c35c2edce177114158dda90aa3f769080a60b08e437651df026a422da4c17d","sha512":"58094149c2d3150b0a3fe9dbb13d2f054ddc31c5cb439985aa7221aa321577dd128d97f2d5044300c5767fdf2aec18d9d77c54fdcdd33185f3987732586aaa16","ssdeep":"","tlshash":"4eb0223ba8a00028b83a88c0220a238038300002ac0ae300e0ac220c2238f030022ac2","size":129,"data":"","first_seen":"2023-05-30T16:19:14Z","last_seen":"2026-06-06T23:30:17.541835Z","times_seen":40776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/frontend/assets/de/js/loader.js","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7495dbde5ab60ac459b25cc5c0217b0f","sha1":"a3915023aa8e39ab95d7417eef6bdcdedefde3ca","sha256":"80da25369b4c34a14b7deac6d1ca96b307bb42e738f41aea491ccf993ac946a1","sha512":"d95ed327c8180538a84de3b5b3a5fe5d2d261d32db8ceccfd978ecbd999f1ff24cc81955ca6e6482746dc8e951df3019f84457874652e13fff3454458d03c23c","ssdeep":"","tlshash":"aaf0d11a231749a48bf6c66ba3718381febe6133e445d486359f74c07f709d45065cd8","size":656,"data":"","first_seen":"2026-05-03T18:32:03.601612Z","last_seen":"2026-06-01T10:05:26.903614Z","times_seen":812,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141150276?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e500be2456c7adccd83f363e52ef5bd","sha1":"327c9f69248844f40f89b9ade646394c825f2a28","sha256":"95c35c2edce177114158dda90aa3f769080a60b08e437651df026a422da4c17d","sha512":"58094149c2d3150b0a3fe9dbb13d2f054ddc31c5cb439985aa7221aa321577dd128d97f2d5044300c5767fdf2aec18d9d77c54fdcdd33185f3987732586aaa16","ssdeep":"","tlshash":"4eb0223ba8a00028b83a88c0220a238038300002ac0ae300e0ac220c2238f030022ac2","size":129,"data":"","first_seen":"2023-05-30T16:19:14Z","last_seen":"2026-06-06T23:30:17.541835Z","times_seen":40776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141150117?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e500be2456c7adccd83f363e52ef5bd","sha1":"327c9f69248844f40f89b9ade646394c825f2a28","sha256":"95c35c2edce177114158dda90aa3f769080a60b08e437651df026a422da4c17d","sha512":"58094149c2d3150b0a3fe9dbb13d2f054ddc31c5cb439985aa7221aa321577dd128d97f2d5044300c5767fdf2aec18d9d77c54fdcdd33185f3987732586aaa16","ssdeep":"","tlshash":"4eb0223ba8a00028b83a88c0220a238038300002ac0ae300e0ac220c2238f030022ac2","size":129,"data":"","first_seen":"2023-05-30T16:19:14Z","last_seen":"2026-06-06T23:30:17.541835Z","times_seen":40776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/frontend/assets/de/js/deferred-imports.js","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0ec5ae2cf2a7a7043133c1d9301fadb","sha1":"518d372d4fc783df627d3c5789284ecfca8dbeab","sha256":"b13200f905e155b75d81e059633d6c2bfc45cfe4f1b2199c0970ddc15b5a1d75","sha512":"e22cac350e50d88ea6fffa67e9ebd404fef4c79b0ff7e9c9ad01015e09676c39af37788927916e947d7b49fe0b2131873f43adad6799340d6ee2b3c186b18e20","ssdeep":"","tlshash":"6511493a09078a5544304166ecb7a72df073072323d182a27ebd32486f314175a56b9d","size":892,"data":"","first_seen":"2026-05-03T18:32:03.612818Z","last_seen":"2026-06-01T10:05:26.859713Z","times_seen":790,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/frontend/assets/de/js/jquery-3.1.1.min.js","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e071abda8fe61194711cfc2ab99fe104","sha1":"f647a6d37dc4ca055ced3cf64bbc1f490070acba","sha256":"85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf","sha512":"53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5","tlshash":"3183d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","size":86709,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-06-06T23:24:10.290273Z","times_seen":143465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.51/js/vendor.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"3e6cb7907b3bb24aa5b1a7482cb0c2a0","sha1":"2ede8cdcdfe0563eca5f73a51d63021f865d0097","sha256":"de1befcea3c34e111929d81d7fa0a511766e4429db742329de97475df99a36f9","sha512":"065e19f5eca254d4a93aadf0d6f150409b508ff630a67a84f716cd1e31cd0912c9eb06c8f8552935dcbfd6d18adf4afd7d0c1edd17158eb40716326020c3fabb","ssdeep":"6144:lxrQb8XM5U5dAbYwlkc9IERRcRDZx12r/g5lpc:lx/85ucTcPrLm","tlshash":"5c64e7dcb2d6f07143e764a6403f200bf23a5e15a84d8454e26ae4d57cb9a4e823bf7d","size":327216,"data":"","first_seen":"2026-05-25T15:52:34.485083Z","last_seen":"2026-06-02T11:35:28.281566Z","times_seen":1067,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.51/js/vendor.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"3e6cb7907b3bb24aa5b1a7482cb0c2a0","sha1":"2ede8cdcdfe0563eca5f73a51d63021f865d0097","sha256":"de1befcea3c34e111929d81d7fa0a511766e4429db742329de97475df99a36f9","sha512":"065e19f5eca254d4a93aadf0d6f150409b508ff630a67a84f716cd1e31cd0912c9eb06c8f8552935dcbfd6d18adf4afd7d0c1edd17158eb40716326020c3fabb","ssdeep":"6144:lxrQb8XM5U5dAbYwlkc9IERRcRDZx12r/g5lpc:lx/85ucTcPrLm","tlshash":"5c64e7dcb2d6f07143e764a6403f200bf23a5e15a84d8454e26ae4d57cb9a4e823bf7d","size":327216,"data":"","first_seen":"2026-05-25T15:52:34.485083Z","last_seen":"2026-06-02T11:35:28.281566Z","times_seen":1067,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"player.vimeo.com/video/1142047251/outro?on_site=0\u0026type=videos","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://player.vimeo.com/video/1142047251?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:56:40.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 11:55:53 GMT","end":"Thu, 06 Aug 2026 12:55:51 GMT"},"fingerprint":{"sha1":"D6:E1:3F:D8:FD:5C:3B:D4:99:72:24:5C:10:67:DE:50:68:00:1E:9F","sha256":"AA:99:7A:5D:AA:D6:C8:12:18:9B:D4:1B:A5:A6:F7:08:E5:D6:D0:48:83:D8:B3:BD:3B:1D:B6:61:E3:6E:08:3E"}}},"request":{"raw":"GET /video/1142047251/outro?on_site=0\u0026type=videos HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/video/1142047251?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:56:41 GMT\r\ncontent-type: application/json\r\nset-cookie: __cf_bm=CKM2ZUmZWTtqcyDaQgjpbBg5jmV8jpxr6Pmy9OdrwVw-1780271800.995278-1.0.1.1-mT7G3VJ.Imlx0iO6JO8hdHLdhbzRXFA040kI9IM1Dh0htKkdjN2KKJNrjQAL8Tavs2HmIamCoZ4Px3_uiz29rXayWkZ3eMmjwkQ0XDE1PnTTddiuoOKs5fpJxFHSx_8p; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Mon, 01 Jun 2026 00:26:41 GMT\n_cfuvid=LfCHYRO4FdUzSDThFaF7uCwJSrB1tuxTUe1XjNJlkiI-1780271800.995278-1.0.1.1-VYe4bPNS4G6JF941f1yr99dt7IK_iQ3JrBVMUBCaHYk; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com\r\ncf-ray: a049eaa43efb5693-OSL\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://player.vimeo.com/video/1142047251?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Referer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, x-requested-with\r\naccess-control-allow-methods: GET, POST, PUT, OPTIONS\r\naccess-control-max-age: 86400\r\ncontent-security-policy: default-src 'self'; script-src 'self' https://f.vimeocdn.com; style-src 'self' https://f.vimeocdn.com; img-src 'self' https://f.vimeocdn.com https://i.vimeocdn.com\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-64c8598c9b-gs5x7\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-64c8598c9b-gs5x7\r\nx-link-match: 108\r\nx-player-backend: g\r\nx-served-by: cache-iad-kiad7000175-IAD, cache-bma-essb1270076-BMA\r\nx-timer: S1780271801.015926,VS0,VE163\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":730,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4edfc4854b6ce96169ec257b5eae3fe7","sha1":"924a77bd3ce8fc5f1bf237b3d117b0cf769a9116","sha256":"e143aca201bdfe0a5f9eea1531c14d69c2e7ee698c7782dfdff76d6bac17eb6f","sha512":"427473290a62303fb8a2904931d0639fda327076be6a4f284a4e2607238c26ae9205cfc433c900cb7594ed1dbda0c5e158f095cca033b771024ee4675383f72d","ssdeep":"","tlshash":"4001f4f752d408f5a382e3d65ecdb01b5317907addc1699a59175c4c4aed0db34442a1","first_seen":"2026-05-31T23:57:12.290855Z","last_seen":"2026-05-31T23:57:12.290855Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/frontend/assets/de/js/scripts.js?v=20260329-card-hover-fix","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /frontend/assets/de/js/scripts.js?v=20260329-card-hover-fix HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Sat, 14 Mar 2026 23:10:34 GMT\r\ncontent-encoding: gzip\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=espDM1f5fTHEUiLiF14aEdtgsfVM%2BvmxV1IU9GP%2BIbp6U8gNqHNYjGsJx%2F7YXOVQk0CjOa8xmYxCHH7Fd3tnfAHttKwNy82SrkQElkn6CxZHzOcnlneaZHuiGx%2FtgyDfT6JQLTjF%2Fg%3D%3D\"}]}\r\ncf-ray: a049ea8e58f6b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6226,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"d354f602a5b263b97eac602760c62394","sha1":"33973424627c0d76c9edbc6d3f392f3d212ff2d0","sha256":"786294d98bb03e5aed3f5ff961478f6f8e2bb7c6e2a0de226fccb5ea1ff4db7e","sha512":"6b55970482004d47791fc61844e68c390bd87f2f309db4788520c0de0b898351f6bb6c8751ecef535450850dc115ee619ac93fe72dece868fa03cb4619486f8e","ssdeep":"96:5v5UUOUNrDeAAePtSx+Px7v0PwckyEeiK6jYikhez8rs:5vaUOUNrDeAHVSx8x70XkyEeiK6cths","tlshash":"b2d10e7a7af604364133019f9b9f85592a113087ba09faae3f4cd2041fc97ac54f1be9","first_seen":"2026-05-09T07:41:35.231964Z","last_seen":"2026-06-01T10:05:26.876324Z","times_seen":79,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/flags/is.png","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /flags/is.png HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 3691\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncache-control: max-age=31536000\r\nexpires: Mon, 31 May 2027 23:45:47 GMT\r\nvary: User-Agent\r\naccept-ranges: bytes\r\nage: 649\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ATACLDIfGJ68z1R%2Bg6YF4GnGKkA7FZL8E74EPHCM7Ed1uuBDHA8H4y4f0yWs0%2FDRoSybuUrkj7Xr1Bn7n%2FFDYY93srva9MmkVCIGD35BaBJ9gwBQhOsZEQuFbNbBsrj2N4J0jHx1OA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e6907b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"49e6492e69d8e5d94a9ba3dad3d5f6dc","sha1":"48fe4fa67e8180002566572f346ad45118103fa5","sha256":"be6b2aff9deb6971c3a30c41eb4480a30a0feb25196052a646362c10ecdbd6ef","sha512":"bda45925b0bd84baed7fd41faa8136fc1d8d94eeec6d7518328f657695c1dab45570867f722cb52952b7d5cbb5cd1b6071f6e436ef1a091d89247a422981b6d6","ssdeep":"","tlshash":"eb71a5fa191ee567a4d52a9dd67b28c6cd618431c019edc28f30d114ae6e04f8acb5c9","first_seen":"2025-08-21T23:09:42.451261Z","last_seen":"2026-06-06T23:35:00.147481Z","times_seen":1542,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/embla-carousel@8.6.0/embla-carousel.umd.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:41.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 17:38:50 GMT","end":"Tue, 11 Aug 2026 18:38:47 GMT"},"fingerprint":{"sha1":"85:3A:E3:4D:41:9A:40:A5:EA:4D:21:21:BC:8B:AF:E9:9B:B2:27:3A","sha256":"41:2C:5C:27:2E:1B:0A:16:BA:4A:09:22:08:86:E9:EC:B5:B9:C4:CF:94:00:3A:8F:52:77:35:8C:F9:C4:FC:A4"}}},"request":{"raw":"GET /embla-carousel@8.6.0/embla-carousel.umd.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ofincredvorn-de.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 23:56:41 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a049eaa66d1356af-OSL\r\ncf-cache-status: HIT\r\nfly-request-id: 01KPW5VKFVKVBHQR0ZHVJPPTYF-fra\r\naccess-control-allow-origin: *\r\nage: 650\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 31 May 2027 23:56:41 GMT\r\nlast-modified: Tue, 12 May 2026 10:58:16 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:8Ftdv+N9ebY2udt0rQTtXpm0vONp14Gw+ziwsqxhnmY=:\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17946,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17945)","md5":"ccc433e7e2ed8017b86837389e278027","sha1":"ac157e8dec8dddbd9b768674968422d629d59bd9","sha256":"f05b5dbfe37d79b636b9db74ad04ed5e99b4bce369d781b0fb38b0b2ac619e66","sha512":"a62638d1120d541d148cb4714759538c9fa838a93009f3dfa1b840bdd731b3fdb2b201c677ead9c177c5f33af1dfd60ad34bdca57d41bdef2ee957fdfd3a7482","ssdeep":"384:pW3WT2X/jBbU6N/LHq0GFZGPow0Ov7NijEUE2Uy1s2B4fUXH9y0ApP:E3SmrRU6N/LHq0WZGPdzSEGKssAAP","tlshash":"c782b7ec70c2b062639724f9503f9109f37b1881384e9550e678e9e63cb606e9677f9e","first_seen":"2025-04-09T07:37:23.81801Z","last_seen":"2026-06-06T16:26:27.576514Z","times_seen":1397,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":28,"dns":2,"connect":1,"send":0,"wait":20,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/flags/el.svg","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /flags/el.svg HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2adGjgmwM8EzxS38hDbG2IekJT1%2BpfXbFrX0lhkfGhYC9cj0e%2FaQlEueAPGxHkVyD9XITPvzQC01wQcGscLpEI6dxnX2HxbnJ%2FoVo6jt6rL4ru36odAduBsnlJHrgejMwvLP20RzFw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: br\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e68ffb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":509,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ad2d06f8e09051f574083a3d00b0d3c4","sha1":"278327ff2ba9f9ff2075e69635576298e083a56f","sha256":"855ef79130c430a08f89dad91b7206b3d31b42a1b509000029c60b9336856e45","sha512":"741f41770f7a55e36f6b436b2518986a01a587236f08461c94bfd30a92004c6736b4844a99b46ab6363a95779d9470bc8b374e539a5858c6baae661eccbf884f","ssdeep":"","tlshash":"caf0599496e588c80f2f4e75c97c76d1103224cd6048c8aca0b43819f9053ff11a16be","first_seen":"2023-05-07T18:02:32Z","last_seen":"2026-06-06T23:35:00.181428Z","times_seen":2325,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/flags/hu.svg","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /flags/hu.svg HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eu01CO4wFfliwWooJqiH%2F75npSay%2FD7heth2CBVA3fybKE030qBdE%2BRw96Si5iLE%2FuXBaNZJXnuv4HMFCerA9xgyh5STo2xX0MRCWaDrQbWgQNOAMESf0i5o7eT1nHsLP%2FOdS7W%2Bdg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: br\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e6905b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":359,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3621c5eb449691cbe1d3bc8757c831a1","sha1":"e7e3674fe42359cc9a376e543d7548418071aea0","sha256":"2c1380bd6fb1a88cabcae439eaf960d4dffa929a74cfe3d44f7552084fc1150b","sha512":"7c66bd80019b994685400d020e37d38ba3c45ee3cec449b83bf8a2e8d08d346e03d6245e81f9b868eab42325782107cbf837f3c057efb2c83a5151b22b1104c7","ssdeep":"","tlshash":"61e0d8caa9e9c90e9a1947694eed71da416270cd21cc01fd71843528fd4d3ef2411764","first_seen":"2023-05-29T23:05:28Z","last_seen":"2026-06-06T23:35:00.176432Z","times_seen":4980,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/flags/ja.svg","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /flags/ja.svg HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ob6cPdp5ezOq8rPJNsmU5YMp73t5jeuEJI0AfW3m1DzqzksjvuPeiRWsvy6x35s2iRaFpEZiuUNQCO8COa%2BnlFFY4ZLt6U5CUDhrc3vGY%2BAaF6EiDZu2OoAi079IJkxtceVkikOQLw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: br\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e6909b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":357,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b072ff9b575b2c9db1f40db4a8603ea1","sha1":"56c055fa39d04fdfbf8ca59c3186b982e301bbf2","sha256":"3cff261749f98b839faf4cbd34b7748daf28ed5d9377f3cb9929d6cc506665a2","sha512":"9a42eab5c883210142df99507c2cb0d4a2b8bba9cc91d87440039f0cb340d010b5137066ae28269ceb59e23b5901528506b4f3af4b49eec1ab405f1629a76a4a","ssdeep":"","tlshash":"a0e0c060a0ecc94c4e098b640b7c70d041a670dd268b01fc748c2668e98ebc77811a7c","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-06T23:35:00.131589Z","times_seen":2325,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/flags/nl.svg","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /flags/nl.svg HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TcNR3tqZB%2B5zCgVT8coE9QCwg2PMMJ7t2TCd7E4CsXm%2Bnmnu7fOvOeZ1Nq6jnB53X1BMj96%2F2ZqU6EMdF1RiS4WuoaWYt9vKpmQwwmKg1rCGVxWGZj%2FioyYu8UaYhZBVlosmvRBPnw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: br\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e790bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1932756ac7767c2f33986237417d8731","sha1":"84a604da4f8df24af728a73685c4cc2cad9de962","sha256":"8ca8a2dc879e29edd00a08bffc8d825f67d0988e55538d52e43861bb3af22f83","sha512":"9138b8b056aa4c5a5e0179ba58175ec8b98b2aa66b2a9f0bf17e2defed3b441f9f0d5d91a463bb45ed6f002c6e81d85730338890c3990a604677ded0bfdff8e9","ssdeep":"","tlshash":"d4e0d886a4e989095a1947694eec71d6406270ce218d01fd70853529fe4d3db2451aa8","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-06T23:35:00.232796Z","times_seen":6127,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141149904?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 11:55:53 GMT","end":"Thu, 06 Aug 2026 12:55:51 GMT"},"fingerprint":{"sha1":"D6:E1:3F:D8:FD:5C:3B:D4:99:72:24:5C:10:67:DE:50:68:00:1E:9F","sha256":"AA:99:7A:5D:AA:D6:C8:12:18:9B:D4:1B:A5:A6:F7:08:E5:D6:D0:48:83:D8:B3:BD:3B:1D:B6:61:E3:6E:08:3E"}}},"request":{"raw":"GET /video/1141149904?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1 HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ofincredvorn-de.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 23:56:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __cf_bm=waX89PIhvGCvGBVFVDB8clIlBQ13Fe6gL7q3vZTG3EA-1780271797.9853923-1.0.1.1-ngc3B73oAyRhtQ7QEuNL0ogY1abW2Jnj6IDWLHtXJjrkKHRVhst8trma6j47fNiQo4XGkK_imQIpY8oUrSAOiDzNCgXD7AizHLSbQgPUHH8WModb50tTqM8P2UQLrDpL; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Mon, 01 Jun 2026 00:26:38 GMT\n_cfuvid=BAzz7Un_rWL7GhikFrJttKyIN8Uv.2wYU5smob3Nh7g-1780271797.9853923-1.0.1.1-pOxxYwVQrUPiukRkDgjCLfccjE2e8rgKpDy0bzSx6GQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com\r\ncf-ray: a049ea9169445687-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nlink: \u003chttps://lensflare.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://arclight.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://i.vimeocdn.com\u003e; rel=preconnect; crossorigin, \u003chttps://f.vimeocdn.com\u003e; rel=preconnect; crossorigin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Referer, Accept-Encoding\r\nvia: 1.1 varnish, 1.1 varnish\r\ncontent-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' https://*.vimeocdn.com 'unsafe-eval' resource: https://vimeo.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://browser-intake-datadoghq.com https://src.litix.io https://www.gstatic.com https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.video https://embedder-sdk.wirewax.tv https://*.vimeo.work; style-src 'self' 'unsafe-inline' https://*.