{"report_id":"dddb2b32-1116-454f-b65f-fef827210839","version":0,"status":"done","tags":[],"date":"2026-07-14T11:50:35Z","url":{"schema":"http","addr":"berliner-sparkasse.vu","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":0,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"berliner-sparkasse.vu/","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"title":"Internet-Filiale - Berliner Sparkasse","dom":{"size":184860,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48025)","md5":"7b1610677b2656091c945012f5ed7163","sha1":"0a487eb67fc2556c79007b7b2f8acef8e8e6d0c4","sha256":"fa923734fbb171d53ebfbce56ee5dab0122e34c22af1da089b84ad9debbaaa2d","sha512":"0d7bb689e0e2bcd19d4de1ce52790a887ff5ff5f3c83aea4bc5deb9b88483d8109fe15fe14ed0dcbaee614f3eb2c886dc943331d455451859363eb325cc02eb4","ssdeep":"3072:GXaJW/J342vplPZ4UMJDBTF3sO1V3qyzYc2NN7F4qJRVAkWqgnvKCYJFEL7Y8RjV:GXvIiiTt","tlshash":"4b04b581a2f6b03290a385b6b2a4479dea13f347e8477c85b67e076c0fc17a73d47619","dom_hash":"domhash642c665517cb61c98188ba2feffb83d2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"berliner-sparkasse.vu","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":0,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-18T11:50:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"berliner-sparkasse.vu","ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-14T08:35:16.975242Z","last_seen":"2026-07-14T08:35:16.975242Z","alert_count":135,"request_count":45,"received_data":8816005,"sent_data":47830,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Adobe Experience Manager","description":"Adobe Experience Manager (AEM) is a content management solution for building websites, mobile apps and forms.","website":"https://www.adobe.com/marketing/experience-manager.html","common_platform_enumeration":"cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*","icon":"Adobe Experience Platform.svg","categories":["CMS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"berliner-sparkasse.vu/","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"63b2013ebc51636ccde51281274c552e","sha1":"9a5a7053ecb98cf3ddd4d9df3574a79e1aa8a86f","sha256":"ef56f8a92ed0bbe6f669f6080bc0127e9bd5833edc0de02189208f490ba2e8d7","sha512":"a636d23fd5bb322cfae5b60597baf6b3e6ca73396ce8e1edcf7caa4a493d97aaacb99d4143c0fec0c12e90eaa34293a0ee8605794f8f722051c54c79b3c2fe74","ssdeep":"","tlshash":"c1f046c7369a74a147d39266c83fab07e13bdcef0469a151c693c8956c3834c4223b09","size":552,"data":"","first_seen":"2026-07-14T08:35:27.513035Z","last_seen":"2026-07-14T11:50:42.498248Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d0016e39a1d8c042c7912d86db352fa4","sha1":"1a86450d9d18011c404bce061ac42bc41f2fcf64","sha256":"990ba1ade34f6beb27b473574d38c0ff4016668d903de7ccf6a44425c00be85b","sha512":"226899d18493a381b47dd38bcaaa666acf6c04243afc4b8b3e19f76edd06401fc1ba0787ea7271bf1fa8bf78068a902a6ee194ff865cc9da02572d9515382d6e","ssdeep":"","tlshash":"e401c29529d1f05756b67150ce6fe90bf17a239d74c990d0c184c0b4757585a9326f18","size":837,"data":"","first_seen":"2026-07-14T08:35:27.514907Z","last_seen":"2026-07-14T11:50:42.498817Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"668596b32dccef76b2ca592bc5cf566c","sha1":"93e1e8a3f95daa818c236df1254e2453662fb111","sha256":"782514baa1b9d30512785722b4f1f5dec8206869367e45e94104df9f00b3ce26","sha512":"fbd056cb7220c6ff0bd6ec7cbd588ca9cba8ca23d038a5ca2285a100c496e9b9e3bdfe859f3f26309cbee399d9016aea41c826f6a1e45efe087adce663259713","ssdeep":"","tlshash":"81c08c691f158a34814040a632bff75535a2037584e55900029ec8aceb28e82848ac81","size":159,"data":"","first_seen":"2026-07-14T08:35:27.516681Z","last_seen":"2026-07-14T11:50:42.499393Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d467c3a4030c509906dd0fea8214dd4a","sha1":"a3dc1dd92329b670b8af3428e4ad3aa85fca569f","sha256":"ea2c55bbdc71dd861bb0a7142e141df0e7ad21e838546771d257e9833429f7fc","sha512":"eaa21c0131af55c5f0c42111fd4e31a15f4a5d6fe7fe6a7454a36eca6e72d10b5a91424da7ab2b54dc19cfb6db63298f2de956aedde7daafcdc44013da3f5754","ssdeep":"","tlshash":"1921bde745a090171c29422919df6d4c261218975c49b93c767c326cef8c04df4b8df6","size":1188,"data":"","first_seen":"2026-07-14T08:35:27.518657Z","last_seen":"2026-07-14T11:50:42.499944Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce26e5b36448cd36d86a2e009291655a","sha1":"2c4c562fdf1432e5e3f6a56287196ce23bed733d","sha256":"df51e6858bbf03b687d57fd58f0b4b043551152b982d5e05e38df16caca5dc63","sha512":"45a72568360a36ad654867e8c5afe3acdd658bb8a8db7db890aa28b4ec88f10c17b6b973361c363bbba3e8c28ae766ae97932bd712b3bf192d54a73041324782","ssdeep":"","tlshash":"38e068e2c5050872213b128a0fca04d45f20b00bcce1bd6f3c1c00cc83d531b02e26bc","size":354,"data":"","first_seen":"2026-07-14T08:35:27.520791Z","last_seen":"2026-07-14T11:50:42.500511Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"be28b6f7ede1185a6464fe1950a59ff9","sha1":"9a901392aaf9d0309d1fbdc021b8be0918ebeba7","sha256":"e8eeade5164859364c6c23e4d0058ebd6cf7d0d2241389467742a6d9b754d429","sha512":"5ed1678fc4173a6c1035be264f57491ff9aedda688d65ed1ce9d87c76cdc4e43912bff4da68beaec78b895ec518a4475db7cfb941e64a21f27c6d96ae82c2b20","ssdeep":"","tlshash":"07900204e9ac6740d595456610005277930e5478380256644350588400950522986c00","size":47,"data":"","first_seen":"2026-06-06T18:09:51.724087Z","last_seen":"2026-07-14T11:50:42.501107Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"545c17ab456770c4c01abc054fd20b40","sha1":"b0cc7b3dfef7094af3a3dc023bc6f1aa913212e5","sha256":"4041e3f7f1e3b829914f17bdd992101c787aa6616babffefa56c7727b1696b6a","sha512":"c9731794901a407c4da9543967216db09ad73e794323be6251601a66f2c608f4b60b1c0ba2b191c996843c7f81a64d11775ee5eb4e61f069bcc520f473a0a9f3","ssdeep":"","tlshash":"2fd0229eb3e0290200b6337188b1750003ea2333b1c48c18e2284c0ae237f0eba4a08e","size":200,"data":"","first_seen":"2026-06-06T18:09:51.725652Z","last_seen":"2026-07-14T11:50:42.501684Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/etc/clientlibs/myif/master/base/internetfiliale.min.6629fb8d5c51445ddec676ca7efb59d2.js","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6629fb8d5c51445ddec676ca7efb59d2","sha1":"d196f8fba2a97e582995d5e637fc52cd4b08fc04","sha256":"d872a9b81e0b0f2e98deafb6f6dabf7b3ae4e72d89172240ea070bc10c3f62ba","sha512":"6ab8d2bbd2080ced77de366aa7cb33d0d12473707a35bb2ccebbffcf1a536d976c7f1bd4f3296dca5b78bbad07becd285180fba83d09cf50924282ea04efa997","ssdeep":"12288:gypHi83p18fESC9UKBnBCh3zzYnxVSop3rnFRsVyRM0PZ2O0:gypC8518MSC9UKBnBq3EgopzFtM0PsO0","tlshash":"0e251a8972013177c2ff217f606f260a71359d628805a498f16ec8e91af9e4171aff7e","size":1040848,"data":"","first_seen":"2026-06-20T01:50:53.430228Z","last_seen":"2026-07-14T11:50:42.464411Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/etc/clientlibs/myif/berliner-sk/sfp/s_app_info.min.b729555ea47c738ecb5ab39df1f0cfbc.js","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b729555ea47c738ecb5ab39df1f0cfbc","sha1":"ae37873cc6d42575d051ce72875ab854eec96376","sha256":"da59b6e60f7199b9535ebfe1f29885b10860dd06e7160f8922ebe3e87986547a","sha512":"23c135370f0eb306e7db7ae13cf2290001fe1d4464e45dba378abf124a189a7033581c02b5ccfde0822cceff3bd5a602a88af265a804c3f2e20f4d678ea3b69d","ssdeep":"3072:i1i4pGCSaH0V+kBcH5xYW6fhsTJ9+eWLoBtlHewVTk3FNBgkMMKL6nO4gR0G4iKc:iDQ/vZC5qhP1QPHbTk3FNBZtAotbk","tlshash":"ed442be8326db6229fa342e5109f1207727c2933680c4860b151fead77b554991bbffe","size":262451,"data":"","first_seen":"2026-07-14T08:35:27.469067Z","last_seen":"2026-07-14T11:50:42.487393Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/etc/clientlibs/myif/berliner-sk/sfp/wp_kursleiste.min.93beae6122b2b63b0915c10c81d8276c.js","