{"report_id":"c1064de6-61d9-4da4-a4aa-01a4b8341601","version":0,"status":"done","tags":[],"date":"2026-09-21T18:55:32Z","url":{"schema":"http","addr":"litera-bavarica.de/","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":0,"asn":8560,"as":"IONOS SE","country":"France","country_code":"FR"},"final":{"url":{"schema":"https","addr":"litera-bavarica.de/","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"title":"litera bavarica - Die Welt der bayerischen Bücher","dom":{"size":35007,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1687)","md5":"6fb9b43525b07050748f40304c5bcb0d","sha1":"8737bd0d09a86d6bad58919cffd03124f27465ad","sha256":"c46ec1a88eb8ca7d698187e119dcdcb5f60f47ffd9d2f5ad27ed1e2d84bfe4d5","sha512":"95b9d0b71f88b8d87208b2ae8f653b665487417f79e313c77479f1266ef768ad8b9aa0f85ef12ba4691c67fcc973efb345cdef7cd294d5eec8a6230b72a61829","ssdeep":"768:r1y0JP1ZPi37iHINWKlCT0E3qlaM/c0pn4+Z7phYJuX11h/A/XeHfQ4SzKEPjYBE:rhJdRi37iHINWKlCT0E3qYMuS7phYJuW","tlshash":"caf2c73285c42d3b450752a1a1217b89ba9b9e1bc5538961f3ff434aefc3ea5cc13629","dom_hash":"domhash793235a309a6438a9d90fa3cf601dec5","first_seen":"2026-09-21T18:56:19.349014Z","last_seen":"2026-09-21T18:56:19.349014Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"litera-bavarica.de/","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":0,"asn":8560,"as":"IONOS SE","country":"France","country_code":"FR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-26T18:55:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"analytics.litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"analytics.litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"analytics.litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"litera-bavarica.de","ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-08-25T15:12:09.611234Z","last_seen":"2026-09-21T18:34:10.227441Z","alert_count":162,"request_count":54,"received_data":7021295,"sent_data":30547,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"SyntaxHighlighter","description":"","website":"https://github.com/syntaxhighlighter","common_platform_enumeration":"","icon":"SyntaxHighlighter.png","categories":["Miscellaneous"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}]},{"fqdn":"everest.castbox.fm","ip":{"addr":"172.66.159.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":359894,"first_seen":"2017-03-17T13:05:05Z","last_seen":"2026-05-02T17:31:59.651413Z","alert_count":0,"request_count":8,"received_data":255815,"sent_data":5798,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"castbox.fm","ip":{"addr":"104.20.29.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":5694,"first_seen":"2016-09-03T09:01:09Z","last_seen":"2026-08-14T11:31:31.002814Z","alert_count":0,"request_count":4,"received_data":36275,"sent_data":2259,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"s3.castbox.fm","ip":{"addr":"65.9.62.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":1352902,"first_seen":"2017-05-11T05:15:33Z","last_seen":"2026-08-14T11:31:30.91447Z","alert_count":0,"request_count":15,"received_data":950477,"sent_data":8698,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":2,"received_data":30278,"sent_data":1128,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-20T22:44:48.5379Z","alert_count":0,"request_count":2,"received_data":1021855,"sent_data":954,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":1,"received_data":5612,"sent_data":515,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-09-21T00:02:17.3583Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":817,"comment":"","tags":null,"fingerprints":null},{"fqdn":"analytics.litera-bavarica.de","ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-16T07:31:26.486396Z","last_seen":"2026-09-21T18:34:10.244276Z","alert_count":3,"request_count":1,"received_data":310,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.4.24","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"litera-bavarica.de/assets/js/datenschutz.js","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d7f864ce737165b0c49d031e91233cb","sha1":"2b46711a37eab941fbef31d03b3c8c7852babba6","sha256":"9d4086b36ab89a276f5f5fd07ae88dc35e0ff508233bc7accc6196e679a6440a","sha512":"df8e784bd2f95a4ffcec2f01fe766e2f0e0cc35a067af9966a66ec5a494bdcb748253f1abbd9b7d74e0a8d9427c3362a9db5aa3a53645cf5048212d483ac05cb","ssdeep":"","tlshash":"43f025057d582829b0af37369e6643d52d15d55630f0d616253eea255e01c03d47d9e3","size":479,"data":"","first_seen":"2026-04-16T06:10:21.168629Z","last_seen":"2026-09-21T18:56:19.470636Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.castbox.fm/webstatic/js/page.player.5cc8cebe.js","fqdn":"s3.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"65.9.62.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"68ba3b2383a5ce9377cbec6dbf1b2088","sha1":"7d811466a9700842a20023c60cf8b52f32d33119","sha256":"49e2e50431c15b80c789ab73a517be35a31b3c7eeed0d3cb7dde6dd39f356cfe","sha512":"ee8a6c64ffb6a2611454a5fa24dc29b1eeaef30cb4207bf7c8669d5f096f63a8df255e8f94d1a473d9e95d0841fce5a5f1d260bba6b7e92752feec1c65e6a50f","ssdeep":"3072:bT/+u0DVMoEz93N1Ph0IVND9E0uL6UEWp+f00m2HyNoIsK:bzd0DVdEzv9qIVND9E0ia00m2SNom","tlshash":"b52409de77d2b0aa039330e0c83f194eb1ba5964e48cc165eea6d4c7e87655cc227f19","size":224842,"data":"","first_seen":"2026-09-21T18:56:19.516013Z","last_seen":"2026-09-21T18:56:19.516013Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.castbox.fm/webstatic/js/page.vendors~castbox.main~creator.analytics~creator.ch~creator.ch.des~creator.comments~creator.ep~creator~546696e9.6cb8e3df.js","fqdn":"s3.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"65.9.62.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"48c8768821f90e9db345b3caf1d6eb59","sha1":"17a1282e4d9c9de766f3bd3c4f8ab6f1f2df1c4b","sha256":"8fb16d7597fc487522510d0dbc1c458477b7c462894527d07c5828823cb85881","sha512":"100743aab0276fe0667dedab4ac393bb124ce280f72a1e0eb483b462329150d594c1d97b3661cc26187d4728ffd81d7b5818ef91861fd1c93755ca9988318bc4","ssdeep":"192:q2MTJLggg1CYeZRF5wkIE9ZgM5wkIE9xHFfkPdSqyQ49VcxuV+:7kSggUYeZew9kw9zfkFkQar+","tlshash":"2d42c7cdb9e2f0b251d366ed812f084b73ba64a9444e90b07a12e8f09df556d1227f2d","size":12630,"data":"","first_seen":"2026-09-21T18:56:19.427892Z","last_seen":"2026-09-21T18:56:19.427892Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.castbox.fm/webstatic/js/page.vendors~audiobooks~audiobooks.genre~castbox.main~categories~ch~channellist~claim~claim.failed~claim.~b62a876c.5297976c.js","fqdn":"s3.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"65.9.62.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8afd7cae97370cf4b07ff9e305c085b","sha1":"c591624eb43024c9d5ac3347b037263786655cd6","sha256":"2842e2e5912275576ad91242aeea4ceddbb4c7b92aa4c5e116cb558d373c960a","sha512":"2ab1cd33296f347348688b1b4d9887ebac50161eb8cc258e77676a92674386a6100980c7cfd1d75f55840ada6d0033d2ddc3fc5ada96c84b7b4c109b9f8b5de0","ssdeep":"1536:oaEHRU+1ykfkxBtn2+kmFacwPGgaqkosV4wgINJg:oaEHRU+UkfkxBt2+kmMcA1kozh","tlshash":"b39319ccb795b01143a362f8501fa40ff2799919ac0c4568f351e8f528bdd8eaa67f78","size":93262,"data":"","first_seen":"2026-09-21T18:56:19.49373Z","last_seen":"2026-09-21T18:56:19.49373Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e03f152dc2ef11a03e92163f2118bb90","sha1":"12f4f30dd871073128a0c812c166aa42301241c8","sha256":"36a84c7af38b2fa37ba58a69d6a131ffa65e8e398288544e3b24f621c458825f","sha512":"96d5074535816d1e27fc91d9df34c337cf16f7c5b83149085bd4f3ac85fc10da13f5f53b54039890917f7fd41fe0fec0e0594ef89cce184fd69159a477337007","ssdeep":"","tlshash":"07d023e52875843176d4029720f7e3d9756061607b55a550d5cdcc3fee50ed344f195c","size":217,"data":"","first_seen":"2026-09-21T18:56:19.52077Z","last_seen":"2026-09-21T18:56:19.52077Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-CESP3QW02J","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1119835556a191f0285e09c6629b0bbc","sha1":"da430aace6f43632783ab0dd0ff57874622911a6","sha256":"903fbaf5ee5c7e278081ff5c27214d2e55362e3fda578980ed81a98487f11ca0","sha512":"775ff0312b870ade1b6fdb2f8cf8dc1bc77e7aa7cd8a34e5700a86781431f5cc7cf78f272fb34593a80bc4a154da662be19fb47a01d6247f7f5c398707657709","ssdeep":"6144:SKVPB1tV6FonaWqrYJNmX96d8cOAIb4EUt3lix9uFbHDUOg3hc1f:SKbsFoaWEdthl9sHI1i","tlshash":"37b409ce73c674229396f578943f01cb697b29a2b49cc89af189dce02d3458a5163f7c","size":535301,"data":"","first_seen":"2026-09-21T18:56:19.443965Z","last_seen":"2026-09-21T18:56:19.443965Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-Y2EEPJE4W8","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"554b0c2cc6b78582d7e138afafcb2ca4","sha1":"a93ad07ee4041cca0d656b111d8fb15060880243","sha256":"7cac359f07b57a7e54194ba2e4150f8b0588751d9657533ffef7068e1c1565d1","sha512":"6e7cd250266bc46353526268661fece6c09f29564fd6846e9a65c217ae34f8d040bcf807aeb26bdf1778894faa9977eb414557ee02c4f210b259d01729df359b","ssdeep":"6144:CB1tV6FoPaWqrYqmrDd8cOAIb4EUt3lix3uFb4NUOg3Hc+pf:SsFoyWEqol3s4W133","tlshash":"7ea42acdb3c674229392f274903f018bb67b69a2b44cc899f289d8e42d3465a5177f7c","size":485366,"data":"","first_seen":"2026-09-21T18:56:19.412853Z","last_seen":"2026-09-21T18:56:19.412853Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.castbox.fm/webstatic/js/manifest.628730e5.js","fqdn":"s3.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"65.9.62.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a042ba8b22d9987418eeca9e07e3401","sha1":"468499b827db1827b95c8798456a37422c4a384f","sha256":"d9fb77293bec36a297f78940a1bfb464e836a4cc268a0f6ea6a54ce8b6ffbe2c","sha512":"cdef3a41479b873939deee5cae0d32b30b51702b4d3f93bef1c1056af6aef85b82068eee009cfcc77889ac95127c9daa3f6d67829595185978872e6c083b1bee","ssdeep":"192:1FJ1dIk0e6t94cwyy3T2tXC7ajIk0e6GtjW+faU94sb:1NdR0Jt94cw53C/jR0JGtbRx","tlshash":"3c12c8eee35cbaa7183529ebb469905bd43415a1a41fd4c4c5f8e70ce42cd4422af639","size":9516,"data":"","first_seen":"2026-09-21T18:56:19.363404Z","last_seen":"2026-09-21T18:56:19.363404Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.castbox.fm/webstatic/js/page.playerpage.25bb3f91.js","fqdn":"s3.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"65.9.62.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fce518192d8acab4d4389e69cf8f6a6","sha1":"3c4a7093df9fec6814d1482367d73c2d814d0912","sha256":"010c42bfd14cdc8f42126712d9af4757f52cb8c3946484591a5d51ac003a495f","sha512":"441594287465568ddaff4ead02a2fae39752901bd830351318590e3383a2405610cf6183357cbd878fc6f08ffc0bd37086404ded4309e6bed8d4281597fdb2fc","ssdeep":"6144:5RFaX8sd7R3CZYqBpACiEbqkNf360ibcV0UHKXq6O:5RFaX8sd7R3CZFBpACnbqkNSbcVvp","tlshash":"3d340988b1c6f09a47d76561803f620bf2ba6d48340dd940f237d9d47868a9da337f7a","size":244201,"data":"","first_seen":"2026-09-21T18:56:19.463928Z","last_seen":"2026-09-21T18:56:19.463928Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"eval","is_inline":false,"md5":"9e17bb3747c5d76d10a06f0956214b68","sha1":"54758d9e26f072b45b1d1817176f1579f5781414","sha256":"a85b1ebf649465beddc9cb5c71887fb51841668bb817116a42106bbb47ab2fb3","sha512":"2f45dee4062b4882ca3a0da1025e68ef784d863e62a098479c23b1402835810d8cea2f3d28b07717e8efc523160e9373246a778350ea14621f4464e5cdd486ff","ssdeep":"384:nM8uG7p/cNg2zItsvgR+hHokyQtErEQ0xroYioLZ22Dq54NfhvcHJPtA:ntuG7pndkyNohoYioMxLplA","tlshash":"9392c7d876c5f5a3d3b1346814ff410aa5776edba8885054fa84a8e578b0f4b017ff28","size":20844,"data":"","first_seen":"2023-03-07T12:12:00Z","last_seen":"2026-09-22T21:23:35.614195Z","times_seen":435,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/assets/js/carousels.js","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a50042aa9474c66085cecf7dd50e56aa","sha1":"0ea5f1d340223a9d1186af0f9e4a780217db23e7","sha256":"b23fa9bcbfac35f12951268872c810d0ee4bcdf7cd989ce7b6dbd9b2e03a6412","sha512":"bb3e2b36fcd001b88de148c9f6231c52052fb99b2d36272c196b610bfee3a7a5af86825b0674143aed91f10540bcb47dde68d020bf0a3e27d0c1ed6890832abf","ssdeep":"","tlshash":"9c11a1a2a4b907706177542e2efed406abf5154b4c1afa95fd4c48cc0f6da1cb1b3ae0","size":1009,"data":"","first_seen":"2023-10-02T16:37:57Z","last_seen":"2026-09-21T18:56:19.367157Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","fqdn":"castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"104.20.29.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1d3daa607db5fa918641566bfa365b98","sha1":"c787a87a56b9fb8bd28727e7eeb6a0e82d412fd0","sha256":"75dc1b29515411ea0efe1c29a9df9aabc0bb7d45b2233508a4b8e45d201d65f1","sha512":"1b80e6de4019993e74e4e138cedcef0d865dd8c4126fa6fb430efc081bb981a3390658e4f15e2de5b22d06a068ca1d34fd3a61e34209db31b3292902f2b8ecda","ssdeep":"","tlshash":"ffd092f821b2a9300e5f620d7535c3983c76912b750b3a0ab52c13dd5bf0ed6e211fa8","size":262,"data":"","first_seen":"2026-09-21T18:56:19.524751Z","last_seen":"2026-09-21T18:56:19.524751Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","fqdn":"castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"104.20.29.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a5db628e06a0b1235a68a23d4c9fe05","sha1":"89ee2ee9d318f270ac8e3e5d48f3e60f29309495","sha256":"cc70ad8f2c9803a58313777d1e00aef0506cc48ddce9fb3a9820429c260b88f8","sha512":"d93b829ebc21dd67b928b06343a0f15ff07c52fa780a11c9e9aa952687c45e6ace08f916e34be13e70e69faf7eebd2f52cd5dadeb39901e14c153cb92b836b16","ssdeep":"192:fjMczVhqFEDX0QutdEaOTfnAUK67U8B2OcQXsMqmkoaQxsmKxs2/CAOVxsGRA5D2:IczVhaJ1S5","tlshash":"ebe173ec59b11e086c3b306add6f7b8a43904f27fa14383099dc1900ad974ff915a6af","size":6908,"data":"","first_seen":"2026-09-21T18:56:19.526132Z","last_seen":"2026-09-21T18:56:19.526132Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","fqdn":"castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"104.20.29.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad6e46ee3c87d3b4e4e19aec3e7b0553","sha1":"beae87f2d48fb05464de5b4e9e0c76eb71e6f689","sha256":"395ebbee0e2055eecd0e72102a5d6b53fcc9f13899898fed8436a53e5e0287f4","sha512":"1e4070f08fa19f47a67c7adabc407ab37396f8a4e8db7800c828df7956157088a36e8d214abfa17436f7029c7fd1b1678111a48b93a067a866e7563c3189d1d0","ssdeep":"","tlshash":"3411d0753a251534cac5418b31bee7a93d3260216e029045c25cdc289d98e8314efdbe","size":921,"data":"","first_seen":"2026-09-21T18:56:19.527372Z","last_seen":"2026-09-21T18:56:19.527372Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.castbox.fm/webstatic/js/page.vendors~audiobooks~audiobooks.genre~categories~ch~channellist~claim~claim.failed~claim.link_claimed~~48565954.32df6dda.js","fqdn":"s3.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"65.9.62.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f52a8e285d225a1d3bf50710aeec9c6","sha1":"2b1013a1d489d255194cf5bba87be72f7178b73d","sha256":"7d4b4e3d229f3678369788aa4ead7a10ae6072c1fd0c268ac3b3267b7f7c29b0","sha512":"a0260889998b9070164d3519d335dc937b45b84494b1cca6e5aa40a15072a357765a0b4c157b69004e2ce1dad2a89a77be96b35528344a4eb460f0de28fea2ae","ssdeep":"384:L6Zf9qPOIFZpz57K8+k6YbIN/4HJCWpwC3uUP5L3fG82GAU71CXJzZplN:WZf9qPO0z5D+wIiHUIlepGNCXR","tlshash":"12c2f8c4ba8fb0b547e31272847f520eb33a26a9b44dc418f032e5d538b995d6127fad","size":25969,"data":"","first_seen":"2026-09-21T18:56:19.468908Z","last_seen":"2026-09-21T18:56:19.468908Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"6418ca69abe021e62182a5f802c756f7","sha1":"6add5ff9017947cfad04dabcea7904bd7e8c8d92","sha256":"922fb7a284f7b586e126374a5f65c32da6bd928c832d5d9fb9ceacc6fa4a3fcc","sha512":"f9a94012560dcf94c1c076c17f745bafde45a6a8832e6467fb543ebe24639b63583e0e3fca117cc814c355639e1c0528f340b77463579463168b6c9dccc9115f","ssdeep":"","tlshash":"f7c02b8c210a0c7041e72b40cb3ff640f0013304a4d16f31480d73044d20e17d7c4c10","size":149,"data":"","first_seen":"2026-06-16T07:31:35.033043Z","last_seen":"2026-09-21T18:56:19.528678Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"4cc363e4dd0aa259dc41d850fbb36b4f","sha1":"ac14ea1c7610e2ab318b30152013179f3f8561de","sha256":"35ac1cce349e54c76078e59ba403a019b8d63f17966e6842e68e1b772b409279","sha512":"e99d32ac751286175ba8675861cce956bf51f97c67b19daa9e4bd5a418833fefc56686d83cdda224464d4c6bca432b9985cda4f3f130680668e0d7b06156d770","ssdeep":"","tlshash":"f8f05c1ad8a746388dfb3948027ac63935f8689a49a3d007740cc858cf2afc44c54edc","size":460,"data":"","first_seen":"2026-09-21T18:34:21.770952Z","last_seen":"2026-09-21T18:56:19.529544Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/assets/js/vendors.js","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab594a4dd14f0369c8b1b3c24357679d","sha1":"0c799f6f0df2b24fa17d496713ab5c3e95821d02","sha256":"cd17d7980647bd13c6f3007774f252f2f715a1a1a6615c73f503ddc1eb0bb230","sha512":"09b6f18da174edfe58ce6b1e29d49c86f5e49806da604913da0df06cb221eb62e14ede644e0b83e74231984492a2357acbc47e305b338682c374d3269de69b37","ssdeep":"6144:nOFpqG9a98Hr708C9wwXKN4K7WTNAClU4newEP3wP4NnOjSk:VGDd/wXKFwEP3RUx","tlshash":"7154088ab361346247ab61b5527f020bb13b69adf409847cb479c9e92d78d4c203bf7d","size":297367,"data":"","first_seen":"2024-10-20T18:10:17.213896Z","last_seen":"2026-09-21T18:56:19.366594Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/assets/js/syntaxhighlighter/shBrushXml.js","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba290ac0111d2c3f8e1ce36fbaf6a239","sha1":"311b19458f80720e59522be044709aa5c78adff1","sha256":"fb1fe49a904a4fda3ed82d2f88048b2ae88c217980b6bf2163c07f048663b43e","sha512":"4c98b73a8cd7b778ceb75389155d30c6577004d2f5360e9055dc7836e2daf4d8bca591a2d0d28ccec943f633e2ed8cf6576d2fff0b9184f53059fb61642673de","ssdeep":"","tlshash":"cb4136a4de1cb1e71f5058e6450ad0ce0fadaeb7318ec420f34d95da295071e52ed8b9","size":1998,"data":"","first_seen":"2023-03-07T12:12:00Z","last_seen":"2026-09-22T21:23:35.455477Z","times_seen":263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/assets/js/app.js","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"55d59bf70293d56908d229571b71095d","sha1":"ee004865ed846c1f05b300d6584e266568a85c5a","sha256":"228ac10e1fea76d021d4e9642d3051b4bbf3e72f42118f28189b76c72121cb9e","sha512":"bb11c4443897fb4e523955bb9cfea0f33d6036aafbf9f42dc093fbb7599a01fca39417bd7f9db1489a60efa256e05828593b4bfaecc0aea040bdaa4fcb123476","ssdeep":"96:z2jaJP9Q97VjKi4Ki9D5vikxWEq+1Ynqvl5URhAECDgYv93AgZChexvsz+0fE:z+aLQ95j49D5vQg1Ye5DECDaGCA9e+cE","tlshash":"08d13e1cb4f2262445fb717f8b3f51023b26a01b614ae904ba6c4ed41fd425cb6e3f99","size":6573,"data":"","first_seen":"2026-03-24T20:25:10.881985Z","last_seen":"2026-09-21T18:56:19.46725Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/assets/js/index.js","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"379fd0260cb7e1e74d47320dbc013324","sha1":"dca2d3cc417768a33ce9c6145ebec8faa226c242","sha256":"a08000c535bae6884311add3d341bbfa4fa477acada3a955586abb171d3dc555","sha512":"af87aea33db7b3615a541247260642f2a0364ab54a9b5ecc580a3ff6c822f187b168c81cb84d909bdd750fa83b39c6412798876f8884ae98d21f452ebdb96c1b","ssdeep":"","tlshash":"e6f02ef590ba0720023b002a2dfdc604bfe1048b8c02fa52b90c04dc0fad91c21f3ae1","size":596,"data":"","first_seen":"2025-12-22T08:53:57.836588Z","last_seen":"2026-09-21T18:56:19.415194Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.castbox.fm/webstatic/js/page.vendor.28c22e93.js","fqdn":"s3.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"65.9.62.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3282345faf8a1dbe0b516f3e3cc3df9f","sha1":"1333f8ac1d2a843407924cd71bc19a71ad599baa","sha256":"1ccfd22f1268b0e2e8f8bc0cc6487e912d839ea449e5f53399888e76b476fc4e","sha512":"8882859075b059768cda99de2928995dbfa74ee4f933fb2c268a978fdd3bd3ddebfe0559c44478a964157ba95e7f8ca930c403720ca9d42510bf0db7465e1a38","ssdeep":"3072:4+1ZTtM4seM4OdNt9XcMwqKIihfusMK+luRocSuebbBvR:4jNt9XcMwqKIkusMuanBvR","tlshash":"582409c9adc2afed1fb613d2813b150a72381a1b588c8710fd35f45f79a981c12eba75","size":220961,"data":"","first_seen":"2026-09-21T18:56:19.477494Z","last_seen":"2026-09-21T18:56:19.477494Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.castbox.fm/webstatic/js/page.vendors~audiobooks~castbox.main~ch~creator.analytics~creator.ch~creator.ch.des~creator.comments~crea~60d4e606.c034a5ce.js","fqdn":"s3.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"65.9.62.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"47915e65abd2df5ba33de3a975fe1296","sha1":"8e853066b7ec788437ccfeb77bdfe9abf19ed4b7","sha256":"ee2776333d248955e0cab54e648195e4dd9f0e8776c6a39392c89c97931aec6f","sha512":"da8373f82617b73d2680a7175f5fd494fceabf3d52a3cc84a0d6cc69b9efad806d9458c986a30d261160bb0d12da45ceb090062d3f826f984ca939247af931cd","ssdeep":"384:b4bF32+O5KH0Ia7kGY00ENMUVJ6UQ4CQLoKEV8OLv93qa7geMbIaIP8BmH2lWfLA:pKu7RmEeQEam1XYlWfk4IcK","tlshash":"1ee2b58cb281b06107a36165427f640bb3bb5968b49b84d4b37ac4f1aeb744f5067fbc","size":33942,"data":"","first_seen":"2026-09-21T18:56:19.508771Z","last_seen":"2026-09-21T18:56:19.508771Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"castbox.fm/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"104.20.29.