{"report_id":"a3c42f85-fc1f-4001-87d9-d96dab5c235b","version":0,"status":"done","tags":[],"date":"2026-09-13T19:01:22Z","url":{"schema":"http","addr":"kleihger.com/","fqdn":"kleihger.com","domain":"kleihger.com","tld":"com"},"ip":{"addr":"104.21.40.106","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kleihger.com/","fqdn":"kleihger.com","domain":"kleihger.com","tld":"com"},"title":"Ernährungsberatung: Unsere Leistungen | AOK","dom":{"size":410880,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (441)","md5":"999ab29680ec9f50e6e011f027f3d053","sha1":"2495ccee096b09c26b3b18613b700eef9d2917d3","sha256":"f53f5ffbcdc4082823ce35cb2d1e92441e88741fe5d18199987a8d28b61b6cef","sha512":"22e72c8e2bb535517b84556d66ebada857a11b4ce89b5456020f105d331775e4d4cb6e1bb507be5f8a7f9184e4e19e77a39ac53fdaebf9b53b46af8976991875","ssdeep":"3072:/0bh4ZH+SRDumAe5n6dpVDumAKHTDaPpp+zufjoDup5SJDQ1Zb//:/0bh4USBYBDaP+zufj4tDQ1R","tlshash":"4694301f19b610185ec7a4b59aef2148bf39e087c91edc58bd8e7250cf683a06cb5f45","dom_hash":"domhash402f8a345063c71c8f98bd2f98553dae","first_seen":"2026-09-13T19:01:23.066255Z","last_seen":"2026-09-13T19:01:23.066255Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kleihger.com/","fqdn":"kleihger.com","domain":"kleihger.com","tld":"com"},"ip":{"addr":"104.21.40.106","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-18T19:01:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kleihger.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"kleihger.com","ip":{"addr":"172.67.150.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-11","domain_rank":0,"first_seen":"2026-06-21T20:02:15.262592Z","last_seen":"2026-09-13T18:48:50.001467Z","alert_count":55,"request_count":11,"received_data":690117,"sent_data":5921,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Gatsby:5.11.0","description":"Gatsby is a React-based open-source framework with performance, scalability and security built-in.","website":"https://www.gatsbyjs.org/","common_platform_enumeration":"","icon":"Gatsby.svg","categories":["Static site generator","JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kleihger.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"kleihger.com","domain":"kleihger.com","tld":"com"},"ip":{"addr":"172.67.150.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-11T15:41:36.892644Z","times_seen":451641,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kleihger.com/","fqdn":"kleihger.com","domain":"kleihger.com","tld":"com"},"ip":{"addr":"172.67.150.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-10-11T15:41:07.663708Z","times_seen":240856,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kleihger.com/","fqdn":"kleihger.com","domain":"kleihger.com","tld":"com"},"ip":{"addr":"172.67.150.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-10-11T15:43:07.837491Z","times_seen":770404,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kleihger.com/lander/gusy-peper-please-meow/fonts/AOKBuenosAiresText-Regular-e7bae1e84ee54a364e0aed3d55d16699.woff2","fqdn":"kleihger.com","domain":"kleihger.com","tld":"com"},"ip":{"addr":"172.67.150.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kleihger.com/","date":"2026-09-13T19:00:52.328Z","timestamp":1789326052328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleihger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 15:04:41 GMT","end":"Sat, 07 Nov 2026 16:02:02 GMT"},"fingerprint":{"sha1":"7D:16:ED:8B:99:D9:DB:C0:8F:AE:AA:22:F3:77:86:BC:C2:03:3D:D8","sha256":"97:97:A2:3E:88:61:52:06:A4:DE:14:DD:67:B4:B4:EE:1C:03:23:C6:BF:97:C3:C6:74:CC:78:77:4E:94:12:E7"}}},"request":{"raw":"GET /lander/gusy-peper-please-meow/fonts/AOKBuenosAiresText-Regular-e7bae1e84ee54a364e0aed3d55d16699.woff2 HTTP/1.1\r\nHost: kleihger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kleihger.