{"report_id":"aad0c7bf-d575-4067-a90a-96606a4047a1","version":0,"status":"done","tags":[],"date":"2026-09-14T18:45:17Z","url":{"schema":"http","addr":"leibehn.com/","fqdn":"leibehn.com","domain":"leibehn.com","tld":"com"},"ip":{"addr":"104.21.34.251","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"leibehn.com/","fqdn":"leibehn.com","domain":"leibehn.com","tld":"com"},"title":"Ernährungsberatung: Unsere Leistungen | AOK","dom":{"size":410880,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (441)","md5":"43c215f3795ab3dfe64f1d4883ab16bd","sha1":"b3ca00f43e2064e551d2f9979d43f655b1494047","sha256":"0e93d50e535dffbe5d855cf8d0f451cd00177869023590aae1f620dc3a2a3e90","sha512":"41215606fd0e7873e920b55a3963da61b9c7473adb163dbfc9d1469773a0f1293417d4188b4e56748ac0102934bebddae034b4fdb54524b03ead0e26e6bace94","ssdeep":"3072:/0bh4ZH+SRDumAe5n6dpVDumAKHTDaPpp+zufjoDup5SJDQ1mb/e:/0bh4USBYBDaP+zufj4tDQ15","tlshash":"de94301f19b610185ec7a4b59aef2148bf39e087c91edc58bd8e7250cf683a06cb5f45","dom_hash":"domhash402f8a345063c71c8f98bd2f98553dae","first_seen":"2026-09-14T18:45:18.316941Z","last_seen":"2026-09-14T18:45:18.316941Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"leibehn.com/","fqdn":"leibehn.com","domain":"leibehn.com","tld":"com"},"ip":{"addr":"104.21.34.251","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-19T18:45:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"leibehn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"leibehn.com","ip":{"addr":"104.21.34.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-12","domain_rank":0,"first_seen":"2026-09-14T18:42:44.047298Z","last_seen":"2026-09-14T18:42:44.047298Z","alert_count":55,"request_count":11,"received_data":690137,"sent_data":5900,"comment":"","tags":null,"fingerprints":[{"name":"Gatsby:5.11.0","description":"Gatsby is a React-based open-source framework with performance, scalability and security built-in.","website":"https://www.gatsbyjs.org/","common_platform_enumeration":"","icon":"Gatsby.svg","categories":["Static site generator","JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"leibehn.com/","fqdn":"leibehn.com","domain":"leibehn.com","tld":"com"},"ip":{"addr":"104.21.34.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-10-11T16:18:14.824567Z","times_seen":240859,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leibehn.com/","fqdn":"leibehn.com","domain":"leibehn.com","tld":"com"},"ip":{"addr":"104.21.34.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-10-11T16:42:58.980722Z","times_seen":770441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leibehn.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"leibehn.com","domain":"leibehn.com","tld":"com"},"ip":{"addr":"104.21.34.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-11T16:43:48.936818Z","times_seen":451710,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"leibehn.com/","fqdn":"leibehn.com","domain":"leibehn.com","tld":"com"},"ip":{"addr":"104.21.34.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-14T18:44:47.195Z","timestamp":1789411487195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leibehn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 16:18:22 GMT","end":"Sun, 08 Nov 2026 17:18:09 GMT"},"fingerprint":{"sha1":"DF:F2:D9:F2:23:B2:37:89:5D:FC:2C:10:AE:66:1C:5B:5A:4D:00:5E","sha256":"54:D2:AD:22:17:4F:AB:89:37:28:5D:25:10:0E:53:52:6A:29:A7:D9:22:30:53:9B:A2:D8:E3:54:13:62:03:C5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: leibehn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:44:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4hYpIyKzwO6Ofz2LIuYysGqjR8xXi6kEbqlBCNLkNoWh9ueQ%2FrM4VrW4DWjlAZ8Wb%2FeuuAXR9azPaTK8Bqso503GwBzkRC1kT%2BmZoASNdmGj2%2BcpDTOy1FKdf%2F03WA%3D%3D\"}]}\r\npriority: u=0,i\r\ncache-control: no-cache, no-store, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 