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5e02967c7b8882c691de95cfd948ec5","sha1":"9384d04b31a1460fd498e30ff4a5a66e85b25f5c","sha256":"9e05088c4b21a3e1fb24a8662db4d94610087051f347a1fb69e184f1b9799e05","sha512":"d239698b637505c9c3901bfa999ddafd81a1fdcda72f705a589d28746819771ef54632ff24f2fc66130c5e5a91304fb3789170a1f2a8bf2bcc980295e4dfecb3","ssdeep":"384:pcLVnz1V5i8DQZup3FXgv1k3mepYzq1zRWY5tdz3qOjePYeoO9:C3Vauk1k3IyRLX1VjoYeL9","tlshash":"4a9232ca3dd6b44d9372747404a770cbb12ebd44a0290e45cd2692e87afd6f8712bb9c","size":21246,"data":"","first_seen":"2026-09-21T18:56:19.496678Z","last_seen":"2026-09-21T18:56:19.496678Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/assets/js/syntaxhighlighter/shCore.js","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"488ca2f56c37f84283fc9be63219304f","sha1":"bd9599773965e9c84565abc2e6acdaa92ad6e83f","sha256":"584a26f39cef2db245f41d4f6b8e3d0f7dfac5c06f0f454a49dfb94f6fb1517b","sha512":"e3d4014019c09742dc1974c9ecb91288e835970615e13c7f5e2810eaba9b73a4045e7f9d902a3cc1e759286c416cb43b3313fc745513fe1cbdede7e8a321bbe2","ssdeep":"384:tW98cZiWYi4s4B7Gxk9xzXNMyhElTMfUsMCMUzMS:MTGzAxWzXA4fUsMCdAS","tlshash":"97726db7342d157317e1c99428abd14650c912bbbfeac7b1fd8ceab9580c4b14063b5e","size":16175,"data":"","first_seen":"2023-03-07T12:12:00Z","last_seen":"2026-09-22T21:23:35.470341Z","times_seen":361,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/assets/js/syntaxhighlighter/shBrushJScript.js","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"cdae918e2156986f76ada6d301c45f27","sha1":"7c8b34f14f4caf9cf2b6ac3315f7bacd95d69e3c","sha256":"3f534a9cb3030831626f875de5e69f72e1cc020db2761b6ac8a0186ef4fff512","sha512":"c5c93dc8a11b8b7ae1403ee2fe1a60e37c7c67686da1ec804e068b1964715844c0715cdb23b6f0ed7b36a91d06c5c0419c8748478b889ffa5623b462beabba74","ssdeep":"","tlshash":"4f3136995f2d705c5fd054b31449d14b9f2987f333c6c44dba4c98be6b5176e0129e31","size":1649,"data":"","first_seen":"2023-03-07T12:12:00Z","last_seen":"2026-09-22T21:23:35.389481Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"litera-bavarica.de/assets/js/syntaxhighlighter/shBrushXml.js","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.029Z","timestamp":1790016868029,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /assets/js/syntaxhighlighter/shBrushXml.js HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1998\r\nlast-modified: Fri, 11 Dec 2020 21:30:24 GMT\r\netag: \"5fd3e4f0-7ce\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1998,"size_decoded":2445,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"ba290ac0111d2c3f8e1ce36fbaf6a239","sha1":"311b19458f80720e59522be044709aa5c78adff1","sha256":"fb1fe49a904a4fda3ed82d2f88048b2ae88c217980b6bf2163c07f048663b43e","sha512":"4c98b73a8cd7b778ceb75389155d30c6577004d2f5360e9055dc7836e2daf4d8bca591a2d0d28ccec943f633e2ed8cf6576d2fff0b9184f53059fb61642673de","ssdeep":"","tlshash":"cb4136a4de1cb1e71f5058e6450ad0ce0fadaeb7318ec420f34d95da295071e52ed8b9","first_seen":"2023-03-07T12:12:00Z","last_seen":"2026-09-22T21:23:35.455477Z","times_seen":263,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/verlage/bilder/logo_3.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.428Z","timestamp":1790016868428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /verlage/bilder/logo_3.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7376\r\nlast-modified: Sun, 20 Dec 2020 16:20:22 GMT\r\netag: \"5fdf79c6-1cd0\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":7376,"size_decoded":7812,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 350x94, components 3","md5":"6f49117aebbbbbec8460bcaa4a049c6a","sha1":"c4182e0815c2768602e3d0a69857416c66fbd6c4","sha256":"40806c30e2ed0a5119ba2ced84cb684cefe2f635b8e28b6e83d0883181d7fc36","sha512":"02022992995f47aed93808a7e96ac5fe9da887b9e3cf29918131f0f6f64e44d49e17a4e7720f02071697ea9b425197360ee5e68c244d875c450d73a1c610f805","ssdeep":"192:GYM6TN4xdvuAKEj+I41Hq0Hd4Ey8F/qpHz:GETY1Kb/g0dNFc","tlshash":"8de1a03f64b29af1ff4ec932ae4a12a4b154aec4596a3470a0703e26c410df97799371","first_seen":"2026-09-21T18:56:19.352463Z","last_seen":"2026-09-21T18:56:19.352463Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/termine/bilder/veranstaltung_179.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.049Z","timestamp":1790016868049,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /termine/bilder/veranstaltung_179.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 38060\r\nlast-modified: Mon, 20 Jul 2026 07:52:06 GMT\r\netag: \"6a5dd3a6-94ac\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38060,"size_decoded":38497,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 350x539, components 3","md5":"36c9717b5bbf15c2d6677f3b6dcd785c","sha1":"e6858f48a8a2b37f86ccd5bdcc15f615ccb5f414","sha256":"2f197df5c50f7e547a06fbae65aaea62c323d36a61920203812d8cdf3e5ee7bc","sha512":"5c8f0362c545d293932a1ffffbc0a802fe9d47d40c43cc3ba826534b669e1c392805348113521e7b9b8e97b9df9eadae6f61e6b414624132e445e64691b7d877","ssdeep":"768:GbGvDd+MMhRdhRR6GDZwrhlI0HcQTVEPw0pbLpdoev/Du/JIj:MGL8NhXEmkhlSQTyPv3pvT2S","tlshash":"ea03f216966955b6074532e2d7b11ffba07b4ec97a3032b0d4320d997329cf06376b64","first_seen":"2026-09-21T18:34:21.650639Z","last_seen":"2026-09-21T18:56:19.353744Z","times_seen":2,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/verwaltung/bilder/bilder/bild_56.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.050Z","timestamp":1790016868050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /verwaltung/bilder/bilder/bild_56.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 150308\r\nlast-modified: Fri, 11 Dec 2020 21:30:32 GMT\r\netag: \"5fd3e4f8-24b24\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":150308,"size_decoded":150747,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2, orientation=upper-left], comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", comment: \"Optimized by JPEGmini 3.14.12.71901706 0x8bce6fc8\", baseline, precision 8, 1200x623, components 3","md5":"7d4e31056ae03ab16e6cbb929b749541","sha1":"97c4dac119473c61c94e78352d7cd0f8e2484b04","sha256":"dc007c6438a177b731c01c37f9c69503ff38f5011874d25483627dd68c12fd43","sha512":"8d7e0838d9b4e4cd90e9940c53d064e82208c4acf5720d01b9c51f03534228cc3cfda6e95d25ad75410961f4d0d82811734f3e0120f98349bbd8fadd307e6f7a","ssdeep":"3072:0PCdswmrgKH4HVJksHJOpcd2Yw9KhySPPjOqeXnTihfFu9BbQYo9gKRsn:4EmrzYHvkHpcd2TKcurOqeXnuBFCSY0U","tlshash":"02e31239f2489b522407fe12e4f5584323b55b9bac94cf6175fd5025afb8ad00dab0b3","first_seen":"2026-09-21T18:56:19.356146Z","last_seen":"2026-09-21T18:56:19.356146Z","times_seen":1,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/literatur/images/978/97839/9783944936888_2.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.417Z","timestamp":1790016868417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /literatur/images/978/97839/9783944936888_2.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15033\r\nlast-modified: Thu, 04 Jun 2026 14:04:36 GMT\r\netag: \"6a2185f4-3ab9\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15033,"size_decoded":15470,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 300x464, components 3","md5":"fa548c217065970b5c5fb214363ff1e5","sha1":"a4f7df6c0f96b86131f18c572657b7a274bb6de8","sha256":"4035b1a8eebd95a54d34a0d52dde8a1f1ee0949f566d8cf5a7e5e65957531233","sha512":"b2d7a9e6a63a7cc4360ab92d0aff792e0d692b58b20d0df92022acc297a3132371f10ea11626c12d35be7356cdc9bd68744f8ebefd17e29125816bdf984e0544","ssdeep":"192:GYGTRxb6AcyHu7WsqjT9qxpFwJbcrELZ1k98fa2kyVHGq/72kCmgQQwgIXOCTXyO:G/TPb6A/LBJbcrE91vpz/ffvTX27nRP0","tlshash":"5a62c03f74392ba5379331a66f9730bb61536c0b70c229764506c98cc95dcb8c5be686","first_seen":"2026-09-21T18:56:19.360527Z","last_seen":"2026-09-21T18:56:19.360527Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/literatur/images/Z00/Z0000/Z000000032_2.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.419Z","timestamp":1790016868419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /literatur/images/Z00/Z0000/Z000000032_2.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19697\r\nlast-modified: Fri, 05 Nov 2021 11:54:14 GMT\r\netag: \"61851b66-4cf1\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19697,"size_decoded":20134,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", comment: \"Optimized by JPEGmini 3.14.12.71901706 0x813388d2\", baseline, precision 8, 300x474, components 3","md5":"4067a9d3bbd04097849a073a5444946d","sha1":"8fa9f2ad93765d7ba9c83baebc03315a2ed59b28","sha256":"5dd124a88d5acc7d02ae06d36623682ccedd39fdec9a75849d1c098748dce693","sha512":"cb2524debc59dd6796fee91523d9c8e7abb5a082a4fb678139676ea20baf1470d6896fce0609034029ccefdef3dcfbba3d35d338d06873710b9f2492413f9702","ssdeep":"384:G7H0HIm2D7A/PXAq3ZhB2vmXBdxJ+SG+06U2OCWlo11knymf:GLiS7A/PXNphiE1G+rJ11gFf","tlshash":"6192e027a49bc993aac58fa58f4d641cd080bdd40a3fd252b97b84cd51e13de64f81e3","first_seen":"2026-09-21T18:34:21.619489Z","last_seen":"2026-09-21T18:56:19.362485Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.castbox.fm/webstatic/js/manifest.628730e5.js","fqdn":"s3.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"65.9.62.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.275Z","timestamp":1790016869275,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.castbox.fm","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 07 Sep 2026 00:00:00 GMT","end":"Tue, 23 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F3:F1:75:82:23:F0:56:69:87:36:1D:49:03:12:20:A9:09:04:E1:D7","sha256":"5F:D0:62:6F:D0:90:09:E2:6B:2F:4B:7C:CE:3C:68:1A:1D:F5:51:5F:C0:06:4A:AB:97:15:67:D6:AD:68:67:AD"}}},"request":{"raw":"GET /webstatic/js/manifest.628730e5.js HTTP/1.1\r\nHost: s3.castbox.fm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castbox.fm/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ndate: Fri, 11 Sep 2026 02:41:38 GMT\r\nlast-modified: Sun, 16 Aug 2026 11:00:53 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\netag: W/\"3a042ba8b22d9987418eeca9e07e3401\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a715c2ffe2054daa198dd54f02e95532.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P4\r\nx-amz-cf-id: cU5BQaxZsLx1CUKj6KCccnh2-zY2w_eFCzWRJD6VYhGHN6yssPdArw==\r\nage: 922372\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":9516,"size_decoded":4092,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9516), with no line terminators","md5":"3a042ba8b22d9987418eeca9e07e3401","sha1":"468499b827db1827b95c8798456a37422c4a384f","sha256":"d9fb77293bec36a297f78940a1bfb464e836a4cc268a0f6ea6a54ce8b6ffbe2c","sha512":"cdef3a41479b873939deee5cae0d32b30b51702b4d3f93bef1c1056af6aef85b82068eee009cfcc77889ac95127c9daa3f6d67829595185978872e6c083b1bee","ssdeep":"192:1FJ1dIk0e6t94cwyy3T2tXC7ajIk0e6GtjW+faU94sb:1NdR0Jt94cw53C/jR0JGtbRx","tlshash":"3c12c8eee35cbaa7183529ebb469905bd43415a1a41fd4c4c5f8e70ce42cd4422af639","first_seen":"2026-09-21T18:56:19.363404Z","last_seen":"2026-09-21T18:56:19.363404Z","times_seen":1,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":28,"connect":11,"send":0,"wait":10,"receive":0,"ssl":238},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"everest.castbox.fm/data/episode_list/v2?cid=2396830\u0026eids=1000421313%2C999510112%2C999019833%2C997400588%2C996985420%2C996044991%2C995563569%2C993728429%2C992753291%2C992243069%2C990398474%2C989389148%2C988981336%2C988675032%2C988516935%2C986779334%2C986000643%2C985655215%2C983885162%2C983000621\u0026raw=1\u0026web=1\u0026m=20260921\u0026n=cc4f7f89c733f529930cf9e8b70ae482\u0026r=1","fqdn":"everest.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"172.66.159.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:30.389Z","timestamp":1790016870389,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"castbox.fm","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 11:26:23 GMT","end":"Fri, 11 Dec 2026 12:26:17 GMT"},"fingerprint":{"sha1":"76:86:6A:D4:8C:65:FB:6B:60:55:3C:F2:F4:57:BA:17:C7:B9:CF:69","sha256":"D9:82:7F:4F:85:91:12:9A:53:8E:21:19:76:81:B7:EB:21:96:6D:77:6A:56:DC:F1:CC:DE:07:56:0E:12:10:55"}}},"request":{"raw":"OPTIONS /data/episode_list/v2?cid=2396830\u0026eids=1000421313%2C999510112%2C999019833%2C997400588%2C996985420%2C996044991%2C995563569%2C993728429%2C992753291%2C992243069%2C990398474%2C989389148%2C988981336%2C988675032%2C988516935%2C986779334%2C986000643%2C985655215%2C983885162%2C983000621\u0026raw=1\u0026web=1\u0026m=20260921\u0026n=cc4f7f89c733f529930cf9e8b70ae482\u0026r=1 HTTP/1.1\r\nHost: everest.castbox.fm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: user-agent,x-access-token,x-access-token-secret,x-castbox-ua,x-suid,x-uid,x-web\r\nReferer: https://castbox.fm/\r\nOrigin: https://castbox.fm\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 21 Sep 2026 18:54:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nallow: HEAD, OPTIONS, GET\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://castbox.fm\r\naccess-control-allow-methods: GET, POST, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, User-Agent, X-Requested-With, Content-Type, X-CastBox-UA, X-Web, X-Uid, X-Access-Token, X-Access-Token-Secret, X-Box-Access-Token, X-Custom-Token, X-Admin, X-Channel, X-Suid, X-AB-Test\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3eb475fffea35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":648,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-21T18:54:27.456Z","timestamp":1790016867456,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 21 Sep 2026 18:54:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4; expires=Tue, 22-Sep-2026 06:54:27 GMT; Max-Age=43200; path=/; secure; HttpOnly\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nX-Content-Type-Options: nosniff\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nStrict-Transport-Security: max-age=15768000; includeSubDomains\r\nX-Powered-By: PleskLin\r\nX-Frame-Options: DENY, SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"2fmohphvjf5r2ilierokbcdai4","quoted":false,"path":"/","expires":"2026-09-22T06:54:27Z","raw_expires":"Tue, 22-Sep-2026 06:54:27 GMT","max_age":43200,"secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"PHPSESSID=2fmohphvjf5r2ilierokbcdai4; expires=Tue, 22-Sep-2026 06:54:27 GMT; Max-Age=43200; path=/; secure; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"SyntaxHighlighter","description":"","website":"https://github.com/syntaxhighlighter","common_platform_enumeration":"","icon":"SyntaxHighlighter.png","categories":["Miscellaneous"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":34791,"size_decoded":35463,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1685), with CRLF, LF line terminators","md5":"2cb2bcf4e0e30a0642416204f60f1708","sha1":"3c7c3656212789c456ba8727c991807d800d588f","sha256":"bb2e3afbf4edc1e2cd05948f0d50bdd26b09fd73e1713685bbc382b5f98f1a34","sha512":"c950eb0738e8aba57e0e254507c4ada985a6b7c5b390c18175965b8036d2ec0f8b93005c38888edbc9162da3cac9b7eee1fb21b73dad6f3a8c61f5a21222c964","ssdeep":"768:r1j0JPdZPm09ilI3WUlUTyGnmlatVad2W1sEJpnYPux1nh/m/leRfC40TKETvqHC:ryJlRm09ilI3WUlUTyGnmYt+hJpnYPuk","tlshash":"00f2d73285c42c3b410752a5b1217b89badb9d27c5638961f3ff434adfc3ea5c81762a","first_seen":"2026-09-21T18:56:19.36534Z","last_seen":"2026-09-21T18:56:19.36534Z","times_seen":1,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":0,"dns":26,"connect":33,"send":0,"wait":64,"receive":30,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/assets/js/vendors.js","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.026Z","timestamp":1790016868026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /assets/js/vendors.js HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 297367\r\nlast-modified: Fri, 11 Dec 2020 21:30:24 GMT\r\netag: \"5fd3e4f0-48997\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":297367,"size_decoded":297818,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"ab594a4dd14f0369c8b1b3c24357679d","sha1":"0c799f6f0df2b24fa17d496713ab5c3e95821d02","sha256":"cd17d7980647bd13c6f3007774f252f2f715a1a1a6615c73f503ddc1eb0bb230","sha512":"09b6f18da174edfe58ce6b1e29d49c86f5e49806da604913da0df06cb221eb62e14ede644e0b83e74231984492a2357acbc47e305b338682c374d3269de69b37","ssdeep":"6144:nOFpqG9a98Hr708C9wwXKN4K7WTNAClU4newEP3wP4NnOjSk:VGDd/wXKFwEP3RUx","tlshash":"7154088ab361346247ab61b5527f020bb13b69adf409847cb479c9e92d78d4c203bf7d","first_seen":"2024-10-20T18:10:17.213896Z","last_seen":"2026-09-21T18:56:19.366594Z","times_seen":5,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/assets/js/carousels.js","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.035Z","timestamp":1790016868035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /assets/js/carousels.js HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1009\r\nlast-modified: Fri, 11 Dec 2020 21:30:24 GMT\r\netag: \"5fd3e4f0-3f1\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1009,"size_decoded":1456,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a50042aa9474c66085cecf7dd50e56aa","sha1":"0ea5f1d340223a9d1186af0f9e4a780217db23e7","sha256":"b23fa9bcbfac35f12951268872c810d0ee4bcdf7cd989ce7b6dbd9b2e03a6412","sha512":"bb3e2b36fcd001b88de148c9f6231c52052fb99b2d36272c196b610bfee3a7a5af86825b0674143aed91f10540bcb47dde68d020bf0a3e27d0c1ed6890832abf","ssdeep":"","tlshash":"9c11a1a2a4b907706177542e2efed406abf5154b4c1afa95fd4c48cc0f6da1cb1b3ae0","first_seen":"2023-10-02T16:37:57Z","last_seen":"2026-09-21T18:56:19.367157Z","times_seen":8,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/verwaltung/rampenlicht/bilder/rampenlicht_70.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.046Z","timestamp":1790016868046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /verwaltung/rampenlicht/bilder/rampenlicht_70.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27439\r\nlast-modified: Mon, 27 Jul 2026 08:53:47 GMT\r\netag: \"6a671c9b-6b2f\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27439,"size_decoded":27876,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 300x258, components 3","md5":"5c6d8a12d75bc89919e4bf81deb5de53","sha1":"543918934f6d8e892dd7572ef4e467f24e974006","sha256":"9adb5521f6d20962d723c03160f842ddd4fc775a423230a5be543d3daf743e28","sha512":"7ceb5c12230dbc6f5b0e205e8c650b713f308ee640dfa64bee84ae838896c861786d2f75a8594d485f4eb8a1770cce03aae3cbe0da1d04ff6f1aea054859f067","ssdeep":"768:GR/C7LBC7im7R9t1U27AR0FiaW48bs2FusjasJR:qKG197ARhVHsuusn","tlshash":"9ac2f2ac5ba70093af826af035e9a43529c5e547346edde55c93a01cc093cf2c84eddb","first_seen":"2026-09-21T18:34:21.62363Z","last_seen":"2026-09-21T18:56:19.367799Z","times_seen":2,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/literatur/images/978/97837/9783795491345_2.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.412Z","timestamp":1790016868412,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /literatur/images/978/97837/9783795491345_2.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25921\r\nlast-modified: Mon, 21 Sep 2026 12:09:48 GMT\r\netag: \"6ab11e8c-6541\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":25921,"size_decoded":26358,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 300x423, components 3","md5":"1b862e2f7d3f9967eff4d3baf3a7f2ef","sha1":"5c136ccab26233c3c6339c70972258e31e58f5e2","sha256":"ced5bd7c7e38a039464fe247217f3e29e0c361a2dc5845356b68c66e3542b41c","sha512":"e1a0c2e290b006d96df06b2ab20bd15ef057680580c877c3af172f679161c8a85f7085ac9f9f3b3ed2ae90b360250eb4e2dcea793711476c0ba786603035221b","ssdeep":"768:GslivUIMvIs6ID9VxFoc39M1yJue5S4dT:vli6z6ID9BocG1q5Su","tlshash":"9fc2d00f8d418be34b1de3f97f7f4d32165f8342d2566ad84b206a96ab14df2038921a","first_seen":"2026-09-21T18:56:19.368577Z","last_seen":"2026-09-21T18:56:19.368577Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"everest.castbox.fm/data/episode/v4?eid=310012716\u0026raw=1\u0026web=1\u0026m=20260921\u0026n=d59cf51ca883790d57402c936414d39c\u0026r=1","fqdn":"everest.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"172.66.159.