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://edge-player5.wirewax.com https://edge-player5.wirewax.video; connect-src 'self' ws: wss: https://vimeo.com https://api.vimeo.com https://csi.gstatic.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://drm.vhx.com/v2/fairplay/cert https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://browser-intake-datadoghq.com https://live-api.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.kollective.app https://*.kollective.app:31015 https://*.kollectivecd.com https://*.paychex.com https://*.hivestreaming.com https://vimeo.magisto.com https://stage.vimeo.magisto.com https://stage-proxy.vimeo.magisto.com https://interactive.create.vimeo.com https://*.wirewax.com https://*.wirewax.video https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com https://player-telemetry.vimeo.com https://lensflare.vimeo.com https://arclight.vimeo.com https://orion.bendingspoons.com https://pico.bendingspoons.com https://*.vimeo.work; font-src data: https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://branding.cdn.magisto.com https://d2by6sxflmuwyq.cloudfront.net https://fonts.gstatic.com https://player.vimeo.com; img-src 'self' data: https://player.vimeo.com https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://*.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://i.vimeocdn.com https://duysrfiajusdh.cloudfront.net https://d263mgllkjh2k2.cloudfront.net https://storage.googleapis.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://studio-media.wirewax.video https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://maps.googleapis.com android-webview-video-poster: https://*.vimeo.work; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com https://captions.vimeo.com https://captions-eu.vimeo.com; frame-src 'self' https://*; worker-src blob:\r\ncross-origin-resource-policy: cross-origin\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-64c8598c9b-6nlsh\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-64c8598c9b-6nlsh\r\nx-link-match: 105\r\nx-player-backend: g\r\nx-served-by: cache-iad-kiad7000075-IAD, cache-bma-essb1270056-BMA\r\nx-timer: S1780271798.005425,VS0,VE180\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":21946,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13645)","md5":"7d741ddedbdd5de504bd27f327d4fd9f","sha1":"b2abb9f4490311b4a792185c966c2c65f29efdff","sha256":"6b094cebd438c5b6beeb1a1d80a84308328dce8dab508ae522aa8eee5c85ecc0","sha512":"dbaf82bfbb9fc3adf581fb26ad98141f4e6599a5f31b44c7a97b2a61d69632ef1ff926fdd973137ec397dedc0e89c59bec0bb028aaa696722f97c746c568ca64","ssdeep":"384:PeIddeGjV+C0CqCdFSQR2NFRS+RS92NFSMSYHoubAustnkNdLfilohCfjWSPqOd3:PwCqCvlI5Sor1lbWkNdLfsbWSCOdehHE","tlshash":"77a20973b9d1e8208bd845c44e2a6f0d717b21577ec4cb98b1ce859c4bafda75b0a1c4","first_seen":"2026-05-31T23:57:12.295848Z","last_seen":"2026-05-31T23:57:12.295848Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.51/js/player.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1141150117?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:56:38.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /p/4.46.51/js/player.module.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://player.vimeo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 23:56:38 GMT\r\nage: 547636\r\nx-served-by: cache-iad-kcgs7200042-IAD, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 10, 96823\r\nx-timer: S1780271799.622785,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 219075\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":892956,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65454)","md5":"6c301d158f9af06e0f26b40c10b53322","sha1":"a66df2c8892d8e883bf01d11f735245c240a1f16","sha256":"b31f9796802f6c19e09c2952e1827dd69bb2c5a042817d4ee8e462b9862bda1b","sha512":"2f17b599df4f79d1d0014125e0c4d14da023c8ab1cc8dec7036dceeed4625396d9b254331b0b3b617d24fe5528ed20769c4d34362a3561f96a38198b52ce18e8","ssdeep":"12288:lUBIPdKt8tmxp9QEH16+1TSDwjd4L+RRYPTMGZ274VNYy6KWp835MKKAbZTLYE/g:n8t8whH16+1TSDwkkUHcjs8yjFk","tlshash":"04156bd672c2f43181d645a5e17b1203b33e1b9cb80d865cb03daddc2a9e545a2bbbf4","first_seen":"2026-05-25T15:52:34.450023Z","last_seen":"2026-06-02T11:35:28.342392Z","times_seen":1068,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":33,"send":0,"wait":32,"receive":7,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/frontend/assets/de/css/tailwind.min.css","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /frontend/assets/de/css/tailwind.min.css HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Wed, 18 Mar 2026 23:51:48 GMT\r\ncache-control: max-age=2592000\r\nexpires: Tue, 30 Jun 2026 23:45:47 GMT\r\ncontent-encoding: gzip\r\nage: 649\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lGFaMKpWX5oGLIwOnLILczYSvsvyCEnKLDmhmR0ZaXsjBRlgw%2BV1t5ysR4Tvr8jSxWU2oPP9Smw4E%2BQWOVHTiPCLixevQROylbWOjUFmTwYvB1dNZBliFu2F%2BaISFD0%2FBZYzrV7Ckw%3D%3D\"}]}\r\ncf-ray: a049ea8e48efb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88630,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (338)","md5":"c76d96edc3e2e3d106da87e8f0fd9a15","sha1":"b69ecffdfd386fa8ad4f4c6c8146f22df0f00740","sha256":"5a75b9a1dd8043e72e81fae3eeb85b51c874fa12d6551dfadce07969d8caaba7","sha512":"da5c80ce6582916b731f48a91b373713fb9e9bfdfc7e335d842d34311ce91fb902d5cd587fa1eec6174218a11d6131fe476e5adb247aba7d494d0b52b8e44baa","ssdeep":"768:LGNrcMXgh38I7sae2U84ujSsbQavDfFL6dUZ0LsSW6SQZpqtbWA7ho1Kn5MVDJV9:WadmujkSDfF8Zty6A1oE5+s6ME","tlshash":"4e830f17527289bead27e07e37ed911a3339a047981addd5fecd21018fc62b469e2f04","first_seen":"2026-05-09T07:41:35.2168Z","last_seen":"2026-06-01T10:05:26.903046Z","times_seen":79,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.51/js/player.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1142047251?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:56:38.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /p/4.46.51/js/player.module.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://player.vimeo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 23:56:38 GMT\r\nage: 547636\r\nx-served-by: cache-iad-kcgs7200042-IAD, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 10, 96820\r\nx-timer: S1780271799.580158,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 219075\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":892956,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65454)","md5":"6c301d158f9af06e0f26b40c10b53322","sha1":"a66df2c8892d8e883bf01d11f735245c240a1f16","sha256":"b31f9796802f6c19e09c2952e1827dd69bb2c5a042817d4ee8e462b9862bda1b","sha512":"2f17b599df4f79d1d0014125e0c4d14da023c8ab1cc8dec7036dceeed4625396d9b254331b0b3b617d24fe5528ed20769c4d34362a3561f96a38198b52ce18e8","ssdeep":"12288:lUBIPdKt8tmxp9QEH16+1TSDwjd4L+RRYPTMGZ274VNYy6KWp835MKKAbZTLYE/g:n8t8whH16+1TSDwkkUHcjs8yjFk","tlshash":"04156bd672c2f43181d645a5e17b1203b33e1b9cb80d865cb03daddc2a9e545a2bbbf4","first_seen":"2026-05-25T15:52:34.450023Z","last_seen":"2026-06-02T11:35:28.342392Z","times_seen":1068,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":55,"dns":0,"connect":16,"send":0,"wait":14,"receive":44,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.51/js/player.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1141149756?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:56:38.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /p/4.46.51/js/player.module.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://player.vimeo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 23:56:38 GMT\r\nage: 547636\r\nx-served-by: cache-iad-kcgs7200042-IAD, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 10, 96821\r\nx-timer: S1780271799.581726,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 219075\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":892956,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65454)","md5":"6c301d158f9af06e0f26b40c10b53322","sha1":"a66df2c8892d8e883bf01d11f735245c240a1f16","sha256":"b31f9796802f6c19e09c2952e1827dd69bb2c5a042817d4ee8e462b9862bda1b","sha512":"2f17b599df4f79d1d0014125e0c4d14da023c8ab1cc8dec7036dceeed4625396d9b254331b0b3b617d24fe5528ed20769c4d34362a3561f96a38198b52ce18e8","ssdeep":"12288:lUBIPdKt8tmxp9QEH16+1TSDwjd4L+RRYPTMGZ274VNYy6KWp835MKKAbZTLYE/g:n8t8whH16+1TSDwkkUHcjs8yjFk","tlshash":"04156bd672c2f43181d645a5e17b1203b33e1b9cb80d865cb03daddc2a9e545a2bbbf4","first_seen":"2026-05-25T15:52:34.450023Z","last_seen":"2026-06-02T11:35:28.342392Z","times_seen":1068,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":49,"dns":3,"connect":16,"send":0,"wait":39,"receive":26,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/2089664733-5b0090c21f749478bc42a4eb4d976974b8002e4c4ede9e942f055bcfb8d1e8c2-d?mw=1200\u0026mh=660","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1142047251?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:56:39.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /video/2089664733-5b0090c21f749478bc42a4eb4d976974b8002e4c4ede9e942f055bcfb8d1e8c2-d?mw=1200\u0026mh=660 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"53de704f428d34c8a0d2533b0503a75b\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\nage: 282420\r\ndate: Sun, 31 May 2026 23:56:39 GMT\r\nx-served-by: cache-dfw-kdal2120119-DFW, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 21, 0\r\nx-timer: S1780271800.518628,VS0,VE1\r\nvary: Accept\r\ncontent-length: 33308\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":33308,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"53de704f428d34c8a0d2533b0503a75b","sha1":"4bd9f1b5044020541682a784e049d4c9d1244439","sha256":"387b54464ad2cb793515574e8ddeb2c42df54f1bb5ff31f665e236df30abe66d","sha512":"1089852388564ec1d47105030e4b9b8f658cfff7999cff9bcf62c88b914d11fb02a433c41473c4e0d9d69ca53168663cc6fa0e8e8164ae893d90aadb2eb2ede3","ssdeep":"768:9kx0jKFuUQwGNw6KnqivlMW4+DYu1xPU/aqcHl3VKu7U:9kpuNgRrMW4+DYUOvi6","tlshash":"53e2013d873ed503e4d0047b2e524b146bfabc6318e05871bc2e49f74f221ea86675d5","first_seen":"2026-05-31T23:15:32.74408Z","last_seen":"2026-06-01T10:05:26.89709Z","times_seen":14,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/frontend/assets/de/js/forms.js","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:41.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /frontend/assets/de/js/forms.js HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/frontend/assets/de/js/deferred-imports.js\r\nCookie: XSRF-TOKEN=eyJpdiI6IlRtWEFXQkZxUXdHYmdac2lDUHM5SHc9PSIsInZhbHVlIjoiSmpmWW5hK2tPQ2JXeHA3S1BsV3dMNVI1L1VENkI3NUV1Q00xL0FiblFwK2pIMVlQcUtMOEpJWTBUWktWZUtmTlV0ajZjNzZIVTV4ZFZhUURzYmkrU2N5N1ZrRlNvTkpXbHlWek4xbVlQaEVYdThDSEQxZUF1TDArUGIza2VRNUMiLCJtYWMiOiI1Y2ZjMzdiNmU1MzA5NzllYjdiZGI1OWNlNzc2ZmVjYTUxZDlhZDdiMDVmZDBjMjZiZDY1ZjgxNWU3Y2U0ZGY2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5UcDlHM0w2aEdXdjExUTNVTjNYUWc9PSIsInZhbHVlIjoiWXk1TWs0VjdBYm1VTG9IdVV4b2k2Zjh3QXNuOXVDSi9xMkJydVRQLzJnR05nQlRKVldnR0FPYlFqSXgzb1VPM3E3UWZJQXdNUUY2L0lqdktpbUNFUHVvd1E5Mk1mWVEwdVZGUFBjcmQ3MU5rVlJKSUdXVGFldTJEdXJPNmRiT2siLCJtYWMiOiJlYTVjNzc2ZGQ3MTk3YjNjNmNlMmY3ZWUxYjczZmQ2YmNhZDc4NzZiZDE5NGY2M2IyYzNiOGMwNDhkZTRkYzZmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:41 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Fri, 13 Mar 2026 05:05:58 GMT\r\ncontent-encoding: gzip\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UrjgCpUh4%2FGDSn0Bnrt8H0WFYdTvOljgw5gkvt5OXuFUmYhlf3fi1nVSTkDy1nPUlz3YDOZtR9nYvbapYdgTS%2FjvqsPqupoUuPbFsDqmGhR9vQ5rP%2FwUDuxbTGRO2b9sDqqPvyaHgQ%3D%3D\"}]}\r\ncf-ray: a049eaa63ad9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7614,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"311cc8bbb57cf1048f70b036cf6bfd70","sha1":"576fd8aa56ecf0d01015f6b15b29afbac4569d83","sha256":"668ed47288df834eaffcf666d3463cb39a3c53b52f8db94b8f1eb99a73e19cc0","sha512":"b7e8b2bd654cbeb43474a3520937750909cb6049ceb8da4c95d24ac13da0a4980052a09b0fe41f6f2ebae498b0564f4f51897b80c8a71ee412a586917acc984e","ssdeep":"192:wFzWhJL6YQRR9JYvGJ64U/8tkUCb+EWPH9ZZisEqN:QWhJOF9OO5U/EkUCbiH9ZZZl","tlshash":"f0f1009921fa45394db321fcafc7650229293027188dde547e4ca3106fc9bed6bf0b98","first_seen":"2026-05-03T18:34:41.364367Z","last_seen":"2026-06-01T10:05:26.905146Z","times_seen":732,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/frontend/assets/de/js/sliders.js","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:41.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /frontend/assets/de/js/sliders.js HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/frontend/assets/de/js/deferred-imports.js\r\nCookie: XSRF-TOKEN=eyJpdiI6IlRtWEFXQkZxUXdHYmdac2lDUHM5SHc9PSIsInZhbHVlIjoiSmpmWW5hK2tPQ2JXeHA3S1BsV3dMNVI1L1VENkI3NUV1Q00xL0FiblFwK2pIMVlQcUtMOEpJWTBUWktWZUtmTlV0ajZjNzZIVTV4ZFZhUURzYmkrU2N5N1ZrRlNvTkpXbHlWek4xbVlQaEVYdThDSEQxZUF1TDArUGIza2VRNUMiLCJtYWMiOiI1Y2ZjMzdiNmU1MzA5NzllYjdiZGI1OWNlNzc2ZmVjYTUxZDlhZDdiMDVmZDBjMjZiZDY1ZjgxNWU3Y2U0ZGY2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5UcDlHM0w2aEdXdjExUTNVTjNYUWc9PSIsInZhbHVlIjoiWXk1TWs0VjdBYm1VTG9IdVV4b2k2Zjh3QXNuOXVDSi9xMkJydVRQLzJnR05nQlRKVldnR0FPYlFqSXgzb1VPM3E3UWZJQXdNUUY2L0lqdktpbUNFUHVvd1E5Mk1mWVEwdVZGUFBjcmQ3MU5rVlJKSUdXVGFldTJEdXJPNmRiT2siLCJtYWMiOiJlYTVjNzc2ZGQ3MTk3YjNjNmNlMmY3ZWUxYjczZmQ2YmNhZDc4NzZiZDE5NGY2M2IyYzNiOGMwNDhkZTRkYzZmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:41 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Fri, 13 Mar 2026 05:05:58 GMT\r\ncontent-encoding: gzip\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RDtQmV%2FaYf0OOYoEqYO9Rv5ruuH7TleO9sy8flagqOo6w49mnkKIJg8VAlo3i%2Bm8hbLxrrUHsBEDyRqTkTYN%2BvY6UV5O0ixhyQXImvTOBAZH7K5LpeGmKwget7xose4FjQ9i%2F2dMZw%3D%3D\"}]}\r\ncf-ray: a049eaa64adbb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4454,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"67dd1e2333e167a77697aca034eb3df6","sha1":"306594dfb8433db362be7a689933e0eeca162f48","sha256":"eede0d06ab82379d31524d842f64e1ac779e3b3e5b0b57c026290af86649b706","sha512":"7fc94d65c296988603ad1d10539e40a52db78e8ddea794bc22ecd118084675d2fb7fb3ee16aeac57a10443e95af4db7a2a55ce5b0bbe1d2b425163bcfb553f07","ssdeep":"96:hWrrPGI8yDdWTAAOxlfWG0eTnCa9JeUW7Y:hWvPG/eeA5xlZCa2M","tlshash":"ec910366303223358a6742edae0bcc41e2dad0477905d581f58e471a8fc6faca6e5dfc","first_seen":"2026-05-03T18:34:41.351704Z","last_seen":"2026-06-01T10:05:26.849255Z","times_seen":732,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.51/js/vendor.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1142047251?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:56:39.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /p/4.46.51/js/vendor.module.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://player.vimeo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f.vimeocdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 23:56:39 GMT\r\nage: 547636\r\nx-served-by: cache-iad-kjyo7100159-IAD, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 12, 96959\r\nx-timer: S1780271799.144296,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 95419\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":327216,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65422)","md5":"3e6cb7907b3bb24aa5b1a7482cb0c2a0","sha1":"2ede8cdcdfe0563eca5f73a51d63021f865d0097","sha256":"de1befcea3c34e111929d81d7fa0a511766e4429db742329de97475df99a36f9","sha512":"065e19f5eca254d4a93aadf0d6f150409b508ff630a67a84f716cd1e31cd0912c9eb06c8f8552935dcbfd6d18adf4afd7d0c1edd17158eb40716326020c3fabb","ssdeep":"6144:lxrQb8XM5U5dAbYwlkc9IERRcRDZx12r/g5lpc:lx/85ucTcPrLm","tlshash":"5c64e7dcb2d6f07143e764a6403f200bf23a5e15a84d8454e26ae4d57cb9a4e823bf7d","first_seen":"2026-05-25T15:52:34.485083Z","last_seen":"2026-06-02T11:35:28.281566Z","times_seen":1067,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141150117/outro?on_site=0\u0026type=videos","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://player.vimeo.com/video/1141150117?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:56:41.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 11:55:53 GMT","end":"Thu, 06 Aug 2026 12:55:51 GMT"},"fingerprint":{"sha1":"D6:E1:3F:D8:FD:5C:3B:D4:99:72:24:5C:10:67:DE:50:68:00:1E:9F","sha256":"AA:99:7A:5D:AA:D6:C8:12:18:9B:D4:1B:A5:A6:F7:08:E5:D6:D0:48:83:D8:B3:BD:3B:1D:B6:61:E3:6E:08:3E"}}},"request":{"raw":"GET /video/1141150117/outro?on_site=0\u0026type=videos HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/video/1141150117?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:56:41 GMT\r\ncontent-type: application/json\r\nset-cookie: __cf_bm=DRCRJIhvA24ZSl24fkWBc8rH71gr65rGvZMB6bxORFU-1780271801.1758182-1.0.1.1-C.BL5opIJuULs5xYw11hsax5YESVXH3nrAIM.kySp_1.xJL8iG2wA1PJFtwGKBQIbgER7FEKBxkRmaPcD8mElsbKwV2jb.lNhhoCihMubkme2irMEnM.5OGZ_ZpNz_fa; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Mon, 01 Jun 2026 00:26:41 GMT\n_cfuvid=P9z9fPOLpniwtr5nRKj2c56TCcfEn0iow_9OwRqgcbU-1780271801.1758182-1.0.1.1-zYjgS3Z9IQPoqGlcj5Jw3hVxV5_h1eVX9whtkMCc6sk; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com\r\ncf-ray: a049eaa55fb75693-OSL\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://player.vimeo.com/video/1141150117?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Referer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, x-requested-with\r\naccess-control-allow-methods: GET, POST, PUT, OPTIONS\r\naccess-control-max-age: 86400\r\ncontent-security-policy: default-src 'self'; script-src 'self' https://f.vimeocdn.com; style-src 'self' https://f.vimeocdn.com; img-src 'self' https://f.vimeocdn.com https://i.vimeocdn.com; report-uri /_csp\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-64c8598c9b-bbgxd\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-64c8598c9b-bbgxd\r\nx-link-match: 108\r\nx-player-backend: g\r\nx-served-by: cache-iad-kjyo7100064-IAD, cache-bma-essb1270063-BMA\r\nx-timer: S1780271801.195805,VS0,VE167\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":730,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4edfc4854b6ce96169ec257b5eae3fe7","sha1":"924a77bd3ce8fc5f1bf237b3d117b0cf769a9116","sha256":"e143aca201bdfe0a5f9eea1531c14d69c2e7ee698c7782dfdff76d6bac17eb6f","sha512":"427473290a62303fb8a2904931d0639fda327076be6a4f284a4e2607238c26ae9205cfc433c900cb7594ed1dbda0c5e158f095cca033b771024ee4675383f72d","ssdeep":"","tlshash":"4001f4f752d408f5a382e3d65ecdb01b5317907addc1699a59175c4c4aed0db34442a1","first_seen":"2026-05-31T23:57:12.290855Z","last_seen":"2026-05-31T23:57:12.290855Z","times_seen":1,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141150276/outro?on_site=0\u0026type=videos","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://player.vimeo.com/video/1141150276?