14 Sep 2026 18:44:47 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3b18b836a3aee0e-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gatsby:5.11.0","description":"Gatsby is a React-based open-source framework with performance, scalability and security built-in.","website":"https://www.gatsbyjs.org/","common_platform_enumeration":"","icon":"Gatsby.svg","categories":["Static site generator","JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":411839,"size_decoded":51169,"mime_type":"text/html; charset=utf-8","magic":"PHP script, Unicode text, UTF-8 text, with very long lines (441)","md5":"df22b0a6be26391ab6b9062da62feda3","sha1":"333dcffb4beaf9b6aaa4dc99e732974832f4c914","sha256":"f2405670693143a1f786fc6f63845f4476989f7fd6d3d84c2cfa91b2f27b610c","sha512":"c168ad6f51ce3a8b306a278ff0febc5a6a79f6566c987997253d4ca7964767531c1f8298da6b095d3f21e72623702b62698aa0ba492c3bcfa8adb795a7d9df89","ssdeep":"3072:o0bh4ZH+SRDumAe5n6dpVDumAKHTDaPpp+zufjoDup5SJDk/7b/6:o0bh4USBYBDaP+zufj4tDk/a","tlshash":"6294301f19b610185ec7a4b59aef2148bf39e087ca1edc58bd8e7250cf683a06cb5f45","first_seen":"2026-09-14T18:45:18.318187Z","last_seen":"2026-09-14T18:45:18.318187Z","times_seen":1,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":5,"connect":47,"send":0,"wait":121,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"leibehn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leibehn.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"leibehn.com","domain":"leibehn.com","tld":"com"},"ip":{"addr":"104.21.34.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leibehn.com/","date":"2026-09-14T18:44:47.552Z","timestamp":1789411487552,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leibehn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 16:18:22 GMT","end":"Sun, 08 Nov 2026 17:18:09 GMT"},"fingerprint":{"sha1":"DF:F2:D9:F2:23:B2:37:89:5D:FC:2C:10:AE:66:1C:5B:5A:4D:00:5E","sha256":"54:D2:AD:22:17:4F:AB:89:37:28:5D:25:10:0E:53:52:6A:29:A7:D9:22:30:53:9B:A2:D8:E3:54:13:62:03:C5"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: leibehn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://leibehn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Wed, 16 Sep 2026 18:44:47 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XHm86x%2BfF4xtG0wMJLltQ98Jl11KGkkXZP5n9Yeo%2Fbj%2Ffjn%2FSGWjUpdLbR%2Fx5eJm4MG%2Bcs2Pu66xNiYJhOH49kyaRmhJEegK5Nj7RfljHwfPA7j0ldwuUR%2F74NqLpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Mon, 14 Sep 2026 18:44:47 GMT\r\nserver: cloudflare\r\ncf-ray: a3b18b855a4eee0e-HAM\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1296,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-11T16:43:48.936818Z","times_seen":451710,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"leibehn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leibehn.com/lander/gusy-peper-please-meow/images/csm_ernaehrungsberatung_ae24e9532f.jpg.webp","fqdn":"leibehn.com","domain":"leibehn.com","tld":"com"},"ip":{"addr":"104.21.34.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://leibehn.com/","date":"2026-09-14T18:44:47.563Z","timestamp":1789411487563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leibehn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 16:18:22 GMT","end":"Sun, 08 Nov 2026 17:18:09 GMT"},"fingerprint":{"sha1":"DF:F2:D9:F2:23:B2:37:89:5D:FC:2C:10:AE:66:1C:5B:5A:4D:00:5E","sha256":"54:D2:AD:22:17:4F:AB:89:37:28:5D:25:10:0E:53:52:6A:29:A7:D9:22:30:53:9B:A2:D8:E3:54:13:62:03:C5"}}},"request":{"raw":"GET /lander/gusy-peper-please-meow/images/csm_ernaehrungsberatung_ae24e9532f.jpg.webp HTTP/1.1\r\nHost: leibehn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://leibehn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:44:47 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 14:29:48 