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.753Z","timestamp":1790016869753,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"castbox.fm","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 11:26:23 GMT","end":"Fri, 11 Dec 2026 12:26:17 GMT"},"fingerprint":{"sha1":"76:86:6A:D4:8C:65:FB:6B:60:55:3C:F2:F4:57:BA:17:C7:B9:CF:69","sha256":"D9:82:7F:4F:85:91:12:9A:53:8E:21:19:76:81:B7:EB:21:96:6D:77:6A:56:DC:F1:CC:DE:07:56:0E:12:10:55"}}},"request":{"raw":"GET /data/episode/v4?eid=310012716\u0026raw=1\u0026web=1\u0026m=20260921\u0026n=d59cf51ca883790d57402c936414d39c\u0026r=1 HTTP/1.1\r\nHost: everest.castbox.fm\r\nUser-Agent: \r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://castbox.fm/\r\nX-CastBox-UA: localTime=2026-09-21-18-54-29;timeZone=UTC;deviceType=web;lang=;countryCode=;uid=\r\nX-Web: true\r\nX-Uid: \r\nX-Suid: \r\nX-Access-Token: \r\nX-Access-Token-Secret: \r\nOrigin: https://castbox.fm\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 21 Sep 2026 18:54:30 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: public, max-age=300\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://castbox.fm\r\naccess-control-allow-methods: GET, POST, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, User-Agent, X-Requested-With, Content-Type, X-CastBox-UA, X-Web, X-Uid, X-Access-Token, X-Access-Token-Secret, X-Box-Access-Token, X-Custom-Token, X-Admin, X-Channel, X-Suid, X-AB-Test\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncf-ray: a3eb475dd91935a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5012,"size_decoded":3004,"mime_type":"application/json","magic":"JSON text data","md5":"09de5d0c194b45a7534e1b6027ef72c1","sha1":"b83dc96e8c6876ccf529df42bddbe0029f4a7603","sha256":"bba22ff3069b6e916fd75724f84625b162d2fc232b6611a7363c57cdef54709f","sha512":"1fd0411d220724924d0f47efb4163035d5eec6e897c253b0faaeae574eb5c86c3d02792c8f78056ab2f4370fe4f045fed493c67cee3d883af6324e129f9af432","ssdeep":"96:H+gMhx70IhC54PloJUGtUAL+0rt5RIH4xioCUwX:egSx7fhC54N30rtrWHx","tlshash":"1da1d7fbb6e5042f3b8192e4dc347aaef7056329c70028229e989934d9cf9b70154ea4","first_seen":"2026-09-21T18:56:19.371646Z","last_seen":"2026-09-21T18:56:19.371646Z","times_seen":1,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"everest.castbox.fm/data/episode/v4?eid=310012716\u0026raw=1\u0026web=1\u0026m=20260921\u0026n=d59cf51ca883790d57402c936414d39c\u0026r=1","fqdn":"everest.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"172.66.159.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.755Z","timestamp":1790016869755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"castbox.fm","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 11:26:23 GMT","end":"Fri, 11 Dec 2026 12:26:17 GMT"},"fingerprint":{"sha1":"76:86:6A:D4:8C:65:FB:6B:60:55:3C:F2:F4:57:BA:17:C7:B9:CF:69","sha256":"D9:82:7F:4F:85:91:12:9A:53:8E:21:19:76:81:B7:EB:21:96:6D:77:6A:56:DC:F1:CC:DE:07:56:0E:12:10:55"}}},"request":{"raw":"OPTIONS /data/episode/v4?eid=310012716\u0026raw=1\u0026web=1\u0026m=20260921\u0026n=d59cf51ca883790d57402c936414d39c\u0026r=1 HTTP/1.1\r\nHost: everest.castbox.fm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: user-agent,x-access-token,x-access-token-secret,x-castbox-ua,x-suid,x-uid,x-web\r\nReferer: https://castbox.fm/\r\nOrigin: https://castbox.fm\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 21 Sep 2026 18:54:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nallow: HEAD, OPTIONS, GET\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://castbox.fm\r\naccess-control-allow-methods: GET, POST, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, User-Agent, X-Requested-With, Content-Type, X-CastBox-UA, X-Web, X-Uid, X-Access-Token, X-Access-Token-Secret, X-Box-Access-Token, X-Custom-Token, X-Admin, X-Channel, X-Suid, X-AB-Test\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3eb475c1b7935a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":648,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":0,"dns":1,"connect":2,"send":0,"wait":286,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.castbox.fm/webstatic/images/logo_gray.0b75f9d4.png","fqdn":"s3.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"65.9.62.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.770Z","timestamp":1790016869770,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.castbox.fm","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 07 Sep 2026 00:00:00 GMT","end":"Tue, 23 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F3:F1:75:82:23:F0:56:69:87:36:1D:49:03:12:20:A9:09:04:E1:D7","sha256":"5F:D0:62:6F:D0:90:09:E2:6B:2F:4B:7C:CE:3C:68:1A:1D:F5:51:5F:C0:06:4A:AB:97:15:67:D6:AD:68:67:AD"}}},"request":{"raw":"GET /webstatic/images/logo_gray.0b75f9d4.png HTTP/1.1\r\nHost: s3.castbox.fm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castbox.fm/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1461\r\nlast-modified: Tue, 12 Mar 2019 07:58:43 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 25 Aug 2026 14:24:38 GMT\r\netag: \"0b75f9d407f7447c0edf988dff95c3a4\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a715c2ffe2054daa198dd54f02e95532.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P4\r\nx-amz-cf-id: aO1UxV33EwjHBSBY3rlG_jjQBiNpPAasl7clf67wG5MpjXNsdP4zqA==\r\nage: 2512853\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1461,"size_decoded":1918,"mime_type":"image/png","magic":"PNG image data, 44 x 50, 8-bit colormap, non-interlaced","md5":"0b75f9d407f7447c0edf988dff95c3a4","sha1":"0ced9ab401855469d7a0e2e21b881d9fcbcc96ee","sha256":"c19be565a18ea79b8b7a3d565c928e582e6ab2af3a6b299477e91af605544ab9","sha512":"b2beb0e8a44f1a12c88c0d5216429f68878c7e9ff7a6b70f317313866fe044ea6886886fae58251cd15033f35d7ba65591ed895bf69e156adf45bf0b15f19de1","ssdeep":"","tlshash":"e83110fbd2b249e5883295eeaefce0e14c595d774485c813248fa047d9ed4159c0cd3b","first_seen":"2023-05-09T07:58:38Z","last_seen":"2026-09-21T18:56:19.374929Z","times_seen":10,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/assets/css/syntaxhighlighter/shCore.css","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.020Z","timestamp":1790016868020,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /assets/css/syntaxhighlighter/shCore.css HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 6244\r\nlast-modified: Fri, 11 Dec 2020 21:30:23 GMT\r\netag: \"5fd3e4ef-1864\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6244,"size_decoded":6678,"mime_type":"text/css","magic":"ASCII text","md5":"b2bc56b1c45dbcd7a6d5aaa4b9be8727","sha1":"da32aff3c520342cbb8e7e3f6e2e8ff881f3253c","sha256":"6b09bb6e4af2008349fff772db5c8511c595c72248c660119954b7e9bd193fc4","sha512":"0af9b66bee18dc37574a74a956eaa13d1eaebdedc4435046088a2ef8d964d0d578637413b8a20a0cb9efe388cee87c925e6d3e5c873749270c31445aa2187dd2","ssdeep":"96:dj3vfej753aB/PLsKz5rofbZSxA3CLM8p6jYDoYy8:V0mLJ1I8p6c08","tlshash":"e2d13512fbe71908312181072487fbbe7fbc06e06789ed354a5d37ad6a832f350a2d08","first_seen":"2023-07-18T09:27:33Z","last_seen":"2026-09-21T18:56:19.389789Z","times_seen":26,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/assets/js/syntaxhighlighter/shCore.js","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.027Z","timestamp":1790016868027,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /assets/js/syntaxhighlighter/shCore.js HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 16175\r\nlast-modified: Fri, 11 Dec 2020 21:30:24 GMT\r\netag: \"5fd3e4f0-3f2f\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16175,"size_decoded":16624,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15796)","md5":"488ca2f56c37f84283fc9be63219304f","sha1":"bd9599773965e9c84565abc2e6acdaa92ad6e83f","sha256":"584a26f39cef2db245f41d4f6b8e3d0f7dfac5c06f0f454a49dfb94f6fb1517b","sha512":"e3d4014019c09742dc1974c9ecb91288e835970615e13c7f5e2810eaba9b73a4045e7f9d902a3cc1e759286c416cb43b3313fc745513fe1cbdede7e8a321bbe2","ssdeep":"384:tW98cZiWYi4s4B7Gxk9xzXNMyhElTMfUsMCMUzMS:MTGzAxWzXA4fUsMCdAS","tlshash":"97726db7342d157317e1c99428abd14650c912bbbfeac7b1fd8ceab9580c4b14063b5e","first_seen":"2023-03-07T12:12:00Z","last_seen":"2026-09-22T21:23:35.470341Z","times_seen":361,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/assets/img/preload.gif","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.406Z","timestamp":1790016868406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /assets/img/preload.gif HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/assets/css/preload.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1928\r\nlast-modified: Fri, 11 Dec 2020 21:30:24 GMT\r\netag: \"5fd3e4f0-788\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1928,"size_decoded":2362,"mime_type":"image/gif","magic":"GIF image data, version 89a, 54 x 55","md5":"46c18cc70faa0550cd160092a402e572","sha1":"ef603dd0706851f9c0e7bf3a366c82c701ff2d19","sha256":"e118b8bf5ef67cadbe78ec6d33fa8267fb380c0ea8b5b4b1ac83fc11f2d9b800","sha512":"557f3488dc84e43e57f3ad3e65ecb6398dbbb8b044acb1bf7c0b7a58bb199e899e1d7bc55e3343b800288194d4af0d3b79739a191dd35791b695b498410fff0e","ssdeep":"","tlshash":"2a41b5109618908affeb4170292b485b77854bf53ecf7e7830e3188596881be74e9773","first_seen":"2025-11-14T21:57:26.122757Z","last_seen":"2026-09-21T18:56:19.391598Z","times_seen":14,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/literatur/images/396/39623/3962333461_2.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.425Z","timestamp":1790016868425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /literatur/images/396/39623/3962333461_2.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 618845\r\nlast-modified: Thu, 05 May 2022 13:02:02 GMT\r\netag: \"6273caca-9715d\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":618845,"size_decoded":619284,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1440x1807, components 3","md5":"c42da3c5b641aafafe6c8b8a107230b6","sha1":"20e62832210e18a0e51e1984c5b0720768a28704","sha256":"b9ba9ba757e35b678d06e2c37ecc2d410ee838750d80d8c637561d4cb6aecc77","sha512":"60b6df95bdeffbef856e6570f69c8a8ed339fc9cd8de6594bf3561971f7b128c7a67dfca0ca1c952981033a0cf4a1c59151c26d244ef96080047e1f1aed43acc","ssdeep":"12288:TO3+XyxPEvtUzJ7loY2WExB1uXkHZXK8OFROadunw6yTY:Tw+CSazJpoY2BBkWXbK16yTY","tlshash":"41d423b383a656d38f6a433e7c6b8b456949ed811ddc8f98b93c8d7214ea07302d14bd","first_seen":"2026-09-21T18:34:21.607989Z","last_seen":"2026-09-21T18:56:19.393071Z","times_seen":2,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":295,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"everest.castbox.fm/data/channel/v3?cid=2396830\u0026raw=1\u0026web=1\u0026m=20260921\u0026n=04a84e5ab55dbb5937883f025062321e\u0026r=1","fqdn":"everest.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"172.66.159.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.754Z","timestamp":1790016869754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"castbox.fm","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 11:26:23 GMT","end":"Fri, 11 Dec 2026 12:26:17 GMT"},"fingerprint":{"sha1":"76:86:6A:D4:8C:65:FB:6B:60:55:3C:F2:F4:57:BA:17:C7:B9:CF:69","sha256":"D9:82:7F:4F:85:91:12:9A:53:8E:21:19:76:81:B7:EB:21:96:6D:77:6A:56:DC:F1:CC:DE:07:56:0E:12:10:55"}}},"request":{"raw":"OPTIONS /data/channel/v3?cid=2396830\u0026raw=1\u0026web=1\u0026m=20260921\u0026n=04a84e5ab55dbb5937883f025062321e\u0026r=1 HTTP/1.1\r\nHost: everest.castbox.fm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: user-agent,x-access-token,x-access-token-secret,x-castbox-ua,x-suid,x-uid,x-web\r\nReferer: https://castbox.fm/\r\nOrigin: https://castbox.fm\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 21 Sep 2026 18:54:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nallow: HEAD, OPTIONS, GET\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://castbox.fm\r\naccess-control-allow-methods: GET, POST, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, User-Agent, X-Requested-With, Content-Type, X-CastBox-UA, X-Web, X-Uid, X-Access-Token, X-Access-Token-Secret, X-Box-Access-Token, X-Custom-Token, X-Admin, X-Channel, X-Suid, X-AB-Test\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3eb475c0b7335a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":648,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":284,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"everest.castbox.fm/data/episode_list/v2?cid=2396830\u0026eids=1000421313%2C999510112%2C999019833%2C997400588%2C996985420%2C996044991%2C995563569%2C993728429%2C992753291%2C992243069%2C990398474%2C989389148%2C988981336%2C988675032%2C988516935%2C986779334%2C986000643%2C985655215%2C983885162%2C983000621\u0026raw=1\u0026web=1\u0026m=20260921\u0026n=cc4f7f89c733f529930cf9e8b70ae482\u0026r=1","fqdn":"everest.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"172.66.159.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:30.388Z","timestamp":1790016870388,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"castbox.fm","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 11:26:23 GMT","end":"Fri, 11 Dec 2026 12:26:17 GMT"},"fingerprint":{"sha1":"76:86:6A:D4:8C:65:FB:6B:60:55:3C:F2:F4:57:BA:17:C7:B9:CF:69","sha256":"D9:82:7F:4F:85:91:12:9A:53:8E:21:19:76:81:B7:EB:21:96:6D:77:6A:56:DC:F1:CC:DE:07:56:0E:12:10:55"}}},"request":{"raw":"GET /data/episode_list/v2?cid=2396830\u0026eids=1000421313%2C999510112%2C999019833%2C997400588%2C996985420%2C996044991%2C995563569%2C993728429%2C992753291%2C992243069%2C990398474%2C989389148%2C988981336%2C988675032%2C988516935%2C986779334%2C986000643%2C985655215%2C983885162%2C983000621\u0026raw=1\u0026web=1\u0026m=20260921\u0026n=cc4f7f89c733f529930cf9e8b70ae482\u0026r=1 HTTP/1.1\r\nHost: everest.castbox.fm\r\nUser-Agent: \r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://castbox.fm/\r\nX-CastBox-UA: localTime=2026-09-21-18-54-30;timeZone=UTC;deviceType=web;lang=;countryCode=;uid=\r\nX-Web: true\r\nX-Uid: \r\nX-Suid: \r\nX-Access-Token: \r\nX-Access-Token-Secret: \r\nOrigin: https://castbox.fm\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 21 Sep 2026 18:54:31 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: public, max-age=300\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://castbox.fm\r\naccess-control-allow-methods: GET, POST, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, User-Agent, X-Requested-With, Content-Type, X-CastBox-UA, X-Web, X-Uid, X-Access-Token, X-Access-Token-Secret, X-Box-Access-Token, X-Custom-Token, X-Admin, X-Channel, X-Suid, X-AB-Test\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncf-ray: a3eb4761beb635a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94472,"size_decoded":25728,"mime_type":"application/json","magic":"JSON text data","md5":"161ea54a6fa76fb6211521169c11c08a","sha1":"a8a337ccdf8b7c7286e9cb367415716adb7b0e6d","sha256":"1a9f9a151b6c3a12150db08c0c6db893c781902ea9ee5fc6efab29bff92e4e26","sha512":"c85a4cf370c8020e7cfbfc9b2c1f6bad136f3b7825a387725cf32686844f51795d782174604276599851a43fa052137f7ee2d89e65f5df4602d0567254e8084c","ssdeep":"1536:e5TtFIf5TtHB/b5TXaI85TXE5TXfzs25TX8fkiCTIvmWnx:MPI9iM/Wnx","tlshash":"f4932afbe2c1021fae8162f89c36aebff10a511ddb426c16a914c57bc58f97240787e5","first_seen":"2026-09-21T18:56:19.394071Z","last_seen":"2026-09-21T18:56:19.394071Z","times_seen":1,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/assets/css/width-full.css","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.023Z","timestamp":1790016868023,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /assets/css/width-full.css HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 82\r\nlast-modified: Fri, 11 Dec 2020 21:30:23 GMT\r\netag: \"5fd3e4ef-52\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":82,"size_decoded":512,"mime_type":"text/css","magic":"ASCII text","md5":"dffc6e811d9459b1cdf81a3a59b4fe3f","sha1":"c128f12bf8768fd7af37a884bb86c633942d38be","sha256":"7015c796a0f9a0675f6c85617ffd73e8a3f84b5b58f7c167e135f523d19dd2b7","sha512":"598621ae3a16e95d9aad1c1b9a3f9cfe2947fef0e99300fe5c9074506022d5ecb057cb5235435f2d50be77ed77b2032e64d81238563600963b9b4cf3df342687","ssdeep":"","tlshash":"64a02417d4f11ddf71331454005c4041033410c3d1c0071c304d117443d44c0343cc00","first_seen":"2023-07-18T09:27:33Z","last_seen":"2026-09-21T18:56:19.401643Z","times_seen":21,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/images/home/ludwig_mohikaner_3.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.049Z","timestamp":1790016868049,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /images/home/ludwig_mohikaner_3.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23676\r\nlast-modified: Mon, 14 Dec 2020 07:38:52 GMT\r\netag: \"5fd7168c-5c7c\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23676,"size_decoded":24113,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x401, components 3","md5":"244927917d21f964158752a4de1568a6","sha1":"360f4ddf5539a56f695c7d4eb220acab41378de1","sha256":"55fed1b7b437984b834edf8e55948f6545ba85fa0c68bc1775b9487d8e69e98a","sha512":"6d4b07b2c4409c373c6e1e1babbd8cdee45123800017bac542dbb09bc1c03225c18f05c6be07f04ba417850524d60ae4e1bd96a7530877ee46125b14e2391493","ssdeep":"384:693tcyomE6N8+1c2tUiOz2fYF2RSgQyKI+rB7Y8+68stFRBbnN2FhIJhifp5C8GZ:699cydNf1cuTO+MOEtIaBc8+mBjNeIJh","tlshash":"97b2d015e474d9e19a8b8e7cd4f51eba6b07f8c2349ca2d1e0a98ce334dd2160d4ee60","first_seen":"2026-07-17T09:38:58.74937Z","last_seen":"2026-09-21T18:56:19.402543Z","times_seen":3,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/design/img/logo_dunkelblau_2.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.058Z","timestamp":1790016868058,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /design/img/logo_dunkelblau_2.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13906\r\nlast-modified: Sun, 26 Jul 2026 16:43:28 GMT\r\netag: \"6a663930-3652\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13906,"size_decoded":14343,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 601x150, components 3","md5":"ffcf15bcea451fe5680c31d8945c916a","sha1":"875cd111a0df984d50fb3a39530db06ebcd67b48","sha256":"2546ced7d3342621c46befe8e733103ed15e67b074e441eaf70adb9e16f26ade","sha512":"2b1b81901e24f5c3a3ebc43ec1b958f8a02593d61f75983ee2ecccfdea613921251a9334dc13b2a502b95caa81137aef5f9b713468266d8fa5fd13faba1ab955","ssdeep":"384:SovQCgvKjg2bxvgGeScJ+lY0dYzuU/YLBIbAut8PSowfffffbJafffffj:hYHyjfbxNeSU++vbcSowfffffbJafffD","tlshash":"b6529e4ff55fe451dc2be5fe68695a7b8d090885e2a5f0a9ece4f43062c2230c8a4ddd","first_seen":"2026-09-21T18:34:21.613124Z","last_seen":"2026-09-21T18:56:19.404378Z","times_seen":2,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/literatur/images/386/38690/3869063343_2.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.422Z","timestamp":1790016868422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /literatur/images/386/38690/3869063343_2.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17674\r\nlast-modified: Fri, 05 Nov 2021 11:47:36 GMT\r\netag: \"618519d8-450a\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17674,"size_decoded":18111,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], comment: \"Optimized by JPEGmini 3.11.4.3 0x66aca79f\", baseline, precision 8, 200x305, components 3","md5":"b943f8dbcdfd95c3587f37c0f1e3bfab","sha1":"3cdd04362c54ee0d9b3efd92fb0b29fb86ead2ab","sha256":"e881da59c4e0c912c998341643963955f5c02ae2cf75d21bd525dc98aee144ca","sha512":"e91948ab941fb62c5cdd849a4de1f44a074155494a00916e781e73eb2a63de6d174e53f7966c538aa6059cd03c4b2f0f2ddfdf7a5d480a568602295aa20bed2f","ssdeep":"384:K0CXBL3EHN9ScOWVyOUvoWVmykrbxcwyeYqA0IJuX8sngGXIrv:K0+TEH/NtyExly5qnEuMsgGXe","tlshash":"b482c08d67e01b83c2cbe2de0673857a4d793cd1a3c263a614b8d00f14a563eb4bc1d2","first_seen":"2026-09-21T18:34:21.582789Z","last_seen":"2026-09-21T18:56:19.409138Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/verlage/bilder/logo_13.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.427Z","timestamp":1790016868427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /verlage/bilder/logo_13.