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:56:41.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 11:55:53 GMT","end":"Thu, 06 Aug 2026 12:55:51 GMT"},"fingerprint":{"sha1":"D6:E1:3F:D8:FD:5C:3B:D4:99:72:24:5C:10:67:DE:50:68:00:1E:9F","sha256":"AA:99:7A:5D:AA:D6:C8:12:18:9B:D4:1B:A5:A6:F7:08:E5:D6:D0:48:83:D8:B3:BD:3B:1D:B6:61:E3:6E:08:3E"}}},"request":{"raw":"GET /video/1141150276/outro?on_site=0\u0026type=videos HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/video/1141150276?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:56:41 GMT\r\ncontent-type: application/json\r\nset-cookie: __cf_bm=kLx8_CCYrWk_IO.XaG.M0diMaSAr.yiWIc7MlH6nIXo-1780271801.3281682-1.0.1.1-snh3Tmsoeeprf9e7EjYE4yJ5nA8950MFRB_EMh1rfh6YgnKNhPjVAXGiV9yCjttPP9RTPRNe0d0wj9XKJ7QGjy1asCGqYAfn1zFyIy1AkB5AG7iy9Tp._7dOKr7OKWI_; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Mon, 01 Jun 2026 00:26:41 GMT\n_cfuvid=rg.YPKdvcX087_h_fokZ20EwjPqRKWOa_ymt6ISXgjQ-1780271801.3281682-1.0.1.1-zMZkDlxVWxQFKd6tStBkRan6x0pCOxf9jC2nbkanthE; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com\r\ncf-ray: a049eaa6487e5693-OSL\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://player.vimeo.com/video/1141150276?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Referer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, x-requested-with\r\naccess-control-allow-methods: GET, POST, PUT, OPTIONS\r\naccess-control-max-age: 86400\r\ncontent-security-policy: default-src 'self'; script-src 'self' https://f.vimeocdn.com; style-src 'self' https://f.vimeocdn.com; img-src 'self' https://f.vimeocdn.com https://i.vimeocdn.com; report-uri /_csp\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-64c8598c9b-sggn7\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-64c8598c9b-sggn7\r\nx-link-match: 108\r\nx-player-backend: g\r\nx-served-by: cache-iad-kcgs7200061-IAD, cache-bma-essb1270037-BMA\r\nx-timer: S1780271801.346833,VS0,VE150\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":730,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4edfc4854b6ce96169ec257b5eae3fe7","sha1":"924a77bd3ce8fc5f1bf237b3d117b0cf769a9116","sha256":"e143aca201bdfe0a5f9eea1531c14d69c2e7ee698c7782dfdff76d6bac17eb6f","sha512":"427473290a62303fb8a2904931d0639fda327076be6a4f284a4e2607238c26ae9205cfc433c900cb7594ed1dbda0c5e158f095cca033b771024ee4675383f72d","ssdeep":"","tlshash":"4001f4f752d408f5a382e3d65ecdb01b5317907addc1699a59175c4c4aed0db34442a1","first_seen":"2026-05-31T23:57:12.290855Z","last_seen":"2026-05-31T23:57:12.290855Z","times_seen":1,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/dashboard-assets/css/disclaimer.css","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /dashboard-assets/css/disclaimer.css HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Mon, 27 Apr 2026 14:12:07 GMT\r\ncache-control: max-age=2592000\r\nexpires: Tue, 30 Jun 2026 23:45:47 GMT\r\ncontent-encoding: gzip\r\nage: 649\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ro3%2B%2Bbsx6zQrQhqKtGvWd%2FDsx9gux81MVMZ6XsyZ51rOHVH0jWh1p%2FMQh1GUcFnWSC3nnuSSOtQEFS1YQSRF1zwtWvbIXQJS%2Frk8urgM9atfaKOcYwWgNFoIcvOGZqC%2BXdikEyEx9A%3D%3D\"}]}\r\ncf-ray: a049ea8e48edb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1538,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"81157dd8c0e81ac2b6dff5a554dff6a1","sha1":"4767f0372c03eb2db3cf2705c15fd8bac00bf423","sha256":"1b576ad8f27ee3d9bdc8beef2df0ea289bd98632237049bd9580e57ade70ea5a","sha512":"3e9ed8987ed15123623ea8a153382be1995970e9217900532e9caccbd2398218553f779fd80bb60c524325ecc11880729eadbce4f08020912c55267abb8ab2ef","ssdeep":"","tlshash":"3b31a0df25630a11788dea9c5fa643455a248087e30ec8593fdc21f99f4e3d9c922b9c","first_seen":"2026-05-02T23:33:09.791669Z","last_seen":"2026-06-01T10:05:26.893554Z","times_seen":814,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/flags/pt.svg","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /flags/pt.svg HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncontent-encoding: gzip\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wbvgJnbUG2ZfAnMr0UVLHdbRKt6TLhuSZfN%2Bzfu%2BkX71bqyirVJQ3uUEU2YBVqmNBmt5A3DVHmVzaRSs%2BCyY%2BGjHELaxEY9wjB%2B01eJ%2FJGkHE0f%2FCBLE2I3ViCCW3uggoIyGfXTXGg%3D%3D\"}]}\r\ncf-ray: a049ea8e790fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1912,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b0f66bd6beaac99c6e2f26c24305a1a2","sha1":"afea1f64055e95d095cb738e07e7751036d3bfe6","sha256":"a97c198d9404f1f1db3616ee0b26980087346fff121db3bb7f13540b90b56c96","sha512":"9bf4d9b22cd6cf9f0fb08b52cd1a93eb9886be4abbd1374bc05e1f3a6b822f127e03c1a5b0256bf0450393ae89406db6ffbfeaf4918ce2a30fd6accf8a212a7f","ssdeep":"","tlshash":"83410de82f2c50dc84a33aad2d25f544d34d50b572a54ec0af8db769d063895f0c7e80","first_seen":"2024-08-19T18:26:58.073415Z","last_seen":"2026-06-06T23:35:00.139611Z","times_seen":4406,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/flags/sv.svg","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /flags/sv.svg HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3xXXQq8r8bIKCTsrF5WgbcNJdSqdBNo8oc9OXUGyTEQe%2FAolbkioAAQ2N6qZ9FSYvxwXK%2FITtZXMqlHl8DOG20RCLimXa0glVfC1CGaIHoeQbRBDrdpi%2BUZl35%2BSf7r1h9qE6J3BGA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: br\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e8913b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":376,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d7b2e74f61e873c0fb690155956025e","sha1":"b515a34c1884d45ef9a2b7f3ebdf731a0613e1c8","sha256":"4a271da0e5fbcda6d2d15092d8a564e8ef3d36ad507215563ac2faa0e8833001","sha512":"e2ccfb1f70a37129ea1a51b5e143e103904df03d6dfd5966f169d13222bd87a2d54b1ec21ac28ef3ce09c1d853f07c16eae7190c263c0e250506ecb8abdff54b","ssdeep":"","tlshash":"97e068d0902ec60a9e1507b95fbc70ca4232b08e298e00fc70c12528f49e7cf2810bb9","first_seen":"2023-05-07T18:03:13Z","last_seen":"2026-06-06T23:35:00.207518Z","times_seen":5229,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/2089664733-5b0090c21f749478bc42a4eb4d976974b8002e4c4ede9e942f055bcfb8d1e8c2-d?mw=80\u0026q=85","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1142047251?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:56:38.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /video/2089664733-5b0090c21f749478bc42a4eb4d976974b8002e4c4ede9e942f055bcfb8d1e8c2-d?mw=80\u0026q=85 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"6f25572871377bbcfafa8e56ab6c1048\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\nage: 527246\r\ndate: Sun, 31 May 2026 23:56:38 GMT\r\nx-served-by: cache-dfw-kdal2120120-DFW, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 25, 0\r\nx-timer: S1780271799.597460,VS0,VE1\r\nvary: Accept\r\ncontent-length: 1275\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1275,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"6f25572871377bbcfafa8e56ab6c1048","sha1":"d8fda397a8d57c3a78a4f85481c01580cf74d527","sha256":"3d634459eb464eee04c0c44ef31c03ee959803fb047423ecfa68c7b38ee168d9","sha512":"fa6c89c6f6b582d396e42f66ef5a31957d81186f491d70eae3819106aa7ab64fb22faa2e4664d2a95a3fd0f3b43c3977bb19041c576602b54c61398ee22b535a","ssdeep":"","tlshash":"5121b725f1309cf1d45c63f9c8a702612192c73517e1a6324466bd01fc4c3fe8e22da6","first_seen":"2026-05-02T15:38:12.040807Z","last_seen":"2026-06-01T10:05:26.887255Z","times_seen":15,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":50,"dns":3,"connect":16,"send":0,"wait":28,"receive":1,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/flags/en.svg","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /flags/en.svg HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncontent-encoding: gzip\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eGlTewvpLGARFuN5KReVQrwTNh4YR8uBfcuM3xD%2Bd3iB64OxUcmNN4v16z7TlMc%2FqwMx99BY%2BzFrvNGhsENWgbKKiNpmH%2BL%2FL2wZBqlT7zXA5hpyCPuZWzbTCXNQZJ74v10jlyTQ6A%3D%3D\"}]}\r\ncf-ray: a049ea8e58fab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1290,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a60a1cb88e021acfa9dae480687c55b4","sha1":"0badf2ca702eb29df29786296160d68ec247af9d","sha256":"c1fcc7d1f18d3597c793170b12cf568207e5d13ad0c2778fd165d33be41c05dc","sha512":"354c148d992a22b729fa7b5736d0f3bde4b477aeaa9d157d692fd190dc57f566f11e2741775534f5a69c3c499e3d8482da01800db5cda5bb95dc5ad49ed88ec4","ssdeep":"","tlshash":"c821ddd2495459c08d8a037cdf1f6bdb72335cce3a584af832d53a165d90bb7341ad85","first_seen":"2025-04-08T10:05:49.355682Z","last_seen":"2026-06-06T23:35:00.107053Z","times_seen":4384,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/flags/pl.svg","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /flags/pl.svg HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DDvFFd0Fu9TjDkH4ebJaywU78DEKZWaYKiKb4G7DB3u2rxEjJ8pGLhJcOptyL%2BkNJSiVbOcsUPjU7KA5M7ervTWPO4S70bv28TmXQkPBxnq9hxte%2FvPlkEjeTz%2ByBwxLvIily4eqbA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: br\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e790eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":310,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"73699780fe17013ad360d5441cba044d","sha1":"3e37c78fdc79aada415a05c2275c0fdf9664f062","sha256":"e03d57c0f7db7d4dc8eb6a2bc359f3a40591b490130bcfa06fba08d514fbdb07","sha512":"94ef034160ec61a32cd5ce34621c993aa3a14f0fd5d60adb807f7c3c116060d45956297c0213950824c0886292669cfb2aec40c110e32e43049ba733490f6e4b","ssdeep":"","tlshash":"c2e0c2d5a4a9ce4e4e1407758ebcb1e9917270df218d04fc71c52a29fd1e38b2811e99","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-06T05:06:17.102841Z","times_seen":5460,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141150117?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 11:55:53 GMT","end":"Thu, 06 Aug 2026 12:55:51 GMT"},"fingerprint":{"sha1":"D6:E1:3F:D8:FD:5C:3B:D4:99:72:24:5C:10:67:DE:50:68:00:1E:9F","sha256":"AA:99:7A:5D:AA:D6:C8:12:18:9B:D4:1B:A5:A6:F7:08:E5:D6:D0:48:83:D8:B3:BD:3B:1D:B6:61:E3:6E:08:3E"}}},"request":{"raw":"GET /video/1141150117?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1 HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ofincredvorn-de.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 23:56:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __cf_bm=3CQaDZwGIS.nM9D0eYmam5u8bRAvOdd0bSDQDe_SvUE-1780271797.9951367-1.0.1.1-cERfereayacUfsXi3lgu00OBpFoTeNFkGCdoXx8tbiJikF2SgBDV97uWON2iSnlmxkJuSvV9.p3yVSSCuT8IgxS8oW0E4I_s04o_xkQZVInK4_7n7ixbzzWp4O_OvsGL; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Mon, 01 Jun 2026 00:26:38 GMT\n_cfuvid=K3PGdcTNiFODN07PakHZimDCdFTiTAqllMal9T.vy98-1780271797.9951367-1.0.1.1-PAFUBVITrelcjpcfPGAPp45_xYAFszCqGuPPmB223ao; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com\r\ncf-ray: a049ea91794b5687-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nlink: \u003chttps://lensflare.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://arclight.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://i.vimeocdn.com\u003e; rel=preconnect; crossorigin, \u003chttps://f.vimeocdn.com\u003e; rel=preconnect; crossorigin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Referer, Accept-Encoding\r\nvia: 1.1 varnish, 1.1 varnish\r\ncontent-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' https://*.vimeocdn.com 'unsafe-eval' resource: https://vimeo.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://browser-intake-datadoghq.com https://src.litix.io https://www.gstatic.com https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.video https://embedder-sdk.wirewax.tv https://*.vimeo.work; style-src 'self' 'unsafe-inline' https://*.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://edge-player5.wirewax.com https://edge-player5.wirewax.video; connect-src 'self' ws: wss: https://vimeo.com https://api.vimeo.com https://csi.gstatic.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://drm.vhx.com/v2/fairplay/cert https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://browser-intake-datadoghq.com https://live-api.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.kollective.app https://*.kollective.app:31015 https://*.kollectivecd.com https://*.paychex.com https://*.hivestreaming.com https://vimeo.magisto.com https://stage.vimeo.magisto.com https://stage-proxy.vimeo.magisto.com https://interactive.create.vimeo.com https://*.wirewax.com https://*.wirewax.video https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com https://player-telemetry.vimeo.com https://lensflare.vimeo.com https://arclight.vimeo.com https://orion.bendingspoons.com https://pico.bendingspoons.com https://*.vimeo.work; font-src data: https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://branding.cdn.magisto.com https://d2by6sxflmuwyq.cloudfront.net https://fonts.gstatic.com https://player.vimeo.com; img-src 'self' data: https://player.vimeo.com https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://*.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://i.vimeocdn.com https://duysrfiajusdh.cloudfront.net https://d263mgllkjh2k2.cloudfront.net https://storage.googleapis.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://studio-media.wirewax.video https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://maps.googleapis.com android-webview-video-poster: https://*.vimeo.work; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com https://captions.vimeo.com https://captions-eu.vimeo.com; frame-src 'self' https://*; worker-src blob:\r\ncross-origin-resource-policy: cross-origin\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-64c8598c9b-wbvlm\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-64c8598c9b-wbvlm\r\nx-link-match: 105\r\nx-player-backend: g\r\nx-served-by: cache-iad-kjyo7100056-IAD, cache-bma-essb1270052-BMA\r\nx-timer: S1780271798.013682,VS0,VE191\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":21979,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13678)","md5":"1dd345655b22d07eac1760658c7b0f52","sha1":"94ca1c36b50b1f9160b49674aaa16515be8a8b59","sha256":"5781666a0c7636e9cc55f262b47dd21a627bef01e42cbdf4ea35addaac347ed5","sha512":"50e2d8b43571c4754cdfdb0dfb0134a68c84dd8eccafab11faeed78aad540dbe66327eee953c0379d62f2bbd4f181fda4cdbe80deefcf0899a832bd44ac4f73c","ssdeep":"384:PcgdeGjLUQHnUHTjUSmGol95MjstnkNdLfiooL+QvWSPqOdM/+MhHFgfELF:p7nuTjBmNLPkNdLfDcvWSCOdehHFgfER","tlshash":"11a21ab76ad19834978849c90f6fbb0d30b65247af40db58b0dea85c5b9fc93b3061d4","first_seen":"2026-05-31T23:57:12.302903Z","last_seen":"2026-05-31T23:57:12.302903Z","times_seen":1,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":219,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/flags/ar.svg","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /flags/ar.svg HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncontent-encoding: gzip\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nu5s%2BOa8YY1cy%2Fv2v60e%2FIZsQkGVW18pEk3TttjRa6UiRrKyGEPLUw%2FFCYLYX2lQuXQlSZZx9Vmga4fwHM5MHCcnQ67C4gWspxfrTbWAi39B6CVC8t0UA2Ozad%2BW6Mj8cajY34o%2F%2BQ%3D%3D\"}]}\r\ncf-ray: a049ea8e68fcb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24678,"size_decoded":0,"mime_type":"image/svg+xml","magic":"ASCII text, with very long lines (24676), with CRLF line terminators","md5":"ff8d7927af846f11628284e5b270adaf","sha1":"06a32de0c63edfc6bec722294be0f50faad3f669","sha256":"0c606d62cbc00b47a56e55ee4dab3c85c4ef81e26b6896a8570020b464237816","sha512":"c25c00856a3beb0dd27dd5dd9e489398d3fb8d39ac8e0229553ae6853c9c13682b58cbdcdc4b6078222707e0bb2cb8365718d927026af77b9dfda6ccdb3d32a3","ssdeep":"384:TWqbKBQivkm1CEaCxcAHitd+aJNeCwdWuCRLWWmoPYK+SwYNR9/SL9iu2:TnbOvtxcAHiCuwgCWrPJbvyiu2","tlshash":"d1b2a6d92770e3d8a6cb996eff319c986a4bf4fe8e7742c0816e9a0459d7dc4e604c00","first_seen":"2025-08-21T23:09:42.503051Z","last_seen":"2026-06-06T23:35:00.11509Z","times_seen":1541,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/flags/fr.svg","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /flags/fr.svg HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4WH9f13ZJ5BfpeL%2FDqR3rkfxE0SjnymV%2BGJwW%2B2eFwb0JpNc3MLRaskKTp9NPDT6082n8911blZIET4%2Ft2XVQJC1m9clTI6JpcMZjS10KAc8Jj6uWeT9kc2MhpJpRjkzd9C%2BKz%2Fx2A%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: br\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e6903b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":352,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e9efcfc75d8fdee9370032dc72e78bcf","sha1":"77d974568d91216054eee046c19c99f71cccb9be","sha256":"a7d195ab974d9555702eede5af18287b5767efcea5fc6dadf529e114dc6fb568","sha512":"12e0fd3eafb13d648d46f86cb8eeeea05e4acccceb2510abb4c888e07284de90503ddd8b3c02513d6fe84b6b66d6600039d56749f316d012cddd0d3d89cff8ea","ssdeep":"","tlshash":"1ae0d885a1a9c9094a16037959bc71d65123708f158905fc74842518bd4e39b3c51aac","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-06T23:35:00.16878Z","times_seen":7818,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/flags/zh.png","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /flags/zh.png HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 870\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncache-control: max-age=31536000\r\nexpires: Mon, 31 May 2027 23:45:47 GMT\r\nvary: User-Agent\r\naccept-ranges: bytes\r\nage: 649\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AB968dzOWqPm78Ooz%2FnwAvmFx%2B1NS7eSzo4yN%2BWAIY%2FvtwNEEdofSUjkkF2sABvYs3JoOiCjvZXlYtjXJ%2BcZd3vnj9K9FBqx0qrVTPWbvFPJKNy7XcIoNAqhJ2iXw2fENoJiiYGyWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e8916b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":870,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"2a2b643bc15c7363c9e58e6b47d7de30","sha1":"506ab44f76022397b3aa9682e8972d7944703d54","sha256":"c63293f5412adc096b8e492e88b8d8edfca5367a491acdd9071ef8d31b4ba9a1","sha512":"a742115cc74831e58f2607fda3ecdf88d8a01d1f9f19d784e1c46a24f9dc23f3a8b5f11251b1c6c911a53a18ee3a01d841e82952f7ab97fcc44b2a0673238e43","ssdeep":"","tlshash":"1f1196ca2450d5d7c2ea12e389ee4b452b4f4afc28560d886c151ab511df1d740e4710","first_seen":"2023-06-10T08:53:38Z","last_seen":"2026-06-06T23:48:54.501939Z","times_seen":4938,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/undefined","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:38.