GMT\r\npriority: u=5,i\r\netag: \"67ed49dc-def6\"\r\nexpires: Thu, 24 Sep 2026 03:20:10 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5y2NMF%2FW%2FilsVFkPwnFR3NgIaaRQ6XZpU%2F8CDNUs6slHICXiisHemqRNrfLE92XZNLf%2F7mq%2BrGf1FN1AI%2B8T9Q7b1GmSuHwX4In04fUWWP6SybprgPpHQOq4eXlZIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18b856a4fee0e-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 57078\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57078,"size_decoded":57844,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1440x470, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"62c348fe9164053aab11423a2921422c","sha1":"bcccdb447d281efab7056d9b693fd573fa54d4ee","sha256":"ca85bbd5e41abcac08ee1ca39269d957aceaddb289cbdf7bf9213216cb7a20c3","sha512":"efad98327cd5bfc54b13125f3d15d7a58c4b4aeebc38a3c90146f5797671c13ad475415d6ebfc7756141830a4e89004dbcc98e8e6363cd260e50bb50a9853862","ssdeep":"1536:j32tVRfSVPojQqLjiV394tFga2JpMgufT/s:j32rRwPojg3WsMge/s","tlshash":"51430210d8038ca7c2f3716d61965755fd09b822a0fab9b128d3f43eeca35570bb995c","first_seen":"2026-05-06T23:43:58.780715Z","last_seen":"2026-09-14T18:45:18.320623Z","times_seen":14,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"leibehn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leibehn.com/lander/gusy-peper-please-meow/fonts/AOKBuenosAiresText-BoldItalic-535e118564b0154fed8a8ee8d0842416.woff2","fqdn":"leibehn.com","domain":"leibehn.com","tld":"com"},"ip":{"addr":"104.21.34.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leibehn.com/","date":"2026-09-14T18:44:47.599Z","timestamp":1789411487599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leibehn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 16:18:22 GMT","end":"Sun, 08 Nov 2026 17:18:09 GMT"},"fingerprint":{"sha1":"DF:F2:D9:F2:23:B2:37:89:5D:FC:2C:10:AE:66:1C:5B:5A:4D:00:5E","sha256":"54:D2:AD:22:17:4F:AB:89:37:28:5D:25:10:0E:53:52:6A:29:A7:D9:22:30:53:9B:A2:D8:E3:54:13:62:03:C5"}}},"request":{"raw":"GET /lander/gusy-peper-please-meow/fonts/AOKBuenosAiresText-BoldItalic-535e118564b0154fed8a8ee8d0842416.woff2 HTTP/1.1\r\nHost: leibehn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://leibehn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:44:47 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 14:29:48 GMT\r\npriority: u=3,i=?0\r\netag: \"67ed49dc-6980\"\r\nexpires: Thu, 24 Sep 2026 18:42:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZdGq2rmdxZWDL%2FqCcckEjHZlvG%2FBTg%2F91I0KopOILixI0qPv%2Fd8O43cOA2Wiyv73GTz8OVQRf%2FOp5ARuIiDZKtQ9w2He5z3XGrd%2Fem8KRs%2FMcq4Fet3F88bog2em8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18b859a53ee0e-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27008\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27008,"size_decoded":27779,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27008, version 9.0","md5":"ae8d13563a5b5c6df164803a7ecc4074","sha1":"bbf4fe360b68e100a6bce458f8fdf756fd49e5ea","sha256":"4036474bc6629d1fdd03cbf6123cab2034e18491782521ac315ef4ca8312ba59","sha512":"dd513653eef1ef4e1d9d922ef2f457ba6cc5f0709939e6d2dadafc506de47c3cfd3cc17eb281cc6c677fb0d6559588b2f6794d9c4d448775f069e143fe686774","ssdeep":"768:g5v/AEK/LI8ndg8x5XezeK6Wq8Nkuhncvqik:g5PuI8W8fXezeKrkUnOk","tlshash":"24c2e2615522c48e8473104e3f693cf92b027faf64c5978e4fdf91a788436afe9b4641","first_seen":"2026-05-06T23:43:58.783121Z","last_seen":"2026-09-14T18:45:18.321176Z","times_seen":14,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"leibehn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leibehn.com/lander/gusy-peper-please-meow/fonts/AOKBuenosAires-Regular-9a8f6dba967023bc6683a2d4b018b85f.woff2","fqdn":"leibehn.com","domain":"leibehn.com","tld":"com"},"ip":{"addr":"104.21.34.