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17195\r\nlast-modified: Fri, 07 Nov 2025 18:25:02 GMT\r\netag: \"690e397e-432b\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":17195,"size_decoded":17632,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 350x432, components 3","md5":"ef401ee7a608584210c1465c003734ce","sha1":"33d1e36733a20d1979ba1f3aff3a96564e91bd26","sha256":"cac755b94c33347889b88747f5c8ebe9afd1630a0d1bef3b68311a5abe07c361","sha512":"958fd0db9531d12b2d24610d383c6c7d7731119cc2c991b9ef6bc65011409130cf0c0ca455be901780f6e154aa1e37f538699e6781aabef6204e59093ca74888","ssdeep":"384:G1EfY0ELRtGLBq8hry5I9yRBAyiKLFJQGYP95NTdmXx3FaM5c3:G1E6MpernQGYPXNTapF74","tlshash":"b0726b23ae0c9390a51991e47d970ead7f02671cac821fff50234ec77c2196a5d8e1af","first_seen":"2026-09-21T18:56:19.410778Z","last_seen":"2026-09-21T18:56:19.410778Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/hindsiliguri/v14/ijwTs5juQtsyLLR5jN4cxBEoTJzaxw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.724Z","timestamp":1790016869724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/hindsiliguri/v14/ijwTs5juQtsyLLR5jN4cxBEoTJzaxw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://castbox.fm\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:21:50 GMT\r\nexpires: Tue, 21 Sep 2027 16:21:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Sep 2025 13:42:22 GMT\r\ncontent-type: font/woff2\r\nage: 9159\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14472,"size_decoded":15283,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14472, version 1.0","md5":"94b8693233d1eb63780e108a1cfb5499","sha1":"357bdf1389b7da704f672297bcb90e1e4c070aae","sha256":"cdc41415f366ef2966fc77e90d51391dec03657a6ed397fe59efd5ce34cf9549","sha512":"42687544637180c7c432dd98d59780e9a0278aba6dc6e86efb36ef39e2d301b04710d320adc92c021eb4bf980650ee35efe7ab3c30c778c06dc099f05bdda6f1","ssdeep":"384:w3yTfckw2H7q0+0Tw0ud++DS/DvgIdDLQEww0FO/T:wCTE+Bj3ud+zgSkw4O/T","tlshash":"e352c1a8f0f5b911e969f33af5497f6a4ac1d04e22d218e7ce25d814154905b3f0e8e6","first_seen":"2023-05-01T21:53:43Z","last_seen":"2026-09-22T23:22:06.513668Z","times_seen":989,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":3,"connect":30,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-Y2EEPJE4W8","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.012Z","timestamp":1790016868012,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /gtag/js?id=G-Y2EEPJE4W8 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\nexpires: Mon, 21 Sep 2026 18:54:28 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 165092\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":485366,"size_decoded":165696,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4997)","md5":"554b0c2cc6b78582d7e138afafcb2ca4","sha1":"a93ad07ee4041cca0d656b111d8fb15060880243","sha256":"7cac359f07b57a7e54194ba2e4150f8b0588751d9657533ffef7068e1c1565d1","sha512":"6e7cd250266bc46353526268661fece6c09f29564fd6846e9a65c217ae34f8d040bcf807aeb26bdf1778894faa9977eb414557ee02c4f210b259d01729df359b","ssdeep":"6144:CB1tV6FoPaWqrYqmrDd8cOAIb4EUt3lix3uFb4NUOg3Hc+pf:SsFoyWEqol3s4W133","tlshash":"7ea42acdb3c674229392f274903f018bb67b69a2b44cc899f289d8e42d3465a5177f7c","first_seen":"2026-09-21T18:56:19.412853Z","last_seen":"2026-09-21T18:56:19.412853Z","times_seen":1,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":37,"receive":46,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/assets/js/index.js","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.034Z","timestamp":1790016868034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /assets/js/index.js HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 596\r\nlast-modified: Fri, 11 Dec 2020 21:30:24 GMT\r\netag: \"5fd3e4f0-254\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":596,"size_decoded":1042,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"379fd0260cb7e1e74d47320dbc013324","sha1":"dca2d3cc417768a33ce9c6145ebec8faa226c242","sha256":"a08000c535bae6884311add3d341bbfa4fa477acada3a955586abb171d3dc555","sha512":"af87aea33db7b3615a541247260642f2a0364ab54a9b5ecc580a3ff6c822f187b168c81cb84d909bdd750fa83b39c6412798876f8884ae98d21f452ebdb96c1b","ssdeep":"","tlshash":"e6f02ef590ba0720023b002a2dfdc604bfe1048b8c02fa52b90c04dc0fad91c21f3ae1","first_seen":"2025-12-22T08:53:57.836588Z","last_seen":"2026-09-21T18:56:19.415194Z","times_seen":6,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/images/logo/das_gedicht_3.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.054Z","timestamp":1790016868054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /images/logo/das_gedicht_3.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5199\r\nlast-modified: Fri, 28 May 2021 07:51:13 GMT\r\netag: \"60b0a0f1-144f\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5199,"size_decoded":5635,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x93, components 3","md5":"2b50c41fa3fff9e8bc6f5b3e5c374c98","sha1":"52da651b3b69506fae3b16e242872a158a958694","sha256":"56b0f6fd97ebc2eb042ca70c9b8d7f6677366dfc40f30ca0306a8114a5b729af","sha512":"950131229df06326787a9070bf79a9c79c3bdf08b509646b25d49d5eb48465c15a238f944f379127ac0c24a15f1ed66be7f25ee8a036ed3133994f8622906c93","ssdeep":"96:+2VESkzy+eL4NflFF2TfoU83akxLDNr16aSlBZPug1Hw:ALuorF2Tfu3x9r1FShFw","tlshash":"f9b13a06fb30a404cda86bbd0af7003b7e76495898c5f8b46ccd681be9d62b65e46258","first_seen":"2026-07-17T09:38:58.735703Z","last_seen":"2026-09-21T18:56:19.416859Z","times_seen":3,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/verlage/bilder/logo_144.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.430Z","timestamp":1790016868430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /verlage/bilder/logo_144.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13837\r\nlast-modified: Mon, 08 Feb 2021 13:43:07 GMT\r\netag: \"60213feb-360d\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":13837,"size_decoded":14274,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 350x295, components 3","md5":"2593bb45b435af172b197d827248f9ce","sha1":"b7786bad635d1da602ff17cc0b594c1f606dae8e","sha256":"5731305e1525a31afa9ae0902f136d6e7ec2964f7fd101dfc791d4e9ef64da2f","sha512":"8f3393d914dbc6110c9793b40fc740912395b6201a276304eae93de5ff641bbfe6caa79c0378833a3bf3843f6a26c1077607e34e497e1554e63fc229c87a05d5","ssdeep":"384:GWOQnLUZQLYKEz7kVTlSqy2f4qK6us6tV6Y/5Oq0F:GWOoNxMoG2f4L6usQD5iF","tlshash":"4252af675180d983cb7492f73c2b1e455a8f3e8879b476bf01550caa3d42eb05c663ac","first_seen":"2026-09-21T18:56:19.418032Z","last_seen":"2026-09-21T18:56:19.418032Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/verlage/bilder/logo_11.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.432Z","timestamp":1790016868432,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /verlage/bilder/logo_11.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5284\r\nlast-modified: Fri, 12 Mar 2021 10:53:06 GMT\r\netag: \"604b4812-14a4\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":5284,"size_decoded":5720,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 350x73, components 3","md5":"647383a8d716b2503881e5cb4fd26235","sha1":"1b13643f12b636c5791ebaf859ef0caf2575b59c","sha256":"ece411af0a28279e3da1e22cd0c91ceb4f4c094c2f003afc578bcc0615ae5728","sha512":"f1b6b2bec0159a176dcd67c8445e7034e260b2b1527f36dbc0b38fe4633c75dcac3eb70e30d0d85fd5a36b088477fb53580dfc6fd4952eb2d1f8355f03b055b7","ssdeep":"96:GCh6EdFLTpbI3B52XZaS7capkW9sV5a05tbRG2EORBWhsvJWEpkNCq1ndtwPKIQ8:GY6WTTkWczZk05tY2EOSWfp3gdwKn8","tlshash":"96b17d0b31c2ec735f7943f86f5166672b1753d635187db8193548d89fe0c72918960c","first_seen":"2026-09-21T18:56:19.422478Z","last_seen":"2026-09-21T18:56:19.422478Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Hind+Siliguri:300,400,500,600","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.271Z","timestamp":1790016869271,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css?family=Hind+Siliguri:300,400,500,600 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castbox.fm/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 21 Sep 2026 18:54:29 GMT\r\ndate: Mon, 21 Sep 2026 18:54:29 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4928,"size_decoded":1241,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a6afae57f53a07cda94f4635cd06d701","sha1":"ffdd01cd2b824b782e8d50d64dd273ecb80e0eb7","sha256":"e52fdcaeba308841827c9bcca200f069ad52da530b65959ff0230aef50722ebb","sha512":"3ec9835c7abf5dd61f18ab0f195ad84ae30de0ca165fcd65c5e752ba02573158407cb1d2f3f55347202c816fbb22e7ca7f73c2e38bbe30b09b5d6c0196cf9a1f","ssdeep":"96:UOWiOWdJc+uCOWCNbOLJOLBJc+uCOLrNbOg7OgoJc+uCOgVNbOxTEOxTDJc+uCO1:w6VpDMxATRMrsPXiT","tlshash":"b3a1d092052a9840a75338c552ca7d23de1f73a0a045ecbe9eff18869ce5c358752f5e","first_seen":"2025-11-01T01:55:54.686703Z","last_seen":"2026-09-21T18:56:19.426375Z","times_seen":7,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":8,"connect":18,"send":0,"wait":34,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.castbox.fm/webstatic/js/page.vendors~castbox.main~creator.analytics~creator.ch~creator.ch.des~creator.comments~creator.ep~creator~546696e9.6cb8e3df.js","fqdn":"s3.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"65.9.62.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.613Z","timestamp":1790016869613,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.castbox.fm","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 07 Sep 2026 00:00:00 GMT","end":"Tue, 23 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F3:F1:75:82:23:F0:56:69:87:36:1D:49:03:12:20:A9:09:04:E1:D7","sha256":"5F:D0:62:6F:D0:90:09:E2:6B:2F:4B:7C:CE:3C:68:1A:1D:F5:51:5F:C0:06:4A:AB:97:15:67:D6:AD:68:67:AD"}}},"request":{"raw":"GET /webstatic/js/page.vendors~castbox.main~creator.analytics~creator.ch~creator.ch.des~creator.comments~creator.ep~creator~546696e9.6cb8e3df.js HTTP/1.1\r\nHost: s3.castbox.fm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castbox.fm/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ndate: Fri, 28 Aug 2026 03:29:35 GMT\r\nlast-modified: Mon, 10 Aug 2026 11:33:24 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\netag: W/\"48c8768821f90e9db345b3caf1d6eb59\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a715c2ffe2054daa198dd54f02e95532.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P4\r\nx-amz-cf-id: 1Z9UDUlTBbCuDJxZFZXvvWzLJAGaH8jA7-31zhFWvqvtS3anFDaz9A==\r\nage: 2129094\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":12630,"size_decoded":4730,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12630), with no line terminators","md5":"48c8768821f90e9db345b3caf1d6eb59","sha1":"17a1282e4d9c9de766f3bd3c4f8ab6f1f2df1c4b","sha256":"8fb16d7597fc487522510d0dbc1c458477b7c462894527d07c5828823cb85881","sha512":"100743aab0276fe0667dedab4ac393bb124ce280f72a1e0eb483b462329150d594c1d97b3661cc26187d4728ffd81d7b5818ef91861fd1c93755ca9988318bc4","ssdeep":"192:q2MTJLggg1CYeZRF5wkIE9ZgM5wkIE9xHFfkPdSqyQ49VcxuV+:7kSggUYeZew9kw9zfkFkQar+","tlshash":"2d42c7cdb9e2f0b251d366ed812f084b73ba64a9444e90b07a12e8f09df556d1227f2d","first_seen":"2026-09-21T18:56:19.427892Z","last_seen":"2026-09-21T18:56:19.427892Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/images/logo/buchpalast_3.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.055Z","timestamp":1790016868055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /images/logo/buchpalast_3.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5125\r\nlast-modified: Fri, 11 Dec 2020 21:30:25 GMT\r\netag: \"5fd3e4f1-1405\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":5125,"size_decoded":5561,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x71, components 3","md5":"bbaa0eadc0a061d95d80d31cdfe785b8","sha1":"33072ee75f59010963714df669533d4414e8dd25","sha256":"cc48ab874ab3530f826c503f95f685dc8d0ef9b89b22f1f4dea622a3f1bf95a4","sha512":"94c91b98c218d172a31da3a4b58fe26851924bd6cff5eb08ae9341eaa1ddebc335058954a24cf529bf73af5fa0141293fdd9ce1a710acc94c196adbc44c34aed","ssdeep":"96:As2zmCOoxYIptxy9nZSeMsbIPZ2Z4wd9jGtSZVE9m2uNKGk:yHyF+ZeGtSZumbN0","tlshash":"b7b13c53e0733849d98cecba6cf3d596461594a835e0d34ea4cbc41acdd50fb2d2b89a","first_seen":"2026-07-17T09:38:58.688137Z","last_seen":"2026-09-21T18:56:19.431074Z","times_seen":3,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"everest.castbox.fm/data/episodes/overview?cids=2396830\u0026web=1\u0026m=20260921\u0026n=12f387024363714dd1f53262895f39fe\u0026r=1","fqdn":"everest.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"172.66.159.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.747Z","timestamp":1790016869747,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"castbox.fm","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 11:26:23 GMT","end":"Fri, 11 Dec 2026 12:26:17 GMT"},"fingerprint":{"sha1":"76:86:6A:D4:8C:65:FB:6B:60:55:3C:F2:F4:57:BA:17:C7:B9:CF:69","sha256":"D9:82:7F:4F:85:91:12:9A:53:8E:21:19:76:81:B7:EB:21:96:6D:77:6A:56:DC:F1:CC:DE:07:56:0E:12:10:55"}}},"request":{"raw":"GET /data/episodes/overview?cids=2396830\u0026web=1\u0026m=20260921\u0026n=12f387024363714dd1f53262895f39fe\u0026r=1 HTTP/1.1\r\nHost: everest.castbox.fm\r\nUser-Agent: \r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://castbox.fm/\r\nX-CastBox-UA: localTime=2026-09-21-18-54-29;timeZone=UTC;deviceType=web;lang=;countryCode=;uid=\r\nX-Web: true\r\nX-Uid: \r\nX-Suid: \r\nX-Access-Token: \r\nX-Access-Token-Secret: \r\nOrigin: https://castbox.fm\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 21 Sep 2026 18:54:30 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: public, max-age=10\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://castbox.fm\r\naccess-control-allow-methods: GET, POST, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, User-Agent, X-Requested-With, Content-Type, X-CastBox-UA, X-Web, X-Uid, X-Access-Token, X-Access-Token-Secret, X-Box-Access-Token, X-Custom-Token, X-Admin, X-Channel, X-Suid, X-AB-Test\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncf-ray: a3eb475dc8ec35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148956,"size_decoded":28901,"mime_type":"application/json","magic":"JSON text data","md5":"42e0eb7f2c5322333dea18c968002043","sha1":"7b1fce65b516c2c6b9dfaf5df1cc190bf34c92a2","sha256":"f8633f4ee32a16a47c63b27f40f2dfd8989cbf615f721fd8a324ce6c113746d0","sha512":"f85ed7bb04dba187c30cc0ce25fb277c3cae0e23d4df3d7ab94b0a7edb25fac78e627a481321aecd7d379ff74dab80374cfe8436a076114e74df5a98946f5210","ssdeep":"768:65PwNt3PGw0PpIJzP8TWWsWfK9Ft1YHC9TqfkK/JDSo6LN:65Pg+w0PpIJzkWv+VaN","tlshash":"6be36a956eb9a26b6525d362803c33c74630d15162cde32fb2924f4850cfe36af4be76","first_seen":"2026-09-21T18:56:19.43349Z","last_seen":"2026-09-21T18:56:19.43349Z","times_seen":1,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/hindsiliguri/v14/ijwOs5juQtsyLLR5jN4cxBEoRDf40uYVKw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.971Z","timestamp":1790016869971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/hindsiliguri/v14/ijwOs5juQtsyLLR5jN4cxBEoRDf40uYVKw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://castbox.fm\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14184\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 17:50:31 GMT\r\nexpires: Tue, 21 Sep 2027 17:50:31 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Sep 2025 13:43:54 GMT\r\ncontent-type: font/woff2\r\nage: 3838\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14184,"size_decoded":14995,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14184, version 1.0","md5":"14afb2d548f7ebc4ede1a11b8c49b81c","sha1":"a113d1b4ab0353e70f460f3479478e44c89fbd15","sha256":"efb4de66e674ca256f2ff25dc0c08f7c17f8bcf0c60173a57e06fb0fafe62fed","sha512":"154e5da79452db71ea38ef14e609b3a92435a864060de4ece74c4ab196da848ad6d73deac565b114ca7f344686e4c98cca52fc07daede339d26603334b365042","ssdeep":"384:ITO8VLxjandXe+h6UsymQqem2RBorjXxg1:IqYgndOMsKirj+","tlshash":"1a52c0d8c01a3416d649fe36bea4530afd8f6181fc0cf691da8579c1876e134a58baf2","first_seen":"2023-05-09T07:58:38Z","last_seen":"2026-09-21T18:56:19.435233Z","times_seen":316,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/images/logo/kopf.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.042Z","timestamp":1790016868042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /images/logo/kopf.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 55726\r\nlast-modified: Sun, 02 Aug 2026 15:37:00 GMT\r\netag: \"6a6f641c-d9ae\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55726,"size_decoded":56163,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1915x345, components 3","md5":"f05acbd0336cda12b8af94c8ce415274","sha1":"96ccf895b4b9fff754a1291f23dda20ba871cca8","sha256":"9bb19ef7ce3fdbea849f6c69b61dfb7a9bb5bc34d064038f9f78615532d8486d","sha512":"7fd36b4d907cd15f50a1ac2eef4b7767094f6212899d73923c8493ed7ad5614f83529adc0a0feaef4dbfac327888e746492b240743a4adcec45ca0e45271b031","ssdeep":"768:LOatacaS/oewSJqyjc9db/jUyydXGJNN0B1bVqA8pUpQtFNkjy3O6QqMNISB:5++JwSkWGd0/B188QLC+oKSB","tlshash":"30430187df2d1927c4c47cb934bf5b0107a5d4106118fa1487badbf43af66b3a82a4e9","first_seen":"2026-08-05T01:56:15.017072Z","last_seen":"2026-09-21T18:56:19.436029Z","times_seen":4,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/design/img/logo_dunkelblau.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.048Z","timestamp":1790016868048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /design/img/logo_dunkelblau.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 58246\r\nlast-modified: Sat, 25 Jul 2026 09:43:40 GMT\r\netag: \"6a64854c-e386\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58246,"size_decoded":58683,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1181x295, components 3","md5":"e3635ca2249585a40636e05ddf342c4f","sha1":"663d67e21135f601508a6740cc46acee77753b2d","sha256":"1aa48fce9fcf7eee4774ec7cba733303f1db50b2cc72fae0ff69422d1bb52cc6","sha512":"03aa16916366a05d743be022857fbfad1bcc5176a345ac3ccc9f4407884e2260d7c517ee85c544483c8b78559fe9e353caeb00b0b37b611bfc9ebb9250f47218","ssdeep":"1536:bVd6594YQwxrvr7s8FrsCronoMAuavt8NvViJ3k:w17FknCuavtwVyk","tlshash":"c343e0bcbd25ee5394da616bac7e821c628100f373b699527c7f4cd4cf8a1831aa415b","first_seen":"2026-09-21T18:34:21.625714Z","last_seen":"2026-09-21T18:56:19.436717Z","times_seen":2,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/images/logo/hoerbahn_2.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.053Z","timestamp":1790016868053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /images/logo/hoerbahn_2.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34008\r\nlast-modified: Fri, 11 Dec 2020 21:30:25 GMT\r\netag: \"5fd3e4f1-84d8\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34008,"size_decoded":34445,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=400, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=400], baseline, precision 8, 200x200, components 3","md5":"06758af2e26031f2c39da35fd8d3d397","sha1":"4155a89960c9f44c9247cb82e6e6d3aea4e0be8d","sha256":"d093784a18a303f2631624d7aff6543c80153768c51d630e057340c27d41294f","sha512":"51b124432a38fae4ffd88f159a4c6c294ae137c34128a86c6776621da6503e48b5719cdbf73fba95a3feea24b623d2fa08856042ca7d5f5f837f982c21b37dae","ssdeep":"768:9pw1C5sKz+pw1C5skLYygeX4mlMCBIsCn22Fa:MA51A5FLEeRl8sSFa","tlshash":"ede2be357b2b9e63fac2887040d5eb967334ce51baa32a81785c75853731ea18d9d20b","first_seen":"2026-07-17T09:38:58.659437Z","last_seen":"2026-09-21T18:56:19.438617Z","times_seen":3,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/images/logo/book2look_3.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.057Z","timestamp":1790016868057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /images/logo/book2look_3.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8711\r\nlast-modified: Mon, 20 Nov 2023 12:39:20 GMT\r\netag: \"655b5378-2207\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":8711,"size_decoded":9147,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x63, components 3","md5":"ba0d05b23dbdc053af4a623fe5e70647","sha1":"70deab83b9642152aacd0ee55f3e242537577293","sha256":"315569e2df828b2df0d8b7a9ccdd3c7922467b528590580731fefbd7853ae6c7","sha512":"7568dce2093160edf82981434cbe6d28fb1941dfefebe355b65ab274a99d4d1bb06a1e391109ad197cbd81e2c39bb23207fcf109d770e83b0ca8f5e5dd665607","ssdeep":"192:ykn0uTD4B+t7G/8yIRu0COC9pvugP+E0LadraZPtGlBeBL0WcH:xn0CD5hG/WE0KWgP7cjoBB","tlshash":"59028c1eba22ef40c0431db47af195db8b2310d76bfae21ddafdc06c8d6512d4ad6084","first_seen":"2026-07-17T09:38:58.750522Z","last_seen":"2026-09-21T18:56:19.440848Z","times_seen":3,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/literatur/images/394/39480/3948065411_2.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.409Z","timestamp":1790016868409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /literatur/images/394/39480/3948065411_2.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 194614\r\nlast-modified: Tue, 04 Nov 2025 12:19:25 GMT\r\netag: \"6909ef4d-2f836\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":194614,"size_decoded":195053,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 910x1500, components 3","md5":"f1f2639192bea63562aa47cba457835a","sha1":"ea98c7cf012d5874442e09f8f8495cc6bc145ca8","sha256":"e2367f76fe6877021ac8a064b7dad0f1f66c973b5c316ef52103388b745339b4","sha512":"dc853c6e2e1d226b4b934e9e75532fc3c687894a1580920af04d9db52861b81276a6efe7d8fbc84fac54e641c272c6fbdc8fadd2cde22a0ee00137e876ba00d4","ssdeep":"3072:xmzJWi0Lr0NUxfHkjUCrjPFK6Il7HLTIE0c6Iy9NIhChi9WPTwQK:Yz0i0kN4HkjFjelD/9uNzMaTwQK","tlshash":"1314126aea4e39d3ec5c67305ea0ed39ab20a653ca1d38c077ca3b34350a67f6543c51","first_seen":"2026-09-21T18:34:21.597549Z","last_seen":"2026-09-21T18:56:19.442182Z","times_seen":2,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/literatur/images/396/39644/396443745X_2.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.411Z","timestamp":1790016868411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /literatur/images/396/39644/396443745X_2.