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /undefined HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g1Cwl1%2FiQRfBZbg14UiVhS71v3GbaLViB6%2Fcm2jFsCQPj0aZNYjHOWBT55Vd1x2sYVfyUTT6d02sAJCZuNmCIOZEnSAuYAtpEH9CYOeNR3AFLErhuogCS5T3JO0NMBfDuIK9O7P4cA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, User-Agent\r\ncache-control: max-age=3600, public, s-maxage=86400\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IlRtWEFXQkZxUXdHYmdac2lDUHM5SHc9PSIsInZhbHVlIjoiSmpmWW5hK2tPQ2JXeHA3S1BsV3dMNVI1L1VENkI3NUV1Q00xL0FiblFwK2pIMVlQcUtMOEpJWTBUWktWZUtmTlV0ajZjNzZIVTV4ZFZhUURzYmkrU2N5N1ZrRlNvTkpXbHlWek4xbVlQaEVYdThDSEQxZUF1TDArUGIza2VRNUMiLCJtYWMiOiI1Y2ZjMzdiNmU1MzA5NzllYjdiZGI1OWNlNzc2ZmVjYTUxZDlhZDdiMDVmZDBjMjZiZDY1ZjgxNWU3Y2U0ZGY2IiwidGFnIjoiIn0%3D; expires=Mon, 01 Jun 2026 01:56:38 GMT; Max-Age=7200; path=/; secure; samesite=lax\nlaravel_session=eyJpdiI6Ik5UcDlHM0w2aEdXdjExUTNVTjNYUWc9PSIsInZhbHVlIjoiWXk1TWs0VjdBYm1VTG9IdVV4b2k2Zjh3QXNuOXVDSi9xMkJydVRQLzJnR05nQlRKVldnR0FPYlFqSXgzb1VPM3E3UWZJQXdNUUY2L0lqdktpbUNFUHVvd1E5Mk1mWVEwdVZGUFBjcmQ3MU5rVlJKSUdXVGFldTJEdXJPNmRiT2siLCJtYWMiOiJlYTVjNzc2ZGQ3MTk3YjNjNmNlMmY3ZWUxYjczZmQ2YmNhZDc4NzZiZDE5NGY2M2IyYzNiOGMwNDhkZTRkYzZmIiwidGFnIjoiIn0%3D; expires=Mon, 01 Jun 2026 01:56:38 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea928947b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6603,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5391)","md5":"543ac81966d87ac815e08eb0e436d719","sha1":"e35bb4e32ccf08c11a3935084b50660feb835350","sha256":"8cbc10ee9755ef972000f666711a5c4d0e025d3cedf53079ba3bfd8f2b19a968","sha512":"0c6a8f7948f93d4d00b5fbb98f487d7e2ee15d104acd83dfbc884ef9b77826dc7daa27b906640572977750a00cb7ef590ed5cd93e2f40ef4def88b9ff92f1dc3","ssdeep":"96:/J/SNi/FLQVTLKCGWz5NN5PXy0jRdoMCX4SZTdI5:/pV2RKCxnNByTMCX4SZT0","tlshash":"aed1871eeac5101e60d785b7e8d4e64c8916aac3de238bdfb54f7915cf8038719a321c","first_seen":"2023-04-06T17:05:03Z","last_seen":"2026-06-06T17:31:09.900318Z","times_seen":8450,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipinfo.io/?callback=jQuery311023261692022646185_1780271798113\u0026_=1780271798114","fqdn":"ipinfo.io","domain":"ipinfo.io","tld":"io"},"ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:38.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipinfo.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 16:36:00 GMT","end":"Sat, 01 Aug 2026 16:35:59 GMT"},"fingerprint":{"sha1":"06:75:C4:FB:38:6E:E1:2E:FA:EB:1F:53:64:D4:A8:68:81:AA:9A:4A","sha256":"74:4A:07:24:C9:DA:4C:BA:4E:1D:C1:1D:2D:9D:6B:AD:65:55:3E:08:89:78:B2:E0:36:DF:14:3D:B1:7E:BD:21"}}},"request":{"raw":"GET /?callback=jQuery311023261692022646185_1780271798113\u0026_=1780271798114 HTTP/1.1\r\nHost: ipinfo.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ndate: Sun, 31 May 2026 23:56:38 GMT\r\nvary: accept-encoding\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":674,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (393)","md5":"a40b305b3deb3071db8f430bffc3471a","sha1":"0cb9f05adfae1b24161eb6e758eb909a2b13647b","sha256":"b4168a7473d9c618574113f1093e3fdab6c9272835e0f9261e0c9da49fc8e90c","sha512":"df21d15ec561c7440a7e5bf1153b62c5ce871944d5d594c799f1c42543547a9bf953936507d27215ccfe47d94eb4782dd14b5c4e898f230f5e80bc850b08b2e2","ssdeep":"","tlshash":"370170bb54781f3aaabe454c440b8f0a326c692b028175968ea65b2c14495b760f476e","first_seen":"2026-05-31T23:57:12.305849Z","last_seen":"2026-05-31T23:57:12.305849Z","times_seen":1,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":69,"dns":13,"connect":25,"send":0,"wait":151,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.51/js/vendor.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1141149756?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:56:39.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /p/4.46.51/js/vendor.module.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://player.vimeo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f.vimeocdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 23:56:39 GMT\r\nage: 547636\r\nx-served-by: cache-iad-kjyo7100159-IAD, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 12, 96960\r\nx-timer: S1780271799.153965,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 95419\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":327216,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65422)","md5":"3e6cb7907b3bb24aa5b1a7482cb0c2a0","sha1":"2ede8cdcdfe0563eca5f73a51d63021f865d0097","sha256":"de1befcea3c34e111929d81d7fa0a511766e4429db742329de97475df99a36f9","sha512":"065e19f5eca254d4a93aadf0d6f150409b508ff630a67a84f716cd1e31cd0912c9eb06c8f8552935dcbfd6d18adf4afd7d0c1edd17158eb40716326020c3fabb","ssdeep":"6144:lxrQb8XM5U5dAbYwlkc9IERRcRDZx12r/g5lpc:lx/85ucTcPrLm","tlshash":"5c64e7dcb2d6f07143e764a6403f200bf23a5e15a84d8454e26ae4d57cb9a4e823bf7d","first_seen":"2026-05-25T15:52:34.485083Z","last_seen":"2026-06-02T11:35:28.281566Z","times_seen":1067,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.51/js/vendor.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1141150117?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:56:39.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /p/4.46.51/js/vendor.module.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://player.vimeo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f.vimeocdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 23:56:39 GMT\r\nage: 547636\r\nx-served-by: cache-iad-kjyo7100159-IAD, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 12, 96962\r\nx-timer: S1780271799.172366,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 95419\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":327216,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65422)","md5":"3e6cb7907b3bb24aa5b1a7482cb0c2a0","sha1":"2ede8cdcdfe0563eca5f73a51d63021f865d0097","sha256":"de1befcea3c34e111929d81d7fa0a511766e4429db742329de97475df99a36f9","sha512":"065e19f5eca254d4a93aadf0d6f150409b508ff630a67a84f716cd1e31cd0912c9eb06c8f8552935dcbfd6d18adf4afd7d0c1edd17158eb40716326020c3fabb","ssdeep":"6144:lxrQb8XM5U5dAbYwlkc9IERRcRDZx12r/g5lpc:lx/85ucTcPrLm","tlshash":"5c64e7dcb2d6f07143e764a6403f200bf23a5e15a84d8454e26ae4d57cb9a4e823bf7d","first_seen":"2026-05-25T15:52:34.485083Z","last_seen":"2026-06-02T11:35:28.281566Z","times_seen":1067,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/frontend/assets/de/js/loader.js","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /frontend/assets/de/js/loader.js HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w27IS6JY6KFSuWRe1a3%2BwHNSZFlePb1B3ZLBaujMG%2FUxxU5re8g25yHymcpjWCVpxcK2U%2BO1yHaUF9V4G1tDSuJu6G%2BQsX%2BVzenFcl6Uzr9yUp4Aj1Ie2WlDEB8pcDPje%2BcMBpZcKQ%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 14 Mar 2026 21:28:22 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: br\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e58f4b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"7495dbde5ab60ac459b25cc5c0217b0f","sha1":"a3915023aa8e39ab95d7417eef6bdcdedefde3ca","sha256":"80da25369b4c34a14b7deac6d1ca96b307bb42e738f41aea491ccf993ac946a1","sha512":"d95ed327c8180538a84de3b5b3a5fe5d2d261d32db8ceccfd978ecbd999f1ff24cc81955ca6e6482746dc8e951df3019f84457874652e13fff3454458d03c23c","ssdeep":"","tlshash":"aaf0d11a231749a48bf6c66ba3718381febe6133e445d486359f74c07f709d45065cd8","first_seen":"2026-05-03T18:32:03.601612Z","last_seen":"2026-06-01T10:05:26.903614Z","times_seen":812,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/2088418698-580416bc8f029c0f2282a6a40e96ec8f1b44d6ce8e9d05ed0a0061ffc8f2a742-d?mw=80\u0026q=85","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1141150117?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:56:38.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /video/2088418698-580416bc8f029c0f2282a6a40e96ec8f1b44d6ce8e9d05ed0a0061ffc8f2a742-d?mw=80\u0026q=85 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"2e5819eb5edd62aa954c7b9fa9a6c8a7\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\nage: 577092\r\ndate: Sun, 31 May 2026 23:56:38 GMT\r\nx-served-by: cache-dfw-ktki8620042-DFW, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 85, 0\r\nx-timer: S1780271799.601651,VS0,VE1\r\nvary: Accept\r\ncontent-length: 3671\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3671,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"2e5819eb5edd62aa954c7b9fa9a6c8a7","sha1":"edd1a132939101f386b383b0c8ede6e5e1990892","sha256":"0b2836aa14fe4057c397964346b067ffb382bd92da2d8730a6ce3b755630b7d9","sha512":"7a2ced69e456e50ab201d0419cce23ad80509e7ee472d34a2329b21110071d1d805e59f2ffcebe8808c193b7a63348e600d888e71ca782b557e7023524986b9f","ssdeep":"","tlshash":"bc717d1bafcddc15e12d0339811e8a7048a65051a220eeb74f403fa455be0679c1f691","first_seen":"2026-05-02T15:38:12.016526Z","last_seen":"2026-06-01T10:05:26.887943Z","times_seen":15,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":27,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/2088418528-db455c0c19851feb110ea5686b09619b3385e1c3801117afbdb1fd6d5d1a9b60-d?mw=80\u0026q=85","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1141149904?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:56:38.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /video/2088418528-db455c0c19851feb110ea5686b09619b3385e1c3801117afbdb1fd6d5d1a9b60-d?mw=80\u0026q=85 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"22657a102f8518d524262a70929d2702\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\nage: 282403\r\ndate: Sun, 31 May 2026 23:56:38 GMT\r\nx-served-by: cache-dfw-kdal2120095-DFW, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 38, 0\r\nx-timer: S1780271799.593937,VS0,VE1\r\nvary: Accept\r\ncontent-length: 2807\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2807,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"22657a102f8518d524262a70929d2702","sha1":"95222732fd08d35ef25ea14c51a315d08961ae4a","sha256":"b027354e280b6633ddc3e2f13e0792070a5619386a1c31364a1601d82c197cb2","sha512":"43d9552c55fe20ae6caa76fb5bb58a139386046d828267c9bee525dbcd073c1feed3d20528044593068633c970ab3e86525ac7c283d75c7c41cae0002a97b15a","ssdeep":"","tlshash":"83516c3ad3bb55c3e03c63310dfe9a212692e64682a6060eb3713749611ccf80969fe3","first_seen":"2026-05-02T15:38:12.035473Z","last_seen":"2026-06-01T10:05:26.840346Z","times_seen":15,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":51,"dns":2,"connect":13,"send":0,"wait":27,"receive":1,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.8.3/build/img/flags.webp","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:38.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@25.8.3/build/img/flags.webp HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 28186\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/webp\r\nx-jsd-version: 25.8.3\r\nx-jsd-version-type: version\r\netag: W/\"6e1a-JHPdY1y9Ow2NjbjaGyegi0Qmya4\"\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 23:56:38 GMT\r\nage: 935560\r\nx-served-by: cache-fra-etou8220074-FRA, cache-osl6530-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28186,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4af30d041d95c5a83b016ec6812cda19","sha1":"2473dd635cbd3b0d8d8db8da1b27a08b4426c9ae","sha256":"0e2a53ec4d77d08efa8e8f5fc86b1c25e8f2af39d6b44334e1219ed3e0687a61","sha512":"a43b49d0a8830608a8351b1fe3afc5d468664ad79b674583f6e8f1c647fd5270181e9b1d35cbbbddc0285dc15b49e9d53f34a8bd414d32ae3ad6d659168e095e","ssdeep":"384:NmynJhMcWfubAG0nXDutFs4CIwMB7Po+NKC5NPQic7vmUbx2Kh4du2r0mRo3d0:NmynJhMze5CD+3PZ7AEZPyx2KhSRj","tlshash":"66c2e133be32a6c76d998ab018364ffa97354446bdd359c3a1f6ba98dd374c3294020d","first_seen":"2025-03-06T15:46:52.721855Z","last_seen":"2026-06-06T22:33:59.716179Z","times_seen":2572,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/frontend/assets/de/css/loader.css","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /frontend/assets/de/css/loader.css HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7I%2FLSuZIdau7dL2P3bbOq%2Fwwr2oHthVjpD%2BwqOzHBI%2FnEusG2N3lt3xP7en7JIBcmFwRlgB0btVgAgO6ztAw1NvWqV7zfqWme5WCgBEHmMzvmXS2mVVm4RV2yzBh3je0dPXQSySksw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding, User-Agent\r\ncache-control: no-cache, private\r\npragma: no-cache\r\nexpires: -1\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e48f1b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6603,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5391)","md5":"543ac81966d87ac815e08eb0e436d719","sha1":"e35bb4e32ccf08c11a3935084b50660feb835350","sha256":"8cbc10ee9755ef972000f666711a5c4d0e025d3cedf53079ba3bfd8f2b19a968","sha512":"0c6a8f7948f93d4d00b5fbb98f487d7e2ee15d104acd83dfbc884ef9b77826dc7daa27b906640572977750a00cb7ef590ed5cd93e2f40ef4def88b9ff92f1dc3","ssdeep":"96:/J/SNi/FLQVTLKCGWz5NN5PXy0jRdoMCX4SZTdI5:/pV2RKCxnNByTMCX4SZT0","tlshash":"aed1871eeac5101e60d785b7e8d4e64c8916aac3de238bdfb54f7915cf8038719a321c","first_seen":"2023-04-06T17:05:03Z","last_seen":"2026-06-06T17:31:09.900318Z","times_seen":8450,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.12.5/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:41.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@25.12.5/build/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ofincredvorn-de.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 14763\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 25.12.5\r\nx-jsd-version-type: version\r\netag: W/\"9edd-Mk7PJTbzeB2x937UVL88JxWURU8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 23:56:41 GMT\r\nage: 1731094\r\nx-served-by: cache-fra-eddf8230046-FRA, cache-osl6530-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40669,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26135)","md5":"584b32aaa35c260a3b4ddacfce274a42","sha1":"324ecf2536f3781db1f77ed454bf3c271594454f","sha256":"990fdaa51ed5c86f92d670ab5a79dbf7415f34900dc2f443c5a03dca94479475","sha512":"bca5c9cdfd2562a5a1d31e26c974022172e14ebd599e30d3daf091d27a266a820a025b2ea1e1329bf18be3489c51aafca5025db638631452fee03afedd8f8a26","ssdeep":"768:mYJ0FRsgH7XpwJxK6jk4ixVDQtwnixrUT2PXIh+vH/kvzas:mcgHl6Q4ixVDQAsrcGgmHMas","tlshash":"f603b52d6316672babfd8155f4e4a582de6f7a460944886c3dac8fcb0098dc379b3734","first_seen":"2025-11-18T18:36:54.272556Z","last_seen":"2026-06-05T10:07:59.100576Z","times_seen":970,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/flags/ru.svg","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /flags/ru.svg HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FnhSLatIUc7mFA7nK6bW5QfFBIUaQj9Oz11P082%2FLPZUABALgY8vh4yJOfHmQNox%2FtfPD5JST9ISQ4bLj3%2BtItWxqnRTYQ1TpIFKmy%2FwIBJIzP56RUsOqMD%2FzS7gg7MQwgAOLZX8YA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: br\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e7911b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"42103243a1d4c3f2e823e99f3c00aaa4","sha1":"1d95a227efb867c8b3dfa2902ea8a803f3fd3519","sha256":"0a720bc83f72d17849bd213570ed808ae6b430fa5f3d50dc7fdb32413f7ade01","sha512":"752fcf59700e20bed16831a684eef542a1fd525d73078c97894a6e7b3e2009296af1f4b31f2da100aa8403b3aebf3fff464cd8c1c6330a3b6da36796e2b70cd7","ssdeep":"","tlshash":"39e0d886a4e989095a1947694eec71d6406270ce218d01fd70853529fe4d3db2451aa8","first_seen":"2023-05-24T00:34:39Z","last_seen":"2026-06-06T23:35:00.206177Z","times_seen":5289,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/frontend/assets/de/js/lazyload.min.js","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /frontend/assets/de/js/lazyload.min.js HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Fri, 13 Mar 2026 05:05:58 GMT\r\ncontent-encoding: gzip\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qUPf7wnBUue%2B%2B8mtRlAMQwFGvNEvvLyHk2wJvxOzBLEbblwCQusxClsZcmcLHVk0y85h7TNiUdyCMmwYyHHwgiUo0MtYfaYi4n9siBfLcoG0%2Fb3iDs6IzJwSUAuKZCI%2FD3gP95pyZg%3D%3D\"}]}\r\ncf-ray: a049ea8e58f5b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13751,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"02904458ba58d516134326a81c45c920","sha1":"bdbef500dae9927c7018801285d8b07d4aaef92d","sha256":"482427969bb13fb83dd24449a53868f8f51239ad684606639991592972bdd234","sha512":"3198a5ad2e3bb2f4814916b73f0a7316dd070184e201a40b8c53eb98473b3d791b71fb2c399e6f8f3ae6be8045532dc6659ff9cf590cd62bedb61345721e8ec4","ssdeep":"192:Wrr573s4TW1IDJTspjUAEA/UcdvM5khyLPkO21RnaUhklOx0dek7jQMiZtjpSNju:Wrrps4TW1IDqUAEEM5WeUaQFlbtN7","tlshash":"bc52cb8ba2f22438531bf024692bcd097315608f5899ae923d1d626b5f49b39f7f4fc4","first_seen":"2026-05-03T18:32:03.559102Z","last_seen":"2026-06-01T10:05:26.850593Z","times_seen":813,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/flags/hr.png","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /flags/hr.png HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 982\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncache-control: max-age=31536000\r\nexpires: Mon, 31 May 2027 23:45:47 GMT\r\nvary: User-Agent\r\naccept-ranges: bytes\r\nage: 649\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZygSXk1HnvdT58zEIEQxG9WvnyKPyv4QVwBKQyiPSWtgHHR5kjya189M%2FvnhEne8r9E2C5rgliAHkLaOyO31len12pkNM%2BOEpHCdeAjHDy3o7isR8%2BSf82hjfKTs6bWAqgJb7NQ2fA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e6904b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":982,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"41a7b90f600ed32eefb5e620a4f653fc","sha1":"7a6ab7cfc55a1239de75e073430c9634d5c18746","sha256":"63e36970eea32e52849d7b4d3a15d1da36be12ad3078df8c2b848aa7e9baa19b","sha512":"004bddcda655838947c0922be1f74ac3833ca444f3c872c9432232e5660f7ca9288c87acf2d1df19a21a768ae8a04e3f67278f7b6be4998a5e0355f279ba92dd","ssdeep":"","tlshash":"261165dec411043c410b39e6ae9b0bd989b767ac43520a45906db49abc795043ee49a5","first_seen":"2023-06-13T00:33:19Z","last_seen":"2026-06-06T23:48:54.493641Z","times_seen":4950,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.51/js/player.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1141150276?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:56:38.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /p/4.46.51/js/player.module.