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leibehn.com/","date":"2026-09-14T18:44:47.605Z","timestamp":1789411487605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leibehn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 16:18:22 GMT","end":"Sun, 08 Nov 2026 17:18:09 GMT"},"fingerprint":{"sha1":"DF:F2:D9:F2:23:B2:37:89:5D:FC:2C:10:AE:66:1C:5B:5A:4D:00:5E","sha256":"54:D2:AD:22:17:4F:AB:89:37:28:5D:25:10:0E:53:52:6A:29:A7:D9:22:30:53:9B:A2:D8:E3:54:13:62:03:C5"}}},"request":{"raw":"GET /lander/gusy-peper-please-meow/fonts/AOKBuenosAires-Regular-9a8f6dba967023bc6683a2d4b018b85f.woff2 HTTP/1.1\r\nHost: leibehn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://leibehn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:44:47 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 14:29:48 GMT\r\npriority: u=3,i=?0\r\netag: \"67ed49dc-65ec\"\r\nexpires: Thu, 24 Sep 2026 18:42:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xhLHy97BQzrnqXneAyVZGUgLPF0hLmCyj6s4Z0U6AsV8Snfoc16GVYtiPHxW6GaxtmpFJoeQpFs06gbYtaOy%2BH3BelQhMriSyUgYXjlWyL0%2FxpizXUu9L4diSDOF3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18b85aa57ee0e-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26092\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26092,"size_decoded":26853,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26092, version 9.0","md5":"c435511ad92935c2b834ea4e42c6856b","sha1":"7aecc698d7fcee540c582c255e9de4ff211b8f1d","sha256":"1f55bb62e35b5876d99f625ba67863e962d4001cb90fdd1e7ed24645eee8d85d","sha512":"8553c82130edc78671ae48ba162f7425cd8e7d7904afc57cc0cebdc022f03e0f95957f1e9b3e1d8439e3be6d517790983321be18b03209f712b965dbb9d23bca","ssdeep":"768:f5Fd1NHTf9HYaoHxoZRqIrRvEoK7ROP62Q2:ndHTVdw2vvEoMROP6H2","tlshash":"15c2e1b68a38c3c5936106b3d7f61697d8ec36b51e80fc5c37099d821cad24c26796ae","first_seen":"2023-10-30T09:59:28Z","last_seen":"2026-09-14T18:45:18.321767Z","times_seen":16,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"leibehn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leibehn.com/lander/gusy-peper-please-meow/images/favicon-32x32.png","fqdn":"leibehn.com","domain":"leibehn.com","tld":"com"},"ip":{"addr":"104.21.34.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leibehn.com/","date":"2026-09-14T18:44:47.710Z","timestamp":1789411487710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leibehn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 16:18:22 GMT","end":"Sun, 08 Nov 2026 17:18:09 GMT"},"fingerprint":{"sha1":"DF:F2:D9:F2:23:B2:37:89:5D:FC:2C:10:AE:66:1C:5B:5A:4D:00:5E","sha256":"54:D2:AD:22:17:4F:AB:89:37:28:5D:25:10:0E:53:52:6A:29:A7:D9:22:30:53:9B:A2:D8:E3:54:13:62:03:C5"}}},"request":{"raw":"GET /lander/gusy-peper-please-meow/images/favicon-32x32.png HTTP/1.1\r\nHost: leibehn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://leibehn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:44:47 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 14:29:48 GMT\r\npriority: u=6,i=?0\r\netag: \"67ed49dc-7ac\"\r\nexpires: Thu, 24 Sep 2026 03:20:11 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gkxWLoLkkUEAcmxB8u7mGvq%2FJNdGrt0g%2BLd9puBMdugCjHOodUyhYt2dP0Z24%2FjGLxKqQb8VWIGkkGWEnPoZ0w4NwsQsY7s2x%2F929zHUNpxkFib7zxPMwgUpvrKD7Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18b864a68ee0e-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1964\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1964,"size_decoded":2726,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"18494cf42ea6ce73e5f3862a5ff1c399","sha1":"adcc78afe53c4a4b09028e3e1567bab5a641438e","sha256":"8172721c03280817d31ac7bcfc9642c9f2be22ef4a489401550d89ea9018f31b","sha512":"e1c3ac34acc77dc28cce2b05c3d76e0b95ec4a44ad060049fb41aeeb55fbe1047a7248415aaefa86abc70da70bd6870758330cd9db37ea51714be619a2e1abb2","ssdeep":"","tlshash":"3e410a66018857b344066d02d9dc45b835b729ec9c4b6ec6f6a832abf5d0a20dde7819","first_seen":"2026-05-06T23:43:58.779956Z","last_seen":"2026-09-14T18:45:18.322286Z","times_seen":14,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"leibehn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leibehn.com/lander/gusy-peper-please-meow/fonts/AOKBuenosAiresText-Regular-e7bae1e84ee54a364e0aed3d55d16699.woff2","fqdn":"leibehn.com","domain":"leibehn.com","tld":"com"},"ip":{"addr":"104.21.34.