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:00:52 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 14:29:48 GMT\r\npriority: u=3,i=?0\r\netag: \"67ed49dc-63fc\"\r\nexpires: Wed, 23 Sep 2026 18:48:19 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lFI0J2V0MABzkkuFuhkU1%2BHeffXhuLxBCs70soGL7W8kliFjQtYgANvqOiUOJ%2FReU3HjhAujVr5mbQ8qfewWt4H%2BgP1fzJAy7ZqN14k6SDSDI8v5LWaQelFjyUaszkk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a965b30cad0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25596\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25596,"size_decoded":26357,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25596, version 9.0","md5":"a4324f4eed54741e153daa312313de80","sha1":"b7eac3fd45c6dd688974a275caba8baa68b4b329","sha256":"b8ed9451423e3793b6fa4ffd064d98990689846e57947cf6fba261d97c354d27","sha512":"cf93f913552743f509d77f76601fc386d0d1a598e984c3b4976815c929925e4eeaab01d9f07e938746a4be6f14dc8399658b76e5c7426a4f3b01e1df8926c3ae","ssdeep":"768:X6p5Z20Xp7jYIQNX53fTnJRLO7YVswpDdzim:S5Z205gZNX5vTJRLOSpDv","tlshash":"c7b2e1f4a44c5d7cd8d9febe6009f1faf0ab46936950c0b54e79823dc9b42419ef5888","first_seen":"2023-10-30T09:59:28Z","last_seen":"2026-09-14T18:45:18.323252Z","times_seen":16,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kleihger.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleihger.com/lander/gusy-peper-please-meow/fonts/AOKBuenosAires-SemiBold-aa0e37d088ab594f75acb02373897136.woff2","fqdn":"kleihger.com","domain":"kleihger.com","tld":"com"},"ip":{"addr":"172.67.150.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kleihger.com/","date":"2026-09-13T19:00:52.370Z","timestamp":1789326052370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleihger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 15:04:41 GMT","end":"Sat, 07 Nov 2026 16:02:02 GMT"},"fingerprint":{"sha1":"7D:16:ED:8B:99:D9:DB:C0:8F:AE:AA:22:F3:77:86:BC:C2:03:3D:D8","sha256":"97:97:A2:3E:88:61:52:06:A4:DE:14:DD:67:B4:B4:EE:1C:03:23:C6:BF:97:C3:C6:74:CC:78:77:4E:94:12:E7"}}},"request":{"raw":"GET /lander/gusy-peper-please-meow/fonts/AOKBuenosAires-SemiBold-aa0e37d088ab594f75acb02373897136.woff2 HTTP/1.1\r\nHost: kleihger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kleihger.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:00:52 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 14:29:48 GMT\r\npriority: u=3,i=?0\r\netag: \"67ed49dc-6770\"\r\nexpires: Wed, 23 Sep 2026 18:48:19 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ACH%2F54BF550W4FkQXcHj6LRtI6nQnzzjainQNxAFKpowQ4SVC%2FPYCr9pIzMdJxkATEjQln%2FeLiwFb5eAsEiETHcqauJtZgRKKGWpwujPTPoTIU3Z59WYWjXAhN4ww4A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a965b35cb90883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26480\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26480,"size_decoded":27241,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26480, version 9.0","md5":"b25bad4396c5336646437e6a7cc2585b","sha1":"5062469187c57b32468d63fd3ec87b76af6abe90","sha256":"789ef6f3b2c4146729a5cb9649aa203e94d470ae6b85d350e262a7be9d7e4928","sha512":"793de96abb56e336c6f619b08ebfc291b97d8e416d2321517225013fdc4eab0f262fadda28d62584d822d075a6ab41794024aac543c0d4ec14eb93ca3466e701","ssdeep":"768:/ZcUn02IkDFTzobJJdpxB7QYKyr9BAdLHR8kronN:Jn02ZOJfbQI6HKhN","tlshash":"11c2e18005d0928be8a7cae37b90be1f9dcd8e5f86821ca6873854f7d356b1065abd00","first_seen":"2023-10-30T09:59:28Z","last_seen":"2026-09-14T18:45:18.324129Z","times_seen":16,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kleihger.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleihger.com/lander/gusy-peper-please-meow/images/favicon-32x32.png","fqdn":"kleihger.com","domain":"kleihger.com","tld":"com"},"ip":{"addr":"172.67.150.