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://player.vimeo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 23:56:38 GMT\r\nage: 547636\r\nx-served-by: cache-iad-kcgs7200042-IAD, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 10, 96824\r\nx-timer: S1780271799.687872,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 219075\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":892956,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65454)","md5":"6c301d158f9af06e0f26b40c10b53322","sha1":"a66df2c8892d8e883bf01d11f735245c240a1f16","sha256":"b31f9796802f6c19e09c2952e1827dd69bb2c5a042817d4ee8e462b9862bda1b","sha512":"2f17b599df4f79d1d0014125e0c4d14da023c8ab1cc8dec7036dceeed4625396d9b254331b0b3b617d24fe5528ed20769c4d34362a3561f96a38198b52ce18e8","ssdeep":"12288:lUBIPdKt8tmxp9QEH16+1TSDwjd4L+RRYPTMGZ274VNYy6KWp835MKKAbZTLYE/g:n8t8whH16+1TSDwkkUHcjs8yjFk","tlshash":"04156bd672c2f43181d645a5e17b1203b33e1b9cb80d865cb03daddc2a9e545a2bbbf4","first_seen":"2026-05-25T15:52:34.450023Z","last_seen":"2026-06-02T11:35:28.342392Z","times_seen":1068,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.51/js/vendor.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1141150276?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:56:39.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /p/4.46.51/js/vendor.module.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://player.vimeo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f.vimeocdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 23:56:39 GMT\r\nage: 547636\r\nx-served-by: cache-iad-kjyo7100159-IAD, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 12, 96963\r\nx-timer: S1780271799.222491,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 95419\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":327216,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65422)","md5":"3e6cb7907b3bb24aa5b1a7482cb0c2a0","sha1":"2ede8cdcdfe0563eca5f73a51d63021f865d0097","sha256":"de1befcea3c34e111929d81d7fa0a511766e4429db742329de97475df99a36f9","sha512":"065e19f5eca254d4a93aadf0d6f150409b508ff630a67a84f716cd1e31cd0912c9eb06c8f8552935dcbfd6d18adf4afd7d0c1edd17158eb40716326020c3fabb","ssdeep":"6144:lxrQb8XM5U5dAbYwlkc9IERRcRDZx12r/g5lpc:lx/85ucTcPrLm","tlshash":"5c64e7dcb2d6f07143e764a6403f200bf23a5e15a84d8454e26ae4d57cb9a4e823bf7d","first_seen":"2026-05-25T15:52:34.485083Z","last_seen":"2026-06-02T11:35:28.281566Z","times_seen":1067,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/flags/sk.svg","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /flags/sk.svg HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncontent-encoding: gzip\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zQwKGMg6u7j0MI9XDFsU7VfSSR9O84kRL4XMKtPWkcZdQbI%2BUxoz%2BBQJ0k%2F%2BP84OTub7RszRW75YAvRbomamUGZniwp1AoNXt54ix7dxWVrdrFyWdY0G%2Fs8dgsOil918fyTZzpoZAA%3D%3D\"}]}\r\ncf-ray: a049ea8e7912b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1637,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6ed3cf547a2f8579e45330fde3095537","sha1":"dfc6023844bb5a110c3d9219c82dd326940ae055","sha256":"c1b338efd99956c2ae0c62fcf559b2d956fa11f71751985d62c9942b061dad6a","sha512":"4ed0e6912bfa55a7bee5b4f6318c3878bff3bf23d5a220225b5e19d207d7f55bd816f06dfb8daf8a5eb4c2e266d0fcce8f40d0f797c81d97a2517e5eba2a3be4","ssdeep":"","tlshash":"193176c55178aa4849c7a76fde7cb8959015a0fd21f940fd7a4a470c956caceaf00cb4","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-06T23:35:00.234827Z","times_seen":4978,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.51/css/player.css","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://player.vimeo.com/video/1141150276?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:56:38.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /p/4.46.51/css/player.css HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 23:56:38 GMT\r\nage: 547636\r\nx-served-by: cache-iad-kcgs7200070-IAD, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 14, 97339\r\nx-timer: S1780271799.539927,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 24355\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":237168,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65490)","md5":"3782a75bc9b2a6b20eeee4c890b88187","sha1":"600b65aca90f6bffd226202b7ca5cc79d12e7044","sha256":"ea96c833f438dbcade5e14605a039381f1374addcb55f6e5e0008c9602776a71","sha512":"985cafe316ff168fd19cc73e424e59f72226f244973f850bb8ca02633651d5be4728ce3d4760c965245bfbc3797b38162051d6a6308608d368874a159480aab6","ssdeep":"1536:Td1fPBcFdFgF7FW8RT8RX8X98z98pl98pgv5BencLCZspnq6kUuLdvHIhRGWdHHy:5v5BOwnq6kUu5DlxczQ","tlshash":"a734a1d526f6552b605e6ee2f4c21848fdbc43dc97226f8af00e79cd85ca1a60dfd206","first_seen":"2026-05-25T15:52:34.479386Z","last_seen":"2026-06-02T11:35:28.343629Z","times_seen":1087,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":121,"dns":35,"connect":26,"send":0,"wait":32,"receive":4,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1142047251?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 11:55:53 GMT","end":"Thu, 06 Aug 2026 12:55:51 GMT"},"fingerprint":{"sha1":"D6:E1:3F:D8:FD:5C:3B:D4:99:72:24:5C:10:67:DE:50:68:00:1E:9F","sha256":"AA:99:7A:5D:AA:D6:C8:12:18:9B:D4:1B:A5:A6:F7:08:E5:D6:D0:48:83:D8:B3:BD:3B:1D:B6:61:E3:6E:08:3E"}}},"request":{"raw":"GET /video/1142047251?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1 HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ofincredvorn-de.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 23:56:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __cf_bm=EbGUP.LZJCWd3dd6FS38TFtaHJMaMCbEcpEE4gczHgQ-1780271797.9808154-1.0.1.1-7maYGHtVHBs6o0n4095C5m8DNUM5yfkvrMm1m9qXWbdVz1fEeURmcsvvHJzSIeaoNn3K3YByrPQP5_gqdfK872Fpmrqa0g7mIkuS_NJwOO4RVyD9y811nanaSqqG9lmu; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Mon, 01 Jun 2026 00:26:38 GMT\n_cfuvid=HYnN8.8UATGqUyGjOeDCsiIq36TprPmGy9iy835GTn8-1780271797.9808154-1.0.1.1-zX7BzJgj5GTXGjd5jY9wyyzQAPtRDLcxAb9Lf1nxSUI; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com\r\ncf-ray: a049ea9159405687-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nlink: \u003chttps://lensflare.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://arclight.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://i.vimeocdn.com\u003e; rel=preconnect; crossorigin, \u003chttps://f.vimeocdn.com\u003e; rel=preconnect; crossorigin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Referer, Accept-Encoding\r\nvia: 1.1 varnish, 1.1 varnish\r\ncontent-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' https://*.vimeocdn.com 'unsafe-eval' resource: https://vimeo.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://browser-intake-datadoghq.com https://src.litix.io https://www.gstatic.com https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.video https://embedder-sdk.wirewax.tv https://*.vimeo.work; style-src 'self' 'unsafe-inline' https://*.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://edge-player5.wirewax.com https://edge-player5.wirewax.video; connect-src 'self' ws: wss: https://vimeo.com https://api.vimeo.com https://csi.gstatic.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://drm.vhx.com/v2/fairplay/cert https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://browser-intake-datadoghq.com https://live-api.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.kollective.app https://*.kollective.app:31015 https://*.kollectivecd.com https://*.paychex.com https://*.hivestreaming.com https://vimeo.magisto.com https://stage.vimeo.magisto.com https://stage-proxy.vimeo.magisto.com https://interactive.create.vimeo.com https://*.wirewax.com https://*.wirewax.video https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com https://player-telemetry.vimeo.com https://lensflare.vimeo.com https://arclight.vimeo.com https://orion.bendingspoons.com https://pico.bendingspoons.com https://*.vimeo.work; font-src data: https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://branding.cdn.magisto.com https://d2by6sxflmuwyq.cloudfront.net https://fonts.gstatic.com https://player.vimeo.com; img-src 'self' data: https://player.vimeo.com https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://*.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://i.vimeocdn.com https://duysrfiajusdh.cloudfront.net https://d263mgllkjh2k2.cloudfront.net https://storage.googleapis.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://studio-media.wirewax.video https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://maps.googleapis.com android-webview-video-poster: https://*.vimeo.work; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com https://captions.vimeo.com https://captions-eu.vimeo.com; frame-src 'self' https://*; worker-src blob:; report-uri /_csp\r\ncross-origin-resource-policy: cross-origin\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-64c8598c9b-kwjlv\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-64c8598c9b-kwjlv\r\nx-link-match: 105\r\nx-player-backend: g\r\nx-served-by: cache-iad-kiad7000149-IAD, cache-bma-essb1270055-BMA\r\nx-timer: S1780271798.009142,VS0,VE184\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":21992,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13669)","md5":"28e355306c1963287fe44856d396af7c","sha1":"5e3499c1bb7170b9a3a2d6162cb5d0a494f279c0","sha256":"98687b736affb6a6ec0d430478fe9c72d0af158a70530b6f30c47cdb2294c2dd","sha512":"552c46859057f6cefd6f515cd0322b36ffd0ed82802e6ce658f066fe800bde88b60a64c01ab24f6a08e5e04fc064608b444c596e71f49baeaa60ab98f0bb2416","ssdeep":"384:PT0deGj1hFTKCK9TK4KO9aX6oIE9BstnkNdLfiZoNdBWSPqOdM/+MhHFgfEkK:Y9hRKCK5K4KO4X8EekNdLfyCWSCOdehV","tlshash":"b9a23c63a5e1ac254bc9498c0f6bbf0c34b1604b5e88d549b0de995c17bfe93a60b3c8","first_seen":"2026-05-31T23:57:12.313286Z","last_seen":"2026-05-31T23:57:12.313286Z","times_seen":1,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":20,"dns":1,"connect":1,"send":0,"wait":224,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/flags/it.svg","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /flags/it.svg HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cv69fhdq5A1RxQmj1dcxKzcAMft1gezaxK01Kv%2F05hC7SnYFesNSYNXELF%2FThvGFZ%2Fy%2F5fezRC6K9OTaDLtPTx%2BPeC1fXqSkXnF8auslsiYeK%2FXSV%2FxABWAc26a0BeibRr06NKBzKg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: br\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e6908b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":352,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"34ec214f5547e19d4e1fe9d0d638f9c7","sha1":"7ef49fd31ffa7a0ea47e8ad0a2fa2121621baae5","sha256":"ebdeb69d61fd3e3b429eafd9b45b51422b87348d932a7fbcd668975437650fdd","sha512":"95f427b45f9af6fbc409cba7617a3a653ea21bb15bc722a442edc8f9a492914e0eb0e25d113403eff378c7ab9078d3bcd38e9e7cd7bc9c987e8b0da621e2b477","ssdeep":"","tlshash":"96e02084a5a9c9098b16437959bc71da512370cf15cc05fd75c43518bd4d3df3c51a6c","first_seen":"2023-05-10T09:01:08Z","last_seen":"2026-06-06T23:35:00.079482Z","times_seen":7425,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141149904/outro?on_site=0\u0026type=videos","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://player.vimeo.com/video/1141149904?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:56:41.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 11:55:53 GMT","end":"Thu, 06 Aug 2026 12:55:51 GMT"},"fingerprint":{"sha1":"D6:E1:3F:D8:FD:5C:3B:D4:99:72:24:5C:10:67:DE:50:68:00:1E:9F","sha256":"AA:99:7A:5D:AA:D6:C8:12:18:9B:D4:1B:A5:A6:F7:08:E5:D6:D0:48:83:D8:B3:BD:3B:1D:B6:61:E3:6E:08:3E"}}},"request":{"raw":"GET /video/1141149904/outro?on_site=0\u0026type=videos HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/video/1141149904?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:56:41 GMT\r\ncontent-type: application/json\r\nset-cookie: __cf_bm=pg_tsz6Mvn8zIemmVYFAggIitr99AAtuSBBxgMHF0g4-1780271801.2326663-1.0.1.1-ouhB5G3T7ibhrgyFPQygFhsE_Dw.mCkDRedBAeGJ4CHU82mrH9iL6aOwTP65ajdt.kLe0L1eFBdGw7SXS6N8lXh_SOGuEixXyKG.Tee4kUfJtCvOnnYWTx5Tnazk.n5r; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Mon, 01 Jun 2026 00:26:41 GMT\n_cfuvid=PLy3Zq0buzcFUdSrNMFvWha7hafy0Agg0pVHtDJJy3c-1780271801.2326663-1.0.1.1-A1f5PUKCgygNeAh6MQiyW7RJ29_PnvMpX3d5DfxqMlo; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com\r\ncf-ray: a049eaa5bfeb5693-OSL\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://player.vimeo.com/video/1141149904?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Referer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, x-requested-with\r\naccess-control-allow-methods: GET, POST, PUT, OPTIONS\r\naccess-control-max-age: 86400\r\ncontent-security-policy: default-src 'self'; script-src 'self' https://f.vimeocdn.com; style-src 'self' https://f.vimeocdn.com; img-src 'self' https://f.vimeocdn.com https://i.vimeocdn.com\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-64c8598c9b-dhh9v\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-64c8598c9b-dhh9v\r\nx-link-match: 108\r\nx-player-backend: g\r\nx-served-by: cache-iad-kjyo7100151-IAD, cache-bma-essb1270071-BMA\r\nx-timer: S1780271801.252466,VS0,VE165\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":730,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4edfc4854b6ce96169ec257b5eae3fe7","sha1":"924a77bd3ce8fc5f1bf237b3d117b0cf769a9116","sha256":"e143aca201bdfe0a5f9eea1531c14d69c2e7ee698c7782dfdff76d6bac17eb6f","sha512":"427473290a62303fb8a2904931d0639fda327076be6a4f284a4e2607238c26ae9205cfc433c900cb7594ed1dbda0c5e158f095cca033b771024ee4675383f72d","ssdeep":"","tlshash":"4001f4f752d408f5a382e3d65ecdb01b5317907addc1699a59175c4c4aed0db34442a1","first_seen":"2026-05-31T23:57:12.290855Z","last_seen":"2026-05-31T23:57:12.290855Z","times_seen":1,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.8.3/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@25.8.3/build/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 25.8.3\r\nx-jsd-version-type: version\r\netag: W/\"871a-JROK+GPirWm7Ca9OkwCUSfLnXMs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 1516428\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\nx-served-by: cache-fra-eddf8230041-FRA, cache-osl6544-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 12976\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34586,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18251)","md5":"7657299ef4e0a3abdc478c0b9d7075aa","sha1":"25138af863e2ad69bb09af4e93009449f2e75ccb","sha256":"8e184485db8b6a8a741dd831f7bae84644eedf8f0c371172e69721e1236a7cd1","sha512":"eb5e7ae63fb48ea7b543f7339625284b3cc5477b6c8be03667714ebab1eb7c493a1445bae46348d992a4477a2080634c532b16c7b6ae4102e1524e51ab142b6b","ssdeep":"768:U+h03XVqC/iPIqXpwJxsyysdjx2nmY249lHGIw:UiPIsy/tWHG","tlshash":"c0f2f9aeb3646637abfd82a270e54403ae6f79444604043d78bc8ede1399dd171f6b38","first_seen":"2025-10-21T03:51:56.40324Z","last_seen":"2026-06-06T23:43:02.176394Z","times_seen":1354,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":31,"connect":1,"send":0,"wait":2,"receive":1,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/frontend/assets/de/js/config.js","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /frontend/assets/de/js/config.js HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2B4dzxkRNmmlLqcDF7TJU0NGbLbv5K0xwSYPwgjuvb51LsL7tvLBo29Mc%2BjfbMAQqCPXfFcHRD6auTZmoPSvdVBeHN0Mc3V6G4Sf4UWfev51N2mzSmsAgUo2vHivIre5QM%2FU0EKgNA%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 14 Mar 2026 21:28:22 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: br\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e58f3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":782,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"3d4b19fc39d88043bdbb9c096f385843","sha1":"6f41533a8c20e52830c28f9d4cc62e354fc29969","sha256":"ac1a70193e1bc0e8a7ba774ccfbb01a2b0906ec4478d3c94b8dd49eba94b34d8","sha512":"cab9965c797644d298334f1c0bc6a51f5fe22286f97b038839ce5e29777d97ec56bd89466b361f4193466d0b1b76ba997b9943b8b7821bb42b9295e2e34d6e01","ssdeep":"","tlshash":"c401d06fc17488032df2129eba462b29f512423f076cc06a71bd516c2f7a26fd6471c1","first_seen":"2026-05-03T18:32:03.512014Z","last_seen":"2026-06-01T10:05:26.838465Z","times_seen":790,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/frontend/assets/de/js/jquery-3.1.1.min.js","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /frontend/assets/de/js/jquery-3.1.1.min.js HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Sat, 14 Mar 2026 21:39:24 GMT\r\ncontent-encoding: gzip\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J9q%2F%2B2r0MDGIprtYH3G%2BgNZY9vFR2NShWhV5iGICdXmL8HCgZhuIhYF3E4whGyy8r%2BJVljzNqdAEowfej7e5j1KGX4b1aHIkGoj1QQ4snhMmhiWtfZvoLj19zPBNJ%2F2AlD527Un3VA%3D%3D\"}]}\r\ncf-ray: a049ea8e8917b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86709,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32030)","md5":"e071abda8fe61194711cfc2ab99fe104","sha1":"f647a6d37dc4ca055ced3cf64bbc1f490070acba","sha256":"85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf","sha512":"53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5","tlshash":"3183d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-06-06T23:24:10.290273Z","times_seen":143465,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/flags/fil.jpg","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /flags/fil.jpg HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16588\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncache-control: max-age=31536000\r\nexpires: Mon, 31 May 2027 23:45:47 GMT\r\nvary: User-Agent\r\naccept-ranges: bytes\r\nage: 649\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VYJQ01%2F1UTy6WwSOy9aSKpPQ1lZTJCuCWbPu0x%2Bk8O1EfnSDBC0IWu42ocSSCK%2ByE0YSmJQSSC9vJr%2BUgQWQrJTz9N3pJUC2BmTCoyFJSL4rLIE4aAmAgChD7Eg1W%2F0iobbRSQxqfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e6902b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16588,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=13, height=0, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=0], baseline, precision 8, 20x11, components 