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"93beae6122b2b63b0915c10c81d8276c","sha1":"b6c5611b503c394b6b55463b54865b3179d81f6b","sha256":"e0947277c702f0d9dca1ebb2104504f28f2c476aa1222bb26a26396eff6916ee","sha512":"f85814743ccd4a69161f172849736a749e197b902c3fa7ee1a60add2560894123802c8c6ea464b80d9585c34258015eaa803ae28ce3d5238dbcb4370f65cb669","ssdeep":"3072:yXSHQVvQsJ7IClRjmeHloZgeSPqRFNHDX+gN01OFTG+6mu50ytKIXMl:yXSH8xlRjmeHqmeE2ZXlFH6mu6y/Xw","tlshash":"66544bd8366db5377ae351b510af154bb2283c23680c8861f121edac22f525752fbfad","size":296197,"data":"","first_seen":"2026-04-18T14:21:07.283077Z","last_seen":"2026-07-14T11:50:42.490595Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/etc/clientlibs/myif/berliner-sk/sfp/universal_analytics.min.a8f3d908faf3794bbce36b6bb4f9b750.js","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8f3d908faf3794bbce36b6bb4f9b750","sha1":"789b888cda21c25ed8240c3c52b7b816607b0d03","sha256":"a2f9a195d6ffab922b65beaad2ef6922893d290e2a466d0e5722774ace5c39a4","sha512":"d28ca7315bed2dad7a5b8018a8108ca40ac52a7e9ba179c08ef024167dfb02ab467a0a54c520f28f9c4c528c6f292d46b7099c9749d51008e17e492e1307443f","ssdeep":"1536:e7AHf3+Nu7jP780JCDCoSFQDuuqlxhkzv8AEIdPXPPcFEZ6wU:Au7jP73Hhk5ts2U","tlshash":"42832a6c7197a87206fe12199b9f330a733a2693654b4c10e122dcd57534e4fd2e3eba","size":86080,"data":"","first_seen":"2026-06-22T16:40:02.946246Z","last_seen":"2026-07-14T11:50:42.485674Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/api/track.js","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f78d1c0285afd82b5a9d9781e10d589","sha1":"9dc741aff16af686ab4c9b77af887ef173b06277","sha256":"97d5e31d2fe2ba2f0d5bdae79f56f47c18325a567011a710ff8af19e873e2560","sha512":"a97c4bcb8878ec745be685c09659a33852dca162e0249139c068389001510174d0a8b3819cf0c326c478fcb4be17339c07241d07b33a3e0ce0d8e795cebe3c9c","ssdeep":"384:/7wnjDe+Lb75Cff7ci1C/vQO1g16QQQhg2QSQtJg+3SNb0:/7wnjDe+LbAWzCPPO51bg+W0","tlshash":"d36230ca68db31b2a56360390bffda01772e14534849ee21fd6c92056fd882d6376bdc","size":14908,"data":"","first_seen":"2026-07-14T08:35:27.483101Z","last_seen":"2026-07-14T11:50:42.496076Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"4fd4d49968474a2e666e279695eef091","sha1":"c51dc6787bd8f7ef095d7a2951a22fa193f0bee6","sha256":"8f04da5d4a92fae6000884a62bced33ccb7b6b48675626202eb3f3de89c36391","sha512":"285bde18e0f9af80d3a7d717e8e4b97f89c0f7140ef5770babd02d39ada303767f495d0db20687cd973830a1b419f8cc217d01ca978df626ee67736fbf0b79bd","ssdeep":"","tlshash":"128004553411c471f010404c1d1f334011041f11d5c401055400d05474dc5035d34143","size":36,"data":"","first_seen":"2023-04-27T12:55:11Z","last_seen":"2026-07-14T11:50:42.502237Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"berliner-sparkasse.vu/content/myif/berliner-sk/work/filiale/de/home/siegel/_jcr_content/awards/parsys/award_2522/image.img.jpg/1767880428015.jpg","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.732Z","timestamp":1784029806732,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /content/myif/berliner-sk/work/filiale/de/home/siegel/_jcr_content/awards/parsys/award_2522/image.img.jpg/1767880428015.jpg HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:07 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 38426\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"961a-6568e079d7d25\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:13 GMT\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":38426,"size_decoded":38770,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 717x298, components 3","md5":"f600099de76f19300ba945ce629c3bf2","sha1":"36934e8f1d2da07098f7b56c28bf0f15aebe4fca","sha256":"b187fdc199cff11da812c5fef8022995c87dcfd55f32b41c4542bb1684f39d92","sha512":"6ff363166f480ad6bb82a706f56a84c99c1532fcdc93c1f8ef95f6c38df9c91b44703228bfece8037f8bd1c80348fced99e4c75f63b9edeed6aae28cd78b6ca7","ssdeep":"768:x2+cE+cE+cE+vOjT7i8sv786DXYbFktaDxkva7bDfQ2l9W8nYxqp1Rc:xRcncncnGjT4vXAFCgqyjzlvnY21Rc","tlshash":"2503ae2b49080fe2640997e97f1328852f845a5c8ef579ff60974de73b1073a8d2c26e","first_seen":"2025-09-02T13:45:39.056805Z","last_seen":"2026-07-14T11:50:42.444871Z","times_seen":9,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":273,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/etc/clientlibs/myif/berliner-sk/sfp/wp_kursleiste.min.c7a8cdd4f9e8afb0aeab9f93c0aeca7a.css","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.693Z","timestamp":1784029806693,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /etc/clientlibs/myif/berliner-sk/sfp/wp_kursleiste.min.c7a8cdd4f9e8afb0aeab9f93c0aeca7a.css HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:06 GMT\r\nContent-Type: text/css\r\nContent-Length: 48383\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\ncache-control: public, max-age=3600\r\netag: \"bcff-6568e0852a0e2\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:25 GMT\r\nvary: Cookie,Accept-Encoding,User-Agent\r\nx-ua-compatible: IE=edge\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48383,"size_decoded":48741,"mime_type":"text/css","magic":"ASCII text, with very long lines (48290)","md5":"c7a8cdd4f9e8afb0aeab9f93c0aeca7a","sha1":"1994d55e2c79c7be5749a619e2499b7644692116","sha256":"042b75b0ad489429f7e0aa06876c40f9b102eb5bfb314498d45afc620399d964","sha512":"631a1778a8497f1841b47ee53bd61ce2f0a74c4724d63bdd63e60d13fdd4a4a4a4cc4f39d758e21854fd01af0af9186ef2a0761b45b6e81923cf40668ce8b867","ssdeep":"384:88sCseEKwx4wbUu1z35jTUH0sEmQOzWaXnu:fbdC935jTUHxSld","tlshash":"ef23831b5a05713bb4d72036759899cee202bd90a811ae8ff17352ac12c63fb37c766c","first_seen":"2026-04-18T14:21:07.288672Z","last_seen":"2026-07-14T11:50:42.445488Z","times_seen":7,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":57,"receive":28,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/etc/clientlibs/myif/master/base/internetfiliale/fonts/Sparkasse_web_Lt.woff","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:07.511Z","timestamp":1784029807511,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /etc/clientlibs/myif/master/base/internetfiliale/fonts/Sparkasse_web_Lt.woff HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://berliner-sparkasse.vu/etc/clientlibs/myif/master/base/internetfiliale.min.7bbf7a262e375520ab1b0e71d522881a.css\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b61adceee918187bcc15a03d59cfdec9837788ec7f5245938a2af79cef136649ef1c6aa228be893c4f0d522cd9e3b76f3; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; SPK_COOKIE=YmFua2NvZGU9MTAwNTAwMDA%3D; SPK_COOKIE_EXTRAS=YWNjdXJhY3k9aGlnaCZiYW5rY29kZT0xMDA1MDAwMCZiYW5rbmFtZT1CZXJsaW5lcitTcGFya2Fzc2Umc291cmNlPXNlcnZsZXQ%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:07 GMT\r\nContent-Type: font/woff\r\nContent-Length: 24804\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"60e4-6568e079b5d0b\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:13 GMT\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":24804,"size_decoded":25147,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 24804, version 0.0","md5":"9151e3d763b34bf1b6e812f705198bf9","sha1":"ed2d1e5abf8b173b336be7752b3a23d97beb4e10","sha256":"0d764d392e1685a777c2740c836285ddf29fc29f29b63c19546baf104c2de3d5","sha512":"f01e4f1dbf436456e4d8fc75b43125bef8e1ffd77fc753a842fb1812f68b17f1e9893dca9e706b86c56e801281b9ac5e926a6efdb297aa9c1683a7abc8c7f2ea","ssdeep":"768:En8i7c2+8ziZ4WexCgymckreh5e3MpQmc5mzEG7q:EnbpziHwCgxckreh5e8+TqEGm","tlshash":"9bb2e0a077bec11ace0835b81bbe57cda789688af0c5884bd5d560bb531b3e2503935b","first_seen":"2023-06-01T13:22:29Z","last_seen":"2026-07-14T11:50:42.446318Z","times_seen":192,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/content/myif/berliner-sk/work/filiale/de/home/_jcr_content/homepagearea/parsys/imagebox12_efe2/image.img.jpg/1782987221891.jpg","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.724Z","timestamp":1784029806724,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /content/myif/berliner-sk/work/filiale/de/home/_jcr_content/homepagearea/parsys/imagebox12_efe2/image.img.jpg/1782987221891.jpg HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:07 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 140421\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"22485-6568e08ab2104\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:31 GMT\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":140421,"size_decoded":140767,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x560, components 3","md5":"700a0b253a3aada8af6092ec5ed602c2","sha1":"5836136745c0c1ec61f855753e6eb652c94d030a","sha256":"bb440ae89bf62f0881c1afb4adadeec9e963da9cfa5a97b8d375c4fbba428250","sha512":"6e9226ec0cb9ca1013f2dc3677ad8f1ec9cca5654e999db2ea806f14c646f3dcb1039c60b34b82bfb1fe1f40d3670100a5b54211b37bf906278a6928fa6fe2dc","ssdeep":"3072:3AsdYfLRzncSYVpoaUn2GMtXCfqdnUk4VXDy4Juhc2+7+1OLx:3AsdYf1znWVfUfgCfqdUk4NDyOuhE+1e","tlshash":"20d312aabc718cd4e948d27665ccdfbce523e7e472416e28b0296d619e46f4de28c4c0","first_seen":"2026-07-14T08:35:27.506311Z","last_seen":"2026-07-14T11:50:42.447322Z","times_seen":3,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":272,"dns":0,"connect":0,"send":0,"wait":31,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-14T11:50:06.276Z","timestamp":1784029806276,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:06 GMT\r\nContent-Type: text/html;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\ncache-control: no-cache,no-store,private,max-age=0,must-revalidate\r\ncontent-language: de-DE\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nset-cookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; Path=/; HttpOnly; Secure; SameSite=lax\nIF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; Path=/; HttpOnly; Secure; SameSite=lax\nIFCLONE=fce68b158; Path=/; HttpOnly; Secure; SameSite=lax\nabtest=eyJsYXN0X3Nlc3Npb24iOiJNZUVWM0dZWW4yaWp0QWNnWTZ4T0pOVWZhSWY3UUdPViIsInNlc3Npb25fY291bnQiOjEsInZpc2l0b3JfaWQiOiJkOTRmM2Q3MC05ZTkwLTRlODktYmQ2Ny1lZTNhYmY2NzA3Y2EifQ==; Max-Age=0; Expires=Thu, 01 Dec 1994 16:00:00 GMT; Path=/de; HttpOnly; Secure; SameSite=lax\nIF_SPKDE_CHECK=SPKDE_CHECK; Expires=Thu, 13 Aug 2026 11:45:28 GMT; Path=/; HttpOnly; Secure; SameSite=lax\nTS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; Path=/; Secure\nTS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; path=/; Secure\nTS01a7420f=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; path=/de; Secure\r\nvary: Cookie,Accept-Encoding,User-Agent,If-Modified-Since\r\nx-content-type-options: nosniff\r\nx-ua-compatible: IE=edge\r\nx-xss-protection: 1; mode=block\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Adobe Experience Manager","description":"Adobe Experience Manager (AEM) is a content management solution for building websites, mobile apps and forms.","website":"https://www.adobe.com/marketing/experience-manager.html","common_platform_enumeration":"cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*","icon":"Adobe Experience Platform.svg","categories":["CMS"]}],"data":{"size":115667,"size_decoded":22780,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1467), with CRLF, LF line terminators","md5":"e98257e0d6330e0ba221aa5965f605d1","sha1":"f94be2182e2bdc6c291bb254073ca347c03ed5c9","sha256":"23f4864b178f4554d91e47f1b235212e8f614b80a09098ef0ded2b4ee768f1a7","sha512":"354fc85dae554f38f48cc0cf8e5c4164dd48c8dc7c9d90a19cd94af221c70048385307d9a62cbb006570c9c3c2ac4deb42bc948d3bba945a72b8a7a35fe4c194","ssdeep":"3072:BLH7+lPRDQhER3uuyjZPx3lz47PZU0lym8zD7sG07nXxyAMORFoUqv3991t6HBEf:Bj/b7","tlshash":"e2b3634071f7a42282338af6aab00714eda1f397e4477e80766e077a4fe5f457d07a1a","first_seen":"2026-07-14T11:50:42.447967Z","last_seen":"2026-07-14T11:50:42.447967Z","times_seen":1,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":4,"connect":28,"send":0,"wait":57,"receive":3,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/etc/clientlibs/myif/berliner-sk/sfp/s_app_info.min.102e9001b78bccbd34ccfac8ae5c9c2b.css","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.687Z","timestamp":1784029806687,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /etc/clientlibs/myif/berliner-sk/sfp/s_app_info.min.102e9001b78bccbd34ccfac8ae5c9c2b.css HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:06 GMT\r\nContent-Type: text/css\r\nContent-Length: 54794\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\ncache-control: public, max-age=3600\r\netag: \"d60a-6568e0851aac9\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:25 GMT\r\nvary: Cookie,Accept-Encoding,User-Agent\r\nx-ua-compatible: IE=edge\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54794,"size_decoded":55152,"mime_type":"text/css","magic":"ASCII text, with very long lines (1473)","md5":"102e9001b78bccbd34ccfac8ae5c9c2b","sha1":"58a20a121f560b1ab7c02a29035b1d81d8e33fd5","sha256":"8c66272d681dda11c3c7475a37ad9003698097720cb4f3a308760fef908113e1","sha512":"0b9e3fde9d3ab4b17d34dd2ccdec3381309e55bbf2daa8925161da6d4da05dbc7f7a881a4b4c725bacea7f1af0a125ef17b0366b3a0c02d1a0349dfc3fa624e5","ssdeep":"1536:nMQskuFHENHKSq1PqhPVj2FCR8+/t2qU9gBNeyIzW7AAr3bU9bsHGJfI6x:nMQskuFHENHKSq1PqhPVjUCR8+/t2qU5","tlshash":"c2333506fd2ae133956b610a12c5f48f5304b9549c1bca9ee772b27c52cc3fb364a92d","first_seen":"2026-03-27T15:48:07.719874Z","last_seen":"2026-07-14T11:50:42.449153Z","times_seen":22,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":56,"receive":28,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/content/myif/berliner-sk/work/filiale/de/home/_jcr_content/homepagearea/parsys/imagebox12_1b0/image.img.jpg/1775131742572.jpg","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.721Z","timestamp":1784029806721,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /content/myif/berliner-sk/work/filiale/de/home/_jcr_content/homepagearea/parsys/imagebox12_1b0/image.img.jpg/1775131742572.jpg HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:07 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 69449\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"10f49-6568e08a9cd2c\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:30 GMT\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69449,"size_decoded":69794,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x470, components 3","md5":"46d996f5d9bb337134f57eb304017bc0","sha1":"251c7a555d06215ea003cb2d669ca87559aa6609","sha256":"3e65d4b96c397453eaeb5b74904e72d1a35e0d1d17950e99bbcdf9cdeb2bf6f3","sha512":"095be462d7b454afa72c5db9d0ff0540b139e55f1bdc2ae17cda62eec6dd0684e146782aa67be0d5e6a4ee591d4a7913c244a78b99121a58d20ec9e0a0f4d35d","ssdeep":"1536:N1dL6qBFAIKgMClLmymYlghkI+Nfvo0oz0Q8eXcdTv1PccO/A6wN:J+q5KgB6ynl8b+xtYItZ1PccwA6wN","tlshash":"1f63029aaec2aa8c01e6f03f44ce86613edd32ba5497bc3d6635d653d070b95d40f26c","first_seen":"2026-07-14T08:35:27.429104Z","last_seen":"2026-07-14T11:50:42.449619Z","times_seen":3,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":256,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/__module/if/services/tdg?hs=3acd0ca37d4d3017aab7261d441e540e72a342fe68ec12cfc289234d2e3c825b","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.735Z","timestamp":1784029806735,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /__module/if/services/tdg?hs=3acd0ca37d4d3017aab7261d441e540e72a342fe68ec12cfc289234d2e3c825b HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:07 GMT\r\nContent-Type: image/gif\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\ncache-control: no-store\r\ncontent-language: de-DE\r\nvary: Cookie,User-Agent,If-Modified-Since\r\nx-content-type-options: nosniff\r\nx-ua-compatible: IE=edge\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45,"size_decoded":361,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"9323cda5b644259fe90fd8625c7e66c9","sha1":"b16b47d625d876833220e756403721260923f85f","sha256":"62cfb054088e29a0e576b434030c236c6101af0599e6f55cfe89b35a6186fba4","sha512":"bc938871c7b943f14a4078303e6425a1caeeb36d852ec599d591b32b37df67d84f5b8a0fa248af1ca37500dd3969d47a9985059affd43a995bc182a1b1685470","ssdeep":"","tlshash":"6a900003fbc0c00ccab0e0300b2b03822b8cc0020a380302802e208cacbe3fa2c03020","first_seen":"2023-06-01T13:22:29Z","last_seen":"2026-07-14T11:50:42.450581Z","times_seen":200,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":306,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/de/home/_jcr_content/opener/openerref3.epimgref.res1280.jpg/1782809721797.jpg","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:07.857Z","timestamp":1784029807857,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /de/home/_jcr_content/opener/openerref3.epimgref.res1280.jpg/1782809721797.jpg HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: TS01a7420f=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b8f8ec97c92a594efcfa02d8e9c4843c3b7b74347936295425c1236afd03bf9dee9cb5014c40b93bcaa6e3cc38ddd8a19; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; SPK_COOKIE=YmFua2NvZGU9MTAwNTAwMDA%3D; SPK_COOKIE_EXTRAS=YWNjdXJhY3k9aGlnaCZiYW5rY29kZT0xMDA1MDAwMCZiYW5rbmFtZT1CZXJsaW5lcitTcGFya2Fzc2Umc291cmNlPXNlcnZsZXQ%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:07 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 75237\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"125e5-6568e0c4e2392\"\r\nlast-modified: Tue, 14 Jul 2026 08:32:32 GMT\r\nset-cookie: TS0191c25c=01172bcd7bdf01fcc52df42e45b4ff7a37adadba368a65e6ca3408573686cd8f9c4163bc6711cb6db964a6d6d740b6d9ef8ec3cf3f; Path=/; Secure\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75237,"size_decoded":75729,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x357, components 3","md5":"51afb835a1a5149149aa2ae04fe03a76","sha1":"d6389bff285e034abdef1e4895e729632ef7d7e0","sha256":"faa6ef09e6bc09ab8cfa7d9eef3f7118de4d753fedf5c13cb5132b1cf2cc6be3","sha512":"85a4c1d95467e59bd197a848f0229b5169ce3a76483be8db7b3d6f14cd7f1e9158da448ee7dd255c3d4e46a94ee9b1dc208003ddaca27a537b2592fde9c7bb81","ssdeep":"1536:6dyB9iowhNHNws7PVAgcqLSKprKeGSVdN3L/D/+F:0u9Twf1Gg9WK0eFL3Lb/Q","tlshash":"b27302f7296df6f9de840399266a3f4a6bdc8b102a56360202c84c4ede83f7f4445db5","first_seen":"2026-07-14T08:35:27.484337Z","last_seen":"2026-07-14T11:50:42.451066Z","times_seen":3,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/etc/clientlibs/myif/master/base/internetfiliale.min.6629fb8d5c51445ddec676ca7efb59d2.js","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.681Z","timestamp":1784029806681,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /etc/clientlibs/myif/master/base/internetfiliale.min.6629fb8d5c51445ddec676ca7efb59d2.js HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:06 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 1040848\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\ncache-control: public, max-age=3600\r\netag: \"fe1d0-6568e078463cd\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:11 GMT\r\nvary: Cookie,Accept-Encoding,User-Agent\r\nx-ua-compatible: IE=edge\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1040848,"size_decoded":1041216,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (578)","md5":"6629fb8d5c51445ddec676ca7efb59d2","sha1":"d196f8fba2a97e582995d5e637fc52cd4b08fc04","sha256":"d872a9b81e0b0f2e98deafb6f6dabf7b3ae4e72d89172240ea070bc10c3f62ba","sha512":"6ab8d2bbd2080ced77de366aa7cb33d0d12473707a35bb2ccebbffcf1a536d976c7f1bd4f3296dca5b78bbad07becd285180fba83d09cf50924282ea04efa997","ssdeep":"12288:gypHi83p18fESC9UKBnBCh3zzYnxVSop3rnFRsVyRM0PZ2O0:gypC8518MSC9UKBnBq3EgopzFtM0PsO0","tlshash":"0e251a8972013177c2ff217f606f260a71359d628805a498f16ec8e91af9e4171aff7e","first_seen":"2026-06-20T01:50:53.430228Z","last_seen":"2026-07-14T11:50:42.464411Z","times_seen":12,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":57,"receive":152,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/de/home/_jcr_content/homepagearea/parsys/teaserarea_70d9/teaserref3.epimgref.jpg/1782901430781.jpg","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.720Z","timestamp":1784029806720,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /de/home/_jcr_content/homepagearea/parsys/teaserarea_70d9/teaserref3.epimgref.jpg/1782901430781.jpg HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: TS01a7420f=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:06 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 61770\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"f14a-6568e08a76012\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:30 GMT\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61770,"size_decoded":62114,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 560x560, components 3","md5":"08a1fa0e6f19229ee530cca884b3cc44","sha1":"57361224017eccdc18a301a9c33f0112da88a085","sha256":"2a0c3dfcf01cd97835431d285c107d39e71bfc967358caee4865ebad54648105","sha512":"b25073baf353a3a72defe4993d83ceb3c930058758a5044c193c804a736cc98395331b45b4a08d876c2661f84ed21139c114ddeb894a083b0ff1174fb3e0062b","ssdeep":"1536:DsL70OlmqWGcfsAOPdGOTu+XO1XsgdVTT/jEuLSa4:C/4q0CGO6+XO5sgdVv/jECSa4","tlshash":"f75302a7e0110abe5004f27a48429e7a6398de669cf0283f56327eb2cd10d577dc06af","first_seen":"2026-07-14T08:35:27.440163Z","last_seen":"2026-07-14T11:50:42.465949Z","times_seen":3,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":242,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/__sparkasse/frontend/setTrackingCookie.html?blz=10050000","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.734Z","timestamp":1784029806734,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /__sparkasse/frontend/setTrackingCookie.html?blz=10050000 HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:07 GMT\r\nContent-Type: image/gif\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\ncache-control: max-age=0\r\netag: \"myra-1990f0d5\"\r\nexpires: Tue, 14 Jul 2026 11:50:07 GMT\r\npermissions-policy: fullscreen=(self \"https://www.youtube.com\" \"https://youtu.be\"), geolocation=(self), camera=(), microphone=()\r\nreferrer-policy: origin\r\nset-cookie: SPK_COOKIE=YmFua2NvZGU9MTAwNTAwMDA%3D; Path=/; Max-Age=15552000; Expires=Sun, 10 Jan 2027 11:50:07 GMT; Secure; SameSite=None\nSPK_COOKIE_EXTRAS=YWNjdXJhY3k9aGlnaCZiYW5rY29kZT0xMDA1MDAwMCZiYW5rbmFtZT1CZXJsaW5lcitTcGFya2Fzc2Umc291cmNlPXNlcnZsZXQ%3D; Path=/; Max-Age=15552000; Expires=Sun, 10 Jan 2027 11:50:07 GMT; Secure; SameSite=None\r\nx-cache-group: api\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35,"size_decoded":844,"mime_type":"image/gif","magic":"GIF image data, version 87a, 1 x 