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kleihger.com/","date":"2026-09-13T19:00:52.469Z","timestamp":1789326052469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleihger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 15:04:41 GMT","end":"Sat, 07 Nov 2026 16:02:02 GMT"},"fingerprint":{"sha1":"7D:16:ED:8B:99:D9:DB:C0:8F:AE:AA:22:F3:77:86:BC:C2:03:3D:D8","sha256":"97:97:A2:3E:88:61:52:06:A4:DE:14:DD:67:B4:B4:EE:1C:03:23:C6:BF:97:C3:C6:74:CC:78:77:4E:94:12:E7"}}},"request":{"raw":"GET /lander/gusy-peper-please-meow/images/favicon-32x32.png HTTP/1.1\r\nHost: kleihger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kleihger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:00:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 14:29:48 GMT\r\npriority: u=6,i=?0\r\netag: \"67ed49dc-7ac\"\r\nexpires: Wed, 23 Sep 2026 18:47:12 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mqR7crBfox0z95%2BVUJOigxkFS1nbGaScjycFUeQo4WT9hnEHfAZ3V9HDBEml4yqpLo3rp8I22f%2FNsyI3ih9LlwC2J%2Bd3Fe%2FOeeRffOFKmK%2BbTusfOecM7KROWEoSeMo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a965b3fcd60883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1964\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1964,"size_decoded":2726,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"18494cf42ea6ce73e5f3862a5ff1c399","sha1":"adcc78afe53c4a4b09028e3e1567bab5a641438e","sha256":"8172721c03280817d31ac7bcfc9642c9f2be22ef4a489401550d89ea9018f31b","sha512":"e1c3ac34acc77dc28cce2b05c3d76e0b95ec4a44ad060049fb41aeeb55fbe1047a7248415aaefa86abc70da70bd6870758330cd9db37ea51714be619a2e1abb2","ssdeep":"","tlshash":"3e410a66018857b344066d02d9dc45b835b729ec9c4b6ec6f6a832abf5d0a20dde7819","first_seen":"2026-05-06T23:43:58.779956Z","last_seen":"2026-09-14T18:45:18.322286Z","times_seen":14,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kleihger.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleihger.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"kleihger.com","domain":"kleihger.com","tld":"com"},"ip":{"addr":"172.67.150.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kleihger.com/","date":"2026-09-13T19:00:52.314Z","timestamp":1789326052314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleihger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 15:04:41 GMT","end":"Sat, 07 Nov 2026 16:02:02 GMT"},"fingerprint":{"sha1":"7D:16:ED:8B:99:D9:DB:C0:8F:AE:AA:22:F3:77:86:BC:C2:03:3D:D8","sha256":"97:97:A2:3E:88:61:52:06:A4:DE:14:DD:67:B4:B4:EE:1C:03:23:C6:BF:97:C3:C6:74:CC:78:77:4E:94:12:E7"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: kleihger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kleihger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Tue, 15 Sep 2026 19:00:52 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DQSOrvhoR2l2gmcweCHs%2F83wMH0yj7CiGqfv88E6HWBbb%2FwXS8I5fsfnTnFO%2BSHCJTlCfPUXAUdA3LouyyJc%2Ftmm1nbH5s%2FykQ0NmWhtkICZ08NYzihiRNWnsY2IkkE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sun, 13 Sep 2026 19:00:52 GMT\r\nserver: cloudflare\r\ncf-ray: a3a965b2fca70883-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1290,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-11T15:41:36.892644Z","times_seen":451641,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kleihger.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleihger.com/lander/gusy-peper-please-meow/fonts/AOKBuenosAiresText-BoldItalic-535e118564b0154fed8a8ee8d0842416.woff2","fqdn":"kleihger.com","domain":"kleihger.com","tld":"com"},"ip":{"addr":"172.67.150.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kleihger.com/","date":"2026-09-13T19:00:52.368Z","timestamp":1789326052368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleihger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 15:04:41 GMT","end":"Sat, 07 Nov 2026 16:02:02 GMT"},"fingerprint":{"sha1":"7D:16:ED:8B:99:D9:DB:C0:8F:AE:AA:22:F3:77:86:BC:C2:03:3D:D8","sha256":"97:97:A2:3E:88:61:52:06:A4:DE:14:DD:67:B4:B4:EE:1C:03:23:C6:BF:97:C3:C6:74:CC:78:77:4E:94:12:E7"}}},"request":{"raw":"GET /lander/gusy-peper-please-meow/fonts/AOKBuenosAiresText-BoldItalic-535e118564b0154fed8a8ee8d0842416.woff2 HTTP/1.1\r\nHost: kleihger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kleihger.