3","md5":"0ae75b237b6dae635543c467ac8bfe5f","sha1":"5d35f0ce2acc3ead91fe68cfc7128c6e1f5b6654","sha256":"bee53edec9e55d91d851aa59423516050d3a9edbd67d30c35c7bb5a8c5ded0a7","sha512":"7591a08b13cb0c67301f17c6ef567ef0798a2ee97ac9dc3e67957f676e0652c947c2bb09727c623c847720252d271f07c63d630dd974b109b6af56488f6934fa","ssdeep":"192:McgnJzx+gCuVF03jiOkrQy4FwnJzx+gCuVF03bGXbtebIAFKIx0Ny3ajZtzz96OP:McuJzxb7C+JzxPX5WIAFKr9RP","tlshash":"fd720920ffe1be12f1d4323a64d8da458633ddc1e983198a7addec557f21a920d97283","first_seen":"2025-08-21T23:09:42.477784Z","last_seen":"2026-06-06T23:35:00.208728Z","times_seen":1542,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/frontend/assets/de/js/deferred-imports.js","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /frontend/assets/de/js/deferred-imports.js HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MJZli%2BvAin0HLXybICR8tHsU%2FH81hq%2FTgKxFcZ4WzTH2naM%2F%2FxFQB33ew7ps3iF3KOGDdWk5j07HqzBbyXTElD7PTL%2BloBrDzoIhmsZB%2FSqxjGJJLwOCqp1eFT%2F6ht%2Bl91RfNPuK4g%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 14 Mar 2026 21:28:22 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: br\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e58f8b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":892,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"b0ec5ae2cf2a7a7043133c1d9301fadb","sha1":"518d372d4fc783df627d3c5789284ecfca8dbeab","sha256":"b13200f905e155b75d81e059633d6c2bfc45cfe4f1b2199c0970ddc15b5a1d75","sha512":"e22cac350e50d88ea6fffa67e9ebd404fef4c79b0ff7e9c9ad01015e09676c39af37788927916e947d7b49fe0b2131873f43adad6799340d6ee2b3c186b18e20","ssdeep":"","tlshash":"6511493a09078a5544304166ecb7a72df073072323d182a27ebd32486f314175a56b9d","first_seen":"2026-05-03T18:32:03.612818Z","last_seen":"2026-06-01T10:05:26.859713Z","times_seen":790,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/flags/id.png","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /flags/id.png HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 351\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncache-control: max-age=31536000\r\nexpires: Mon, 31 May 2027 23:45:47 GMT\r\nvary: User-Agent\r\naccept-ranges: bytes\r\nage: 649\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qSFxn0pGnPEuMe4ohZmFF538TN2XvCgVi47wNE3N36uQ4ca9xGdWrMuyTCsu694kVotftRvLgGYsHIQHrAXUJhVvltk%2FLfOhCiY4F8Pt%2F2N74qRyqMTbQkRi7ajFbwe%2BK1Lk%2BmIstA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e6906b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":351,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 13, 2-bit colormap, non-interlaced","md5":"fd273ad5f3d1e33a14e6fd37860a58a3","sha1":"a0891a0bb126e310d6f963108c875c52b5f0db5c","sha256":"1fce31ae1ba50ed9e3e01f06dfe4866bd4132847dccbc1de171b455c990636e8","sha512":"daef9968e8706e62a91288c11f8573533868e91a8d858b50bb6baae7f42b30b3c0a97b49ee902c4f28285bfdb6d049b910a997c14af60f495e32f8c16876edf7","ssdeep":"","tlshash":"35e020e1b1709ed0c5472325a5172240fef3ca094fe24504ba69e1448d18fcf5f747d2","first_seen":"2025-08-21T23:09:42.483866Z","last_seen":"2026-06-06T23:35:00.151828Z","times_seen":1541,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/flags/th.svg","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /flags/th.svg HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ReJq1qkkcfEbLE5geIDEk2Zz%2B7AX9puiip9wcriwpUEFmjOPoMHiXxEFSvdHn%2FokHbXRqmz4IqXz4jbPPnEe7o7Yt3n%2Bcr3PJxtGPG6bu4lwKb7CBEqDvqVRpGK9Y1d5S878tEjWfg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: br\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e8915b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":367,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"756f64249f1f943e61bff54780b49cd8","sha1":"e4beba68e98c966f57a6cca0e40915ba60500e23","sha256":"cf1c5911962ac51db0ff4e36a6a91f5ff42c1ba40246ada4067b3b5a846f21b4","sha512":"d8d34a3b82cba3a38c9f4025440e7177ca7ad6347bdff81f1691e88ff0f7e8a58fe3491e2d53e9d433cf685af00af37193c07afd2799fa12aefb54d53ff30498","ssdeep":"","tlshash":"c2e0d8c6a869890e1e140f754dbc75ed5136b0cf214d41fcb1c12629aa4a39f2541a68","first_seen":"2023-05-07T18:03:13Z","last_seen":"2026-06-06T05:06:17.10336Z","times_seen":4180,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/2088418241-d899dff4b93ccce72feaa6e1e92250e1c36f6d6e4d7ebdd5261e2b6a78b3ffdb-d?mw=300\u0026mh=540","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1141149756?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:56:39.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /video/2088418241-d899dff4b93ccce72feaa6e1e92250e1c36f6d6e4d7ebdd5261e2b6a78b3ffdb-d?mw=300\u0026mh=540 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"c9ec7ab5b14f781d278a70ac2e077b57\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\nage: 282402\r\ndate: Sun, 31 May 2026 23:56:39 GMT\r\nx-served-by: cache-dfw-kdal2120043-DFW, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 10, 0\r\nx-timer: S1780271800.915641,VS0,VE1\r\nvary: Accept\r\ncontent-length: 16409\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":16409,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"c9ec7ab5b14f781d278a70ac2e077b57","sha1":"de1044e6a9a6fe517d419602c1647995aa19b4eb","sha256":"e2ce301fdd411e6767b8140c3b97f47f16fcdb7266491892c7feab13fa087b46","sha512":"f9acaff90c22e3ee2a9281efd9d286ae66f732797b60b7789e3dd6875fd1cb19656fc4f2a6cc690ea135ed33654e69796fabc9369273a6e7178a5ac3e850f6a3","ssdeep":"384:VxT5kvuq31z/6eWsAXa/Z0ZW2O70c+/XSf0EHmKHAsnWrv:V8vD1L6eWsAX42p7c+WrHs","tlshash":"7972c08fe5539b62f4972cf31e8317c771d6f0eaa015a96c8c46be6252225850dcc16d","first_seen":"2026-05-31T23:15:32.817319Z","last_seen":"2026-06-01T10:05:26.884291Z","times_seen":14,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/2088418698-580416bc8f029c0f2282a6a40e96ec8f1b44d6ce8e9d05ed0a0061ffc8f2a742-d?mw=300\u0026mh=540","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1141150117?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:56:40.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /video/2088418698-580416bc8f029c0f2282a6a40e96ec8f1b44d6ce8e9d05ed0a0061ffc8f2a742-d?mw=300\u0026mh=540 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"b3b2622a2441b3e9da8414849678647c\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\nage: 957722\r\ndate: Sun, 31 May 2026 23:56:40 GMT\r\nx-served-by: cache-dfw-kdfw8210042-DFW, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 50, 0\r\nx-timer: S1780271800.083590,VS0,VE1\r\nvary: Accept\r\ncontent-length: 18829\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":18829,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b3b2622a2441b3e9da8414849678647c","sha1":"a60c2b7ab31649ab3e4e86fe979457b1f35c0f64","sha256":"6d2046e83fc074244d7e34d1b7825edeedae88dedae4e48c6a9a4ade0cdabe32","sha512":"2fb08e66a61fdf4e956718da4594897aadbdbf3a0ff0ce926cb9b9fc02efbe7fcf69665e2185fb8727c72b3b1eec88b4496500512af0d83d6cf96ca4de975ce5","ssdeep":"384:/mqpF+2Eiv5rnMcK84uPqacTF/nW6osFF+h8RM3tVWdxQe2m:/mq/+2EixgL1tTFPlr+h0M9VKJ","tlshash":"f582d0d4749e2767d0fee078812b7214830cd749d73f084cb79d699d4ead8e089717aa","first_seen":"2026-05-31T23:15:32.729757Z","last_seen":"2026-06-01T10:05:26.836395Z","times_seen":14,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/flags/da.svg","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /flags/da.svg HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c4rnHRTBr3i9Om%2FySdl4qFBbCgHpkv2O2wfXcYFx7C5SP8radcMjCXU7AMNQEKKe1EDpgGeQZgfohapP%2FjLkBUonVgP36G2UkV%2FE0fRatwtEQBHSwHB1ty0Iwoskt9ibsT2nLBhpWA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: br\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e68fdb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":362,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c4d7abcf4c21c729ea9aab45faa1912a","sha1":"6ecbf40cb392204b8c7af284352108b500111969","sha256":"33815e73a3d07b3ae77cec1fdc77a285646e4e730136632f0ff5de6f8697c98c","sha512":"6d928963ac9562306e34f006030ddb4430cf81f3e37d8a5d805f90d5cc89659457e9f98257a2ec971205cf044387b7c3e87847c85bf7760ecfa2b667bdab3230","ssdeep":"","tlshash":"f6e0c09260ae8a0d4e1543205a3c70e2526770cf218e04fcf0c13e28fd667ab3800f5c","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-06T23:35:00.233518Z","times_seen":5108,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/flags/ro.svg","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /flags/ro.svg HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qWePK2vdlC4ALcIngYa8npPjHvD41UYCWXkrhrg9kgVH7v9SbzxcsGoFYzKcNsDdOF1Y0wI7J6KR7gx0gjHPEjyUrtnILViMlNzVkjFizjoV5CjlRy2e2wvra6LTChQT55alGxHsMg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: br\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e7910b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":352,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b3459066e38308492a7ac98271d7b034","sha1":"bdc08d8b6b3a4ab7eef55fb2b73028001f045581","sha256":"3244688e345eb37de4069b23d32d91b59ecb2c28a14e38aaa4e02678f5d0bb7c","sha512":"5e68e1f9adf42375f8432dfc1a5b8a5f91849b2e3fdaa7ac1de0fb111cce8d61daf0330cca3137ae1ee66e20ba12c7e135114bb565b5f711cc730f8db4e20f81","ssdeep":"","tlshash":"00e0d88595a9c9094a1603795abc70d65123708e158905fc74c42514bd4e79b3c51aac","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-06T23:35:00.152927Z","times_seen":4990,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/2088418241-d899dff4b93ccce72feaa6e1e92250e1c36f6d6e4d7ebdd5261e2b6a78b3ffdb-d?mw=80\u0026q=85","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1141149756?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:56:38.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /video/2088418241-d899dff4b93ccce72feaa6e1e92250e1c36f6d6e4d7ebdd5261e2b6a78b3ffdb-d?mw=80\u0026q=85 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"7a4d8191cba0478dd219b0664e879a82\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\nage: 354058\r\ndate: Sun, 31 May 2026 23:56:38 GMT\r\nx-served-by: cache-dfw-ktki8620071-DFW, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 44, 0\r\nx-timer: S1780271799.599285,VS0,VE1\r\nvary: Accept\r\ncontent-length: 2963\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2963,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"7a4d8191cba0478dd219b0664e879a82","sha1":"94cf43214019f011e4433cdb407eda27402e9360","sha256":"7463ebd3c7dba3114516863146217521e0274c29ef300fd67443f88340f9542f","sha512":"fbd29754d8dbdc53b2e83e3642117b5ea21e40ec181c7e3a219d60d8110ceca5509edd126a5622d345c45087afd4ba47ff08ae941021ee6b0952b2fd2a68e5c8","ssdeep":"","tlshash":"af513d85ae971013f000c6b80417ab1fa866f25c0298d57ef55974b64cd1f98bea8ce8","first_seen":"2026-05-02T15:38:12.043415Z","last_seen":"2026-06-01T10:05:26.907324Z","times_seen":15,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":55,"dns":2,"connect":15,"send":0,"wait":27,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/frontend/assets/de/js/currency.js","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:41.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /frontend/assets/de/js/currency.js HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/frontend/assets/de/js/deferred-imports.js\r\nCookie: XSRF-TOKEN=eyJpdiI6IlRtWEFXQkZxUXdHYmdac2lDUHM5SHc9PSIsInZhbHVlIjoiSmpmWW5hK2tPQ2JXeHA3S1BsV3dMNVI1L1VENkI3NUV1Q00xL0FiblFwK2pIMVlQcUtMOEpJWTBUWktWZUtmTlV0ajZjNzZIVTV4ZFZhUURzYmkrU2N5N1ZrRlNvTkpXbHlWek4xbVlQaEVYdThDSEQxZUF1TDArUGIza2VRNUMiLCJtYWMiOiI1Y2ZjMzdiNmU1MzA5NzllYjdiZGI1OWNlNzc2ZmVjYTUxZDlhZDdiMDVmZDBjMjZiZDY1ZjgxNWU3Y2U0ZGY2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5UcDlHM0w2aEdXdjExUTNVTjNYUWc9PSIsInZhbHVlIjoiWXk1TWs0VjdBYm1VTG9IdVV4b2k2Zjh3QXNuOXVDSi9xMkJydVRQLzJnR05nQlRKVldnR0FPYlFqSXgzb1VPM3E3UWZJQXdNUUY2L0lqdktpbUNFUHVvd1E5Mk1mWVEwdVZGUFBjcmQ3MU5rVlJKSUdXVGFldTJEdXJPNmRiT2siLCJtYWMiOiJlYTVjNzc2ZGQ3MTk3YjNjNmNlMmY3ZWUxYjczZmQ2YmNhZDc4NzZiZDE5NGY2M2IyYzNiOGMwNDhkZTRkYzZmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:41 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Fri, 13 Mar 2026 05:05:58 GMT\r\ncontent-encoding: gzip\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q6PyxRa%2FvtoDRnyD5SRNDWVlrPG%2Fawph8BL1h4IkPb6zt9gthxwTzQ8Z8xi32Pq0AEwI4aWoqhpmVIVR%2BOc2d0jIOEvnpyVZjb4tZrzd%2BVL%2BWgIDMNc6kquRDZk6ChpnYBvsqhjxdg%3D%3D\"}]}\r\ncf-ray: a049eaa63adab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4746,"size_decoded":0,"mime_type":"text/javascript","magic":"C++ source, Unicode text, UTF-8 text","md5":"4160b6922867907ece073fc2c064ebc7","sha1":"e92a9d8bab66d120ecf7d4f39bc6c7fb7dc60dc1","sha256":"8d4194c5892b959b1bfe12f8ef98473cd58e94b6b68d9b20bb6893fe9b178640","sha512":"e5c81b8851ed78c8aa5bb165f43e5cd5c72f7fb8d3d81ad14c78e88a36d5778e9fdd360dda8737f61de09c442534d2ff857ce20dc2c9c2e0c473e934d504161a","ssdeep":"96:mkMuTXwIKaqEl0Y1ry6YigPWQmxgbKWjdsaqmo6n:mkNbqCo6YVWQOgbKWjds6n","tlshash":"0ba1fdd86a634590c2713199484f7c80a4f2a63b7c09bacab85f810c2f4dc1de935bfb","first_seen":"2026-05-03T18:34:41.365318Z","last_seen":"2026-06-01T10:05:26.833874Z","times_seen":732,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.51/js/vendor.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1141149904?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:56:39.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /p/4.46.51/js/vendor.module.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://player.vimeo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f.vimeocdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 23:56:39 GMT\r\nage: 547636\r\nx-served-by: cache-iad-kjyo7100159-IAD, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 12, 96961\r\nx-timer: S1780271799.155950,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 95419\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":327216,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65422)","md5":"3e6cb7907b3bb24aa5b1a7482cb0c2a0","sha1":"2ede8cdcdfe0563eca5f73a51d63021f865d0097","sha256":"de1befcea3c34e111929d81d7fa0a511766e4429db742329de97475df99a36f9","sha512":"065e19f5eca254d4a93aadf0d6f150409b508ff630a67a84f716cd1e31cd0912c9eb06c8f8552935dcbfd6d18adf4afd7d0c1edd17158eb40716326020c3fabb","ssdeep":"6144:lxrQb8XM5U5dAbYwlkc9IERRcRDZx12r/g5lpc:lx/85ucTcPrLm","tlshash":"5c64e7dcb2d6f07143e764a6403f200bf23a5e15a84d8454e26ae4d57cb9a4e823bf7d","first_seen":"2026-05-25T15:52:34.485083Z","last_seen":"2026-06-02T11:35:28.281566Z","times_seen":1067,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/frontend/assets/de/images/favicon.ico","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:38.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /frontend/assets/de/images/favicon.ico HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:38 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8AaCnBG0m8EBhMPDyq8sbyySj4UC3EBvC%2BA%2F%2F%2BLwhh8MM8VZWQ69gK4JSjnePguUvJj59w%2F72BQYc5XsOcZSek6g2xepKOWdM3qHWGZvpWBb%2FRjTgnuTYm5Pn1o2gvsSAjb%2B9q0%2B5g%3D%3D\"}]}\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 18 Mar 2026 23:51:48 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: br\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea928946b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"b34506cdd39059243bbbcf00bb24b737","sha1":"dbad8e1c03a30cb1c4332e9c1a6a09adde016ed2","sha256":"bcf1e7f91a3017be5b2309bb6cbf092e0c7d527140c6f045b24acf1e7e6f9a35","sha512":"e80650a0d1c794f55453f2121a85ff82559ef8ab37ecc10975d9e60aa6a22f01e04dac7f1db1d865a5bd3be26cd68ecc1a384c97a1080e92779cd62ee054ed7d","ssdeep":"192:iCEIRDbc0HYUHTVzRM8liKHNOJO6PVFt+5eFWablbUIbY2E:iCzDbcNUHTlRHPHQIwFtOeFWabN9bY2E","tlshash":"5c627d607651a84cd29578f5cda1c28a26f9fe5085ab11033ab27a9f3bb82643e121d5","first_seen":"2026-03-23T08:58:19.833251Z","last_seen":"2026-06-01T10:05:26.864188Z","times_seen":81,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/2088419150-747e728b9f579d33869a4ef1724cd947133a4a51b4eb72223dc573a19d4ce345-d?mw=80\u0026q=85","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1141150276?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:56:38.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /video/2088419150-747e728b9f579d33869a4ef1724cd947133a4a51b4eb72223dc573a19d4ce345-d?mw=80\u0026q=85 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"ef8ab1c17e129a75f7ec0224793a7f4d\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 23:56:38 GMT\r\nage: 566085\r\nx-served-by: cache-dfw-ktki8620060-DFW, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 78, 8\r\nx-timer: S1780271799.700536,VS0,VE0\r\nvary: Accept\r\ncontent-length: 3174\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3174,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"ef8ab1c17e129a75f7ec0224793a7f4d","sha1":"a12e41fbd3a3d0a137bb712750dea386af42bb18","sha256":"eb524c5f06702be2070cfafa15f02d7cc65157562de6630b2f23dcc534f64aa7","sha512":"cef0655b5db33da1005e6daae21121104c49051662295c3ec01565c9cc02e899aa3d8f5e1228a6b77e1285245da0158e223a85e747a28b969ed1f57c21f64c89","ssdeep":"","tlshash":"06618d6ab270bfe1e46c0fb88a2502de305dc6244761f158430c3d438d158e6d63e97c","first_seen":"2026-05-02T15:38:12.052947Z","last_seen":"2026-06-01T10:05:26.853553Z","times_seen":15,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-31T23:56:37.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\ncache-control: max-age=3600, public, s-maxage=86400\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; expires=Mon, 01 Jun 2026 01:56:37 GMT; Max-Age=7200; path=/; secure; samesite=lax\nlaravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D; expires=Mon, 01 Jun 2026 01:56:37 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6XgOU7srV5PTk8m%2F7OmrhS3Z5yEFB5hVDuUjuSNm%2BSZlwYmsqEOrq0Zoqq%2BBP4g0qVeURGvWRYYrWkVd0nnGrEQm6dv1Q9JTaLhkGEuZVEdWvve3ObY1PBRWmo7xen1TTI4Vo6Vb3w%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a049ea8c0f3b568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.1.