1","md5":"795d7e0a2918adcc83ccc52645f46730","sha1":"79ede8d9731da250e89dc606d485b9a1792f3ec7","sha256":"08ad8fb75cf45783d5cbd5be2d2d1fc6f93caa52d8dc2e669958723c49070590","sha512":"00fd7bb4d41bb7b7d5f7bdd2e4da4eaef4aa21da130bc2651121d7ba9dad2f3ed8ca1e814d91dc5a16b213b309e5cea4fd80b2e8014db8e24127ed275ba9918b","ssdeep":"","tlshash":"9280000baa820202ca2288b00aaba300038ce33000a8830b00a0b0aefc0aba02e00c00","first_seen":"2025-12-20T23:19:07.042215Z","last_seen":"2026-07-14T11:50:42.467238Z","times_seen":62,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":306,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/content/myif/berliner-sk/work/filiale/de/home/misc/vps/gate/_jcr_content.bin/wp_infos/kursleiste?INST_ID=0004093","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:07.589Z","timestamp":1784029807589,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /content/myif/berliner-sk/work/filiale/de/home/misc/vps/gate/_jcr_content.bin/wp_infos/kursleiste?INST_ID=0004093 HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b61adceee918187bcc15a03d59cfdec9837788ec7f5245938a2af79cef136649ef1c6aa228be893c4f0d522cd9e3b76f3; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; SPK_COOKIE=YmFua2NvZGU9MTAwNTAwMDA%3D; SPK_COOKIE_EXTRAS=YWNjdXJhY3k9aGlnaCZiYW5rY29kZT0xMDA1MDAwMCZiYW5rbmFtZT1CZXJsaW5lcitTcGFya2Fzc2Umc291cmNlPXNlcnZsZXQ%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:07 GMT\r\nContent-Type: application/json;charset=UTF-8\r\nContent-Length: 1899\r\nConnection: keep-alive\r\ncache-control: public, max-age=3600\r\ncontent-language: de-DE\r\nexpires: Thu, 01 Dec 1994 16:00:00 GMT\r\nset-cookie: TS0191c25c=01172bcd7bb3eaa9306139a6fb5a07a383522d75c2e70e4b4c68e56cf0bbd25659656e911c6696d0fb18703f3600ed817144eeeeda; Path=/; Secure\r\nvary: Cookie,Accept-Encoding,User-Agent,If-Modified-Since\r\nx-content-type-options: nosniff\r\nx-ua-compatible: IE=edge\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1899,"size_decoded":2445,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"38cf1c044ad4bcbe3b3a5e1d00b83db6","sha1":"05a00f4af1a06ba6b50c2d06a170cf0460455931","sha256":"d1ba87663e3afa1275bbd7114a7975414bb208ddd0b1a1dcd75ffb469d00ae84","sha512":"de60c1e5dd7237ab076a106c59ba05d7b403e29d6c12bc4836f281fbf86fcb964bd712ff5ccfc8eb369f63abd6f5b954e2df3d4100baec2143f811480889d5d7","ssdeep":"","tlshash":"574127fb8a410cbfdf1181e0525a52d4c6c73187e6e4d9902b95de3ca3e470a757cc99","first_seen":"2026-07-14T11:50:42.468507Z","last_seen":"2026-07-14T11:50:42.468507Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/content/myif/berliner-sk/work/filiale/de/home/siegel/_jcr_content/awards/parsys/award_63f4/image.img.png/1779293318708.png","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.728Z","timestamp":1784029806728,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /content/myif/berliner-sk/work/filiale/de/home/siegel/_jcr_content/awards/parsys/award_63f4/image.img.png/1779293318708.png HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 111297\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"1b2c1-6568e079d9c65\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:13 GMT\r\nset-cookie: TS0191c25c=01172bcd7b735a304d9d623c46e7f1e8789cd7592a3912db5770cfcf3db07e6cb9fec3fa0e33f81631316323fc4c83e7ed862345a2; Path=/; Secure\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":111297,"size_decoded":111789,"mime_type":"image/png","magic":"PNG image data, 805 x 1136, 8-bit/color RGBA, non-interlaced","md5":"8f4f10eb47dd98dd7e6f91a9486fb012","sha1":"b727e0aa948a3f0715d2389a495efd44fa3885fc","sha256":"f48bd729f81bc112ed54f4cf7e6e3e3578d9b54fd8cf2d608b6831fd1c9c5c18","sha512":"de0ca72400ee522723b7e76bf90727cf5b7af99fc6ef7b8f787ccdea29f648813099e9423a4fe63bc1d82502523d4a6a1978c4ba4932e2ce851737c785e3ffde","ssdeep":"1536:6WksH86zKLvEY/+HNFE+fNJLqe3OxKj75hI6F6p6mf/ykWO3COgO2Izr3Wa279Cj:2IKn/QFXNvop6iyQCherGa6sBn37NPlR","tlshash":"20b3f143fa13f89aedc5117653c01b97f2a64611ed3be23da228d702bce569ff491484","first_seen":"2025-06-12T12:14:28.627467Z","last_seen":"2026-07-14T11:50:42.46945Z","times_seen":12,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":300,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/content/dam/myif/berliner-sk/work/bilder/icons/favicon1x.png","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:07.724Z","timestamp":1784029807724,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /content/dam/myif/berliner-sk/work/bilder/icons/favicon1x.png HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7bb3eaa9306139a6fb5a07a383522d75c2e70e4b4c68e56cf0bbd25659656e911c6696d0fb18703f3600ed817144eeeeda; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; SPK_COOKIE=YmFua2NvZGU9MTAwNTAwMDA%3D; SPK_COOKIE_EXTRAS=YWNjdXJhY3k9aGlnaCZiYW5rY29kZT0xMDA1MDAwMCZiYW5rbmFtZT1CZXJsaW5lcitTcGFya2Fzc2Umc291cmNlPXNlcnZsZXQ%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 296\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"128-6568e07b75aba\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:15 GMT\r\nset-cookie: TS0191c25c=01172bcd7b8f8ec97c92a594efcfa02d8e9c4843c3b7b74347936295425c1236afd03bf9dee9cb5014c40b93bcaa6e3cc38ddd8a19; Path=/; Secure\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":296,"size_decoded":783,"mime_type":"image/png","magic":"MS Windows icon resource - 1 icon, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"47eb2096b512df6bf2295ef2b3ff1bbf","sha1":"4110aab4d22d8337dbfdb71051f46dc5d4b226a1","sha256":"e5f816492f591a3d16c6468aaee7710c96f401939fa1041cd78f29a4b80395a1","sha512":"1148784729d786b66d3dae44a6884826a3163458120828103a51404caf4073e2366bc7805944faa842e690787716394405cc1cc9d9bcb326ba0e206fa7266ddf","ssdeep":"","tlshash":"44e07df78310142ec25887d753465014d99f041b0092b50e204b09243a91ac952e07a1","first_seen":"2023-05-04T23:24:28Z","last_seen":"2026-07-14T11:50:42.470548Z","times_seen":232,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/etc/clientlibs/myif/master/base/internetfiliale.min.7bbf7a262e375520ab1b0e71d522881a.css","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.679Z","timestamp":1784029806679,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /etc/clientlibs/myif/master/base/internetfiliale.min.7bbf7a262e375520ab1b0e71d522881a.css HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:06 GMT\r\nContent-Type: text/css\r\nContent-Length: 4172770\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\ncache-control: public, max-age=3600\r\netag: \"3fabe2-6568e078edb05\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:12 GMT\r\nvary: Cookie,Accept-Encoding,User-Agent\r\nx-ua-compatible: IE=edge\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4172770,"size_decoded":4173132,"mime_type":"text/css","magic":"ASCII text, with very long lines (731)","md5":"3dc7dda5e1ba6be59c72228838fb338a","sha1":"e019beab5f24f08d38310c43acd8993ffb583f01","sha256":"ff7069277032c35d2ab90c7b5c79f1f9b4843b5a937e4ffa6b2b65dfa9c98515","sha512":"e6f64911b846f46c62edeb523a54050badcf6c58312e15cca4eaac4b2bf0d91ac3e69b8de37359323c90af0aba0b4928e40aaa1e57ab77d47d00e1446ba0f671","ssdeep":"6144:cs1DL5hS7v8HmZ274cXFb56qmQSjza0btx+1b:cs1DL5hS7vv2F1mQSjz9+1b","tlshash":"c325a4878f6432b7da76941af74d77cf7540a8568c660bfbf606d82849cf1a91b00f28","first_seen":"2026-06-20T01:50:53.417522Z","last_seen":"2026-07-14T11:50:42.471133Z","times_seen":12,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":222,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/content/dam/myif/berliner-sk/work/bilder/nbf-logos/logo_rot.svg","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.709Z","timestamp":1784029806709,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /content/dam/myif/berliner-sk/work/bilder/nbf-logos/logo_rot.svg HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:06 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 5850\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"16da-6568e0784f83d\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:11 