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 500861\r\nlast-modified: Fri, 05 Nov 2021 11:52:18 GMT\r\netag: \"61851af2-7a47d\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":500861,"size_decoded":501300,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], comment: \"Optimized by JPEGmini 3.14.12.71901706 0x06f80845\", baseline, precision 8, 1902x3000, components 3","md5":"9f97de1d27b40de1c1083c03839a437e","sha1":"0fb10dd48d2b68eb1bb6df2cd33c8f5d411a2068","sha256":"91606e58ae30dc07f30c072deb8f40f587e9d653d4299cd833bb621b89caa30d","sha512":"ce93e150fa8e5e010c2463ef9b5b238dd449f9806f04d757c017b0ace9a5483930302d0b34ec4418697f69188c897275176dabe4d089a2765d493bbb0415b729","ssdeep":"12288:uxLBDvHV3DrEXAC62YdHf9aj8+TXD/usMs3Ywiwzsg71GP:CN9DrotYdHgjHTXLups3ea/a","tlshash":"23b423779324e4dde53457b8f010ac49e3fa0a48e28bd65c7a2d13eda32dce761ae150","first_seen":"2026-07-17T09:38:58.732083Z","last_seen":"2026-09-21T18:56:19.443232Z","times_seen":3,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":236,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-CESP3QW02J","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.603Z","timestamp":1790016869603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /gtag/js?id=G-CESP3QW02J HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castbox.fm/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Mon, 21 Sep 2026 18:54:29 GMT\r\nexpires: Mon, 21 Sep 2026 18:54:29 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 178573\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":535301,"size_decoded":179157,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7830)","md5":"1119835556a191f0285e09c6629b0bbc","sha1":"da430aace6f43632783ab0dd0ff57874622911a6","sha256":"903fbaf5ee5c7e278081ff5c27214d2e55362e3fda578980ed81a98487f11ca0","sha512":"775ff0312b870ade1b6fdb2f8cf8dc1bc77e7aa7cd8a34e5700a86781431f5cc7cf78f272fb34593a80bc4a154da662be19fb47a01d6247f7f5c398707657709","ssdeep":"6144:SKVPB1tV6FonaWqrYJNmX96d8cOAIb4EUt3lix9uFbHDUOg3hc1f:SKbsFoaWEdthl9sHI1i","tlshash":"37b409ce73c674229396f578943f01cb697b29a2b49cc89af189dce02d3458a5163f7c","first_seen":"2026-09-21T18:56:19.443965Z","last_seen":"2026-09-21T18:56:19.443965Z","times_seen":1,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.castbox.fm/webstatic/css/playerpage.f1f20f54.chunk.css","fqdn":"s3.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"65.9.62.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.616Z","timestamp":1790016869616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.castbox.fm","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 07 Sep 2026 00:00:00 GMT","end":"Tue, 23 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F3:F1:75:82:23:F0:56:69:87:36:1D:49:03:12:20:A9:09:04:E1:D7","sha256":"5F:D0:62:6F:D0:90:09:E2:6B:2F:4B:7C:CE:3C:68:1A:1D:F5:51:5F:C0:06:4A:AB:97:15:67:D6:AD:68:67:AD"}}},"request":{"raw":"GET /webstatic/css/playerpage.f1f20f54.chunk.css HTTP/1.1\r\nHost: s3.castbox.fm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castbox.fm/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ndate: Sun, 30 Aug 2026 02:12:37 GMT\r\nlast-modified: Mon, 10 Aug 2026 11:33:21 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\netag: W/\"9c8f09a61c53f47307df9dcbfda29beb\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a715c2ffe2054daa198dd54f02e95532.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P4\r\nx-amz-cf-id: K2iTa2rssAAY08VxrN6rbFUVzmCH04aWcdibxg_qdVN5nW964JBzqA==\r\nage: 1960913\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":46271,"size_decoded":10015,"mime_type":"text/css","magic":"ASCII text, with very long lines (46271), with no line terminators","md5":"9c8f09a61c53f47307df9dcbfda29beb","sha1":"521353398469950f7aebdf776f9ccdd8f4848053","sha256":"0e240c52f2621f8e463013e34cfffd3b064cb6b38ba08ae36f4d2e462f4b0733","sha512":"6015f032ee7b3d5142ec3bf50118c3cde5fd9af11b2776c74a0fdeb03f1f17024d93565b3836ea530164ce3763b8da415eed9726d7f8b0e275494e987a81108b","ssdeep":"768:eoyfbmBiWKtUao1GESuGHDUq8iuRx4PxOP:Yklao1GESucDUq8iuRCPxOP","tlshash":"dc238436412e256ae1ab9eb771d49af8b9fcc003942157e9f6187f5cc78f28c1d72281","first_seen":"2025-12-16T04:46:12.650749Z","last_seen":"2026-09-21T18:56:19.450962Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/assets/css/style-blue.css","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.021Z","timestamp":1790016868021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /assets/css/style-blue.css HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 178980\r\nlast-modified: Sun, 02 Aug 2026 16:23:25 GMT\r\netag: \"6a6f6efd-2bb24\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":178980,"size_decoded":179417,"mime_type":"text/css","magic":"ASCII text","md5":"c6564ae17a132c5263431a4f309e873e","sha1":"e48a5733787e8352abe17fc2decdb96818e58ea8","sha256":"03bbd8ac78d632f6376b9a07297c6bf6da983c0095e3dd3e08436378c7bdd814","sha512":"f32137d6f77e3bb6c166cbc9f1569d1fb6ae9eb8f2eb715f8650070eb8ab83ee350629d6abe62602071252fc823f1702402e10ed3a681fc70505ebecacd2b729","ssdeep":"3072:wUCZUlP03n5vFevGFgr6p7C6t8i8zbC4fYQuckVmQgBvey0dvZcu99ZmoPqLztPi:wUCZUlP03n5vFevGFgr6p7C6t8i8zbCL","tlshash":"00042055efa31c82700bc19d77aaeb90e36d14c3950ece2e7b9a3258cf48194657ef48","first_seen":"2026-08-05T02:16:43.255392Z","last_seen":"2026-09-21T18:56:19.45353Z","times_seen":3,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/images/logo/Moluna-Logo-ohne-de.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.052Z","timestamp":1790016868052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /images/logo/Moluna-Logo-ohne-de.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10131\r\nlast-modified: Sat, 26 Jul 2025 06:22:16 GMT\r\netag: \"68847418-2793\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":10131,"size_decoded":10568,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 369x99, components 3","md5":"c8f7463b15e404034da72e49860a79af","sha1":"62bb2fc97127b33bed6cc8e4bbf8a108d7b302a1","sha256":"75d41d06865bd3c34fecd8e28a8d6538af7363f48d8a54e132ea64102d2ddeb4","sha512":"5ae11e9df30a09e0804d6cd482d89249ba64d3ba0106c2512cd744e5bf148542823adf92d0ee765016ecf97a9e2074e8fad3a9aaeaf9e227463b57821e1306aa","ssdeep":"192:Qoqbn9QAMaCz7BCTgDp1q+AWT9mOshSk+jR87QNXFAhg6A:4QbtCT21Ck9mOad+1AG6A","tlshash":"1c229d31ac229fe8f24932f492f643927a57c23b50430c499973536a55e3afed5238b7","first_seen":"2026-07-17T09:38:58.702718Z","last_seen":"2026-09-21T18:56:19.457248Z","times_seen":3,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/literatur/images/978/97839/9783962335588_2.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.414Z","timestamp":1790016868414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /literatur/images/978/97839/9783962335588_2.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 47958\r\nlast-modified: Tue, 04 Aug 2026 14:13:54 GMT\r\netag: \"6a71f3a2-bb56\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47958,"size_decoded":48395,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 411x624, components 3","md5":"cfcc71aa74de57b1e7debed4cbaa07f1","sha1":"7e6e101df9a98facfc07814537d120ea87d1eaa0","sha256":"f0d40f10cd4bf98a8d4053bcb52cf34f97815dd930d254fe5b00a06a665f12c1","sha512":"5c0f10a305f762a909c4165883c6267f9446456aeace5a6ecc4ede38f38fbf763cd8a419d6a6efce5c140f029f3f7b12bcbc71bf70c899de76eb1f607e905536","ssdeep":"768:/vYy5Wcq+BQUV4zJ9ZIfstvJjyLJxXTgb4m8i0uExhzFIJtaG72ZAmQNCM5dSVfk:/v1nHBy9Ws/E1C4m8BRzF7GCZ7QNrKVc","tlshash":"1023f155cbdbd2a2c7f2dbf4b9a27fa010635145f360a01b85745d3c6fa8112ae49a24","first_seen":"2026-09-21T18:34:21.656078Z","last_seen":"2026-09-21T18:56:19.459417Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/literatur/images/978/97837/9783747208342_2.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.418Z","timestamp":1790016868418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /literatur/images/978/97837/9783747208342_2.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23227\r\nlast-modified: Thu, 04 Jun 2026 12:59:36 GMT\r\netag: \"6a2176b8-5abb\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23227,"size_decoded":23664,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 300x454, components 3","md5":"250947bb34c14a6b51e9e585a0ce1a2e","sha1":"a9521fbb15d5ca4ae23842dc740764e0abac7c95","sha256":"9b4a771dceaa0ec2d12b64cef78f53a8e28c1a91fb939c3e57affe5d667f07a3","sha512":"4fceab52fb45736650ceaa9713fc318b1a6fe9871b06476aba4c68afb0d3943b3075bb5e2a3d68d27cfe53bb4d6424d90b332ef8d7f4bc4d19dfc1fde954c128","ssdeep":"384:G9Tq4SIc0ZU9iUEDFmkRaFMEgl98Fp3nc5hUCLqBkRViQac:G9bSb0ZkXKtgMj98bSjq6VMc","tlshash":"c6a2c00b0675c7780b2d5bb594e42a6fd436d48451d21f7405f44cabd7e2ab4383eca9","first_seen":"2026-09-21T18:56:19.461503Z","last_seen":"2026-09-21T18:56:19.461503Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/inc/fonts/Lato-Regular.ttf","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.438Z","timestamp":1790016868438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /inc/fonts/Lato-Regular.ttf HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/assets/css/style-blue.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 75152\r\nlast-modified: Tue, 11 Oct 2022 09:25:21 GMT\r\netag: \"63453681-12590\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75152,"size_decoded":75604,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GPOS\", 15 names, Microsoft, language 0x409","md5":"122dd68d69fe9587e062d20d9ff5de2a","sha1":"e923c72eda5e50a87e18ff5c71e9ef4b3b6455a3","sha256":"e82542aed8293f49fc83c4aaea566b1f6b4fc7a9ab5da11e6fb9bc0973b5324b","sha512":"30c39f8e242efd6671b9ca59436db45ebffe5cc7f7dbc5a53fb21b399f2a52a9f2e68611b4241163a7de5ce934ad9dc9c6c9845e80bea7982ad6b6cda05dbc61","ssdeep":"1536:2Nwa1uUiFQAScR26iS0TFTn1HgUSE3iVfRVT:iwhmcR6bFxcNRVT","tlshash":"c273f709fa87b241ee3b1f38247e4327ab35f8382a1687af780e33359d561c155567ca","first_seen":"2023-04-07T15:31:35Z","last_seen":"2026-09-23T00:00:15.386789Z","times_seen":3881,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.castbox.fm/webstatic/js/page.playerpage.25bb3f91.js","fqdn":"s3.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"65.9.62.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.617Z","timestamp":1790016869617,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.castbox.fm","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 07 Sep 2026 00:00:00 GMT","end":"Tue, 23 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F3:F1:75:82:23:F0:56:69:87:36:1D:49:03:12:20:A9:09:04:E1:D7","sha256":"5F:D0:62:6F:D0:90:09:E2:6B:2F:4B:7C:CE:3C:68:1A:1D:F5:51:5F:C0:06:4A:AB:97:15:67:D6:AD:68:67:AD"}}},"request":{"raw":"GET /webstatic/js/page.playerpage.25bb3f91.js HTTP/1.1\r\nHost: s3.castbox.fm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castbox.fm/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ndate: Tue, 08 Sep 2026 15:34:13 GMT\r\nlast-modified: Sun, 16 Aug 2026 11:00:55 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\netag: W/\"8fce518192d8acab4d4389e69cf8f6a6\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a715c2ffe2054daa198dd54f02e95532.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P4\r\nx-amz-cf-id: nNBu9HQt5ds4Wxbj8NJkKttMjYmzFGwU9FVTlfwkxsXh3KGxJOo2sw==\r\nage: 1135217\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":244201,"size_decoded":70906,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8fce518192d8acab4d4389e69cf8f6a6","sha1":"3c4a7093df9fec6814d1482367d73c2d814d0912","sha256":"010c42bfd14cdc8f42126712d9af4757f52cb8c3946484591a5d51ac003a495f","sha512":"441594287465568ddaff4ead02a2fae39752901bd830351318590e3383a2405610cf6183357cbd878fc6f08ffc0bd37086404ded4309e6bed8d4281597fdb2fc","ssdeep":"6144:5RFaX8sd7R3CZYqBpACiEbqkNf360ibcV0UHKXq6O:5RFaX8sd7R3CZFBpACnbqkNSbcVvp","tlshash":"3d340988b1c6f09a47d76561803f620bf2ba6d48340dd940f237d9d47868a9da337f7a","first_seen":"2026-09-21T18:56:19.463928Z","last_seen":"2026-09-21T18:56:19.463928Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026ngs=1\u0026ibt=1\u0026tid=G-CESP3QW02J\u0026cid=642785499.1790016870\u0026gtm=45je69h0v9135632139za200zd9135632139xf1\u0026rcb=1\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=2\u0026tag_exp=115938466~115938469~118897920~118897930~120213116~120385422~120469145~120469153\u0026z=1534237463","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.963Z","timestamp":1790016869963,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:07:53 GMT","end":"Fri, 27 Nov 2026 08:07:52 GMT"},"fingerprint":{"sha1":"97:2F:A9:50:A0:A8:2C:4F:6E:C0:9D:21:4D:02:79:64:C0:F0:62:D4","sha256":"C8:54:87:97:69:D0:A5:F0:5F:98:26:CA:B6:C9:20:2A:B1:47:90:D7:D6:A1:A0:78:D4:F4:33:1C:E5:12:10:3C"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026ngs=1\u0026ibt=1\u0026tid=G-CESP3QW02J\u0026cid=642785499.1790016870\u0026gtm=45je69h0v9135632139za200zd9135632139xf1\u0026rcb=1\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=2\u0026tag_exp=115938466~115938469~118897920~118897930~120213116~120385422~120469145~120469153\u0026z=1534237463 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castbox.fm/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 21 Sep 2026 18:54:30 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":578,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-09-23T05:48:52.184225Z","times_seen":1075570,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":4,"connect":15,"send":0,"wait":106,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/assets/js/app.js","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.032Z","timestamp":1790016868032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /assets/js/app.js HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6573\r\nlast-modified: Fri, 11 Dec 2020 21:30:24 GMT\r\netag: \"5fd3e4f0-19ad\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6573,"size_decoded":7021,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"55d59bf70293d56908d229571b71095d","sha1":"ee004865ed846c1f05b300d6584e266568a85c5a","sha256":"228ac10e1fea76d021d4e9642d3051b4bbf3e72f42118f28189b76c72121cb9e","sha512":"bb11c4443897fb4e523955bb9cfea0f33d6036aafbf9f42dc093fbb7599a01fca39417bd7f9db1489a60efa256e05828593b4bfaecc0aea040bdaa4fcb123476","ssdeep":"96:z2jaJP9Q97VjKi4Ki9D5vikxWEq+1Ynqvl5URhAECDgYv93AgZChexvsz+0fE:z+aLQ95j49D5vQg1Ye5DECDaGCA9e+cE","tlshash":"08d13e1cb4f2262445fb717f8b3f51023b26a01b614ae904ba6c4ed41fd425cb6e3f99","first_seen":"2026-03-24T20:25:10.881985Z","last_seen":"2026-09-21T18:56:19.46725Z","times_seen":4,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"analytics.litera-bavarica.de/matomo.php?idsite=1\u0026rec=1","fqdn":"analytics.litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.043Z","timestamp":1790016868043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /matomo.php?idsite=1\u0026rec=1 HTTP/1.1\r\nHost: analytics.litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\ncache-control: no-store\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PHP/8.4.24, PleskLin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.4.24","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":43,"size_decoded":310,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-09-23T06:14:17.014916Z","times_seen":114408,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":26,"connect":32,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"analytics.litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"analytics.litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"analytics.litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.castbox.fm/webstatic/js/page.vendors~audiobooks~audiobooks.genre~categories~ch~channellist~claim~claim.failed~claim.link_claimed~~48565954.32df6dda.js","fqdn":"s3.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"65.9.62.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.610Z","timestamp":1790016869610,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.castbox.fm","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 07 Sep 2026 00:00:00 GMT","end":"Tue, 23 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F3:F1:75:82:23:F0:56:69:87:36:1D:49:03:12:20:A9:09:04:E1:D7","sha256":"5F:D0:62:6F:D0:90:09:E2:6B:2F:4B:7C:CE:3C:68:1A:1D:F5:51:5F:C0:06:4A:AB:97:15:67:D6:AD:68:67:AD"}}},"request":{"raw":"GET /webstatic/js/page.vendors~audiobooks~audiobooks.genre~categories~ch~channellist~claim~claim.failed~claim.link_claimed~~48565954.32df6dda.js HTTP/1.1\r\nHost: s3.castbox.fm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castbox.fm/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ndate: Sun, 13 Sep 2026 07:38:48 GMT\r\nlast-modified: Mon, 10 Aug 2026 11:33:24 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\netag: W/\"9f52a8e285d225a1d3bf50710aeec9c6\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a715c2ffe2054daa198dd54f02e95532.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P4\r\nx-amz-cf-id: Xa4u6Eh4BKZmB4R3EYPWxnziXPD3y_Z90C2hhnaAJqdA2fYUd3aGSw==\r\nage: 731742\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":25969,"size_decoded":9304,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25969), with no line terminators","md5":"9f52a8e285d225a1d3bf50710aeec9c6","sha1":"2b1013a1d489d255194cf5bba87be72f7178b73d","sha256":"7d4b4e3d229f3678369788aa4ead7a10ae6072c1fd0c268ac3b3267b7f7c29b0","sha512":"a0260889998b9070164d3519d335dc937b45b84494b1cca6e5aa40a15072a357765a0b4c157b69004e2ce1dad2a89a77be96b35528344a4eb460f0de28fea2ae","ssdeep":"384:L6Zf9qPOIFZpz57K8+k6YbIN/4HJCWpwC3uUP5L3fG82GAU71CXJzZplN:WZf9qPO0z5D+wIiHUIlepGNCXR","tlshash":"12c2f8c4ba8fb0b547e31272847f520eb33a26a9b44dc418f032e5d538b995d6127fad","first_seen":"2026-09-21T18:56:19.468908Z","last_seen":"2026-09-21T18:56:19.468908Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"castbox.fm/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"104.20.29.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.635Z","timestamp":1790016869635,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"castbox.fm","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 11:26:23 GMT","end":"Fri, 11 Dec 2026 12:26:17 GMT"},"fingerprint":{"sha1":"76:86:6A:D4:8C:65:FB:6B:60:55:3C:F2:F4:57:BA:17:C7:B9:CF:69","sha256":"D9:82:7F:4F:85:91:12:9A:53:8E:21:19:76:81:B7:EB:21:96:6D:77:6A:56:DC:F1:CC:DE:07:56:0E:12:10:55"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: castbox.fm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Mon, 21 Sep 2026 18:54:29 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/330e41bb475c/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: a3eb475b3afbb28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"everest.castbox.fm/data/episodes/overview?cids=2396830\u0026web=1\u0026m=20260921\u0026n=12f387024363714dd1f53262895f39fe\u0026r=1","fqdn":"everest.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"172.66.159.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.750Z","timestamp":1790016869750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"castbox.fm","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 11:26:23 GMT","end":"Fri, 11 Dec 2026 12:26:17 GMT"},"fingerprint":{"sha1":"76:86:6A:D4:8C:65:FB:6B:60:55:3C:F2:F4:57:BA:17:C7:B9:CF:69","sha256":"D9:82:7F:4F:85:91:12:9A:53:8E:21:19:76:81:B7:EB:21:96:6D:77:6A:56:DC:F1:CC:DE:07:56:0E:12:10:55"}}},"request":{"raw":"OPTIONS /data/episodes/overview?cids=2396830\u0026web=1\u0026m=20260921\u0026n=12f387024363714dd1f53262895f39fe\u0026r=1 HTTP/1.1\r\nHost: everest.castbox.fm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: user-agent,x-access-token,x-access-token-secret,x-castbox-ua,x-suid,x-uid,x-web\r\nReferer: https://castbox.fm/\r\nOrigin: https://castbox.fm\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 21 Sep 2026 18:54:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nallow: HEAD, OPTIONS, GET\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://castbox.fm\r\naccess-control-allow-methods: GET, POST, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, User-Agent, X-Requested-With, Content-Type, X-CastBox-UA, X-Web, X-Uid, X-Access-Token, X-Access-Token-Secret, X-Box-Access-Token, X-Custom-Token, X-Admin, X-Channel, X-Suid, X-AB-Test\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3eb475c0b5b35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":648,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":1,"connect":3,"send":0,"wait":281,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/assets/js/datenschutz.js","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.036Z","timestamp":1790016868036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /assets/js/datenschutz.js HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 479\r\nlast-modified: Fri, 11 Dec 2020 21:30:24 GMT\r\netag: \"5fd3e4f0-1df\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":479,"size_decoded":925,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"6d7f864ce737165b0c49d031e91233cb","sha1":"2b46711a37eab941fbef31d03b3c8c7852babba6","sha256":"9d4086b36ab89a276f5f5fd07ae88dc35e0ff508233bc7accc6196e679a6440a","sha512":"df8e784bd2f95a4ffcec2f01fe766e2f0e0cc35a067af9966a66ec5a494bdcb748253f1abbd9b7d74e0a8d9427c3362a9db5aa3a53645cf5048212d483ac05cb","ssdeep":"","tlshash":"43f025057d582829b0af37369e6643d52d15d55630f0d616253eea255e01c03d47d9e3","first_seen":"2026-04-16T06:10:21.168629Z","last_seen":"2026-09-21T18:56:19.470636Z","times_seen":4,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/images/logo/heimatpflege_3.