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:00:52 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 14:29:48 GMT\r\npriority: u=3,i=?0\r\netag: \"67ed49dc-6980\"\r\nexpires: Wed, 23 Sep 2026 18:48:19 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2BB1%2BHnevAscvMdiNSx2MwJc7tLICHv470EiirCt95sUdF9ULxDG24WNi5%2BPstIC46VpTIudBqwt%2BJQsveO0xJNla0zGr1edGnzpK8%2FRXjWQ8CrZ3rr4bPsnVF9DHAw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a965b34cb80883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27008\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27008,"size_decoded":27773,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27008, version 9.0","md5":"ae8d13563a5b5c6df164803a7ecc4074","sha1":"bbf4fe360b68e100a6bce458f8fdf756fd49e5ea","sha256":"4036474bc6629d1fdd03cbf6123cab2034e18491782521ac315ef4ca8312ba59","sha512":"dd513653eef1ef4e1d9d922ef2f457ba6cc5f0709939e6d2dadafc506de47c3cfd3cc17eb281cc6c677fb0d6559588b2f6794d9c4d448775f069e143fe686774","ssdeep":"768:g5v/AEK/LI8ndg8x5XezeK6Wq8Nkuhncvqik:g5PuI8W8fXezeKrkUnOk","tlshash":"24c2e2615522c48e8473104e3f693cf92b027faf64c5978e4fdf91a788436afe9b4641","first_seen":"2026-05-06T23:43:58.783121Z","last_seen":"2026-09-14T18:45:18.321176Z","times_seen":14,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kleihger.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleihger.com/lander/gusy-peper-please-meow/fonts/AOKBuenosAires-Regular-9a8f6dba967023bc6683a2d4b018b85f.woff2","fqdn":"kleihger.com","domain":"kleihger.com","tld":"com"},"ip":{"addr":"172.67.150.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kleihger.com/","date":"2026-09-13T19:00:52.371Z","timestamp":1789326052371,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleihger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 15:04:41 GMT","end":"Sat, 07 Nov 2026 16:02:02 GMT"},"fingerprint":{"sha1":"7D:16:ED:8B:99:D9:DB:C0:8F:AE:AA:22:F3:77:86:BC:C2:03:3D:D8","sha256":"97:97:A2:3E:88:61:52:06:A4:DE:14:DD:67:B4:B4:EE:1C:03:23:C6:BF:97:C3:C6:74:CC:78:77:4E:94:12:E7"}}},"request":{"raw":"GET /lander/gusy-peper-please-meow/fonts/AOKBuenosAires-Regular-9a8f6dba967023bc6683a2d4b018b85f.woff2 HTTP/1.1\r\nHost: kleihger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kleihger.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:00:52 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 14:29:48 GMT\r\npriority: u=3,i=?0\r\netag: \"67ed49dc-65ec\"\r\nexpires: Wed, 23 Sep 2026 18:48:19 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pkd6n914l6DW%2BB4fJItFPfLXSjNGSLY3%2BWaBbzpP18aajNT0cecccmaMzmuDE1EVSOumXxo%2BM14h7ItrrjgiX7RcDXLvoXpmgM%2FM2GRd4%2BtSXIdIszug8gjFpHM5sDE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a965b35cba0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26092\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26092,"size_decoded":26857,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26092, version 9.0","md5":"c435511ad92935c2b834ea4e42c6856b","sha1":"7aecc698d7fcee540c582c255e9de4ff211b8f1d","sha256":"1f55bb62e35b5876d99f625ba67863e962d4001cb90fdd1e7ed24645eee8d85d","sha512":"8553c82130edc78671ae48ba162f7425cd8e7d7904afc57cc0cebdc022f03e0f95957f1e9b3e1d8439e3be6d517790983321be18b03209f712b965dbb9d23bca","ssdeep":"768:f5Fd1NHTf9HYaoHxoZRqIrRvEoK7ROP62Q2:ndHTVdw2vvEoMROP6H2","tlshash":"15c2e1b68a38c3c5936106b3d7f61697d8ec36b51e80fc5c37099d821cad24c26796ae","first_seen":"2023-10-30T09:59:28Z","last_seen":"2026-09-14T18:45:18.321767Z","times_seen":16,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kleihger.