GMT\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5850,"size_decoded":6196,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"990af6283d4566b3a10ea806c57125e8","sha1":"3d10f82a3a63731402c3bb899dae38eab6341c7f","sha256":"3edc58dd505c594baa6bd39f1641072b5a072f16410c6d0c4bf65df2cdb1d356","sha512":"a41b1126e5b93825b7a0b0ebc31c6dfb27aa4223b2bff284e7a6d6948b925119772b6cd1bbcf88850f26335a018354541b2d0dfe5bb4dd5028c5d3586ffc0ae7","ssdeep":"96:T2gfxcfaXqd4bMp3Zrap1Zrahhehqew9n2n6xL29p:T28xcCfMp3ZC1Zgzt26Nqp","tlshash":"acc17317277ca7bcea890714822554a33beb645af039f3dcdb3b5652f4869f0406c479","first_seen":"2024-08-19T21:51:10.829935Z","last_seen":"2026-07-14T11:50:42.471648Z","times_seen":11,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":214,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/content/myif/berliner-sk/work/filiale/de/home/_jcr_content/homepagearea/parsys/imagebox12_206a/image.img.jpg/1782902618868.jpg","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.723Z","timestamp":1784029806723,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /content/myif/berliner-sk/work/filiale/de/home/_jcr_content/homepagearea/parsys/imagebox12_206a/image.img.jpg/1782902618868.jpg HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:06 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 125094\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"1e8a6-6568e08a982f4\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:30 GMT\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":125094,"size_decoded":125440,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x560, components 3","md5":"154f90e4a91aaec5121e35055e4d348d","sha1":"0ca62e3fad845e5d7aa1ac948ec41296103955dc","sha256":"b873430648e5b13bb77c6d5589737d47cff81a233aab6a25015891e25d7009da","sha512":"6ecfcbae51dc30c9479eec363d9a4e2b23365bab4b0d50b150fa3e60cc9eee1a64f38905a15d7d0f139509d26037e5bfc86ec728b081f3ef01467febadee542a","ssdeep":"3072:YqJNtO6mvNR08aP+ulEZ0T1i37H23+B5bqsNQtqn4Cn:/nZmZ0KHa+BwCZLn","tlshash":"acc31267ea4692f14b2841a97fc4bd8c1752c1c9d3a81d1ed7c8028a7d32e78e54a72f","first_seen":"2026-06-20T20:21:14.632589Z","last_seen":"2026-07-14T11:50:42.472132Z","times_seen":4,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":242,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/de/home/_jcr_content/opener/openerref2.epimgref.res1280.jpg/1764925196960.jpg","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:07.856Z","timestamp":1784029807856,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /de/home/_jcr_content/opener/openerref2.epimgref.res1280.jpg/1764925196960.jpg HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: TS01a7420f=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b8f8ec97c92a594efcfa02d8e9c4843c3b7b74347936295425c1236afd03bf9dee9cb5014c40b93bcaa6e3cc38ddd8a19; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; SPK_COOKIE=YmFua2NvZGU9MTAwNTAwMDA%3D; SPK_COOKIE_EXTRAS=YWNjdXJhY3k9aGlnaCZiYW5rY29kZT0xMDA1MDAwMCZiYW5rbmFtZT1CZXJsaW5lcitTcGFya2Fzc2Umc291cmNlPXNlcnZsZXQ%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:07 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 83433\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"145e9-6568e0c4e371a\"\r\nlast-modified: Tue, 14 Jul 2026 08:32:32 GMT\r\nset-cookie: TS0191c25c=01172bcd7bdf01fcc52df42e45b4ff7a37adadba368a65e6ca3408573686cd8f9c4163bc6711cb6db964a6d6d740b6d9ef8ec3cf3f; Path=/; Secure\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83433,"size_decoded":83925,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x357, components 3","md5":"1c512f41118be2aa8da39bf0f1ae0cee","sha1":"93462e045022462195442efa7f20a8c722aac57b","sha256":"b7f943812af89fb5e0f2fac8e9198f9f47ec02c223872bcaf3bddb31c813c19d","sha512":"e7ebd021119f66510b8ef57cfc315e6752b693c3e137e07a608cfb3e356f2eaf21349350492fc326f42a14cab071378496fa3424b5819e7da997461417254765","ssdeep":"1536:66Ze3qeqJ3TLkO+WoEEuYDdf/kyyXWlL/7QYOGb/78gGAS/HPE8C/UbHrf:4qeqf9vDfkp/llL/c2/7G1/8FoHrf","tlshash":"ce830202794a7f98960750fe16daf8effcc506ab31b184670bcb7210464aa4df87b197","first_seen":"2025-09-02T13:45:39.062141Z","last_seen":"2026-07-14T11:50:42.472699Z","times_seen":4,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/de/home/misc/break.html?type=jslog\u0026url=https%3A%2F%2Fberliner-sparkasse.vu%2F\u0026stref=checkProxy\u0026check=true\u0026hostname=berliner-sparkasse.vu\u0026salt=SwmkCRI66J\u0026hash=1912057528\u0026proof=1912057528","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:07.881Z","timestamp":1784029807881,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /de/home/misc/break.html?type=jslog\u0026url=https%3A%2F%2Fberliner-sparkasse.vu%2F\u0026stref=checkProxy\u0026check=true\u0026hostname=berliner-sparkasse.vu\u0026salt=SwmkCRI66J\u0026hash=1912057528\u0026proof=1912057528 HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: TS01a7420f=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b8f8ec97c92a594efcfa02d8e9c4843c3b7b74347936295425c1236afd03bf9dee9cb5014c40b93bcaa6e3cc38ddd8a19; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; SPK_COOKIE=YmFua2NvZGU9MTAwNTAwMDA%3D; SPK_COOKIE_EXTRAS=YWNjdXJhY3k9aGlnaCZiYW5rY29kZT0xMDA1MDAwMCZiYW5rbmFtZT1CZXJsaW5lcitTcGFya2Fzc2Umc291cmNlPXNlcnZsZXQ%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:07 GMT\r\nContent-Type: text/html;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\ncache-control: no-cache,no-store,private,max-age=0,must-revalidate\r\ncontent-language: de-DE\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nset-cookie: IFCLONE=fce68b158; Path=/; HttpOnly; Secure; SameSite=lax\nabtest=eyJsYXN0X3Nlc3Npb24iOiJNZUVWM0dZWW4yaWp0QWNnWTZ4T0pOVWZhSWY3UUdPViIsInNlc3Npb25fY291bnQiOjEsInZpc2l0b3JfaWQiOiIzYmM3OGY4Mi1mYzU1LTQwOWEtYTZiOC0wY2UxMzIxMTllNmEifQ==; Max-Age=0; Expires=Thu, 01 Dec 1994 16:00:00 GMT; Path=/de; HttpOnly; Secure; SameSite=lax\nTS0191c25c=01172bcd7bfde4fe09d0d64a842015eafb6b308ecf7dca13cd6f5205b6a6430b520164ecbe49d6253229983ad0cc1fe1b9399c88fd; Path=/; Secure\nTS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; path=/; Secure\nTS01a7420f=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; path=/de; Secure\r\nvary: Cookie,User-Agent,If-Modified-Since\r\nx-content-type-options: nosniff\r\nx-ua-compatible: IE=edge\r\nx-xss-protection: 1; mode=block\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1668,"size_decoded":2056,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1668), with no line terminators","md5":"5151e8febb8cb99924673c5cafd8817b","sha1":"4df3e5f001b9d60a96d107c312c5c2ebe79e25d1","sha256":"dc509b54efd8c49ff78a54e9d9631f53f733c571681226b3d6ee2ff4cf4dd37a","sha512":"1c029316886a440df6b2bbde91e992c48c6b4417701498f64f322a879b096a2fb04b9e27b71f676b13cbc4b0f350fc3c6217fff3d4980197a013b759be3eb931","ssdeep":"","tlshash":"e131b0c63d91f06647e26160cd7ff70bf17b66aa5499d090c2d6c0b87d74a8d8623f08","first_seen":"2026-07-14T08:35:27.499785Z","last_seen":"2026-07-14T11:50:42.473441Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/content/dam/myif/berliner-sk/work/bilder/logos/spk-logo-druck.png","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.708Z","timestamp":1784029806708,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /content/dam/myif/berliner-sk/work/bilder/logos/spk-logo-druck.png HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:06 GMT\r\nContent-Type: image/png\r\nContent-Length: 6357\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"18d5-6568e0781a894\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:11 GMT\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6357,"size_decoded":6699,"mime_type":"image/png","magic":"PNG