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leibehn.com/","date":"2026-09-14T18:44:47.600Z","timestamp":1789411487600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leibehn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 16:18:22 GMT","end":"Sun, 08 Nov 2026 17:18:09 GMT"},"fingerprint":{"sha1":"DF:F2:D9:F2:23:B2:37:89:5D:FC:2C:10:AE:66:1C:5B:5A:4D:00:5E","sha256":"54:D2:AD:22:17:4F:AB:89:37:28:5D:25:10:0E:53:52:6A:29:A7:D9:22:30:53:9B:A2:D8:E3:54:13:62:03:C5"}}},"request":{"raw":"GET /lander/gusy-peper-please-meow/fonts/AOKBuenosAiresText-Regular-e7bae1e84ee54a364e0aed3d55d16699.woff2 HTTP/1.1\r\nHost: leibehn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://leibehn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:44:47 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 14:29:48 GMT\r\npriority: u=3,i=?0\r\netag: \"67ed49dc-63fc\"\r\nexpires: Thu, 24 Sep 2026 18:42:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NsvBtK5uvNJQyqQcnS4Z8nVBBSADxB9deRZfR2NKrIpiIwzd8tVt%2FIcwvQUeEv4IE0a7erXn79OVmuFOjtF7oX%2FEenRrhRyfvoYz15iSsYlfru2HMsPagTe3h%2BWQ5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18b859a55ee0e-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25596\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25596,"size_decoded":26359,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25596, version 9.0","md5":"a4324f4eed54741e153daa312313de80","sha1":"b7eac3fd45c6dd688974a275caba8baa68b4b329","sha256":"b8ed9451423e3793b6fa4ffd064d98990689846e57947cf6fba261d97c354d27","sha512":"cf93f913552743f509d77f76601fc386d0d1a598e984c3b4976815c929925e4eeaab01d9f07e938746a4be6f14dc8399658b76e5c7426a4f3b01e1df8926c3ae","ssdeep":"768:X6p5Z20Xp7jYIQNX53fTnJRLO7YVswpDdzim:S5Z205gZNX5vTJRLOSpDv","tlshash":"c7b2e1f4a44c5d7cd8d9febe6009f1faf0ab46936950c0b54e79823dc9b42419ef5888","first_seen":"2023-10-30T09:59:28Z","last_seen":"2026-09-14T18:45:18.323252Z","times_seen":16,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"leibehn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leibehn.com/lander/gusy-peper-please-meow/fonts/AOKBuenosAires-SemiBold-aa0e37d088ab594f75acb02373897136.woff2","fqdn":"leibehn.com","domain":"leibehn.com","tld":"com"},"ip":{"addr":"104.21.34.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leibehn.com/","date":"2026-09-14T18:44:47.603Z","timestamp":1789411487603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leibehn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 16:18:22 GMT","end":"Sun, 08 Nov 2026 17:18:09 GMT"},"fingerprint":{"sha1":"DF:F2:D9:F2:23:B2:37:89:5D:FC:2C:10:AE:66:1C:5B:5A:4D:00:5E","sha256":"54:D2:AD:22:17:4F:AB:89:37:28:5D:25:10:0E:53:52:6A:29:A7:D9:22:30:53:9B:A2:D8:E3:54:13:62:03:C5"}}},"request":{"raw":"GET /lander/gusy-peper-please-meow/fonts/AOKBuenosAires-SemiBold-aa0e37d088ab594f75acb02373897136.woff2 HTTP/1.1\r\nHost: leibehn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://leibehn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:44:47 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 14:29:48 GMT\r\npriority: u=3,i=?0\r\netag: \"67ed49dc-6770\"\r\nexpires: Thu, 24 Sep 2026 18:42:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WmgA%2B3mhD74Zd5Qs9yUEpc4e3Hwyw6Dpu8PuOJp7jU0hgOBGg1mPKnrBbi%2BcSaXbapRNRLhGnSwlFlp%2FvfsxyouqTnnYbLhJdHQU%2B0FeHP%2FvWrbBPNJ%2BXEEpDupjMQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18b85aa56ee0e-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26480\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26480,"size_decoded":27249,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26480, version 