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.051Z","timestamp":1790016868051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /images/logo/heimatpflege_3.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5837\r\nlast-modified: Thu, 15 Jul 2021 15:43:12 GMT\r\netag: \"60f05790-16cd\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5837,"size_decoded":6273,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x77, components 3","md5":"ef8b7afed5f080ff5b9c2f2f2e8bfb86","sha1":"6aeaecc0df721d5962b0245499f1fcbb59840024","sha256":"046900c37cf992c8917f2863648ef006a607e03aaed4a3541362171918956daf","sha512":"04f30442a9a7576a7183425a7d49b4d36b608a9c5bb2a41f618f1b022669ce1eadc61c896f93aa2c6bec452ad63d156e728bd7f085a9f3fdea54ece875f76236","ssdeep":"96:c2XgkS2ZFtqsYUBpJrXZXEAR+WCYdr07PyhdWqV2NkwcM4GGloYffZ99YslffV:pLtqsYUpNpXEAk1Yd076/WovRbGGloYz","tlshash":"a5c18ed9b9774806f808e9ff12d114161b392794ede4fc1f68e88c13b6e10e2d14c6ab","first_seen":"2026-07-17T09:38:58.722946Z","last_seen":"2026-09-21T18:56:19.472667Z","times_seen":3,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/images/logo/mf_2.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.056Z","timestamp":1790016868056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /images/logo/mf_2.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3938\r\nlast-modified: Wed, 24 Feb 2021 16:04:58 GMT\r\netag: \"6036792a-f62\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3938,"size_decoded":4373,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x127, components 3","md5":"b8a80225968cb189f66220f1d626cf3b","sha1":"fc0505f8f33bcd0044f0aca8fd5b0b48b8cdbd72","sha256":"1f8e71934a77202404c9bc6116e7c34d3c57c99ecc9046884f3d663a32efcdec","sha512":"bea958d4669f1fad5474e4989ae57b9695e9230b1bd1f19f28525623af78efdfc52da5811facdb7a34c363833fa3544778292d6d9f856796b09a4375a1d8279c","ssdeep":"","tlshash":"a6814b0bf59159a2daf55d7a66eba2aff50307d4d180e09038c1c017f0e53b05a4d6af","first_seen":"2026-07-17T09:38:58.695578Z","last_seen":"2026-09-21T18:56:19.473624Z","times_seen":3,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/assets/fonts/fontawesome-webfont.woff2?v=4.6.3","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.439Z","timestamp":1790016868439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /assets/fonts/fontawesome-webfont.woff2?v=4.6.3 HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://litera-bavarica.de/assets/css/vendors.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 71896\r\nlast-modified: Fri, 11 Dec 2020 21:30:23 GMT\r\netag: \"5fd3e4ef-118d8\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71896,"size_decoded":72334,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 71896, version 4.393","md5":"e6cf7c6ec7c2d6f670ae9d762604cb0b","sha1":"97e438cc545714309882fbceadbf344fcaddcec5","sha256":"7dacf83f51179de8d7980a513e67ab3a08f2c6272bb5946df8fd77c0d1763b73","sha512":"dd945face918edf20b7283b7416ae7b3735269945e3f3e379e770425024c1de1fcdc7cfb952381d295d0d1f58c8ab191fd29030f2051d10501557bd7bfbe3658","ssdeep":"1536:tA4xrPyfyECsyz2wCjYfhO/ORzc7erabg5Z06GEQMo:t3jayEC/2/OI/gcq+bg5C6G7","tlshash":"756302f87e71b01d5a306f74e56730e2491c9283e79593f8a8297cb681b2f493742c7a","first_seen":"2023-04-05T09:22:06Z","last_seen":"2026-09-23T05:47:41.626913Z","times_seen":43383,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/assets/img/favicon.png","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.976Z","timestamp":1790016868976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /assets/img/favicon.png HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4; _ga_Y2EEPJE4W8=GS2.1.s1790016868$o1$g0$t1790016868$j60$l0$h0; _ga=GA1.1.590132784.1790016869\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 15273\r\nlast-modified: Mon, 22 Jun 2026 11:21:48 GMT\r\netag: \"6a391acc-3ba9\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":15273,"size_decoded":15709,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"6581bb8f379e082607ccab39cb264189","sha1":"2e86dd6fe6f244ad99a49bdf033f7ea220cec0c7","sha256":"92a2f1b55285d1827c9caeba6db1bd466d40ef4e235943cab4312db5fc76d211","sha512":"4b3406cd7c0e239b5c351dc75b0b83e2f929eb64331e990643a6d75daf66465572dd6741de8d54896e2918c84ba7ff440483ae3d72a5a238df426fb23cf310df","ssdeep":"384:wMQrvZI00IhqCwsWEKPGmWLX+xKWEt+7SwgN7VsyqYRifOB6b:REvEVEKPGmWLJtiSvXRi2B6b","tlshash":"6562df7927557063e2b6492e2306dcf7ecb78604877216db88e3de587c011ab784e0ca","first_seen":"2026-07-17T09:38:58.699946Z","last_seen":"2026-09-21T18:56:19.476723Z","times_seen":3,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.castbox.fm/webstatic/js/page.vendor.28c22e93.js","fqdn":"s3.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"65.9.62.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.277Z","timestamp":1790016869277,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.castbox.fm","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 07 Sep 2026 00:00:00 GMT","end":"Tue, 23 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F3:F1:75:82:23:F0:56:69:87:36:1D:49:03:12:20:A9:09:04:E1:D7","sha256":"5F:D0:62:6F:D0:90:09:E2:6B:2F:4B:7C:CE:3C:68:1A:1D:F5:51:5F:C0:06:4A:AB:97:15:67:D6:AD:68:67:AD"}}},"request":{"raw":"GET /webstatic/js/page.vendor.28c22e93.js HTTP/1.1\r\nHost: s3.castbox.fm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castbox.fm/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ndate: Mon, 07 Sep 2026 05:04:23 GMT\r\nlast-modified: Mon, 10 Aug 2026 11:33:24 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\netag: W/\"3282345faf8a1dbe0b516f3e3cc3df9f\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a715c2ffe2054daa198dd54f02e95532.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P4\r\nx-amz-cf-id: OjALrwMrXGJODuyeSh169LHcHnmLTgNXX1kUE62Bu3kALcYpDPUJpg==\r\nage: 1259406\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":220961,"size_decoded":51784,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3282345faf8a1dbe0b516f3e3cc3df9f","sha1":"1333f8ac1d2a843407924cd71bc19a71ad599baa","sha256":"1ccfd22f1268b0e2e8f8bc0cc6487e912d839ea449e5f53399888e76b476fc4e","sha512":"8882859075b059768cda99de2928995dbfa74ee4f933fb2c268a978fdd3bd3ddebfe0559c44478a964157ba95e7f8ca930c403720ca9d42510bf0db7465e1a38","ssdeep":"3072:4+1ZTtM4seM4OdNt9XcMwqKIihfusMK+luRocSuebbBvR:4jNt9XcMwqKIkusMuanBvR","tlshash":"582409c9adc2afed1fb613d2813b150a72381a1b588c8710fd35f45f79a981c12eba75","first_seen":"2026-09-21T18:56:19.477494Z","last_seen":"2026-09-21T18:56:19.477494Z","times_seen":1,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":27,"connect":8,"send":0,"wait":10,"receive":0,"ssl":239},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/assets/css/preload.css","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.017Z","timestamp":1790016868017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /assets/css/preload.css HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 754\r\nlast-modified: Fri, 11 Dec 2020 21:30:23 GMT\r\netag: \"5fd3e4ef-2f2\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":754,"size_decoded":1186,"mime_type":"text/css","magic":"ASCII text","md5":"5b96ebc6c2de6d05b90e9821cfe17619","sha1":"f4dbe68744df4cca2332585ee25060ab0a38db0d","sha256":"f66690e60322433eaa045c726fe11e649d3fa38835145090256160de468bd320","sha512":"b34b223aa30c7e788145fd756340501cb6334e8f497e22cd412a3e05daf5b6e796189c29b268474374bb1f505c12958804b268e0763de881326064351851600f","ssdeep":"","tlshash":"1301d5708493685ef30747271a2891545b75500f8b96996d3b1da2bc8f474e4a1677d0","first_seen":"2026-06-16T07:31:34.995142Z","last_seen":"2026-09-21T18:56:19.479196Z","times_seen":7,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/literatur/images/978/97838/9783839281352_2.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.410Z","timestamp":1790016868410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /literatur/images/978/97838/9783839281352_2.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31683\r\nlast-modified: Fri, 28 Aug 2026 11:06:19 GMT\r\netag: \"6a916bab-7bc3\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31683,"size_decoded":32120,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 300x491, components 3","md5":"ecd456e45a9d3491bd94c3b49df52225","sha1":"1d7117ff2927034c3766787a30d90e90fbfb1194","sha256":"e227049874924e5495f7fe642f1b61d445b557c5db3d56110dacad157216cace","sha512":"e09fc554f1ef5e27dfa99d19fd7652e650781966c1e8cc77bb72632078f755905ab371431678c8be44fb831c483a73cb871297d89fbe77a09dec069bf3ae6f20","ssdeep":"768:GoOYeKIIX2iMra59GiGOBkLvW4bcKP68aWUEvA:jztIImtrazGivBl4bhP673EvA","tlshash":"0de2e1bba298700a0b3340b4cf92315767263516ebbb763577b2bc02d2e59b6581768c","first_seen":"2026-09-21T18:56:19.483037Z","last_seen":"2026-09-21T18:56:19.483037Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/literatur/images/978/97839/9783944810089_2.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.415Z","timestamp":1790016868415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /literatur/images/978/97839/9783944810089_2.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1876305\r\nlast-modified: Wed, 19 Oct 2022 07:27:52 GMT\r\netag: \"634fa6f8-1ca151\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1876305,"size_decoded":1876746,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4]","md5":"4721edf53e2ff2bba9675e5d2b63d611","sha1":"072a0d37735e84edc74ad8f6d22e86018cc2da9e","sha256":"c4e9311b3f95acf0adfc49322d74e8f720297b8a2d41fb5aaf9d68f03a79d663","sha512":"b48ac93fc01ea68c1a6799877bcd4383f223e9d6788932c60113e946a3a1630da660af652932968e128ae9858d6c29e935d924690ee2d1bc84680a277907fe3c","ssdeep":"24576:eV50xXm9OFRgYGh2sk0FN1A9p2Kdrs7QDV5FPGg/UH:+gXmw36jj1A9pVY7QxrPWH","tlshash":"ef251250b709d249e915e0b50c07dfaabd4cbd88ac01e513b9f6f73f987b6492d8321a","first_seen":"2026-09-21T18:56:19.485055Z","last_seen":"2026-09-21T18:56:19.485055Z","times_seen":1,"resource_available":false,"data":null}},"time_used":959,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":922,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.castbox.fm/webstatic/images/des_btn.2466a7a5.svg","fqdn":"s3.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"65.9.62.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.768Z","timestamp":1790016869768,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.castbox.fm","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 07 Sep 2026 00:00:00 GMT","end":"Tue, 23 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F3:F1:75:82:23:F0:56:69:87:36:1D:49:03:12:20:A9:09:04:E1:D7","sha256":"5F:D0:62:6F:D0:90:09:E2:6B:2F:4B:7C:CE:3C:68:1A:1D:F5:51:5F:C0:06:4A:AB:97:15:67:D6:AD:68:67:AD"}}},"request":{"raw":"GET /webstatic/images/des_btn.2466a7a5.svg HTTP/1.1\r\nHost: s3.castbox.fm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castbox.fm/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ndate: Mon, 31 Aug 2026 04:02:59 GMT\r\nlast-modified: Tue, 21 May 2019 06:03:17 GMT\r\nserver: AmazonS3\r\ncontent-encoding: gzip\r\netag: W/\"2466a7a5a60d0af7d084a67cfecce341\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a715c2ffe2054daa198dd54f02e95532.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P4\r\nx-amz-cf-id: rfuC4OmbjgDw03X3utg398PbTf8PxbG5m6o_OB7IK6V6AtSbxuAuAw==\r\nage: 1867891\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1728,"size_decoded":1752,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2466a7a5a60d0af7d084a67cfecce341","sha1":"637f6945b48bfa87ac1f4c8dad43fb239734e8a0","sha256":"0de0323decf6695d61b0281c25815ea009c2d9e333b972a8f9bd3f2f78ba36f9","sha512":"a7f9c4b4494cd80144ff78c589d99b254e4f76423385cd4a8940f6ef3788da99c3f2b8324b3f60431de30aca54dbccbf891809782ec582e517d72a5177ab045f","ssdeep":"","tlshash":"6e31b65cf889dc8e9fed0474f43dbea2a5d2ec84c9ed12aca1841915f1c4b818f5ca45","first_seen":"2023-09-16T06:33:25Z","last_seen":"2026-09-21T18:56:19.48738Z","times_seen":8,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/assets/js/syntaxhighlighter/shBrushJScript.js","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.030Z","timestamp":1790016868030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /assets/js/syntaxhighlighter/shBrushJScript.js HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1649\r\nlast-modified: Fri, 11 Dec 2020 21:30:24 GMT\r\netag: \"5fd3e4f0-671\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1649,"size_decoded":2096,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"cdae918e2156986f76ada6d301c45f27","sha1":"7c8b34f14f4caf9cf2b6ac3315f7bacd95d69e3c","sha256":"3f534a9cb3030831626f875de5e69f72e1cc020db2761b6ac8a0186ef4fff512","sha512":"c5c93dc8a11b8b7ae1403ee2fe1a60e37c7c67686da1ec804e068b1964715844c0715cdb23b6f0ed7b36a91d06c5c0419c8748478b889ffa5623b462beabba74","ssdeep":"","tlshash":"4f3136995f2d705c5fd054b31449d14b9f2987f333c6c44dba4c98be6b5176e0129e31","first_seen":"2023-03-07T12:12:00Z","last_seen":"2026-09-22T21:23:35.389481Z","times_seen":267,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","fqdn":"castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"104.20.29.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.037Z","timestamp":1790016868037,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"castbox.fm","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 11:26:23 GMT","end":"Fri, 11 Dec 2026 12:26:17 GMT"},"fingerprint":{"sha1":"76:86:6A:D4:8C:65:FB:6B:60:55:3C:F2:F4:57:BA:17:C7:B9:CF:69","sha256":"D9:82:7F:4F:85:91:12:9A:53:8E:21:19:76:81:B7:EB:21:96:6D:77:6A:56:DC:F1:CC:DE:07:56:0E:12:10:55"}}},"request":{"raw":"GET /app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1 HTTP/1.1\r\nHost: castbox.fm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 21 Sep 2026 18:54:29 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nx-ratelimit-limit: 75\r\nx-ratelimit-remaining: 74\r\nx-ratelimit-reset: 1790017049\r\nx-release-sha: dev\r\nx-ssr-bot-lite: OFF\r\nvary: Accept-Encoding\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=12,cfOrigin;dur=1098\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a3eb47516da4b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":12733,"size_decoded":4943,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6801)","md5":"6ba64f2daedc761e66719c3d472c451d","sha1":"f5df48e2f6187f5fc04cc6c4574b89f82c3dee88","sha256":"5d689773caf16455cc3bb838d7c97488af39c5168b178c06ec9fc16fe7899e1e","sha512":"5f428c8d75db43d80d289c5485c1be4fd8de78b53ebcad9cd4410395f4dc7c5f467e946902dea373da6ea7dcf3df39d7b3059cadfc06d8f28b8fcb7f2359764f","ssdeep":"384:LU8ShYKalTZ+es579xczVhaJ1S2nx/C+T:nnLQ9xH1zx/C6","tlshash":"4a42e7fea97048184a6a6059d46ff74da3108f17f5143c21ea9c0d245cc7ffa80a7aab","first_seen":"2026-09-21T18:56:19.490869Z","last_seen":"2026-09-21T18:56:19.490869Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1142,"timings":{"blocked":-1,"dns":7,"connect":1,"send":0,"wait":1118,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.castbox.fm/app/castbox/static/css/slick.min.css","fqdn":"s3.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"65.9.62.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.272Z","timestamp":1790016869272,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.castbox.fm","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 07 Sep 2026 00:00:00 GMT","end":"Tue, 23 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F3:F1:75:82:23:F0:56:69:87:36:1D:49:03:12:20:A9:09:04:E1:D7","sha256":"5F:D0:62:6F:D0:90:09:E2:6B:2F:4B:7C:CE:3C:68:1A:1D:F5:51:5F:C0:06:4A:AB:97:15:67:D6:AD:68:67:AD"}}},"request":{"raw":"GET /app/castbox/static/css/slick.min.css HTTP/1.1\r\nHost: s3.castbox.fm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castbox.fm/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ndate: Sat, 19 Sep 2026 02:13:44 GMT\r\nlast-modified: Tue, 15 May 2018 09:45:35 GMT\r\nserver: AmazonS3\r\ncontent-encoding: gzip\r\netag: W/\"0d6ca18ef0a22b73a85f662e4ff167e4\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a715c2ffe2054daa198dd54f02e95532.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P4\r\nx-amz-cf-id: 7Folb4OOyPUD9y_HiVbUJhUEEntmH2TKYR7tYPvoL4pPCkDk_2LZtw==\r\nage: 232846\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3554,"size_decoded":1556,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (2277)","md5":"0d6ca18ef0a22b73a85f662e4ff167e4","sha1":"ded9433a22ffc85ec5ed5aa9382b16540708db04","sha256":"06e4d249e7f9c78e8b23b0305ab09dafb0016848b83e0197b728ebaa303c45c0","sha512":"0d36dda2d777707a001b1095ef6fb222b2e876fb85efda3508b07ede4e8775fad51d4961d527f85013aacadb86f94940e5ef83506e98cf0d554709c7cc8777b5","ssdeep":"","tlshash":"7e7132684192a5ca0027d3206bd3d68530c7f6137a321be9f66e431cc4ce0ac2fd8b97","first_seen":"2025-12-16T04:46:12.713663Z","last_seen":"2026-09-21T18:56:19.49241Z","times_seen":6,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":31,"connect":11,"send":0,"wait":12,"receive":0,"ssl":238},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.castbox.fm/webstatic/js/page.vendors~audiobooks~audiobooks.genre~castbox.main~categories~ch~channellist~claim~claim.failed~claim.~b62a876c.5297976c.js","fqdn":"s3.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"65.9.62.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.609Z","timestamp":1790016869609,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.castbox.fm","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 07 Sep 2026 00:00:00 GMT","end":"Tue, 23 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F3:F1:75:82:23:F0:56:69:87:36:1D:49:03:12:20:A9:09:04:E1:D7","sha256":"5F:D0:62:6F:D0:90:09:E2:6B:2F:4B:7C:CE:3C:68:1A:1D:F5:51:5F:C0:06:4A:AB:97:15:67:D6:AD:68:67:AD"}}},"request":{"raw":"GET /webstatic/js/page.vendors~audiobooks~audiobooks.genre~castbox.main~categories~ch~channellist~claim~claim.failed~claim.~b62a876c.5297976c.js HTTP/1.1\r\nHost: s3.castbox.fm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castbox.fm/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ndate: Mon, 07 Sep 2026 07:46:54 GMT\r\nlast-modified: Mon, 10 Aug 2026 11:33:24 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\netag: W/\"b8afd7cae97370cf4b07ff9e305c085b\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a715c2ffe2054daa198dd54f02e95532.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P4\r\nx-amz-cf-id: DweZ4Htcm_yzY2I5WXF0lhFPI4GIR9V7Py-mFranVzoO2obEvWabHw==\r\nage: 1249656\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":93262,"size_decoded":29335,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b8afd7cae97370cf4b07ff9e305c085b","sha1":"c591624eb43024c9d5ac3347b037263786655cd6","sha256":"2842e2e5912275576ad91242aeea4ceddbb4c7b92aa4c5e116cb558d373c960a","sha512":"2ab1cd33296f347348688b1b4d9887ebac50161eb8cc258e77676a92674386a6100980c7cfd1d75f55840ada6d0033d2ddc3fc5ada96c84b7b4c109b9f8b5de0","ssdeep":"1536:oaEHRU+1ykfkxBtn2+kmFacwPGgaqkosV4wgINJg:oaEHRU+UkfkxBt2+kmMcA1kozh","tlshash":"b39319ccb795b01143a362f8501fa40ff2799919ac0c4568f351e8f528bdd8eaa67f78","first_seen":"2026-09-21T18:56:19.49373Z","last_seen":"2026-09-21T18:56:19.49373Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"castbox.fm/cdn-cgi/challenge-platform/h/g/scripts/jsd/330e41bb475c/main.js?","fqdn":"castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"104.20.29.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.648Z","timestamp":1790016869648,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"castbox.fm","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 11:26:23 GMT","end":"Fri, 11 Dec 2026 12:26:17 GMT"},"fingerprint":{"sha1":"76:86:6A:D4:8C:65:FB:6B:60:55:3C:F2:F4:57:BA:17:C7:B9:CF:69","sha256":"D9:82:7F:4F:85:91:12:9A:53:8E:21:19:76:81:B7:EB:21:96:6D:77:6A:56:DC:F1:CC:DE:07:56:0E:12:10:55"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/330e41bb475c/main.js? HTTP/1.1\r\nHost: castbox.fm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 21 Sep 2026 18:54:29 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3eb475b4b3eb28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21246,"size_decoded":9905,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (21246), with no line terminators","md5":"c5e02967c7b8882c691de95cfd948ec5","sha1":"9384d04b31a1460fd498e30ff4a5a66e85b25f5c","sha256":"9e05088c4b21a3e1fb24a8662db4d94610087051f347a1fb69e184f1b9799e05","sha512":"d239698b637505c9c3901bfa999ddafd81a1fdcda72f705a589d28746819771ef54632ff24f2fc66130c5e5a91304fb3789170a1f2a8bf2bcc980295e4dfecb3","ssdeep":"384:pcLVnz1V5i8DQZup3FXgv1k3mepYzq1zRWY5tdz3qOjePYeoO9:C3Vauk1k3IyRLX1VjoYeL9","tlshash":"4a9232ca3dd6b44d9372747404a770cbb12ebd44a0290e45cd2692e87afd6f8712bb9c","first_seen":"2026-09-21T18:56:19.496678Z","last_seen":"2026-09-21T18:56:19.496678Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.castbox.fm/e3/82/3c/fb4720632aa72cc43df5603b24fe14f259_scaled_v1_400.jpg","fqdn":"s3.