image data, 1155 x 386, 8-bit colormap, non-interlaced","md5":"a8c622aa02e3f28dfc9cf0ecc79eeba1","sha1":"df7fd73efdc17be95eb86a4f0f57ab1044cf5fc8","sha256":"92a47005456ffc3265cfb02b76cfb77edf109347cd59ef3c755aec4ffd4e8e85","sha512":"338817195934e7746e4ed36891603f402a2fdcbc996980f11b97517d1add1a066c5c12ca235f5a3ae0c2966212abd402c1bbdc93aa075133fde72a0ec28a6ddf","ssdeep":"96:Z2KeY9JazzFzjz9KvvjiTCyj1jEnr3+AQ0WCzWg5ibY/Kk1L0AGbCj1omrWYyzFN:hvJ7yjVD0WsF50oMbbmCPD","tlshash":"06d18d5652a0998386cfcbe235b11c15611d8cd85694f4e818c4c36708bd13a73db6ea","first_seen":"2023-08-25T09:30:45Z","last_seen":"2026-07-14T11:50:42.474033Z","times_seen":14,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":214,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/api/track","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:07.878Z","timestamp":1784029807878,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"POST /api/track HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: application/json\r\nReferer: https://berliner-sparkasse.vu/\r\nContent-Length: 124\r\nOrigin: https://berliner-sparkasse.vu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b8f8ec97c92a594efcfa02d8e9c4843c3b7b74347936295425c1236afd03bf9dee9cb5014c40b93bcaa6e3cc38ddd8a19; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; SPK_COOKIE=YmFua2NvZGU9MTAwNTAwMDA%3D; SPK_COOKIE_EXTRAS=YWNjdXJhY3k9aGlnaCZiYW5rY29kZT0xMDA1MDAwMCZiYW5rbmFtZT1CZXJsaW5lcitTcGFya2Fzc2Umc291cmNlPXNlcnZsZXQ%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":124,"data":"{\"type\":\"session_start\",\"target\":\"/\",\"zone\":\"🚀 Старт\",\"sessionId\":\"0708c91f-a4a0-4076-9592-5555b4773735\",\"page\":\"/\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:07 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 11\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: content-type, authorization\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11,"size_decoded":330,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-07-14T13:13:20.468917Z","times_seen":15333,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/etc/clientlibs/myif/master/base/internetfiliale/fonts/Sparkasse_web_Bd.woff","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:07.542Z","timestamp":1784029807542,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /etc/clientlibs/myif/master/base/internetfiliale/fonts/Sparkasse_web_Bd.woff HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://berliner-sparkasse.vu/etc/clientlibs/myif/master/base/internetfiliale.min.7bbf7a262e375520ab1b0e71d522881a.css\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b61adceee918187bcc15a03d59cfdec9837788ec7f5245938a2af79cef136649ef1c6aa228be893c4f0d522cd9e3b76f3; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; SPK_COOKIE=YmFua2NvZGU9MTAwNTAwMDA%3D; SPK_COOKIE_EXTRAS=YWNjdXJhY3k9aGlnaCZiYW5rY29kZT0xMDA1MDAwMCZiYW5rbmFtZT1CZXJsaW5lcitTcGFya2Fzc2Umc291cmNlPXNlcnZsZXQ%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:07 GMT\r\nContent-Type: font/woff\r\nContent-Length: 25204\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"6274-6568e079c85ec\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:13 GMT\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25204,"size_decoded":25547,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 25204, version 0.0","md5":"3c9288223036c20cfdfa596719504cd5","sha1":"81302d27ee414265631a871a5c3cd14304c0f087","sha256":"9ae3f33664fc3b273913900b81d8812d5a6a3c098b86d93d1f0ec54259d9441d","sha512":"0de2e68d7ae3404ed1556ae15f242b5d3d3c62fe6544f8a2fe8d5646a34e01be4ba912d61ed4189bae012be6ed4e7b986bf641b80fd351268ebe44d6d4b6989e","ssdeep":"384:EuIq/yaaCx08nwz7MA9em6f4fcdRMabYv7kiAD1IpzHIHtzIYRjmjlohvq:Ee/ya28wz7pO4fE9jtDcHq8Hq9q","tlshash":"54b2e1a87dcbf515fe21bcfd97e23a18d250305ee510d80ba5e4267b5d835e43084b65","first_seen":"2023-05-06T05:37:01Z","last_seen":"2026-07-14T11:50:42.476089Z","times_seen":222,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/etc/clientlibs/myif/master/base/internetfiliale/images/s_mobile_online_banking.svg","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.711Z","timestamp":1784029806711,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /etc/clientlibs/myif/master/base/internetfiliale/images/s_mobile_online_banking.svg HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:06 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 977\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"3d1-6568e0785bb8d\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:11 GMT\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":977,"size_decoded":1321,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b4dfeb75f6b6d9fd52b9ba227d196f54","sha1":"3772b9c96ea9e2ed719f5c12072fbd8f38c34dd6","sha256":"f7cc788153b12751e35000caad710e660aa82f1896d3511d161320f6ab806ca9","sha512":"aa21d1319a499980ed4a5d5fda9ac7a748df83a4fb1deb5d770ab86355bf6588c34fcc5ef4c5bf60dc4a930ce9341ac1076d0109655c785130ad9f1d079c84a8","ssdeep":"","tlshash":"971194fe07161bada090abc829697c0e3050e8823074d2d49f97a074fc8d4d7e595cf5","first_seen":"2026-03-27T15:48:07.696943Z","last_seen":"2026-07-14T11:50:42.476585Z","times_seen":53,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":213,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/de/home/_jcr_content/homepagearea/parsys/teaserarea_70d9/teaserref1.epimgref.jpg/1782901026190.jpg","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.717Z","timestamp":1784029806717,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /de/home/_jcr_content/homepagearea/parsys/teaserarea_70d9/teaserref1.epimgref.jpg/1782901026190.jpg HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: TS01a7420f=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:06 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 77497\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"12eb9-6568e08a796c3\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:30 GMT\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77497,"size_decoded":77842,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 560x560, components 3","md5":"965f214f9dcfe565499a4e5780cae19d","sha1":"38f775fa3bafd401c475e3cd465b314fc1d9e734","sha256":"02f74c91672ee88c8af412fe2aee681cba9c4bf81c2ec987db5d3b7f69d9f609","sha512":"87d0365212acc4421becc3ef70ccc71a02fb25ab17bdc4782fb86c33896eab58d81f6a933e7fd131a3b4ef16bc1e54aa476d1527bea107fe5d5ce11f546a9763","ssdeep":"1536:D6+dhdtGUoCtGnItUfXHICuUS8voNHKJn38CQtD8udsHWbe:bdhhrtCItUfXqUeNHInsti7HWC","tlshash":"687302ff69a3bad99218c330811d973dca0e595c74022a9ebdb551ec5e173c21682cfe","first_seen":"2026-06-20T01:50:53.393452Z","last_seen":"2026-07-14T11:50:42.477098Z","times_seen":5,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":212,"dns":0,"connect":0,"send":0,"wait":32,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/de/home/_jcr_content/homepagearea/parsys/teaserarea_70d9/teaserref2.epimgref.jpg/1782901058211.jpg","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.718Z","timestamp":1784029806718,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /de/home/_jcr_content/homepagearea/parsys/teaserarea_70d9/teaserref2.epimgref.jpg/1782901058211.jpg HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: TS01a7420f=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:06 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 47741\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"ba7d-6568e08a767e2\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:30 GMT\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47741,"size_decoded":48085,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 