9.0","md5":"b25bad4396c5336646437e6a7cc2585b","sha1":"5062469187c57b32468d63fd3ec87b76af6abe90","sha256":"789ef6f3b2c4146729a5cb9649aa203e94d470ae6b85d350e262a7be9d7e4928","sha512":"793de96abb56e336c6f619b08ebfc291b97d8e416d2321517225013fdc4eab0f262fadda28d62584d822d075a6ab41794024aac543c0d4ec14eb93ca3466e701","ssdeep":"768:/ZcUn02IkDFTzobJJdpxB7QYKyr9BAdLHR8kronN:Jn02ZOJfbQI6HKhN","tlshash":"11c2e18005d0928be8a7cae37b90be1f9dcd8e5f86821ca6873854f7d356b1065abd00","first_seen":"2023-10-30T09:59:28Z","last_seen":"2026-09-14T18:45:18.324129Z","times_seen":16,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"leibehn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leibehn.com/lander/gusy-peper-please-meow/fonts/AOKBuenosAiresText-SemiBold-51ed12f8c1af3f9ad19daa84ce21706d.woff2","fqdn":"leibehn.com","domain":"leibehn.com","tld":"com"},"ip":{"addr":"104.21.34.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leibehn.com/","date":"2026-09-14T18:44:47.610Z","timestamp":1789411487610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leibehn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 16:18:22 GMT","end":"Sun, 08 Nov 2026 17:18:09 GMT"},"fingerprint":{"sha1":"DF:F2:D9:F2:23:B2:37:89:5D:FC:2C:10:AE:66:1C:5B:5A:4D:00:5E","sha256":"54:D2:AD:22:17:4F:AB:89:37:28:5D:25:10:0E:53:52:6A:29:A7:D9:22:30:53:9B:A2:D8:E3:54:13:62:03:C5"}}},"request":{"raw":"GET /lander/gusy-peper-please-meow/fonts/AOKBuenosAiresText-SemiBold-51ed12f8c1af3f9ad19daa84ce21706d.woff2 HTTP/1.1\r\nHost: leibehn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://leibehn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:44:47 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 14:29:48 GMT\r\npriority: u=3,i=?0\r\netag: \"67ed49dc-6560\"\r\nexpires: Thu, 24 Sep 2026 18:42:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P4mtfk%2F6M3RYFjy%2BfHviTgiD063Szqt7bXjkmtKMTRx1UjVKbbqJrsVN5qHMrZOCLN1LtFgxpxFu7GI4YdrBlg3y4CXmsDycN3hYipKtYaE3g1mD4ICEOC3kJB4mbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18b85aa58ee0e-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25952\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25952,"size_decoded":26713,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25952, version 9.0","md5":"ee2862e23c1d0ea7c6411c8ad15516b5","sha1":"de5442f787a1942039e3ec0e38ce55c520f4dbd8","sha256":"ed911069542b191424785519c7aa6e80ee6576833fe3e79f8a25b5f6b73461ba","sha512":"08adf750b7f9a627a0f9aa3fa3002a03ef26af479545e6e2c1a642c2cfbbd2f27e5286a55fe19f2b3a122b45fa2013186159efea0213518ac15aebedabcbb347","ssdeep":"384:PgWzfdOlz/N9FC5h23xaJz2/w3NOQFe8p8MTCR2vqAscIxf1GVn2d7hrrMo5:Lm7RICw9ZHp8Cq2SBvIVnCFMC","tlshash":"dac2f103189a5ea9d7e05e644b3922bd332f10ebebb69691cd818981c25c23f6e45477","first_seen":"2023-10-30T09:59:28Z","last_seen":"2026-09-14T18:45:18.324706Z","times_seen":16,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"leibehn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leibehn.com/lander/gusy-peper-please-meow/fonts/AOKBuenosAiresText-Bold-b0e2202659d8f12a6249242324276ea8.woff2","fqdn":"leibehn.com","domain":"leibehn.com","tld":"com"},"ip":{"addr":"104.21.34.