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"65.9.62.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.758Z","timestamp":1790016869758,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.castbox.fm","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 07 Sep 2026 00:00:00 GMT","end":"Tue, 23 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F3:F1:75:82:23:F0:56:69:87:36:1D:49:03:12:20:A9:09:04:E1:D7","sha256":"5F:D0:62:6F:D0:90:09:E2:6B:2F:4B:7C:CE:3C:68:1A:1D:F5:51:5F:C0:06:4A:AB:97:15:67:D6:AD:68:67:AD"}}},"request":{"raw":"GET /e3/82/3c/fb4720632aa72cc43df5603b24fe14f259_scaled_v1_400.jpg HTTP/1.1\r\nHost: s3.castbox.fm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castbox.fm/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\ncontent-length: 22194\r\ndate: Sat, 19 Sep 2026 07:30:45 GMT\r\nlast-modified: Fri, 29 Nov 2019 15:05:15 GMT\r\netag: \"e17714cd891bc340aacf4ec6b4e4feee\"\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a715c2ffe2054daa198dd54f02e95532.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P4\r\nx-amz-cf-id: b9xeLALOOyyufaRzvz2uI2AqSIhsb9OdcYgRv6YrFEE8Um86RzTt-g==\r\nage: 213825\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":22194,"size_decoded":22652,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x400, components 3","md5":"e17714cd891bc340aacf4ec6b4e4feee","sha1":"294b25dffe4fee8252c7b29488c801b53a776487","sha256":"b77235481c31e2a772c1a4cba1e1fae8d1d05020f913971ddf1944a8be6ba933","sha512":"ec3ec8f34e6e18003147227919f12bbb247b84cd2c6ddfedd5abbd3e3f7ebe9ff2230886e4941025f3fb3617afa83b6c5817be2f377a0be8ee8a026530299cd8","ssdeep":"384:eCTDOsDw44sa+4XfJYYlxeLJP/f5lNVTAEVuKcrYHJwN4wgJRAOXv28Cw:eC9MO4XfiK01BHVTARKciGN4wgQOXv2Q","tlshash":"67a2af178816d38217698ed83c070ded1b163f5da9d0bafe25e10e9f2da0db748ac029","first_seen":"2026-09-21T18:56:19.499269Z","last_seen":"2026-09-21T18:56:19.499269Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/images/logo/logo_3.png","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.045Z","timestamp":1790016868045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /images/logo/logo_3.png HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 3810\r\nlast-modified: Fri, 29 Jan 2021 13:48:41 GMT\r\netag: \"60141239-ee2\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3810,"size_decoded":4244,"mime_type":"image/png","magic":"PNG image data, 300 x 40, 8-bit colormap, non-interlaced","md5":"f218ff9f72566b811e2725ab95588b52","sha1":"0ab1cb4f15922bc54084c4c0f803418be80193b2","sha256":"21dc6635130a79e27b7248596a7ed6c8d6f8e0ecc51d2995ca897ac51090b88a","sha512":"2dc704fca0e4e9be4cb63243489c539a60a7e1660602df5f8927a5b800ce2b44d460ba9f9b3505c7dfab3de753b51f42b6921a79108e9a0521b4a7d3007119b9","ssdeep":"","tlshash":"44714de9e5806d4190b8f69628f581e399430ec0eed0fc49a4ee7c53177e5540c99ddb","first_seen":"2026-06-16T07:31:34.969365Z","last_seen":"2026-09-21T18:56:19.502557Z","times_seen":6,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/assets/img/rampenlicht.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.407Z","timestamp":1790016868407,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /assets/img/rampenlicht.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23673\r\nlast-modified: Mon, 25 Oct 2021 06:40:47 GMT\r\netag: \"6176516f-5c79\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":23673,"size_decoded":24110,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2200x465, components 3","md5":"e36adcd1cf3b78c8ac9f111677b4f592","sha1":"d8baca1677aa91be48007dbcf0d2a1c833243303","sha256":"ba9958b32d0a9da877ac24356ad405edd4020b4aa77bda03a9f41f7aba85b66a","sha512":"5304776ea0f24e5d9d9f1f78aeec700459436e8ce272fd3ce8ac4efc6c852212c187bbf5d68b57a0944e75ee6becf645c979923c01df0006175f480ec5287f3d","ssdeep":"384:Bl9XVkzgvJWK5gcvmEIDgKOO7CLaDblkXS/9ApWLVQ9g/iKrAeW2aIR:JFkzgj5RldOu2iXS/9AoJPqKlW2aIR","tlshash":"4db2af6bab10c242d4445bf458f3eb5db2126263d368ef91f2c8cd671ae1d741cb288b","first_seen":"2026-09-21T18:34:21.587058Z","last_seen":"2026-09-21T18:56:19.503426Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/literatur/images/978/97839/978394386681_2.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.416Z","timestamp":1790016868416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /literatur/images/978/97839/978394386681_2.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12272\r\nlast-modified: Fri, 05 Nov 2021 11:52:54 GMT\r\netag: \"61851b16-2ff0\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":12272,"size_decoded":12709,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x416, components 3","md5":"a643a5482ff777d868e545171d1c0430","sha1":"7ba6a54901778aa65e68b0bcc74238aeedaff33b","sha256":"8cb276a385c457becbb913c195624efe8bcda8660b86b6be2ce9b74bea4b333b","sha512":"21c37fbc518db1432b5e4b0f575c7cb214af2972bf4a4b2f21725c3c88b55e7181e113f6f49c5b2b8e4e9a3deb2255546f728485c95704d1d4533227023e9490","ssdeep":"192:AgH4tXTKd6fN1vyP8NJH/E8ZR17Z2zo4uGeKxYyi4BvhNlH2ZkbbbbbSkbbbbbbH:pH4tbfD6KHM8ZjsBuo1ioXFInY","tlshash":"e242bf07fe7150a7b94cda7a1a8bbd2c316311452a53ca681c9d407fdfdc03a8c279d6","first_seen":"2026-09-21T18:56:19.504231Z","last_seen":"2026-09-21T18:56:19.504231Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.castbox.fm/webstatic/images/player_sticker_bg.d9d306ff.png","fqdn":"s3.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"65.9.62.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.791Z","timestamp":1790016869791,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.castbox.fm","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 07 Sep 2026 00:00:00 GMT","end":"Tue, 23 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F3:F1:75:82:23:F0:56:69:87:36:1D:49:03:12:20:A9:09:04:E1:D7","sha256":"5F:D0:62:6F:D0:90:09:E2:6B:2F:4B:7C:CE:3C:68:1A:1D:F5:51:5F:C0:06:4A:AB:97:15:67:D6:AD:68:67:AD"}}},"request":{"raw":"GET /webstatic/images/player_sticker_bg.d9d306ff.png HTTP/1.1\r\nHost: s3.castbox.fm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s3.castbox.fm/webstatic/css/playerpage.f1f20f54.chunk.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1366\r\nlast-modified: Tue, 12 Mar 2019 07:58:43 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 11 Sep 2026 14:03:11 GMT\r\netag: \"d9d306ff9fc9607e0ddcd4d206372784\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a715c2ffe2054daa198dd54f02e95532.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P4\r\nx-amz-cf-id: tQHIiilQYSBqWnO3x2iBL0b4Ok_58TMjsq-r5j-1ZglpjY3WQlNfdg==\r\nage: 881483\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1366,"size_decoded":1845,"mime_type":"image/png","magic":"PNG image data, 273 x 40, 8-bit colormap, non-interlaced","md5":"d9d306ff9fc9607e0ddcd4d206372784","sha1":"adad3a8d7ad7df435197efabbb135c93a9291dea","sha256":"645f2a9fe492e72b589090c521abdcc569783985f06384f4ba1e1bde2d3a7744","sha512":"772769fda7eb13a3847d1d210a561728ba7a4d3bdd7e90f7eef2a73d8495c0a161886e8b72effbe998c1f5e95f2a2969fb9f5e958f90fa078060e520871e89de","ssdeep":"","tlshash":"5321a88cc67bfd7fd9e2121356e82355c660ed7f194b4914e5173e1099f3708e944291","first_seen":"2023-05-09T07:58:38Z","last_seen":"2026-09-21T18:56:19.505748Z","times_seen":11,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/literatur/images/Z00/Z0000/Z000000031_2.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.421Z","timestamp":1790016868421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /literatur/images/Z00/Z0000/Z000000031_2.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20664\r\nlast-modified: Fri, 05 Nov 2021 11:54:20 GMT\r\netag: \"61851b6c-50b8\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":20664,"size_decoded":21101,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", comment: \"Optimized by JPEGmini 3.14.12.71901706 0x9c30838c\", baseline, precision 8, 300x464, components 3","md5":"c51fd6341b62ddab201f133ded56c71b","sha1":"24ed8de07c087efc037461cfbc086e092e8a3994","sha256":"3347b9426ba13e5a851c5077db36552e55e870d3721bb5e807eb635119ba5db1","sha512":"c7c3810c534835852ebed34c382db6b6034e4f0f4ef638d5655900dc73187c62ec564c960dcc3764565362524fec20353070187494876bdb19891298ff6281ef","ssdeep":"384:Gcf6UlRKTtdTqS5Q8EOz39/EqR4XiU7c9PrqP5mEZuvZG1+:GcHlgBdTPAcN/EqlUUgug1+","tlshash":"2c92e11362997dede60c4fb338d83415b4113b04dea289cc8a6f7c01b3a91a919f5b65","first_seen":"2026-09-21T18:34:21.661603Z","last_seen":"2026-09-21T18:56:19.507035Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/literatur/images/386/38690/3869061014_2.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.423Z","timestamp":1790016868423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /literatur/images/386/38690/3869061014_2.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22276\r\nlast-modified: Fri, 05 Nov 2021 11:47:32 GMT\r\netag: \"618519d4-5704\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":22276,"size_decoded":22713,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, comment: \"Optimized by JPEGmini 3.11.4.3 0x3f6e998d\", baseline, precision 8, 200x333, components 3","md5":"05e1839539a1c9c424356eef0a300509","sha1":"fb771ba87930b28c0663ae02c8306fa89b4f53a5","sha256":"a283e09757c4b23fc488d7ad4559479eb6f1b923d8e215af01fbd73d1cd12694","sha512":"d7b3b61fb0c0cd3f8b69d3d64243c6d41852bfaf30b56eb06a12edf0591f68c627ee91f033523369f44d8e35e8b79de9ce0feba3638e93726aee5bf43d2eb32b","ssdeep":"384:clu2cWsI6l7+WrYfyesNMDCrNoxLx9DiBwrE28RVhy57UW:c42T4vLecoL9FN885YW","tlshash":"2ba2c0605c43bcdb378ba921092b7a5a547daab78503ff3c376d7ba62f1450040b4f22","first_seen":"2026-09-21T18:34:21.601022Z","last_seen":"2026-09-21T18:56:19.507828Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.castbox.fm/webstatic/js/page.vendors~audiobooks~castbox.main~ch~creator.analytics~creator.ch~creator.ch.des~creator.comments~crea~60d4e606.c034a5ce.js","fqdn":"s3.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"65.9.62.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.612Z","timestamp":1790016869612,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.castbox.fm","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 07 Sep 2026 00:00:00 GMT","end":"Tue, 23 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F3:F1:75:82:23:F0:56:69:87:36:1D:49:03:12:20:A9:09:04:E1:D7","sha256":"5F:D0:62:6F:D0:90:09:E2:6B:2F:4B:7C:CE:3C:68:1A:1D:F5:51:5F:C0:06:4A:AB:97:15:67:D6:AD:68:67:AD"}}},"request":{"raw":"GET /webstatic/js/page.vendors~audiobooks~castbox.main~ch~creator.analytics~creator.ch~creator.ch.des~creator.comments~crea~60d4e606.c034a5ce.js HTTP/1.1\r\nHost: s3.castbox.fm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castbox.fm/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ndate: Mon, 07 Sep 2026 00:26:55 GMT\r\nlast-modified: Mon, 10 Aug 2026 11:33:24 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\netag: W/\"47915e65abd2df5ba33de3a975fe1296\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a715c2ffe2054daa198dd54f02e95532.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P4\r\nx-amz-cf-id: jn5VLDczSv_6O71xMg1XjLu9wrdY2lPgr8wCPWFN-3ccYVUxMu3kuA==\r\nage: 1276055\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":33942,"size_decoded":11720,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33942), with no line terminators","md5":"47915e65abd2df5ba33de3a975fe1296","sha1":"8e853066b7ec788437ccfeb77bdfe9abf19ed4b7","sha256":"ee2776333d248955e0cab54e648195e4dd9f0e8776c6a39392c89c97931aec6f","sha512":"da8373f82617b73d2680a7175f5fd494fceabf3d52a3cc84a0d6cc69b9efad806d9458c986a30d261160bb0d12da45ceb090062d3f826f984ca939247af931cd","ssdeep":"384:b4bF32+O5KH0Ia7kGY00ENMUVJ6UQ4CQLoKEV8OLv93qa7geMbIaIP8BmH2lWfLA:pKu7RmEeQEam1XYlWfk4IcK","tlshash":"1ee2b58cb281b06107a36165427f640bb3bb5968b49b84d4b37ac4f1aeb744f5067fbc","first_seen":"2026-09-21T18:56:19.508771Z","last_seen":"2026-09-21T18:56:19.508771Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"castbox.fm/cdn-cgi/challenge-platform/h/g/jsd/oneshot/330e41bb475c/0.5133591790573042:1790014214:ZolgO9p6l2NQAaBMEI8phu42Vs1PqEh_rkJDECS_Xd0/a3eb47516da4b28a","fqdn":"castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"104.20.29.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.836Z","timestamp":1790016869836,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"castbox.fm","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 11:26:23 GMT","end":"Fri, 11 Dec 2026 12:26:17 GMT"},"fingerprint":{"sha1":"76:86:6A:D4:8C:65:FB:6B:60:55:3C:F2:F4:57:BA:17:C7:B9:CF:69","sha256":"D9:82:7F:4F:85:91:12:9A:53:8E:21:19:76:81:B7:EB:21:96:6D:77:6A:56:DC:F1:CC:DE:07:56:0E:12:10:55"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/330e41bb475c/0.5133591790573042:1790014214:ZolgO9p6l2NQAaBMEI8phu42Vs1PqEh_rkJDECS_Xd0/a3eb47516da4b28a HTTP/1.1\r\nHost: castbox.fm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13896\r\nOrigin: https://castbox.fm\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13896,"data":"F7mKSmJwpSKcquCx94w74Mrzzf3Aa-rReGObCABuvpCGOH8JwQ6PCUyRucSFDUEOWwzc3grr3Sg32eiwlv6hNuUhd1fjGuHbUwOVxCZx0lEO7Q9ENqFCV6RohmUHZlPzZSJRXzj1ol5kwPq53NDlJWWu5REF1DwMq1Z08koQyMmqc0yDY1lK66TWUEP3JlJj2$ZbzCRO4fCAS1IG2zHY7EbfC9-6nRvLiNDCGUc$oKnRUF3JEW7m0KBlmKnty-hmQv6VGMI4Gy+$SXFzGVFFAAiRfg1Df0qR1zxCh$pOLBCww4pWhi-8JijQyutJYIvOG+cc6W1QSwWMM7czciK5-1caf2RAwRVb44xYB--C93EonjJ12iKOyhk8BK8dUc8hc74+$ywAKPYtPo+V$S$U-bKZbhDNIV-zw3MnWCd3qFue4YHVwA9KzBH3nqq6eSX2o1vlDGquStyISm6drEh0UTzycckExC$guFVWY1GmWepbbTgWvz0C1Xw16jZ0T3DqvpxJ2ewzZGaTXaPelhP4hP8R3oNVCI7jHDetnjD+y+vJEL86U8Su7ggXdC9ypvQUqRo3lCV7gfNnTv280FU6t4wHCgAb3ggZ9Sp7pxX7zOivJTUE5u$$GNG$ZEc6b0PfzNNtjSozBflbM3Cb1Obp7l3JeXp4IHRP2vhxgjWGiJGd5f54k44-BG0DkpdEqaUNeKt+Ti30ziKCqOT6E2wjHJIblzN283jax0QNXEZHHTrqInuQitrbQG$vbHy5-P+9-K98Jw+eBh7KX0dMfP-aGyCEzRwBJ-t$1plAxLQpd--eIXlVpbndg2bUZeIRC3L$A4wHnYKCfuj24VGlMHlCc6p$QNNpChTrI3wK9Ft4ehamHKO4ktT7KqMV$z4CPphn485RLkM1DmeNxPSypy-deX14z4rJMvIv3oMW1+SN3JuZ2ydRk1EBZCxyVSac$cvOmmJopBpf-cOxTKB5wC6mhgJy6JRbF5Sc5iICtNktIBILXTgoA-Lmab0p1ViymjjPonPlh-0PCytXcFoYcZGtAMvSoy7698SWEa4rRrOZkMMaWtF901wb3EpD6U2btC29g7QvXPp1jUliVd$JzBnQdMQYKXrXP-Kof1nH-FIkZ9+dndg7AvKqfl0EBMB1oltOwYQ5dn8eS4Uoue9$FFoh2ynLnta4cMaJ8yTwazIlE6pWYU0-KVu6E+bzhXMfCFicXSFSP3UoUgUegqcFr6C2nQMLQmAgLUzEcjXyj3hMTuxPpENU95ly-FHK88vekxBDEaC8u1EYIniO-NaQ+CGGIiD3C2k8uKPHFx4bW9U3a2IP5CLNqJRh0qWxtJNZVEJ3LadQgxbMGH5FJ18waC6l58MZcgHtTAGWNo49hjCir8KBpUoCI+zH2A+-51R-u-iBy+-j-Af$3680omEtE3LnEJiVqbRnn6Go37HHn6zJ$w-O4mJ6SJkdSEDo$ZgrcW$5tO2GxKavBtY5x4XTpwyOBSW6xMr1+gm-zRC+OZrtLWVetj9BCnvp1nASP06I46b01fBY0nt70zxxX4iRrWmm0ozn+X-vbDW6Lz02l1HVGk7gbM4tVWCkx00C9VYEgvzHq+1SIHpMdu-g1K8Wi+oA3iESe4YCfF1bofJ1IyMv6QLX0cw8hDp9SvUuhw2jSGAhzD8kCPdQeORCuU1G8GXTxDBizwfFoRih2x$-d2jIPQUPn63SmSWSezNnI7KSBjOYlQqw1VV+QRy5DW5i1ZU9c8bjNqtbgxbp7Bf+6-nKA+kW5wmF1nXe69CAILdgQl3$X-xrCuzkKDbGY6+YHiEkx6HH4njAaWFEAYWazWOZS4kfYYuaH4OLHI5SrO8A84-64xaRC6577Saw-5Q0LJH$n6c7ePf5e7RBdRhhob05qXwuWduGd8Qwaqpl+DA6JOvn9pn8KT-4FIPujUQPWlt5uyqudjYBbkwmq+KodbiLqwUrLy847zFEjvoRqVKzDPHVHBN8zEhVE6Ov6MI3ia0D7IadjWnRaZZ5Q-GJd3alnpvE07RLkSzPC-ABWIPdVz1SPLQ55JRmSNZQ2htaTuMQW4Q43YU+4EqDcLSUJmVgC7o14Xqhh9Z5+niCMBZzRAkS8KWgfRiL1+nygx91lb1zJjmIG7wogabBdpWtD8N3-It3rp4KCccuSIR8gDIikkqS$xCdOJ-w-M5KGiepa-ln5ey0Yxl4CYP4kr$lEvIvpYzDn5NfYDZ9D2tnWGz0JhneON5va9v27Mz4XNiAAKliTvEm-2C-GvzfzXK6tyCj3bGgCdK+1gLEXxu2r1dMHmu1VkN8mpUGKoxIeeXeaJ4VL661SDrz7OvZL2ZQpjCwHXidPo8UW3d8VbBNQKWIpoVONki6P2oPBykAd125kHdJi3gqSOu9CAaowbBbu1$QTkWbbPXZ8$Kr1tVFMOXrbkG$JxWneuozz7y2D08byOOHAmkKn+xJUgpRvd7zOtfgAZ-D6zdIDb0FMk8fJ5S$bn1LI4-z8FKxEHHMty1COfNzea6a$PIRQv-kI9lVtdz422$OyN2L4Iw-zyJFDFbw$EZ3jz1BmFyMh1rdRwWS5hfRVj6UmiiI$cZlkQ+pFwlCdYfXm-U2KjrdUv-ULklkzOnQrBkWQNCV09yQ5GAKMvh-JqJwC5Ayybrwa-C8HrcfxzRLkTq3PkQZb5tVghwod6094wB4k$EaZ2RYYuA69fpTA1VwyqJ4Y6WoJnBpxK1Pkr4tbezlPzJGhoHFkIqiV9uRkHSwF6rLoYY5Jq$p4+ydWr+aELDgi1YkvyxYiNm+3oLJc0tZ4Y5z-cCUVn+VFwPCaH-Wjmy5VMjXu0IdkxD$U4oTQrB4MoAdzS5utQ5lYvWUDY7+NpJeDFHonk2qQ1oE-$8Wdfr0C$E5Cdg+a2LP3KBngDeyvGTb1$$zLOAVtcHtfwMTBGcDwbjDo1YMdNoZhEmM1TuZtBPY6ebPJTK5DX4nODqXi7wkfAMOYI9zVw0qkRxpRl9aC6I8b5pmy9jDujBlZhLZErYagfNnoTKlyVy+Z8YpR6a5GoUiDIVNv2a$AtPnv83fMNAWa6NT5e3yZxck3d2SrLHy4Y2-fkI0jnhjg01cpO$H8b11f5laOhUJwbpwU9y9R6YIOJdtywP4Brhq4xv0lR2-VgA8yOHSCybOzjz9g1T2O-1DT65vVKXuRcdW1l6hecquP9Ie0Wx-UGRWtCRHAB4P6jcFDga6e1KcmfgJbNxfHvIHRTeDJiUqX6Xu+TH4xZxrCBRB3vkQu5GwpH34$n9c85Ij5HBuzCuJomwuep9KkEW1hN5ouV7DA3$12PgnCr+$7It2RIaTI8$EphH1iKfynmPUgMk7bPoybSl8lfJzzH6DRXhM4xq3C5uPBFqlMSnMwOdbg4HBYhaSFmRLw2VvPq9Snl+NNVkp$8Gg8pT4b6g4D+2BN02iIhgv3DREnyhdlrv4zf4f1gm+dyv4D5HT16zUTl8aM9834dGiAgNkxXyEYW55RFwKEdtyArFaT6$Ot2q13g5SQLN3XQJpONKRqj3XSt4YzBerFDITuj6fwnNO1gxE+ZtXMeXXx3vdcNkTHMLZF3Y54uREXMIjP0-Keueq9$VN9ipdfc1nXt$uCLrz6RjLCJN5lOikSuvMD7Nfz99Zt+wLcFzIBmK48b0ABb7KeIfnVIq2-6il8ZMXYV4-oLt1vIP999FYE$JGnIT18QQzdZarXh$tWbhR-+3w4rpnVqOGcFqIMVBbuLeubyVOdxyruJpvpYgmn+k$ZuJ6lLiyjJZvlAw+qLY6urt2RIxTb8xqnP7CzA78xT+Pp$3PL5c+GCZhHoCS-ZvkFUxNPQjYQjBR10rJFtTjb6kvd5ao8VrwneYMZRH8tBbbrS5K6y$3Q7OMg435fWjT5wM-+ACJVhmwkldX40ga7f1mj5fJVNhPZw7B0$9a-RCaZIPkg+yzX$5h++vfH1o05yyNfLc6jwppMpGUhcHwJtzni+ffAuz+aGa+Fd8qG4SwKYY-X7bWvZ71QxVC41jidrk71$CIEJuFo0z4lG4IjEpQzxD2yXxVelH5Vfg2AjVYexYx-NySqYJuv6Go0CU8EY56MiHRpE0LRdKqOtPut2FlEa$iEJBc$IzHB$UCmXIFiKSGXo4nqb44ZZQ0BLHQHkqGFhavvNr-mEExx+znbJqpj0uDSb1k67FjPtStuSgPrhMVk34WhKuNaKCWph9BRWmLEYctakVIa0WxvEGLj$kHkg4xRr$T5XTOFMZ6vGA17OuJ1VFR6ThW65iM6gXG8S$tyyg8QrVlZPFLPE4kFHA+ZlcCiGda+9D3bReBUg5xTY3KNIoepVQDTNd9+Uh-2MYyVoKwiWerzdRRq-VBg$SioTHBjC1w-cqnSAe8YxAiDwB1RQjZrmija4z4e+u3HIROXd7GaaZSVAcQ$PYq6aUVje3BU$IfVoUf1UNW8z+9h+fbcX0fqlK8t$XxOlHWCSrNF835Y6pWmxx0+DQjcHcTQemj4CayBi4x5FTPl0k6niXmnjPH0kdy-g+$GMeXIGoqqFerNNgrb3p9nICodADtIHbddN-HN2okyyNc5LVkOSbSqpmmSql9hMR7kbiFAYGBWRvmvd7DVj4YT6jeuid7K7UWvmxBhxy5Pgo$bOJYNHNAYZHroXzw+WiJQYr4VllQVgWhk1fZJeuUeF+LfE02iI6hC+VaUKotEWiO1WejrIf1M0STmiACCzXkRrDi35hTeKqciiHpvzEgqryEgK$6Hgv8Z8llvi-V+VdyXymW$W2ipU6Acjq4vUPR0LlXh7laF7Ei84yrSnVNToXaCfJWWu6wibbcQROC$B2Ljg6tFWbF2hF4yD5lOOLkoaQBIrX-KeA7iWMC0zQ9h2ay13Ftl0o4BD749X8mXpT+WyV8kz8GUty+Q-MEXkHqXxxJn0ck+U9KqL-w4Y1qHGVfiUofrXT5zVL0DBgNhyBHnt1p$O-FU9x4R7RORKIli0wI$Z6Zdp5U4pbBqLFn9LlKA9-i8ESUYTWO8htQzUjIx4WRQy+O7X9iS7n8RlbNygu1ZShWxkhPuwzMWpo4hzqxSoJDXzno-A-BE03pSdaiJfSrmcnyaPUXoDe9VbJ+VOtMVY9tDxt8J5hbgD1oGT832MEtxqU2mtMBWABR0jCa3mz5ao7oCay5uWGVfHFi8Wjb6Ai1-Jap+bhEbM9VACx4OK3T9w4Uy8nroWRtUeI7CDWRuKYVWw8Dmc7wifzZEmDi1ltu439Y7584EQuDPeU0gu4NElZlAlHVzeL+zJpkX68p-DmxYV1MMkW5ORTnRdv4bHEKFypAhJkU-SnP0E7gwoFvY7cPOMGK6q2yGlHnFcTvUNXRh2$5861XzWxhdnQHDuGDjeM$9GqN0AjOgtxObeZrtJIgBc4vzLxci8FeBr4EH2mOjONYNwFfeCBng9URHSqmcOjaxeHJKLkbuBUhjtcLeNNyT+YWFLD4YjtgYH5XPNPjHxG7n7AWwdwTCRI2PeAltDGHgqznGQGJ8X0dXV$TmgnUihBfG3rWfq1WFQ8eDuvgUyByLD4N8+FroW1g1Chf6$7mNlFv7uaSQq9aYXEF1bEZpycdQC3dY$rAymTT+-C1kmhRb25F2UvLmAGnogW-4Xxk3BO02pw$Lov5wi0c0wjTLo+S1eHRfMtBPeTIuAmnK5uh8Wq2rOw7hft9981XQphCXUt9oOHYcLzmTLoYnvertJamUzYanuLNkbJaroOv5o6BMDExxmFce7pfv$r8kO6tb3rtdAQD0d0vXbKpMiO5F9O0fg1F9ucGVNC4P0EQm5j69m302Nk15X7zgo0iXaX9u-wCmaSq8EKriy-onMAJ2dRnxWQH56Fe+ulShmE2O4-CwNTw5WrfabBptgwPItTlMGPW1j9Gfadt8Zm0C30vd+bIAuft2JRithHK9Ud1r2NVInhBAcLjBB+1S-tR-mKvl6x0X-1xyUTSRIYOodQEGWOggofLaZWEmutJhgio6SP02ZXTpIFx807MWUSPaV1QilcOVGrJQ37bSt2O41CzpJF6F2Tk6glV3lmPeovcjGXKXzq7SjonCT4l8t+n+-zHw3JHC8U+h0A39TvRK9$C0y6jL-y-dHMOJyz1qZH5t5QI5z1X$8ZC3-QIEq6S2KDS9yOOJzT-HhO5KuKdlj2W2q-WrvpihXBdyYl4DWDDXvtWY+KRC3OZaB3heRy+aAJJZ+CVKVx2+GegW21ZLWV1M7Xmg661pO1ItAlValNQ5I9lMhA3qUv1jw1nGfCM-7HwvC+aHnmwkBGZyS-F6qUKfXZlN0cQi-h+cVbw12MxVGXnA7lGdTi1ejFkfiEhl7RLE7ENNqqmoZa0Jm2IqWcUIfQ5U7lBbTJ9-Hixtp1SxQb84w9lxzSbGznCjT8gk9M9yfRP8F4qrZFV7HU0aN+At$IkISk3w4heIyDo7f2lfga2KGtJpdJLUArRv2x4OyTSn6QHcyvt3FYJU9zthKMzemllWygjG5h+3B-OktcmKTBQO+BhGWlSptv47cyODEbNFfzuKfbfLTLA74FBhizk4TmacITutB785ZSknZoPLzP2vB-pDwn4keqb6EJhSCOvrSntnxRdSLz77aq4pYFfkkYb+9CCS6R-vbKJQ30HCCx7bk--mpx3KSPg3Q4JbxBgJAYpaMZVPHAj9HXZkb7jRTRgH$49B+io95ThVHoTu1aM7H1MYMYxdB8Ve3zo$NEHznCCvFhRD-f9UUlHoJ4uwTaFm6hl$A6m7bx8Z+BaGjdZOcZJY1GYS1D$LguEMJ6vJN21oe6JO31CzouiIlRkVQMDEXz3cu3BeeAey9QqQML109F+ZYmJdOqSVmXqOZyMLxcoJE9JpcrL9P3h0uxUwrFPB9+gTE8l1Fi0XXZ-w2phukUo9cfUxTugvMA4+SCOAlKKPH+K1AAiQO4Af$Ahd$$z1jBXuH2ZEfDjM0gW2uKh3ojl4M0aBHMPaH2nhQ4BL-7jzMRc25Bqo-HYPCLfIL1+VBlT04GjmM0Kecvz8S+jLO0GoKEbUaytVu-DpOIX+Hr9PMUc$uujX-W1O4kE7hHtVu8tmQ7ovFXeoIAIn17oxpgVbihD9$iSd$P6fQwZxDSLq4t1yK6ze+pVjmczx$ozVwuh99P2x7oYbz7Br5IDnNToSvDa5IVj5RxwpnVvWcEy02bhkYFLFEQijXA3Kzpa1TyfGcJa1hIE6SwW7PkW1ma5l40o90Pn-h00bKvQALi8p6QPf-OT84puiViEw$e9MN8FlTLhXQDRCfJ4SER5zk9q9ryXeHzZ98gpEnN2ARqulfqXf36XC00tCYrQ4ZRMJA2dWl9q$-Dqc5a8$YEq8eR7F9jZLB7FST61OVwBHA73rHpfKYOKT77g+j0PRQoPVE+HE+xIP-a+TuK7CnzP6xcnBEYmJK32MbRzriyZfqxOev16$WktN