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":282439,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"0b6e4082eb50c60890f2e8211e9f9af6","sha1":"5e7576b6e9e82cadf4ef56873317661e30dab528","sha256":"b73f897dc81331a6846f57797117ba2b44eeb562693bf0e5307719d941ccfb55","sha512":"e4a6f270543c20675e360144b51004c4378d1e6cd55e48de174cc248b720cadff32261850c1ab59f8d00216ecd4d0823634786b2cb87eb57a0d7323a5e74b75c","ssdeep":"1536:Jl82iWJRnd+i0haCp7rpu5AAef+JaMsaFpbRrX0yb8eNk1B6Khxx/5AAef+JaMsD:f8GfxKhPW3Gb9NXw","tlshash":"3654f7fd1380599500b7c3b6af6865e9fa4baa5fd6460d01f2ac93072ff1c6c9e17248","first_seen":"2026-05-31T23:57:12.327887Z","last_seen":"2026-05-31T23:57:12.327887Z","times_seen":1,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":38,"dns":27,"connect":1,"send":0,"wait":184,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/flags/ko.png","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /flags/ko.png HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 1361\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\ncache-control: max-age=31536000\r\nexpires: Mon, 31 May 2027 23:45:47 GMT\r\nvary: User-Agent\r\naccept-ranges: bytes\r\nage: 649\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Ow2b8DTwjBZnDkC5CfBfhez%2BUKtg4vj1FKMVCTbdRgms1w7ZvR9Vae8zqxdZTkUpaT4w2FMa%2BEekcTp6vVqZgy5MJLODHcU6wNn1VZUpn%2FBsUNEveKjYu61HEmcLgi2w%2Bln6jSX3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e690ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1361,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"ed87e4c8a4dd16c9c3f8499a0aaa28bd","sha1":"f818a0782047c159ed8e5cd041ad7f09e8fe52fb","sha256":"eb59eb7dcf155a7b38c8f4c9db869ed942bf55a4457e3f4ff0791be4f2c736d5","sha512":"bcf1992bfb1d0ed92e4393e0b85fe5c768ed29285d38a259d0cfb60827537b74d39a925cfc4df58ed8b478d5015fad047a211ec2ddffa5a69b0d08f5abcdab6e","ssdeep":"","tlshash":"05210bad1b7c302cd6f9c5799909fb01ddfb04040c9fa1c59129d6cc28c588b70d5436","first_seen":"2023-05-07T21:05:59Z","last_seen":"2026-06-06T23:48:54.494679Z","times_seen":5093,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/2088419150-747e728b9f579d33869a4ef1724cd947133a4a51b4eb72223dc573a19d4ce345-d?mw=300\u0026mh=540","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1141150276?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:56:40.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /video/2088419150-747e728b9f579d33869a4ef1724cd947133a4a51b4eb72223dc573a19d4ce345-d?mw=300\u0026mh=540 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"7664f76b2057f2afdc3642bf7fc3e8d3\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\nage: 953998\r\ndate: Sun, 31 May 2026 23:56:40 GMT\r\nx-served-by: cache-dfw-ktki8620058-DFW, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 46, 0\r\nx-timer: S1780271800.343778,VS0,VE0\r\nvary: Accept\r\ncontent-length: 17880\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":17880,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"7664f76b2057f2afdc3642bf7fc3e8d3","sha1":"9cf4b54b1d6e5bddebe99ea7a350058161ef2f58","sha256":"32ad3ef87b8d9b0c45745d7892c357a9e87e64c0db60fde6d2f2f0342763dcb8","sha512":"1e81a169ca60f2d8dbf8d1ec5c8133258913ae579c2d56fd166d4a26b50738897db4e0ebd59f1cf24b442cdb4479aa296b5a3160b4c0aa9bf56575f18dd77d77","ssdeep":"384:7RKJWhflaeDneTbuFupx3+oxZM/xKebfhRBurnE6A0vo2rI/FEw:7sJJumuMpz8nB8jH9I/FH","tlshash":"7f82d1650ec27492976e237f007992ce534da7821331a7368915b7c844ffeee90ef498","first_seen":"2026-05-31T23:15:32.734785Z","last_seen":"2026-06-01T10:05:26.875505Z","times_seen":14,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/dashboard-assets/js/disclaimer.js","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /dashboard-assets/js/disclaimer.js HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OgiKAXc%2BK%2FRfKKmFiSjyu6wN3DqmCE%2Fds8W9%2BK9wDg3ozArFIE3wMNr%2FOEs7y0%2FkeqHXhnWFt5P4O4s3ILyncNyO%2BqcPYe9TxmOztHYv1G1FQuV45pvN4LfBMRJSXVVOg1fj73u6aQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 27 Apr 2026 17:27:37 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: br\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e48eeb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":854,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"d31bf8a0967d5a38631c38691e66540c","sha1":"f4e654b84b034023b5e3db513087dd9205bd49ba","sha256":"d6712b0ff373f0cf02d1c81ff5a6fb945b47d5d173f02e41d1da28eee52b39d5","sha512":"3d4f2750a27f99297636d2e655b9d157d70113d304085e8ff716a907a7abd01252fbbc7ea521f695b6ec31bcb7a9198e0fc378ee71480a52abe2ab83f94b8181","ssdeep":"","tlshash":"58014c9e79e236b1a2c7eb7c19ab530566314003d11c85053d2c6262afa4f6816b3bc9","first_seen":"2026-05-03T18:32:03.521288Z","last_seen":"2026-06-01T10:05:26.897724Z","times_seen":813,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/flags/tr.svg","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /flags/tr.svg HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0npMXyiEprUVk5DiEBKX32S%2FTq3WJkGvHHl4HEHW39iUQHhx%2F1MHBZ9DHd%2FlsaCzhrIASAsBCeUmqEnr%2FKupA7Or89pFZbTHIPq8evlBdKWa3j3HAgoIeTUSNuD8yI%2BrFJjHwhutOA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: br\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e8914b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7af14a6fd5253f05724502662d478fac","sha1":"df6f03167492046dd2f02e3e005e66201f80ceb9","sha256":"f101fe5cf7c2fe25bb1d2c7efcacb8acb52c90561497576f2f16be8a5d628315","sha512":"a1b4e0fca3d92adf4b6bd1473bfaceb5d1877c682378f84bd862e54927c9bea34b0781cb4e1cc5d44ce637887ac93a30465496e63b94169ac15cd1c155396802","ssdeep":"","tlshash":"c2f0c0d91a78c4ddbf4647314d3db0d92639209f399900b830c96529ea6a24b2401904","first_seen":"2023-05-07T18:03:13Z","last_seen":"2026-06-06T23:35:00.225404Z","times_seen":5147,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/frontend/assets/de/js/geo.js","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:41.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /frontend/assets/de/js/geo.js HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/frontend/assets/de/js/deferred-imports.js\r\nCookie: XSRF-TOKEN=eyJpdiI6IlRtWEFXQkZxUXdHYmdac2lDUHM5SHc9PSIsInZhbHVlIjoiSmpmWW5hK2tPQ2JXeHA3S1BsV3dMNVI1L1VENkI3NUV1Q00xL0FiblFwK2pIMVlQcUtMOEpJWTBUWktWZUtmTlV0ajZjNzZIVTV4ZFZhUURzYmkrU2N5N1ZrRlNvTkpXbHlWek4xbVlQaEVYdThDSEQxZUF1TDArUGIza2VRNUMiLCJtYWMiOiI1Y2ZjMzdiNmU1MzA5NzllYjdiZGI1OWNlNzc2ZmVjYTUxZDlhZDdiMDVmZDBjMjZiZDY1ZjgxNWU3Y2U0ZGY2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5UcDlHM0w2aEdXdjExUTNVTjNYUWc9PSIsInZhbHVlIjoiWXk1TWs0VjdBYm1VTG9IdVV4b2k2Zjh3QXNuOXVDSi9xMkJydVRQLzJnR05nQlRKVldnR0FPYlFqSXgzb1VPM3E3UWZJQXdNUUY2L0lqdktpbUNFUHVvd1E5Mk1mWVEwdVZGUFBjcmQ3MU5rVlJKSUdXVGFldTJEdXJPNmRiT2siLCJtYWMiOiJlYTVjNzc2ZGQ3MTk3YjNjNmNlMmY3ZWUxYjczZmQ2YmNhZDc4NzZiZDE5NGY2M2IyYzNiOGMwNDhkZTRkYzZmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:41 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7aMAfP6MvLddQmiOwYzr%2BEBSXNI5dxuYskoCrisEdWyugWCkNgzO0ydVdcGR2SGebZI5Pxcwxde55X8x8u5%2FUPQ%2FzBqrjuC3VbfexC%2FaJugeD64SK6e3A3rz%2BqsWZFww0Lyz2YIWzQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 13 Mar 2026 05:05:58 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: br\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049eaa63ad8b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":825,"size_decoded":0,"mime_type":"text/javascript","magic":"C++ source, ASCII text","md5":"b9c760269aeea47905f4d33aaf740c3a","sha1":"14120a6947ffad92c5f9e886b485ec65b3bed3ee","sha256":"556384cb09c3f07d6576faea9d370459e288fbfbe44b1c5e847b2db9dab5690c","sha512":"b594df48a2e062a0618a0443ca35e4b7bcdf55eb2599b8fe782016f29b198210ab39b46e017121f150e27fa14918c37ec05c62c00752e61914b095aa1c087946","ssdeep":"","tlshash":"fd01496552b6466040e771cada6fa2601435e40b374dd8ea7a9f43480f8991dc2b27dd","first_seen":"2026-05-03T18:34:41.313902Z","last_seen":"2026-06-01T10:05:26.858129Z","times_seen":785,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Questrial\u0026family=Lexend+Deca:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css2?family=Questrial\u0026family=Lexend+Deca:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 31 May 2026 23:56:37 GMT\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6327,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5a182b65e1da38541d4149cd43e8c979","sha1":"cbf5a24c6802d261b5a10a0552ea00c680350451","sha256":"63c600ce72c5123677f95af5a36d8360250d4d4bb1bec8d233bca877dff66fb5","sha512":"9b4dbb3d19f62de0611806f4add8756a2b30288d5fefb69410752077e6e37468998cd12cdae47c764477a25cd4e6c56ee8533f85734f7b156bd177c98c695daf","ssdeep":"96:cULOEa5SnLOEa5SSJc+ugLOEa5SSNDULOXa5SnLOXa5SSJc+ugLOXa5SSNDULOxr:cpRDCB6iDxBX/DYBw4DfBkT/bj","tlshash":"83d1da91046b9500eb5b1cc222cf7e32ae9f61657444c439affd18d8ecaed262366b0d","first_seen":"2026-03-12T05:25:58.277422Z","last_seen":"2026-06-05T10:07:59.056997Z","times_seen":832,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":291,"dns":0,"connect":29,"send":0,"wait":45,"receive":0,"ssl":296},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/flags/no.svg","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /flags/no.svg HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hVDOXhbpo44UivzG2m7kZEMYfmVYIdfBWzBdXtm5x75yHBWvTZIySwDVOADv1XMd9ONWnENqKNEu02d%2FjExc4ycEbOjFk%2BvYjt28OPV7x3Q76F2CREQ0XyEp0f07shXqJ6uIrSGB4g%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: br\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e790cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":424,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ebe2b7f4aefa3c8869fa9f0a402210bb","sha1":"dc0ceab0f048a8c8ac97e3277f2ed237b974f005","sha256":"7021694edfe47096e0aa9a5ea85a6851181f723ae3a8806779a8e01702325804","sha512":"f176bd1aa2416960b0eec285da0b91e983a162a1d475bac76786b33ab0aede45783d422ce4d909b62ee6e6ba1fa55bf5b6b6ffcdf2463e305941e2d804073da5","ssdeep":"","tlshash":"d6e0e5809b9d1a6da91283a41ddcb885022b70e6328c0ced658dae987f412eaf466264","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-06T23:35:00.144145Z","times_seen":4527,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/2088418528-db455c0c19851feb110ea5686b09619b3385e1c3801117afbdb1fd6d5d1a9b60-d?mw=300\u0026mh=540","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1141149904?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:56:39.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /video/2088418528-db455c0c19851feb110ea5686b09619b3385e1c3801117afbdb1fd6d5d1a9b60-d?mw=300\u0026mh=540 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"d5539632ea47dfd36a5784f8b6e0758a\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\nage: 394490\r\ndate: Sun, 31 May 2026 23:56:39 GMT\r\nx-served-by: cache-dfw-kdfw8210048-DFW, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 15, 0\r\nx-timer: S1780271800.732309,VS0,VE1\r\nvary: Accept\r\ncontent-length: 15314\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":15314,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"d5539632ea47dfd36a5784f8b6e0758a","sha1":"8d32e8b0c45bb2b6abc8bdf291cd6d17957ee982","sha256":"717dfd3f0e42f152e059af16eb15621e0838851122390fc859b3a7a3cccd6b14","sha512":"4356257df36322885ae5fa5f2d444a6f6e801e5a441d0ab286a5e3278388fa3f8b5e181cd9b35d919cc23aed06bf93b5087f004b864a1fc6e3e6f82fe58653d8","ssdeep":"384:VeG5WAAdd5tzi7TiSm7D6SU1r0lUlk+xZ+x:VDApBziXi501SUlS","tlshash":"ab62d17270875adee542fe73483846186b4fa386199f632c4c60c795ef2c2ccad51de9","first_seen":"2026-05-31T23:15:32.705985Z","last_seen":"2026-06-01T10:05:26.888754Z","times_seen":14,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/assets/css/form/intltelinput.min.css","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /assets/css/form/intltelinput.min.css HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Thu, 12 Mar 2026 12:14:09 GMT\r\ncache-control: max-age=2592000\r\nexpires: Tue, 30 Jun 2026 23:45:47 GMT\r\ncontent-encoding: gzip\r\nage: 649\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fc3mM633mP6x6BWRBBvsfNpEoOD6kX3PeekySSpFRmvVzfm1QkcjJVVo7jWDivTGphjSKOGn8vYKzBg6ASYx%2FMQ1DxLM%2BeEsNfCbUX7JkfEL8fseRzvMG2sDx8MH8K5JAX%2BzhULXdw%3D%3D\"}]}\r\ncf-ray: a049ea8e48f2b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18630,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f832705cac17afa9ac678cbfe89e1088","sha1":"89b2b08b07e41ec8b69bac2ada42b7323fd2ca2f","sha256":"b83ef02bff5c0c1d579e95aae90cb3f6f72f06c3842cbe3bbb22ed76dcadfa74","sha512":"7ac6d65b33659374567f020167802ddf89df4a32ad82499203ed60dc0162b6d623af0c4cafbf1dd37cc7f21938f209bd0d095029baf694692136692d64b09005","ssdeep":"192:mB/nPLIsL4L9LqTA7J9IADdTKQK9A3kZ0Y980F+ND7laGG7agLUJ/LZ5MVcH6EdZ:Y/PlcR4+T49+hFhLZ5MV3m","tlshash":"10829d1343b11c7ea61dc1ba3aea95b2733b188b34abedd3f6d920060f43551e1eac54","first_seen":"2026-03-12T09:22:20.73665Z","last_seen":"2026-06-01T10:05:26.844735Z","times_seen":835,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.51/js/player.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1141149904?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:56:38.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /p/4.46.51/js/player.module.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://player.vimeo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 23:56:38 GMT\r\nage: 547636\r\nx-served-by: cache-iad-kcgs7200042-IAD, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 10, 96822\r\nx-timer: S1780271799.610952,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 219075\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":892956,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65454)","md5":"6c301d158f9af06e0f26b40c10b53322","sha1":"a66df2c8892d8e883bf01d11f735245c240a1f16","sha256":"b31f9796802f6c19e09c2952e1827dd69bb2c5a042817d4ee8e462b9862bda1b","sha512":"2f17b599df4f79d1d0014125e0c4d14da023c8ab1cc8dec7036dceeed4625396d9b254331b0b3b617d24fe5528ed20769c4d34362a3561f96a38198b52ce18e8","ssdeep":"12288:lUBIPdKt8tmxp9QEH16+1TSDwjd4L+RRYPTMGZ274VNYy6KWp835MKKAbZTLYE/g:n8t8whH16+1TSDwkkUHcjs8yjFk","tlshash":"04156bd672c2f43181d645a5e17b1203b33e1b9cb80d865cb03daddc2a9e545a2bbbf4","first_seen":"2026-05-25T15:52:34.450023Z","last_seen":"2026-06-02T11:35:28.342392Z","times_seen":1068,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":80,"dns":3,"connect":27,"send":0,"wait":27,"receive":15,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141149756/outro?on_site=0\u0026type=videos","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://player.vimeo.com/video/1141149756?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-31T23:56:41.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 11:55:53 GMT","end":"Thu, 06 Aug 2026 12:55:51 GMT"},"fingerprint":{"sha1":"D6:E1:3F:D8:FD:5C:3B:D4:99:72:24:5C:10:67:DE:50:68:00:1E:9F","sha256":"AA:99:7A:5D:AA:D6:C8:12:18:9B:D4:1B:A5:A6:F7:08:E5:D6:D0:48:83:D8:B3:BD:3B:1D:B6:61:E3:6E:08:3E"}}},"request":{"raw":"GET /video/1141149756/outro?on_site=0\u0026type=videos HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/video/1141149756?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 May 2026 23:56:41 GMT\r\ncontent-type: application/json\r\nset-cookie: __cf_bm=66TlUs6L7ZfGvsZV0dbVTCNXXnO60ikA6YolY7HWZsc-1780271801.2693713-1.0.1.1-kHy27_.acP1koM7_cc6qGZc3QhExor7WdGvjxQv_D7Ttm2wF7RVNF12qrWheSdLwKV_wfVU8vm0ohQQ5HttsQcOFYctOTJgBvO8JKEB540SiVy7juhvAMrBD5YL9Fksp; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Mon, 01 Jun 2026 00:26:41 GMT\n_cfuvid=ZhWw7h6ZYukmzhzJ7Ta8NTbRA1HugBcf6kDoTDoSQV0-1780271801.2693713-1.0.1.1-4owehIDdn8fbyxdHC3bQLhRsqJCb3MO2O_76UqU3Mns; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com\r\ncf-ray: a049eaa5e8165693-OSL\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://player.vimeo.com/video/1141149756?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Referer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, x-requested-with\r\naccess-control-allow-methods: GET, POST, PUT, OPTIONS\r\naccess-control-max-age: 86400\r\ncontent-security-policy: default-src 'self'; script-src 'self' https://f.vimeocdn.com; style-src 'self' https://f.vimeocdn.com; img-src 'self' https://f.vimeocdn.com https://i.vimeocdn.com\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-64c8598c9b-h7pgj\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-64c8598c9b-h7pgj\r\nx-link-match: 108\r\nx-player-backend: g\r\nx-served-by: cache-iad-kcgs7200160-IAD, cache-bma-essb1270057-BMA\r\nx-timer: S1780271801.290114,VS0,VE151\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":730,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4edfc4854b6ce96169ec257b5eae3fe7","sha1":"924a77bd3ce8fc5f1bf237b3d117b0cf769a9116","sha256":"e143aca201bdfe0a5f9eea1531c14d69c2e7ee698c7782dfdff76d6bac17eb6f","sha512":"427473290a62303fb8a2904931d0639fda327076be6a4f284a4e2607238c26ae9205cfc433c900cb7594ed1dbda0c5e158f095cca033b771024ee4675383f72d","ssdeep":"","tlshash":"4001f4f752d408f5a382e3d65ecdb01b5317907addc1699a59175c4c4aed0db34442a1","first_seen":"2026-05-31T23:57:12.290855Z","last_seen":"2026-05-31T23:57:12.290855Z","times_seen":1,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/flags/cs.svg","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /flags/cs.svg HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7XzZFD2yzYltb5gPHbqQW9Q6MOuKIljFAyOCH5KnZ7Ra5RYzYLGJqmY%2B54eD2OxKQfjuU9rz6HfC5fpiUTNMK9Feuc7joQXMdUK82MmszZhPk6XMppzIcpHPifCHZ3IIFTh%2Bm5fYzQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: br\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e68feb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":374,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0fe0a2e4225eee5dd8a3c73a5ab5a312","sha1":"c930c1341640bee697cf50053721ddfd750dae2e","sha256":"2a3a7fa3da584643cbac6234aa452705982f50454ed0a259d8c8cd6a9c2fa8c8","sha512":"92390117a5b345c7f9123d5d06839d95959664b32e621961e0d28a353ee515df51a446563354cf9f3911acbd0032a0fb61b1ca356250262157aae05dc907fe8e","ssdeep":"","tlshash":"80e06889a0e88e094e1803b60efcb0d5612330ee208d02ecb0c06619e9197cb2808ee8","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-06T23:35:00.14251Z","times_seen":5068,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141149756?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 11:55:53 GMT","end":"Thu, 06 Aug 2026 12:55:51 GMT"},"fingerprint":{"sha1":"D6:E1:3F:D8:FD:5C:3B:D4:99:72:24:5C:10:67:DE:50:68:00:1E:9F","sha256":"AA:99:7A:5D:AA:D6:C8:12:18:9B:D4:1B:A5:A6:F7:08:E5:D6:D0:48:83:D8:B3:BD:3B:1D:B6:61:E3:6E:08:3E"}}},"request":{"raw":"GET /video/1141149756?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1 HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ofincredvorn-de.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 23:56:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __cf_bm=A1kpWZSMOqXzvoJWzF2pSE1Atv46YOqTo6MGwA9pi7w-1780271797.9959133-1.0.1.1-_cQNmyRwDbcd_0YULnoykdn6Xk20bK4CgtLwTT7Pu4FNVD1_ZKCmJ6qihV_48Ar0HNFVB_.v4iZSOJUNeqPge18DzejQKHRES2jEGldeCGR7xx84_OxGxLEEI8Hjd88P; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Mon, 01 Jun 2026 00:26:38 GMT\n_cfuvid=as94JsTSoV7AZak3ENBFIGMx9fbi0oMUkNuPRb9cxbU-1780271797.9959133-1.0.1.1-AkLjm7LfVqE1nQKAy0kLQUUTC7FtB6Bq3wf4B5QBlJc; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com\r\ncf-ray: a049ea91794d5687-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nlink: \u003chttps://lensflare.