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleihger.com/lander/gusy-peper-please-meow/fonts/AOKBuenosAiresText-SemiBold-51ed12f8c1af3f9ad19daa84ce21706d.woff2","fqdn":"kleihger.com","domain":"kleihger.com","tld":"com"},"ip":{"addr":"172.67.150.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kleihger.com/","date":"2026-09-13T19:00:52.373Z","timestamp":1789326052373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleihger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 15:04:41 GMT","end":"Sat, 07 Nov 2026 16:02:02 GMT"},"fingerprint":{"sha1":"7D:16:ED:8B:99:D9:DB:C0:8F:AE:AA:22:F3:77:86:BC:C2:03:3D:D8","sha256":"97:97:A2:3E:88:61:52:06:A4:DE:14:DD:67:B4:B4:EE:1C:03:23:C6:BF:97:C3:C6:74:CC:78:77:4E:94:12:E7"}}},"request":{"raw":"GET /lander/gusy-peper-please-meow/fonts/AOKBuenosAiresText-SemiBold-51ed12f8c1af3f9ad19daa84ce21706d.woff2 HTTP/1.1\r\nHost: kleihger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kleihger.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:00:52 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 14:29:48 GMT\r\npriority: u=3,i=?0\r\netag: \"67ed49dc-6560\"\r\nexpires: Wed, 23 Sep 2026 18:48:19 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zf7IV0wjB4lcZ1ndeAwhfSvw0JVEmaNnqth6FNELZDtxOBlr05Ma6jS%2BhtIVFgVMtI5hDB8hhdZVG0AFJuJASeUjHwJVZ8YTp9HOaNX2DO8k5igEGgKsDyIHmhTnQMs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a965b35cbc0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25952\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25952,"size_decoded":26709,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25952, version 9.0","md5":"ee2862e23c1d0ea7c6411c8ad15516b5","sha1":"de5442f787a1942039e3ec0e38ce55c520f4dbd8","sha256":"ed911069542b191424785519c7aa6e80ee6576833fe3e79f8a25b5f6b73461ba","sha512":"08adf750b7f9a627a0f9aa3fa3002a03ef26af479545e6e2c1a642c2cfbbd2f27e5286a55fe19f2b3a122b45fa2013186159efea0213518ac15aebedabcbb347","ssdeep":"384:PgWzfdOlz/N9FC5h23xaJz2/w3NOQFe8p8MTCR2vqAscIxf1GVn2d7hrrMo5:Lm7RICw9ZHp8Cq2SBvIVnCFMC","tlshash":"dac2f103189a5ea9d7e05e644b3922bd332f10ebebb69691cd818981c25c23f6e45477","first_seen":"2023-10-30T09:59:28Z","last_seen":"2026-09-14T18:45:18.324706Z","times_seen":16,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kleihger.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleihger.com/lander/gusy-peper-please-meow/fonts/AOKBuenosAiresText-Bold-b0e2202659d8f12a6249242324276ea8.woff2","fqdn":"kleihger.com","domain":"kleihger.com","tld":"com"},"ip":{"addr":"172.67.150.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kleihger.com/","date":"2026-09-13T19:00:52.374Z","timestamp":1789326052374,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleihger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 15:04:41 GMT","end":"Sat, 07 Nov 2026 16:02:02 GMT"},"fingerprint":{"sha1":"7D:16:ED:8B:99:D9:DB:C0:8F:AE:AA:22:F3:77:86:BC:C2:03:3D:D8","sha256":"97:97:A2:3E:88:61:52:06:A4:DE:14:DD:67:B4:B4:EE:1C:03:23:C6:BF:97:C3:C6:74:CC:78:77:4E:94:12:E7"}}},"request":{"raw":"GET /lander/gusy-peper-please-meow/fonts/AOKBuenosAiresText-Bold-b0e2202659d8f12a6249242324276ea8.woff2 HTTP/1.1\r\nHost: kleihger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kleihger.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:00:52 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 14:29:48 GMT\r\npriority: u=3,i=?0\r\netag: \"67ed49dc-65d0\"\r\nexpires: Wed, 23 Sep 2026 18:48:19 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3cvaWolrm%2BEowa4SKkPUf4YVG6iZmtwslqmZMCoLcASt0jg7QfbkfVW8NX1Gidq%2BVaFnmYV5ZrEZXWPGax1ZAp1EgpulEb3SJVDds09prAoyagGECMU6iDVVbKhsRUc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a965b35cbd0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26064\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26064,"size_decoded":26823,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26064, version 