5CMhnc818yHI$iFbIUm8+kuRADIbN303hufxh4B5fdKekOiH7K1tcOTIviBa0yVlzJRgAkrmPy0fzImjm8HI0fbG7rHrXP$KlDcaevohymJfI8Cj9i6KlyTjblYuTyZGC2pmqT4SJPZF13iRcX39nK2oUu6MYRW8jve043crkMRWDnNFxIDwE+x2dYyq6wb2Mw84rmdryyxTn0O7O31Zpxir5jdurw+OA8RkQbrMCoWbWoCIp53G9c2gPfU1YRaFL9TMYfq$Dmu2LquNb73gPGVJfqPnJOxGBg3Zmx4YJtwHISYBKRjQ7m4BUxDVQ$Ax7tU0h2e40ak0j7yX03PjXWRhO$ZbbtQORVbNkAtz7SH7gNULrF59zpIBr8WR07hhee7p59d0w9TnKDXgEuO2p4yRWmtEDNVYz4EpQcEBcov0MHvqwRX2RJlfAxN$JO3YZz5SLvOEkxI1EdEE6LXhd$pgxgvU+oSIk+KnlIXFqc0j8$bKw+XKaLOvMEerEIzVwhQfULrwERHWdC0T7uJCxJ6gVI5hIfrz8+DZmy-kx-QMp0$14WXJUr$cuucYiX62kd2GM7WO+NoBwKEw-Pj-+zZ9Y$A3NGr+dK37oFdOqkv5eqjnKNWikuWIAixlLALZRtqlLloYjpm5tnamOPDlOllRfl9y+tfuFJMvZ1ckKWOUmJrN2SqrmSu2dXPmrxu5+XL13jdhJfhH$URw5ZyMu-jJUQW6$4ZWhFmKJiA5eg4NM5e3UKX-ozwRt7j8Sx$Rl2McQQ7tJMw65mhKBm$mHOUCQmft+cBX-xiDveAERa5OLlt2qRmNwSl1B43F$BGz0H0nKfHS8+j2pCfuibzRRUl51p7Qtm3A7ukmNON399RTtpMthXt7GN1JgIQXe6vqWfZVnGocDd2XepG69tgnu5Qd3qBNeKzruPHCLGzpKz8HC$+gbu0mLPmUkZCLnguPllideIGzHYaetjQxwb7z9Okvf+f2Tx7z-c5A+Wye9Sp$AhC+K2SbyaJM8KM50jRl9$5vAayNVjeNFbxvAVAd8knXJBnvHocG8EhjapSogp8MPalIoRFr8o7dodAPV4IMQn6EWXMOepSELoTmu7ogbF9qaHdfe-gH27bwgASNFfR9V7Def3+NHPKEHr6YP5IF3ZVoyZ5qMHYRZ$31vtacCdI7tWtxfQ4ktNuK3P5B-EMKHU5LtTppXiOXCQFku67mqBYHLICxKrKbGCInaT9ByMfFJx+IMHv7OdQ4PErPG4Su79IEg$kZ-MxIYBFjwXoFGrqg-kN7F7lcnYjOXYJ78mWGSVzEn1IfzD7TQd0YXhxiDdWYy8qjgm17ihUPt3zc2NHNwMgnbD5rY$05FY4xzAVDljJSqEgmhkZilWIi54q7wVW85z6m$qoeSiXY-zt1+U-kkCwW5ByAHr7-gXTy9nIJ-B$76X-GweC0AuiO4vaXvYzmGGbOb8iaFwim3rSWvCqEJbFlzipT0Beonatr1dOj1fwiae$$CICKES81nYKfE4e915HyXxYFRP5hCdFeOJlb1C6blZFi3UpUW1cwHyYluRU2xUHUHmnmJfW5jktWZ0zWOFSkQlG-kVU-Fi6R9qb6cKiV3F9OxFN8gj+PfSUc-jKm2+3-Kiyw+EVmfZ92ZDcySLTb7othcPogG-Guguel+YvrW++1M7Y5YKyRykKCVSAoSG441bPIz2Qy87UpJ9GjSZOfkpjyY0uaZlpUS50RnO62CaCbpuVLg4eJFeNKSXShp1IbdFGJkzySBdMebh$2qNYnl6JaFmrmAn4vO99SySmNVMEVL0ZjymaMVk4cvV368jhwvPGxlqqcN0$xZAzANwTnNYDRdOwx+QSw+phYllmUFJXhezcI868Uocz7WFVKd2j3j36f8n1cZ8vvMz6CmR-OmJ$LEQ+-y9oB1PSJrb4$VuDEH1B1rVkhTNx+SE-V+lLCOEcLLa0-fLkgQZ7MvIZxxzq-DuMeCy+GL1N08cnr3jhEj11b96GnYRhG892acRonqhPTzfvyGVgTM4UnwZ4Nduf35CAjBuJ62GUF7T0kL31qOELJiJ$w+4BfVouGSaRw0VgBguS3A2V1eIgxZFYlXOeY7ccOmlUh5VrlXFpzcRcCjALFmYRbuFWVOLK3k7eWyXiv+ytHZ8FIe7nGam$khLd1VSDhwSTxPp$Y7-90DxzjTDhazgwzcvH3oMK7PUgAhw1+cqBX6NfuqAXLd5lYrM-zGpt+$TpEqfWeTnkfEyPm+tlz$rlUgCpXGhzD+iIPOpxygfV3rxuE51u+PwawQGaeKWCr4lyK4bnQA4RPDVthJgI2wD3h-+S48HGNuEuv15QtT0yiyNqXec-I$cOylPyh7hVkmvGhfm04w1RBlP-nBKOMPSKH1+li$-E5RLUrgKkcalwGqcGtJJCyLpmtuzyxFcGcbHuqYRbE2LXA4Xo3EAd3QjFuZ7TKHE39lI9rgEvhlFU4WINm29dwtjuRKexQZ6L2I0iEzJEiT1Dlh0qZm98Wmi5-T7z1nY2+Ek0z8obo26yu54xfwSzJ5ocw74F650LDNfYeTRTlc-VCCIPDL1T-hIBrrdiv7bXVCt6Rhv05gmh6xLctt999Ih0D0ctMZLF+Ze6YQZbkFfE0p5NKeSTM+DpnzHNP6PZ7jyvoyTzHEtaU-rC0cl-DDF+YVlO-fmA4vrKzSyjjMj+9yMgHbvS2MbmYn$jRMjzHXVhCBja$pQPW$o4yDIBYKnbzfI9fLU0yNGdSlf-V0YAqkCK34IW-RLkl5xa9oMxZvtUHlP4eYqYNYlGCKA1aCohAEFHVDjBlZV+GuSbr2Hl7y2HeY$m1ZmOcJijSuaWJ$BSQHxQfoSWQn3g8Ok1vmj0AhbpK1J1dVKD+JdT+jrPiL7vtWBF3bfGRfGDUtxleuDWm+RkTWPXTt6$NA2W7kR+61zbzJcNFHpOqMerVVn4012XbRN48Q$w$Mp3dZnQgxSrMIwwdhzLuhkr6RdG6vPEBibouMCgi7d5$l8RVS055bhxQMGUY115uzwZVRznb56mmfIIXX1qgxEB93eZUMBQyJzVxhjYBBpHCzT2wu$ukFjyWLw-7I$elJDYe5Sqe2P0lKO2VniTbmGBO7FeY3mhXvGWnS45IOa$M-d7SRPFBQ8OV7faEIlRD+OEGAtLa7x4nm1iAtgr0IqANkfV+aT1RgvzrX6pIaD-7hCmUSfMkyCzjeK1tKwk4wPPeE$duDIzYHgX2j3Cz8zenPx7FKf4An8Wa0oBxdlkj0XeALi9vi5jDapQJn+6CbjmpC-ud+xrmR8mh-zDHvCQFvrTHha87OhQwmMyCuWGM3xin5aiV-$YHCD6zmZ3j4leEc1dI4p+oooIxGvGvCRax7KVxy0EDWClDmBRNj9hptG++9AKcfcagS56TJnmof93Dkee8eMaJpebj5rVdbBX0hRMF42-1naqT+dov-v+$AYBg7z0MH81bimY-c9xMTzvgxiWc7KlaaXxZnu0IH+xZ12Ng4peBTRR+PxjKO4LTz99UTJa7KHuo5lTJhDaJEGjv2tNkbMmtE44cJFNPdW0pgiv7PLC8o2m6aJ-4oVn3c9-IdSGZXmJB$oC-ZFc+08uCb306wuo70uqvnS-f+MA1mY$FeUYBMrTqtFzKkBxpou-xP3woRQwl-lkbprkqT-jbV+8+0dH1FB5OqeUr3BTDIhoRQutlKNOLNd+Fw10pnEeqYyqXqNoUpgh$bfWiC+WfWdDAJv1zLrE3E3FJHOJX6kFeRng9tFMlFpQ76oUO9L5AyT8LFhvXnSlrqNUatqH6c0E7ijkCl4-ur+9Wlb9vTrNnGvGzZjoXT92Mc8U8QCck6mqpzqwEJrWgXIgxpdG17plyaRVJWvi0y3fyZHDGeQaS3kQffY07F84ADzde4eMYrLbwEwEjemrNgWXLuSqn2z7iJ$Ljc1VQMuvd5hUR2l57yBypkQ$xkuUDO$G-cdLhDy8ZTrRA8k+tGaAHxr$bfQJtU63F1CbpyqRcZb-Dn7OG-dzlZNwSu7Katf+CLgKLqdWRfOtgQJf$vfUpa26U6TrZhb8TR1OowjNATtV8YSZaTYdnL2TK$9N-NeLikgb+jhdQCDMmVILU4pHAfkbH4RND$uUDziGgPdNqWY31D4DfXnm89-5Rv-Yja5lCOr6Bb83tQnfNdWkiuqtdkLrKYKtSUyuHHbtj5DASoVJNuXlzHYZYBOJ2-PJRhxiTf0$KrMEhSmU2Q$3uM9hyUrvrGplwEzRmKgYBGk0fMYW8xACmR09QaFXvL0fTEUPf6jDt4o96pK5+--t1ZbpZ+gMIi-3+9bErtkf16IHJDPYFq9anCYbGwAVQS-mNZXv3-QXqXbbI0NrXyQH1$F1ZVdbqrLhR2iWKGyR0YEj2TVUo9PeAkzZet78nQDfDpx8eaQwkCnWKxWYyNfrWK06UeL9X43lRj21doE7c8paWj$OGBNF0uhDmfNNRHnCyiyYx9ZzvZOBZv-E3Dl$rTyUpWiWbgGkx6KpCUJDk-tzZTqCr6CPPN6D-2Tna9o4kKX7qSlT-In1olQAJ2YIQOWIk3Yvl0FttWSylNjdL7cD2mZk+BBXj+6Y39NUzwhgGg$BwZZLjriBRwBRFlhUKioa30AMTSY2XJb$e-K8eUYnPErtRwNlmdWnaOZpdufI1i9IreUQvK--2cFcONvDqu1nNR7v+xbHtMkgIydD1JDtdKB5KlXN37TS7i8-L2Aq4gfbQBI-r8nTcHIVA2UVI2fA33I6Ujr9UzdlXbUdN9LOCvqHxa7nPOMr+ddMOtA$+80w5GlmvRLydc16ajgm0KUfkq4PBQ-jeLiRII2jQwmLZfZU-m4oBYOzgIornouNR8RvbmjAiTpP4ARh5fkZeUkklYgAK9xUN$om9k7Lo-w8N2T8-S+xR-yxwuF04dgCnnLkd3p1k8jwXCuUYaoCniLOUXq1LcSzMRRcxV$RAqv67bdfAdxvX4Nc1u8kDSNqN+9p5hCOZl4zcZ4VHKcOvukYCRrHibRXI5TWr8Ne6E5po83Km9-ozlnEvt4cEpR95NpnMTAwQ9l2NYTTzCAb0XL3MMIikjqRpC3RzUk1Qt-SJkK9YDuKg9tKLViKvWfCZl7dugpphMCtmYLwRkDhnt66WBqx+MGBElEJNQ+edWTMG1nFgfk1SPIxDJ62gI+mk2kXF5IRR2TEw$fSeU0Q1V0EvGIISVL8VrxC520iWJnNCn5FEd9Opp401FWVlazrDlwW8vaTM4+vNw5ATDB5C4atT$28AJo8vXcDzUF8Ovc7oMLLG2B9jm$pTC+t14RNZKIQhYcQ$bU3IUHK2$RjB3xVyoyURvnI9Y5BXtChCyQnG4pU7COLJHwp18AKlcDj9o3UOtcuumPBaLJv6TDN+8wnHTiEORJ5wc0nmNG505HDzZHk9ojp69LIt8zL5iHCHcMWH6p4wnPnmgD$nyLnO71Dz7M59cy-YZ0rz1P3BaOvSJgqzCGSGUD02YCeOVLHrqNVPyAhvJ4O2atERUuBzf-kAO0FdT9jKB68$Re73gUuDG5IrDB$RhEP6ET-IdiJeOSjl45TyoAgexw4lfcO3D9JtGE5vGIIn6LC66-lZnEfqcQ99porWbPfP6bim+aDqaJ-m6rnQc-QfIyoGTo+$nSzkH3mOc2dVQrV9v0PlVOf-i+WVL0Mm-dPFM+hYLgKjH3a7I6W2ryv$gtayGEfPuJJ5O18VhEmv3Xy4-XTKScXY90D3Pd$XgKlcYp5FWLAv-ZYmBenzHyd6MXE6-0J2FNmiz2Po+WZJKE55tKjzS+ZeP-mo0KURC+JVhMyRjmFQMxuL+ZFVGBPPurnqGSPdtj5EaHwrOFd2xOo4gwzOVlZTVwqTS6bQYBCUtA1TyVK7J7gWwH736fNCT3UGt7WIfBi0YrXeOoHLMJtOySA-3xOKhEHqYDBCvJl2NESMeRA0X0yHWB-r14wndhHvG2t6bYXX85iMzUpDmUv1ZAE2c2BKoH0DlVgr89y3MSYaaLnLo7pTQvVWv3kxnb$ClCQ8TEHUtKpRx7qW10jcpfUBP6pDYvUkFWe3lDDmWKRb10e3-rFlm0A-U9iKQlfwpzyPme8mJSefX6F$iGyRqbrIg84fjqDvWM87Cq2vqFIG+WVVHyqfmFkwi8$RqJzdwBMVpa30dIVJk94pTT9g4OaVmQSKGOio42d5RvQSLh$jvnJTzWhMBtFFfrgrn10LNbS7bKIO++1hNnkuPeFF7nIYAhzx1b+j68ccI-v4kewUF4Ydzh-$MvWJ$jacESb1qeLbR0AmdNfOYPk6jNT6OR8+o1J95o4vXK3mCGS8BGDgNW4g0tqW4MyDyXZ9830AlNlvaSrrxHfFoeCBZFMJczuwpR-a1nIVhZ4bgXnjvNMN-BciXW6EZo-Z7UMUlli3YaVoHTm7kUU67ydDVlVDofVGt6wPyt8SepiPpcYgOivMxOR4LfD"}},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 21 Sep 2026 18:54:29 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-chl-out-s: /N0oK0OEaGtV4SdHdcKWIKeLiGtbnoshdDdKcPBCEkK5mHYz7HxYp9zMmb3n8jYHdEIDqbWCpawIeo4TbuX9PjZBLWn8+k4dzETG5CdIIlc8L8unBIyRUwOGu/RQUDq8mr+ql4O8PGdT3itlwVT6Xmxp+1NodRJ9B+dRL5c8buD84TzqRp6FS87WYVlOMhy4+gsuFFbsNYrV823Vc/HaAeQrrYq4pKM4EgnAHIlYKx2t0PRNfj5LIGEBW3KzTYr0sKer6UVLSy9fxkB2+ABUuQ==$IlyNcbpGYdOmmzX0eR+sjQ==\r\nset-cookie: cf_clearance=sneO4PydhLL.uqZ0UdMhv2s4twkjSAj40xdDR0xGsWI-1790016869-1.2.1.1-hG7byk39m3BSmL1CpongwnUX0VRQZ_jyl9mImTNSyRv31IOiVgACMtSmT7THbfCDkWSJBAFoF20G5SUZvbn6.pWoLLk6GDmGsJxiTQfqJ9kn297AlGox1aR46rUWZpsK55GSCV1kAIKvnyHwU2jt3VTneD1B96SpuMYJXnJBsb7kI91_eNmqD.0qNShQh1iI3IjuEPIufrF.jN.3CcKBOMKQvUKjQeYE0_xCLnQsINS8cpqHCOfJOsNd.B1jDC1Csq6NRTEK5oR5pv5IryjO71xv4TxQ2khSVW4ZdiU8lK_oQBuBtQcGiV72uTrLf0qH.VjKNhtLWOR3VuAv5VbFu11AdA63dAPfimyQ7NidB2eja5HaZrfSD9xhBaMEhft6xAEtpEELnD95qdEoFPTir.MehJq767Bfc5Jnjtkhi38; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=castbox.fm; Expires=Tue, 21 Sep 2027 18:54:29 GMT\r\ntiming-allow-origin: https://castbox.fm\r\nserver: cloudflare\r\ncf-ray: a3eb475c7fdab28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"cf_clearance","value":"sneO4PydhLL.uqZ0UdMhv2s4twkjSAj40xdDR0xGsWI-1790016869-1.2.1.1-hG7byk39m3BSmL1CpongwnUX0VRQZ_jyl9mImTNSyRv31IOiVgACMtSmT7THbfCDkWSJBAFoF20G5SUZvbn6.pWoLLk6GDmGsJxiTQfqJ9kn297AlGox1aR46rUWZpsK55GSCV1kAIKvnyHwU2jt3VTneD1B96SpuMYJXnJBsb7kI91_eNmqD.0qNShQh1iI3IjuEPIufrF.jN.3CcKBOMKQvUKjQeYE0_xCLnQsINS8cpqHCOfJOsNd.B1jDC1Csq6NRTEK5oR5pv5IryjO71xv4TxQ2khSVW4ZdiU8lK_oQBuBtQcGiV72uTrLf0qH.VjKNhtLWOR3VuAv5VbFu11AdA63dAPfimyQ7NidB2eja5HaZrfSD9xhBaMEhft6xAEtpEELnD95qdEoFPTir.MehJq767Bfc5Jnjtkhi38","quoted":false,"path":"/","domain":"castbox.fm","expires":"2027-09-21T18:54:29Z","raw_expires":"Tue, 21 Sep 2027 18:54:29 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":true,"raw":"cf_clearance=sneO4PydhLL.uqZ0UdMhv2s4twkjSAj40xdDR0xGsWI-1790016869-1.2.1.1-hG7byk39m3BSmL1CpongwnUX0VRQZ_jyl9mImTNSyRv31IOiVgACMtSmT7THbfCDkWSJBAFoF20G5SUZvbn6.pWoLLk6GDmGsJxiTQfqJ9kn297AlGox1aR46rUWZpsK55GSCV1kAIKvnyHwU2jt3VTneD1B96SpuMYJXnJBsb7kI91_eNmqD.0qNShQh1iI3IjuEPIufrF.jN.3CcKBOMKQvUKjQeYE0_xCLnQsINS8cpqHCOfJOsNd.B1jDC1Csq6NRTEK5oR5pv5IryjO71xv4TxQ2khSVW4ZdiU8lK_oQBuBtQcGiV72uTrLf0qH.VjKNhtLWOR3VuAv5VbFu11AdA63dAPfimyQ7NidB2eja5HaZrfSD9xhBaMEhft6xAEtpEELnD95qdEoFPTir.MehJq767Bfc5Jnjtkhi38; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=castbox.fm; Expires=Tue, 21 Sep 2027 18:54:29 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":15781,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T05:48:32.452556Z","times_seen":18612924,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.castbox.fm/webstatic/images/volume.86474be8.png","fqdn":"s3.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"65.9.62.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.973Z","timestamp":1790016869973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.castbox.fm","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 07 Sep 2026 00:00:00 GMT","end":"Tue, 23 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F3:F1:75:82:23:F0:56:69:87:36:1D:49:03:12:20:A9:09:04:E1:D7","sha256":"5F:D0:62:6F:D0:90:09:E2:6B:2F:4B:7C:CE:3C:68:1A:1D:F5:51:5F:C0:06:4A:AB:97:15:67:D6:AD:68:67:AD"}}},"request":{"raw":"GET /webstatic/images/volume.86474be8.png HTTP/1.1\r\nHost: s3.castbox.fm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castbox.fm/\r\nCookie: cf_clearance=sneO4PydhLL.uqZ0UdMhv2s4twkjSAj40xdDR0xGsWI-1790016869-1.2.1.1-hG7byk39m3BSmL1CpongwnUX0VRQZ_jyl9mImTNSyRv31IOiVgACMtSmT7THbfCDkWSJBAFoF20G5SUZvbn6.pWoLLk6GDmGsJxiTQfqJ9kn297AlGox1aR46rUWZpsK55GSCV1kAIKvnyHwU2jt3VTneD1B96SpuMYJXnJBsb7kI91_eNmqD.0qNShQh1iI3IjuEPIufrF.jN.3CcKBOMKQvUKjQeYE0_xCLnQsINS8cpqHCOfJOsNd.B1jDC1Csq6NRTEK5oR5pv5IryjO71xv4TxQ2khSVW4ZdiU8lK_oQBuBtQcGiV72uTrLf0qH.VjKNhtLWOR3VuAv5VbFu11AdA63dAPfimyQ7NidB2eja5HaZrfSD9xhBaMEhft6xAEtpEELnD95qdEoFPTir.MehJq767Bfc5Jnjtkhi38; _ga_CESP3QW02J=GS2.1.s1790016869$o1$g0$t1790016869$j60$l0$h0; _ga=GA1.1.642785499.1790016870\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1204\r\ndate: Mon, 24 Aug 2026 14:24:36 GMT\r\nlast-modified: Tue, 12 Mar 2019 07:58:43 GMT\r\netag: \"86474be8821693ad0aeaa99f9e658298\"\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a715c2ffe2054daa198dd54f02e95532.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P4\r\nx-amz-cf-id: wwgx0B4c8yij_TbBsvqaXGkX_6a7Adm_mHmy7RFJS7xkqh9-uIg8rQ==\r\nage: 2435394\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1204,"size_decoded":1661,"mime_type":"image/png","magic":"PNG image data, 36 x 38, 8-bit colormap, non-interlaced","md5":"86474be8821693ad0aeaa99f9e658298","sha1":"e60c44976c98ac8916d5ee9dec3d608f294de104","sha256":"ba9a97f9317258d84b111ad5968f4f16ad3221f22895d3162a5c5a8b3881cc52","sha512":"8d225621a0bfd45b1dc2d132806a31c7302c3ae4984cba2bf8b7190e5de6a4512de80fd6585fe6a2fbda2def51f94f26213043556f5b8264a7b90c8000bdae5a","ssdeep":"","tlshash":"3f21025d161cbcc1ebd55ea86ab91235dd32047b2d44000b3bc795d958b984c1e6f3af","first_seen":"2023-05-09T07:58:38Z","last_seen":"2026-09-21T18:56:19.510698Z","times_seen":3,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/assets/css/vendors.css","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.018Z","timestamp":1790016868018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /assets/css/vendors.css HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 382315\r\nlast-modified: Sun, 10 Jul 2022 11:15:42 GMT\r\netag: \"62cab4de-5d56b\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":382315,"size_decoded":382752,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (377)","md5":"a8a8d157c021bdb84f09c9752c8c9a7b","sha1":"84badbefbc36424103b3aa6bb90735a2fa4b5047","sha256":"c24fc661228a20f951dead8544c6a2d6298a506cffff1f1091cefb22493fce32","sha512":"ae740fd0a5049506572468ce567ca39e1d6c31d3d5623dfb209a7beb7daf9952300316dc9664e40970fe9fd5efbc82d1a42acc83a10c15346b3c8ac03be7f71f","ssdeep":"6144:QUMwFFxiGfr8fO+4ksKe/wEzvmWmImzJIHG:QUMwFFxiGfr8fO+4ksKe/tmWmIQJIHG","tlshash":"2b84b7e994a22944131780c967df8a407328b193981a9cadfb8f65cccfc677849d3f97","first_seen":"2026-07-17T09:38:58.743939Z","last_seen":"2026-09-21T18:56:19.511781Z","times_seen":4,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":312,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/literatur/images/978/97839/9783962334932_2.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.413Z","timestamp":1790016868413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /literatur/images/978/97839/9783962334932_2.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1930320\r\nlast-modified: Wed, 05 Aug 2026 06:31:24 GMT\r\netag: \"6a72d8bc-1d7450\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1930320,"size_decoded":1930761,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 839x1270, components 3","md5":"71bb49a1b74dcdd29985753e6d499d0b","sha1":"66605b633fa3c696cd3f1a1a849f0c32b9099e21","sha256":"cd6bfb9d4a3b164936fa90d0749bdc719edbed01eecdfc3fad7a7dbf24cad3ef","sha512":"f311e8f1cba6fab11d94acf58b4b14c09369239b619bda8369072443984bd002703fd237cf4cd39ebec474c84d01eefe7b5536e964bddf898f84aa0fc0edc53d","ssdeep":"24576:XSvOZ5xkLrPDciwTVHiXB2YkTmaMf6+h9M4RlOSeIzmpxA3IZu:XbnkLrPnqkR2+aMf73M42Sn8HZu","tlshash":"8e25f1b24db8bf42ee921c1a13609e66413c2d6f07e51359997ddb8f3087c9930af897","first_seen":"2026-09-21T18:56:19.512947Z","last_seen":"2026-09-21T18:56:19.512947Z","times_seen":1,"resource_available":false,"data":null}},"time_used":993,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":957,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litera-bavarica.de/verlage/bilder/logo_40.jpg","fqdn":"litera-bavarica.de","domain":"litera-bavarica.de","tld":"de"},"ip":{"addr":"87.106.213.114","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litera-bavarica.de/","date":"2026-09-21T18:54:28.429Z","timestamp":1790016868429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litera-bavarica.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 05:49:56 GMT","end":"Thu, 12 Nov 2026 05:49:55 GMT"},"fingerprint":{"sha1":"54:AB:D0:43:C4:F8:DB:7A:08:43:C7:F5:4A:E5:85:E4:14:90:D5:C9","sha256":"9C:DC:7D:41:7C:50:BF:6C:82:54:67:A8:C1:13:C0:30:BE:98:E8:7F:D7:BC:4F:EB:60:69:BF:1D:51:46:14:A5"}}},"request":{"raw":"GET /verlage/bilder/logo_40.jpg HTTP/1.1\r\nHost: litera-bavarica.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://litera-bavarica.de/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=2fmohphvjf5r2ilierokbcdai4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 18:54:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35279\r\nlast-modified: Fri, 19 Feb 2021 17:02:50 GMT\r\netag: \"602fef3a-89cf\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":35279,"size_decoded":35716,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 350x418, components 3","md5":"777bc34cdc2e019686b6330a5b5808bd","sha1":"4fed994eab4c28ba22f628d208591c77138d8b0f","sha256":"f569396bce0bc931aa360570d92a97de20f2e695788e7e06c3c6afc15e6f8717","sha512":"cae105a4170d17a0e3551f60be86867dc098729b8ef81a3dd25c9e1efc24fea4fdbc1b3b0e46344ff18ed9c7b3a554e4d1cab4e9c25197b13fa38f89c5600564","ssdeep":"768:GrL2i+MbKkQUeXdLDTVpQmxXcFG0xPKpRT+OSSoBqnc+WMxGGkhNO:wL9GnTdcFGei3TNSSNnyDGcNO","tlshash":"92f2e1a1ec7379ebdb3b0067f6e2607350a44a689cfce3b395b3154a53c0e784541a4b","first_seen":"2026-09-21T18:56:19.514524Z","last_seen":"2026-09-21T18:56:19.514524Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"litera-bavarica.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"litera-bavarica.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.castbox.fm/webstatic/js/page.player.5cc8cebe.js","fqdn":"s3.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"65.9.62.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.279Z","timestamp":1790016869279,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.castbox.fm","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 07 Sep 2026 00:00:00 GMT","end":"Tue, 23 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F3:F1:75:82:23:F0:56:69:87:36:1D:49:03:12:20:A9:09:04:E1:D7","sha256":"5F:D0:62:6F:D0:90:09:E2:6B:2F:4B:7C:CE:3C:68:1A:1D:F5:51:5F:C0:06:4A:AB:97:15:67:D6:AD:68:67:AD"}}},"request":{"raw":"GET /webstatic/js/page.player.5cc8cebe.js HTTP/1.1\r\nHost: s3.castbox.fm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://castbox.fm/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Aug 2026 11:33:23 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\ndate: Mon, 21 Sep 2026 10:14:43 GMT\r\netag: W/\"68ba3b2383a5ce9377cbec6dbf1b2088\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a715c2ffe2054daa198dd54f02e95532.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P4\r\nx-amz-cf-id: 1jOGBKH_cbqFfd98T8yWTIv6gMz2Z2RarqKT91xHuL1BCnJjKn9a4w==\r\nage: 31187\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":224842,"size_decoded":62021,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"68ba3b2383a5ce9377cbec6dbf1b2088","sha1":"7d811466a9700842a20023c60cf8b52f32d33119","sha256":"49e2e50431c15b80c789ab73a517be35a31b3c7eeed0d3cb7dde6dd39f356cfe","sha512":"ee8a6c64ffb6a2611454a5fa24dc29b1eeaef30cb4207bf7c8669d5f096f63a8df255e8f94d1a473d9e95d0841fce5a5f1d260bba6b7e92752feec1c65e6a50f","ssdeep":"3072:bT/+u0DVMoEz93N1Ph0IVND9E0uL6UEWp+f00m2HyNoIsK:bzd0DVdEzv9qIVND9E0ia00m2SNom","tlshash":"b52409de77d2b0aa039330e0c83f194eb1ba5964e48cc165eea6d4c7e87655cc227f19","first_seen":"2026-09-21T18:56:19.516013Z","last_seen":"2026-09-21T18:56:19.516013Z","times_seen":1,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":25,"connect":8,"send":0,"wait":9,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"everest.castbox.fm/data/channel/v3?cid=2396830\u0026raw=1\u0026web=1\u0026m=20260921\u0026n=04a84e5ab55dbb5937883f025062321e\u0026r=1","fqdn":"everest.castbox.fm","domain":"castbox.fm","tld":"fm"},"ip":{"addr":"172.66.159.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://castbox.fm/app/castbox/player/id2396830/id310012716?v=8.22.11\u0026autoplay=0\u0026hide_list=1","date":"2026-09-21T18:54:29.752Z","timestamp":1790016869752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"castbox.fm","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 11:26:23 GMT","end":"Fri, 11 Dec 2026 12:26:17 GMT"},"fingerprint":{"sha1":"76:86:6A:D4:8C:65:FB:6B:60:55:3C:F2:F4:57:BA:17:C7:B9:CF:69","sha256":"D9:82:7F:4F:85:91:12:9A:53:8E:21:19:76:81:B7:EB:21:96:6D:77:6A:56:DC:F1:CC:DE:07:56:0E:12:10:55"}}},"request":{"raw":"GET /data/channel/v3?cid=2396830\u0026raw=1\u0026web=1\u0026m=20260921\u0026n=04a84e5ab55dbb5937883f025062321e\u0026r=1 HTTP/1.1\r\nHost: everest.castbox.fm\r\nUser-Agent: \r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://castbox.fm/\r\nX-CastBox-UA: localTime=2026-09-21-18-54-29;timeZone=UTC;deviceType=web;lang=;countryCode=;uid=\r\nX-Web: true\r\nX-Uid: \r\nX-Suid: \r\nX-Access-Token: \r\nX-Access-Token-Secret: \r\nOrigin: https://castbox.fm\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 21 Sep 2026 18:54:30 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: public, max-age=10800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://castbox.fm\r\naccess-control-allow-methods: GET, POST, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, User-Agent, X-Requested-With, Content-Type, X-CastBox-UA, X-Web, X-Uid, X-Access-Token, X-Access-Token-Secret, X-Box-Access-Token, X-Custom-Token, X-Admin, X-Channel, X-Suid, X-AB-Test\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncf-ray: a3eb475dd90f35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1998,"size_decoded":1656,"mime_type":"application/json","magic":"JSON text data","md5":"9932de7b67f8b40f0e3b546824fc5cf7","sha1":"217c06fbd1fb479a009b4b8cdb9c2dbf9934ecd6","sha256":"45a2d192c1e7be0c2c8fd773b9b0e8e261a507e327043aa36a5563c7932949fe","sha512":"a90839b0d8f0bd4830dc1c3fafab404a45aec3ed8535a25cc40a66893ae1a44e761298aa0b04ceabe72b9c4c2b63298b67aca6ae0d55729ea932b65253e5cdbd","ssdeep":"","tlshash":"0941767bf9aa0d677fc1e1d4d4b516ddf704a260c7809606869c4d34e5cfeaa2180b64","first_seen":"2026-09-21T18:56:19.518261Z","last_seen":"2026-09-21T18:56:19.518261Z","times_seen":1,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}