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://arclight.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://i.vimeocdn.com\u003e; rel=preconnect; crossorigin, \u003chttps://f.vimeocdn.com\u003e; rel=preconnect; crossorigin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Referer, Accept-Encoding\r\nvia: 1.1 varnish, 1.1 varnish\r\ncontent-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' https://*.vimeocdn.com 'unsafe-eval' resource: https://vimeo.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://browser-intake-datadoghq.com https://src.litix.io https://www.gstatic.com https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.video https://embedder-sdk.wirewax.tv https://*.vimeo.work; style-src 'self' 'unsafe-inline' https://*.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://edge-player5.wirewax.com https://edge-player5.wirewax.video; connect-src 'self' ws: wss: https://vimeo.com https://api.vimeo.com https://csi.gstatic.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://drm.vhx.com/v2/fairplay/cert https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://browser-intake-datadoghq.com https://live-api.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.kollective.app https://*.kollective.app:31015 https://*.kollectivecd.com https://*.paychex.com https://*.hivestreaming.com https://vimeo.magisto.com https://stage.vimeo.magisto.com https://stage-proxy.vimeo.magisto.com https://interactive.create.vimeo.com https://*.wirewax.com https://*.wirewax.video https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com https://player-telemetry.vimeo.com https://lensflare.vimeo.com https://arclight.vimeo.com https://orion.bendingspoons.com https://pico.bendingspoons.com https://*.vimeo.work; font-src data: https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://branding.cdn.magisto.com https://d2by6sxflmuwyq.cloudfront.net https://fonts.gstatic.com https://player.vimeo.com; img-src 'self' data: https://player.vimeo.com https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://*.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://i.vimeocdn.com https://duysrfiajusdh.cloudfront.net https://d263mgllkjh2k2.cloudfront.net https://storage.googleapis.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://studio-media.wirewax.video https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://maps.googleapis.com android-webview-video-poster: https://*.vimeo.work; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com https://captions.vimeo.com https://captions-eu.vimeo.com; frame-src 'self' https://*; worker-src blob:; report-uri /_csp\r\ncross-origin-resource-policy: cross-origin\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-64c8598c9b-dhh9v\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-64c8598c9b-dhh9v\r\nx-link-match: 105\r\nx-player-backend: g\r\nx-served-by: cache-iad-kjyo7100036-IAD, cache-bma-essb1270051-BMA\r\nx-timer: S1780271798.013593,VS0,VE181\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21966,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13665)","md5":"cb39499a3494c6b16066446619f6b348","sha1":"66a94038d0446f5e99d32fd63faed5e1140757b9","sha256":"48e33a98e0e47274f08e3e04b7fd4dbb58fcff061ee3601264e759f362f6bd49","sha512":"8feec70c5333f5ae859242fc89720be4f75bbcc155f4a7bbd64cbacc4e282f515a8834a565c8868eb752a12c7719a55aaa601b9180335367920ae69b30e2ad16","ssdeep":"384:P3ydeGjAommoKLmkiOobzv2gstnkNdLfiIQos5gWSPqOdM/+MhHFgfEPu:KFmDKLxirzmkNdLfTQSWSCOdehHFgfEm","tlshash":"e4a2fa6265e1dd26c788d84d0f1efb0c3466528bee85ca48b0defa0c5b6fd83965b1c4","first_seen":"2026-05-31T23:57:12.338454Z","last_seen":"2026-05-31T23:57:12.338454Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":21,"dns":1,"connect":3,"send":0,"wait":208,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141150276?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 11:55:53 GMT","end":"Thu, 06 Aug 2026 12:55:51 GMT"},"fingerprint":{"sha1":"D6:E1:3F:D8:FD:5C:3B:D4:99:72:24:5C:10:67:DE:50:68:00:1E:9F","sha256":"AA:99:7A:5D:AA:D6:C8:12:18:9B:D4:1B:A5:A6:F7:08:E5:D6:D0:48:83:D8:B3:BD:3B:1D:B6:61:E3:6E:08:3E"}}},"request":{"raw":"GET /video/1141150276?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1 HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ofincredvorn-de.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 23:56:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __cf_bm=7IzGdjySB.6.PEf_GxmX2Zzsz4iW6SFFSwDkVJ3_Lb4-1780271797.9832284-1.0.1.1-0Ce1e8yexg3qhjdAEwh5LnE7NVNV_gmRlvNXE2NDjbvAXfuEYueydFAHj8_lL2zi2pBCWU.Y2Yg.HSrPKK03EO95obyH5yH9LGmfK5Jkof9szP4YWRlQdisCvXBEF9Oq; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Mon, 01 Jun 2026 00:26:38 GMT\n_cfuvid=xBOWkX36H97bHYm0MWzluBWorV7Pv22vDA_q2OuLM9Q-1780271797.9832284-1.0.1.1-qNFqVW8odOdPVvHt3A8JrkROmKS5Gl7Un1Q0AG2wxzM; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com\r\ncf-ray: a049ea9169415687-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nlink: \u003chttps://lensflare.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://arclight.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://i.vimeocdn.com\u003e; rel=preconnect; crossorigin, \u003chttps://f.vimeocdn.com\u003e; rel=preconnect; crossorigin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Referer, Accept-Encoding\r\nvia: 1.1 varnish, 1.1 varnish\r\ncontent-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' https://*.vimeocdn.com 'unsafe-eval' resource: https://vimeo.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://browser-intake-datadoghq.com https://src.litix.io https://www.gstatic.com https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.video https://embedder-sdk.wirewax.tv https://*.vimeo.work; style-src 'self' 'unsafe-inline' https://*.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://edge-player5.wirewax.com https://edge-player5.wirewax.video; connect-src 'self' ws: wss: https://vimeo.com https://api.vimeo.com https://csi.gstatic.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://drm.vhx.com/v2/fairplay/cert https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://browser-intake-datadoghq.com https://live-api.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.kollective.app https://*.kollective.app:31015 https://*.kollectivecd.com https://*.paychex.com https://*.hivestreaming.com https://vimeo.magisto.com https://stage.vimeo.magisto.com https://stage-proxy.vimeo.magisto.com https://interactive.create.vimeo.com https://*.wirewax.com https://*.wirewax.video https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com https://player-telemetry.vimeo.com https://lensflare.vimeo.com https://arclight.vimeo.com https://orion.bendingspoons.com https://pico.bendingspoons.com https://*.vimeo.work; font-src data: https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://branding.cdn.magisto.com https://d2by6sxflmuwyq.cloudfront.net https://fonts.gstatic.com https://player.vimeo.com; img-src 'self' data: https://player.vimeo.com https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://*.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://i.vimeocdn.com https://duysrfiajusdh.cloudfront.net https://d263mgllkjh2k2.cloudfront.net https://storage.googleapis.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://studio-media.wirewax.video https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://maps.googleapis.com android-webview-video-poster: https://*.vimeo.work; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com https://captions.vimeo.com https://captions-eu.vimeo.com; frame-src 'self' https://*; worker-src blob:\r\ncross-origin-resource-policy: cross-origin\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-64c8598c9b-nwdd8\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-64c8598c9b-nwdd8\r\nx-link-match: 105\r\nx-player-backend: g\r\nx-served-by: cache-iad-kiad7000098-IAD, cache-bma-essb1270033-BMA\r\nx-timer: S1780271798.004854,VS0,VE170\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21979,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13678)","md5":"9aa538633a60987950958ced0d344d0c","sha1":"8716364ab61f9d1b5cb0c6c5b5ade2b38ab45fb0","sha256":"0df7fd4420018778240bd3a57b39a46f3859aa49acf93eee5a35db375750e79e","sha512":"53b9fb834a5e8ca88dd1b070e620a7566be37a0774379e05f03f2509946db1d962595a15da1515bcf23fbca0e49718250db7090848a0067512110902f2150368","ssdeep":"384:PgludeGjxhUsgokUsMskokts1sfoRib9stnkNdLfi18eeoNneiWSPqOdM/+MhHF/:9IsgoVsMskoes1sCiskNdLf+8eeEWSCT","tlshash":"eda22a23b1c1982963d846c91e7ab70c30a52147fec2d748b4af9d9c9f6fda31a072d4","first_seen":"2026-05-31T23:57:12.339451Z","last_seen":"2026-05-31T23:57:12.339451Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.12.5/build/js/utils.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:41.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@25.12.5/build/js/utils.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ofincredvorn-de.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 63100\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 25.12.5\r\nx-jsd-version-type: version\r\netag: W/\"419b0-Py3EkUQ6tNnb9qvuiV2BQBlvCqs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 23:56:41 GMT\r\nage: 2853322\r\nx-served-by: cache-fra-etou8220020-FRA, cache-osl6530-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":268720,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1903)","md5":"e654fbae22a0762fa384b61fd03f1679","sha1":"3f2dc491443ab4d9dbf6abee895d8140196f0aab","sha256":"93c8dd85421914d3c09fdacc4b77730595202004a1d8c9ef7639c7551157bda6","sha512":"af44d0ca2f0ca731ecb7e535963c694710a3e887c8bbdfc95066f1fab72d5c5da66313e9097498d246b93a04a1b642fd65d591e80d325a72bb0f7bf5a5f8da6e","ssdeep":"3072:TklM0tDKjFs3OwPss3MwPky0zOt62xFMfM+dhvo4sUifhNyf4LtXKtofQVkmDmVu:TklMmDOW0IxFMfM+dMGou","tlshash":"fe44f0ebd63c973ba1d87b35968eb3cd5a8cbca3c858567826c3b54f52784e0706c205","first_seen":"2026-02-13T03:24:00.128548Z","last_seen":"2026-06-05T10:07:59.101497Z","times_seen":950,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/frontend/assets/de/js/calc.js","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:41.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /frontend/assets/de/js/calc.js HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/frontend/assets/de/js/deferred-imports.js\r\nCookie: XSRF-TOKEN=eyJpdiI6IlRtWEFXQkZxUXdHYmdac2lDUHM5SHc9PSIsInZhbHVlIjoiSmpmWW5hK2tPQ2JXeHA3S1BsV3dMNVI1L1VENkI3NUV1Q00xL0FiblFwK2pIMVlQcUtMOEpJWTBUWktWZUtmTlV0ajZjNzZIVTV4ZFZhUURzYmkrU2N5N1ZrRlNvTkpXbHlWek4xbVlQaEVYdThDSEQxZUF1TDArUGIza2VRNUMiLCJtYWMiOiI1Y2ZjMzdiNmU1MzA5NzllYjdiZGI1OWNlNzc2ZmVjYTUxZDlhZDdiMDVmZDBjMjZiZDY1ZjgxNWU3Y2U0ZGY2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5UcDlHM0w2aEdXdjExUTNVTjNYUWc9PSIsInZhbHVlIjoiWXk1TWs0VjdBYm1VTG9IdVV4b2k2Zjh3QXNuOXVDSi9xMkJydVRQLzJnR05nQlRKVldnR0FPYlFqSXgzb1VPM3E3UWZJQXdNUUY2L0lqdktpbUNFUHVvd1E5Mk1mWVEwdVZGUFBjcmQ3MU5rVlJKSUdXVGFldTJEdXJPNmRiT2siLCJtYWMiOiJlYTVjNzc2ZGQ3MTk3YjNjNmNlMmY3ZWUxYjczZmQ2YmNhZDc4NzZiZDE5NGY2M2IyYzNiOGMwNDhkZTRkYzZmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:41 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding,User-Agent\r\nlast-modified: Fri, 13 Mar 2026 05:05:58 GMT\r\ncontent-encoding: gzip\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2gtoGDQMjpslQSPS7H1Ihcvb9djYhaIeRbDcBSe%2Barx5565EiRcb5Tuzv7qKOgFdyq39klqZK0GDKYM40oxTW3UVc0OXUiROFErvaPbXJhX4ZBJCkMINxGwP4WOLnhlLdQ6v14DW9Q%3D%3D\"}]}\r\ncf-ray: a049eaa64adcb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2116,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"8db1c397f4875a2f87a43231fdc04d1f","sha1":"f085d10aa760378cb58a4427f9811737f04f4233","sha256":"2d0a615e04ee58fe04a7fea897a6e519a7c8e272f0f996d72ec50854ea214605","sha512":"0665e2c41eef2cee0b21045b74c34d264027c9ee313cf833b7f0cf7ec35f7df81a4187522e5294231cf90d58f1dd7c42d9f608b0da5757e896b3e44a4a7e1d05","ssdeep":"","tlshash":"a441ff567ff20070cdb321d527ab4a44283d36433081d6c4b71c86211fb1d92e15bebd","first_seen":"2026-05-03T18:34:41.366198Z","last_seen":"2026-06-01T10:05:26.901686Z","times_seen":785,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/flags/de.svg","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /flags/de.svg HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w54XgdZBGtga07hjZ9Hz71Q65r%2FNK2DXHZdcQQUupW33JO9nxUmISOW8xUXL9t1sXyv52LOLIz0B8xfhXVw1ZCPhlyhJpOahXVo9ZCguibb0ES8b%2FWndkI96imYz3IEDENddEA5OUA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: br\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e58f9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"51768606d83a265da9e7ee8efbb21edb","sha1":"b22c5b98344da8d3ea54ecb9baab4c5a5a7ebdb4","sha256":"8fcaa96d8835e39fa6a74ff4dc781d908112d46ceb8fb81ff37c433f390a4c8b","sha512":"cec42089404b17430bc0d8c7882cfd6249d4fa7401b538f1899b2d315d639cb6fd28cf33da34d91afc40572f5dd59aac75dee16b0c65aa1abf2e0b93bc779c3d","ssdeep":"","tlshash":"a7e02644e0e98d0a8e2607a88efc71d280a230cc12cc00ed72842528fd4e3eb6845be5","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-06T23:35:00.172291Z","times_seen":7903,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/flags/fi.svg","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /flags/fi.svg HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7rAAzeAQg0SWInpmwDud7B4YuLGS%2FzJbHQLiZ%2B3VIs2yK5BzFfNrOWLLwdgN6vxOJZ2HAJ4DvVXDbLPVWDk0Y027C2jdu33WuPSjT4MH1sLk8xwR%2FuosWbKDfGvamJqiThLS9v%2BalQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: br\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e6901b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":249,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d1724c02c151d1f44b22d5c89e199c54","sha1":"fbb67ed0796f19c50d9354ffa54a0103d33049b7","sha256":"0d9fdf20d3b93aa471132ea660f36e3331fc137bb628121caeec33e905a2a33b","sha512":"b25f8b249311ea474d847f05738c744e4b3590a79c6859db8b7cef67f7e50c234ac86b2eedd86778cfebe26fce6f376b93e202a0ebf7b519700a87b56302a741","ssdeep":"","tlshash":"8bd05e9690b96a044902476a8dec76da6026a0e6668d01fdb0811525f6893df78a36a8","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-06T23:35:00.077558Z","times_seen":2186,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/flags/es.svg","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:37.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /flags/es.svg HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:37 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XZ2PeuDnWMucQus%2F80OyKBdTO0cnQOsR8CH5m3HVm7L%2FFG361dbPQ2bTDER%2BiUe1By4cZX1aanRhxVSrLpM9F1AL00E6ff7YzkbrS1cX7YFahTMjvhI9tfd%2B9cEttkCrG6knoTOCzg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: br\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea8e6900b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":714,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"82a1bb6b96ec71df6247971da6e35155","sha1":"bb5be7dedff6612e4c8cb7c8019563c547238897","sha256":"8fc508fdb3ef11a4e38f9123f1ae903962ca14841cefd7b98ed5550d50d2f1bb","sha512":"dc54baf3110ea3a0512a272b5dac1bd1b24e50ecc32e9944436708791394a98fae1220f440ed1615c7d5e6f05d761190f3720105c9bf5f63300ff940cbb2738e","ssdeep":"","tlshash":"9b019cd4ba6c498c9e15837d0b6c70d1a20e20bc31cf40e8b98c8164b26a3ebe943d50","first_seen":"2023-05-07T18:03:13Z","last_seen":"2026-06-06T23:35:00.158048Z","times_seen":8249,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofincredvorn-de.live/frontend/assets/de/images/favicon.ico","fqdn":"ofincredvorn-de.live","domain":"ofincredvorn-de.live","tld":"live"},"ip":{"addr":"104.21.5.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofincredvorn-de.live/","date":"2026-05-31T23:56:38.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofincredvorn-de.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 16:45:28 GMT","end":"Mon, 24 Aug 2026 16:45:27 GMT"},"fingerprint":{"sha1":"A6:12:04:67:6B:30:4B:90:1B:FA:34:D3:0D:A3:FE:B6:46:43:7D:5F","sha256":"8A:90:E5:21:97:90:36:B9:EB:18:ED:0E:E6:33:DE:17:36:40:BA:AB:49:35:17:CD:D3:64:08:C5:1B:0D:E8:D1"}}},"request":{"raw":"GET /frontend/assets/de/images/favicon.ico HTTP/1.1\r\nHost: ofincredvorn-de.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofincredvorn-de.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im83SXkyQjBHQUZXQ2Y3NCszQndCcGc9PSIsInZhbHVlIjoiMUlsQkE5QVhNVTZwWVNrcXdZWGxQbGFSMThtQlZjM2VDeEtEWnAyRHU1Sk9pN09uM1lzOUJQUjM2eTQ1RHBLeDVJNjhXNlkrNUJkTFM1Q0hKdFo0SDN0NWtOTms0eVdibkt3MkpDaGNrUE90Q3NIR2lNVUw4aVcyVnI1ZGs0MXoiLCJtYWMiOiI0YzYzMzNlYjBhZjhjOWMzMzIzNjFjNGRmZDliN2NhMmZjMWE5Y2JkYjc4MWEwMjg0NWE2N2Y3NmQzODkyNDQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllrdUJvMFpJWXZValFiOFhYc0pxUHc9PSIsInZhbHVlIjoiMkQxT2ZHYkhQdlZqWk1ReU93cnZUajF4NXF2aWhNWEN0T0RBcllsSkc4OVRyTjNhbkw4NkRIVkljT3Yxb29QUzNUa2hMK3JDWTVxL2xrMmIwTndxZDJiMTlVdWJRSlMzQjRVeW0vTnorRHB3R0piSjZvaVM3OHV6Mkp3eElTclkiLCJtYWMiOiJlYzg0ZjZkZjcwMDdkMzQyYzg4ZDA0MWE2MzlmMzkzY2M1NmM3NTRjOTQ2YzM1NWJmNjBlOTNhZTYxZTRkZjMxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 31 May 2026 23:56:38 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bxzoCDDia7OX1xD1yeLG9KJ4M4LljkreW46pgE%2FnrkBQDqRROLvDqEz%2BVnPiYam9UU%2BcLkYDY5NN1amaUA%2FXVLQ3627mhFyWE8i3bvKLn7dQD6bF%2FXsF6l%2F2L2gqF3tIzSHVAek2Pg%3D%3D\"}]}\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 18 Mar 2026 23:51:48 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: br\r\nage: 649\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a049ea928945b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"b34506cdd39059243bbbcf00bb24b737","sha1":"dbad8e1c03a30cb1c4332e9c1a6a09adde016ed2","sha256":"bcf1e7f91a3017be5b2309bb6cbf092e0c7d527140c6f045b24acf1e7e6f9a35","sha512":"e80650a0d1c794f55453f2121a85ff82559ef8ab37ecc10975d9e60aa6a22f01e04dac7f1db1d865a5bd3be26cd68ecc1a384c97a1080e92779cd62ee054ed7d","ssdeep":"192:iCEIRDbc0HYUHTVzRM8liKHNOJO6PVFt+5eFWablbUIbY2E:iCzDbcNUHTlRHPHQIwFtOeFWabN9bY2E","tlshash":"5c627d607651a84cd29578f5cda1c28a26f9fe5085ab11033ab27a9f3bb82643e121d5","first_seen":"2026-03-23T08:58:19.833251Z","last_seen":"2026-06-01T10:05:26.864188Z","times_seen":81,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"ofincredvorn-de.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}