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leibehn.com/","date":"2026-09-14T18:44:47.612Z","timestamp":1789411487612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leibehn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 16:18:22 GMT","end":"Sun, 08 Nov 2026 17:18:09 GMT"},"fingerprint":{"sha1":"DF:F2:D9:F2:23:B2:37:89:5D:FC:2C:10:AE:66:1C:5B:5A:4D:00:5E","sha256":"54:D2:AD:22:17:4F:AB:89:37:28:5D:25:10:0E:53:52:6A:29:A7:D9:22:30:53:9B:A2:D8:E3:54:13:62:03:C5"}}},"request":{"raw":"GET /lander/gusy-peper-please-meow/fonts/AOKBuenosAiresText-Bold-b0e2202659d8f12a6249242324276ea8.woff2 HTTP/1.1\r\nHost: leibehn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://leibehn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:44:47 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 14:29:48 GMT\r\npriority: u=3,i=?0\r\netag: \"67ed49dc-65d0\"\r\nexpires: Thu, 24 Sep 2026 18:42:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SMl1StKHgqu1awa8JzbmjsvHo94mtw8OH5MmKDn%2BYeTKJOf0q%2FWpz8wVOfYJabHP249tRKr1kgxnOQbxtrGOE1OfV7pjoa4XcDGmeOrGvUHfOfVlrbrs9ynTRQsXhw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18b85ba59ee0e-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26064\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26064,"size_decoded":26825,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26064, version 9.0","md5":"344129c8ebb2dfcad94a2f839bc80f92","sha1":"a039b0921d196e17bd81789d8e5f4f6ed31bfe77","sha256":"48fa656c6186a01b8b2bb6ebaa45d5c28ed9f0387a0763c55290b5217748ebac","sha512":"68265e1d85c9ac11919665d7efdcb094001467e133746fd756016bd4db4a33bd9898ef26dc4e7c601cc7e0394d55518f047b790138500b4971babc7456832c36","ssdeep":"384:fP1H/pAuMbu6oVRXeC+tW2cnE+t/IEaa+K9B4Zr4wgs7XpzLGip9PM8Nr8w3m1bv:fP1CCxVRuC+Uz9h9uHrpzqiTfww38buA","tlshash":"4ac2f230fc6a1953b0c15375ef77f0648c8fcc1e5af064ef96a89696cce588a6283964","first_seen":"2023-10-30T09:59:28Z","last_seen":"2026-09-14T18:45:18.325199Z","times_seen":16,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"leibehn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leibehn.com/lander/gusy-peper-please-meow/images/icon-512x512.png","fqdn":"leibehn.com","domain":"leibehn.com","tld":"com"},"ip":{"addr":"104.21.34.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leibehn.com/","date":"2026-09-14T18:44:47.708Z","timestamp":1789411487708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leibehn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 16:18:22 GMT","end":"Sun, 08 Nov 2026 17:18:09 GMT"},"fingerprint":{"sha1":"DF:F2:D9:F2:23:B2:37:89:5D:FC:2C:10:AE:66:1C:5B:5A:4D:00:5E","sha256":"54:D2:AD:22:17:4F:AB:89:37:28:5D:25:10:0E:53:52:6A:29:A7:D9:22:30:53:9B:A2:D8:E3:54:13:62:03:C5"}}},"request":{"raw":"GET /lander/gusy-peper-please-meow/images/icon-512x512.png HTTP/1.1\r\nHost: leibehn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://leibehn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:44:47 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 14:29:48 GMT\r\npriority: u=6,i=?0\r\netag: \"67ed49dc-cd62\"\r\nexpires: Thu, 24 Sep 2026 18:42:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=StvDCxpsw5XYwpvIfay5NUFSG2GQfEZ7kTl00pVF6k46SnZmdWgwcRNi0EYKYMS2i3Lla4eEPgN%2FIKME720UTPCI%2BQrnOumcHuv7xg%2BZLlpivVsKIX0imCugMeqebQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18b864a67ee0e-HAM\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 52578\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52578,"size_decoded":53340,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"71d8e1aac6ff077d3e6ff357e95b8151","sha1":"b32bd605ca0c466fb6bdbb22597631a9d041c422","sha256":"c2e1a10e836fea06f497a11d8eacafe9c1bdf971de58dee010fd8a5f3c71cc4e","sha512":"d9ae2cf9761a03c407db02a11181492cf2d85800bf00ca513587d1861dea2ff7f9bdd62bdc9c8a087357bde8104bc1222e68c19f3d3f7197529e6706b30b10f4","ssdeep":"768:veAf8lMxyLOLFRrhAR7P9WsovlW+4nE3+QoaGK2VObGhckSJH0gqZKGBn/EftO6P:26JxyL+jAhPyKny+PaNG2qXEI6yza3F","tlshash":"6f3301bbe538120992d26e38f91643ce2d563dbd7c0bc927db740500a390aee7941ae6","first_seen":"2025-07-15T13:07:59.829218Z","last_seen":"2026-10-07T12:27:03.764873Z","times_seen":30,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"leibehn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"leibehn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}