9.0","md5":"344129c8ebb2dfcad94a2f839bc80f92","sha1":"a039b0921d196e17bd81789d8e5f4f6ed31bfe77","sha256":"48fa656c6186a01b8b2bb6ebaa45d5c28ed9f0387a0763c55290b5217748ebac","sha512":"68265e1d85c9ac11919665d7efdcb094001467e133746fd756016bd4db4a33bd9898ef26dc4e7c601cc7e0394d55518f047b790138500b4971babc7456832c36","ssdeep":"384:fP1H/pAuMbu6oVRXeC+tW2cnE+t/IEaa+K9B4Zr4wgs7XpzLGip9PM8Nr8w3m1bv:fP1CCxVRuC+Uz9h9uHrpzqiTfww38buA","tlshash":"4ac2f230fc6a1953b0c15375ef77f0648c8fcc1e5af064ef96a89696cce588a6283964","first_seen":"2023-10-30T09:59:28Z","last_seen":"2026-09-14T18:45:18.325199Z","times_seen":16,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kleihger.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleihger.com/lander/gusy-peper-please-meow/images/icon-512x512.png","fqdn":"kleihger.com","domain":"kleihger.com","tld":"com"},"ip":{"addr":"172.67.150.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kleihger.com/","date":"2026-09-13T19:00:52.468Z","timestamp":1789326052468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleihger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 15:04:41 GMT","end":"Sat, 07 Nov 2026 16:02:02 GMT"},"fingerprint":{"sha1":"7D:16:ED:8B:99:D9:DB:C0:8F:AE:AA:22:F3:77:86:BC:C2:03:3D:D8","sha256":"97:97:A2:3E:88:61:52:06:A4:DE:14:DD:67:B4:B4:EE:1C:03:23:C6:BF:97:C3:C6:74:CC:78:77:4E:94:12:E7"}}},"request":{"raw":"GET /lander/gusy-peper-please-meow/images/icon-512x512.png HTTP/1.1\r\nHost: kleihger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kleihger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:00:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 14:29:48 GMT\r\npriority: u=6,i=?0\r\netag: \"67ed49dc-cd62\"\r\nexpires: Wed, 23 Sep 2026 18:48:19 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M2hKlsD01jGYriU%2BRnp9NJT1uccZNSfAn0X5nkxnUSPakCJg4UCXyqoPsS5wzE2mZkN%2FJ5NRpnj%2FQN9zW%2FHsNud9paZwhrFpmtbQ4zHSYzzQQKxBLU9%2FsFjobXUB0XE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a965b3ecd50883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 52578\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52578,"size_decoded":53342,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"71d8e1aac6ff077d3e6ff357e95b8151","sha1":"b32bd605ca0c466fb6bdbb22597631a9d041c422","sha256":"c2e1a10e836fea06f497a11d8eacafe9c1bdf971de58dee010fd8a5f3c71cc4e","sha512":"d9ae2cf9761a03c407db02a11181492cf2d85800bf00ca513587d1861dea2ff7f9bdd62bdc9c8a087357bde8104bc1222e68c19f3d3f7197529e6706b30b10f4","ssdeep":"768:veAf8lMxyLOLFRrhAR7P9WsovlW+4nE3+QoaGK2VObGhckSJH0gqZKGBn/EftO6P:26JxyL+jAhPyKny+PaNG2qXEI6yza3F","tlshash":"6f3301bbe538120992d26e38f91643ce2d563dbd7c0bc927db740500a390aee7941ae6","first_seen":"2025-07-15T13:07:59.829218Z","last_seen":"2026-10-07T12:27:03.764873Z","times_seen":30,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kleihger.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleihger.com/","fqdn":"kleihger.com","domain":"kleihger.com","tld":"com"},"ip":{"addr":"172.67.150.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-13T19:00:51.777Z","timestamp":1789326051777,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleihger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 15:04:41 GMT","end":"Sat, 07 Nov 2026 16:02:02 GMT"},"fingerprint":{"sha1":"7D:16:ED:8B:99:D9:DB:C0:8F:AE:AA:22:F3:77:86:BC:C2:03:3D:D8","sha256":"97:97:A2:3E:88:61:52:06:A4:DE:14:DD:67:B4:B4:EE:1C:03:23:C6:BF:97:C3:C6:74:CC:78:77:4E:94:12:E7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kleihger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:00:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nihy0zXfgW86kG4UZcnDfq6%2BXlfiWW5iksndp5Unc19%2BFI90htRjHtnR%2F%2Fy%2BvRF%2BbOMRqTn6Z1Cx4JT%2BxbuzkpJvxjfLjMT2CQjNxMqgMfMXzbNwzZQMQWay09LhPO8%3D\"}]}\r\npriority: u=0,i\r\ncache-control: no-cache, no-store, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 13 Sep 2026 19:00:51 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3a965afebf40883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gatsby:5.11.0","description":"Gatsby is a React-based open-source framework with performance, scalability and security built-in.","website":"https://www.gatsbyjs.org/","common_platform_enumeration":"","icon":"Gatsby.svg","categories":["Static site generator","JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":411839,"size_decoded":50984,"mime_type":"text/html; charset=utf-8","magic":"PHP script, Unicode text, UTF-8 text, with very long lines (441)","md5":"f0e1ecbb03daec4602cebac6f00a8923","sha1":"2c7af701bebf8845e438c964bf1b556f23ff46b7","sha256":"c8111c91095a2cc3426e751812124aa38488f859d65d61daa16db52d2c02bed0","sha512":"aab14fee35c1f4abf21d0dcd306dfda512269e71df7c3d5c088b400b2716f8558cbedddc78061f7dde3b9b124931af244ef8408ed40f9f67c557ee9a23625bef","ssdeep":"3072:o0bh4ZH+SRDumAe5n6dpVDumAKHTDaPpp+zufjoDup5SJDk/db/D:o0bh4USBYBDaP+zufj4tDk/5","tlshash":"aa94301f19b610185ec7a4b59aef2148bf39e087ca1edc58bd8e7250cf683a06cb5f45","first_seen":"2026-09-13T19:01:23.082807Z","last_seen":"2026-09-13T19:01:23.082807Z","times_seen":1,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":11,"connect":29,"send":0,"wait":273,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kleihger.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kleihger.com/lander/gusy-peper-please-meow/images/csm_ernaehrungsberatung_ae24e9532f.jpg.webp","fqdn":"kleihger.com","domain":"kleihger.com","tld":"com"},"ip":{"addr":"172.67.150.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kleihger.com/","date":"2026-09-13T19:00:52.319Z","timestamp":1789326052319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kleihger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 15:04:41 GMT","end":"Sat, 07 Nov 2026 16:02:02 GMT"},"fingerprint":{"sha1":"7D:16:ED:8B:99:D9:DB:C0:8F:AE:AA:22:F3:77:86:BC:C2:03:3D:D8","sha256":"97:97:A2:3E:88:61:52:06:A4:DE:14:DD:67:B4:B4:EE:1C:03:23:C6:BF:97:C3:C6:74:CC:78:77:4E:94:12:E7"}}},"request":{"raw":"GET /lander/gusy-peper-please-meow/images/csm_ernaehrungsberatung_ae24e9532f.jpg.webp HTTP/1.1\r\nHost: kleihger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kleihger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:00:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 14:29:48 GMT\r\npriority: u=5,i\r\netag: \"67ed49dc-def6\"\r\nexpires: Wed, 23 Sep 2026 18:47:37 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OG1QN%2B4LxaV%2Bw%2B%2FaC0MeMevBDcdWKii6vdb4i0RDPbKz3IHTnEkJ4xYnRDE92rDWgVMyi9v%2FBbBkHIerRfNvv4X%2F3aLdNoqsWuGPUllu7Y4bmFjKKuvKVxWWhou5F%2BE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a965b2fcaa0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 57078\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57078,"size_decoded":57844,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1440x470, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"62c348fe9164053aab11423a2921422c","sha1":"bcccdb447d281efab7056d9b693fd573fa54d4ee","sha256":"ca85bbd5e41abcac08ee1ca39269d957aceaddb289cbdf7bf9213216cb7a20c3","sha512":"efad98327cd5bfc54b13125f3d15d7a58c4b4aeebc38a3c90146f5797671c13ad475415d6ebfc7756141830a4e89004dbcc98e8e6363cd260e50bb50a9853862","ssdeep":"1536:j32tVRfSVPojQqLjiV394tFga2JpMgufT/s:j32rRwPojg3WsMge/s","tlshash":"51430210d8038ca7c2f3716d61965755fd09b822a0fab9b128d3f43eeca35570bb995c","first_seen":"2026-05-06T23:43:58.780715Z","last_seen":"2026-09-14T18:45:18.320623Z","times_seen":14,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"kleihger.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"kleihger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}