560x560, components 3","md5":"09142d4345065635612fd5076e91ad2d","sha1":"b27729b864d33dcfd9faa2d1929e4d1a8953366e","sha256":"4063fd1051f60ab05e23eae910b2ce3c548d5ca53a1faa63567fb7d2788ef305","sha512":"045bc45703ff417ecf3c48ceff256c0972d22c13e07210a4508479be2b941d515fb9cb32e5674b582ada8be87ef3a03d6767eb72bae1d5ab6389fde58b12cc61","ssdeep":"768:DTatCXgHPFAXAi3J9rWFjjr37N5U6SKH22wgACQrJyxjhmFlUuNX/NtuCKgTUUDi:DutCXY9AXB3iFjjr3RqFKH1LACQrJ2kQ","tlshash":"9623f14de89457dca5a3e8713e589413eef83264b0b0a69cfc0b07529b34cf98619e37","first_seen":"2026-07-14T08:35:27.48829Z","last_seen":"2026-07-14T11:50:42.477573Z","times_seen":3,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":243,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/etc/clientlibs/myif/master/base/internetfiliale/fonts/SparkasseHead_web_Rg.woff","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:07.510Z","timestamp":1784029807510,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /etc/clientlibs/myif/master/base/internetfiliale/fonts/SparkasseHead_web_Rg.woff HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://berliner-sparkasse.vu/etc/clientlibs/myif/master/base/internetfiliale.min.7bbf7a262e375520ab1b0e71d522881a.css\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b61adceee918187bcc15a03d59cfdec9837788ec7f5245938a2af79cef136649ef1c6aa228be893c4f0d522cd9e3b76f3; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; SPK_COOKIE=YmFua2NvZGU9MTAwNTAwMDA%3D; SPK_COOKIE_EXTRAS=YWNjdXJhY3k9aGlnaCZiYW5rY29kZT0xMDA1MDAwMCZiYW5rbmFtZT1CZXJsaW5lcitTcGFya2Fzc2Umc291cmNlPXNlcnZsZXQ%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:07 GMT\r\nContent-Type: font/woff\r\nContent-Length: 26076\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"65dc-6568e079c764c\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:13 GMT\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":26076,"size_decoded":26419,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 26076, version 0.0","md5":"e05e5d13fbc4a11f61ac1628729d3187","sha1":"318c1d7cae7f8d67fe7b854204161ed0de27b872","sha256":"addffd48c2bb1fe1e4409899c79d5b2beca7d72c4d80575401091f09ab0eae52","sha512":"2e2d38b067b79da2149f702919daa1c65664897a1886391a6777e23b6a93e4b10d290eedc02a43c85d2a4487a1f5b75e7267edaa03859d7d9c7978f5aebdeee3","ssdeep":"384:4IsiXdcU7plXmfnIkt+iPTxpfRC0eosTa75oyLAt4a7FaIHSImfD3aVjiqotvq:BsiXdj7qnFAilVROopL44SaO8D38+q","tlshash":"ebc2e0237375de9fcd1358b93383475a0161d4adfa9d10bbca560af254c387eb024b6a","first_seen":"2023-05-04T02:51:58Z","last_seen":"2026-07-14T11:50:42.47846Z","times_seen":222,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/content/myif/berliner-sk/work/filiale/de/home/misc/break.html?type=jslog\u0026url=https%3A%2F%2Fberliner-sparkasse.vu%2F\u0026stref=checkProxy\u0026check=true\u0026hostname=berliner-sparkasse.vu\u0026salt=SwmkCRI66J\u0026hash=1912057528\u0026proof=1912057528","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:07.581Z","timestamp":1784029807581,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /content/myif/berliner-sk/work/filiale/de/home/misc/break.html?type=jslog\u0026url=https%3A%2F%2Fberliner-sparkasse.vu%2F\u0026stref=checkProxy\u0026check=true\u0026hostname=berliner-sparkasse.vu\u0026salt=SwmkCRI66J\u0026hash=1912057528\u0026proof=1912057528 HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b61adceee918187bcc15a03d59cfdec9837788ec7f5245938a2af79cef136649ef1c6aa228be893c4f0d522cd9e3b76f3; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; SPK_COOKIE=YmFua2NvZGU9MTAwNTAwMDA%3D; SPK_COOKIE_EXTRAS=YWNjdXJhY3k9aGlnaCZiYW5rY29kZT0xMDA1MDAwMCZiYW5rbmFtZT1CZXJsaW5lcitTcGFya2Fzc2Umc291cmNlPXNlcnZsZXQ%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:07 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nlocation: https://berliner-sparkasse.vu/de/home/misc/break.html?type=jslog\u0026url=https%3A%2F%2Fberliner-sparkasse.vu%2F\u0026stref=checkProxy\u0026check=true\u0026hostname=berliner-sparkasse.vu\u0026salt=SwmkCRI66J\u0026hash=1912057528\u0026proof=1912057528\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T14:18:31.545443Z","times_seen":17239367,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/etc/clientlibs/myif/master/base/internetfiliale/fonts/Sparkasse_web_Md.woff","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:07.378Z","timestamp":1784029807378,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /etc/clientlibs/myif/master/base/internetfiliale/fonts/Sparkasse_web_Md.woff HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://berliner-sparkasse.vu/etc/clientlibs/myif/master/base/internetfiliale.min.7bbf7a262e375520ab1b0e71d522881a.css\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b61adceee918187bcc15a03d59cfdec9837788ec7f5245938a2af79cef136649ef1c6aa228be893c4f0d522cd9e3b76f3; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; SPK_COOKIE=YmFua2NvZGU9MTAwNTAwMDA%3D; SPK_COOKIE_EXTRAS=YWNjdXJhY3k9aGlnaCZiYW5rY29kZT0xMDA1MDAwMCZiYW5rbmFtZT1CZXJsaW5lcitTcGFya2Fzc2Umc291cmNlPXNlcnZsZXQ%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:07 GMT\r\nContent-Type: font/woff\r\nContent-Length: 25248\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"62a0-6568e079a5b3a\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:13 GMT\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25248,"size_decoded":25591,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 25248, version 0.0","md5":"5bc06337fb487ad72bca567af5089c65","sha1":"a3e876927b4fa9a670db74a12bfacea2aca7e27d","sha256":"7b2888ded6c1e95affe8813aaba8fbcd060d774451c10afa71227616e9af159f","sha512":"4cf33e5db490ff870db63d67a3580c14969e75444c44bcba13c176a49ab2f9dae6ddc9198cc8ba3dda7c03cb31513446176b876930b3b8da22f1d1ba5527370b","ssdeep":"768:/A7qXii0enoX4NDTDwGAY4Tn9wEgiWypq:/Acv0roXMtTn9bguQ","tlshash":"4eb2e1c911fa7e81fd1770bb1ed007ec4b84668ba23dd41a12657d86e71b2921e1cef2","first_seen":"2023-05-04T02:51:58Z","last_seen":"2026-07-14T11:50:42.484226Z","times_seen":218,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/content/myif/berliner-sk/work/filiale/de/home/_jcr_content/homepagearea/parsys/imagebox12_a17a/image.img.jpg/1778667396730.jpg","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.726Z","timestamp":1784029806726,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /content/myif/berliner-sk/work/filiale/de/home/_jcr_content/homepagearea/parsys/imagebox12_a17a/image.img.jpg/1778667396730.jpg HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:07 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 85771\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"14f0b-6568e08ac3275\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:31 GMT\r\nset-cookie: TS0191c25c=01172bcd7b735a304d9d623c46e7f1e8789cd7592a3912db5770cfcf3db07e6cb9fec3fa0e33f81631316323fc4c83e7ed862345a2; Path=/; Secure\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85771,"size_decoded":86263,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x442, components 3","md5":"d3a44a8c228624027609c18db22a8fb5","sha1":"706e8b9fb92e4c49de67ac062d42c0da71711105","sha256":"9aa62551db5d8a941ade520b1560b85dfd75c950cc6453fffef6611fdaed6dc8","sha512":"d08786c5bad37b5dd2630d9184505dd034a2ff720c95a203f6a7925385073b9daaec4fcd50729ac23003f5d4f821e8f0d70e453ed7af3365a1baff755ec60163","ssdeep":"1536:ZXLJNyVSCV0G6k3Uq9y7VAL64hbjWPITXGZeEVtQ1wxyYDvOhZWccLtVZb9WnBcH:tLXgCiBg7o6WHWPI7uLV21GyMQWccLtT","tlshash":"1b83026f3622afa49c8f953d86a3029197d3b0a6b6f1401f718392fed210ddddc69584","first_seen":"2026-07-14T08:35:27.501438Z","last_seen":"2026-07-14T11:50:42.485093Z","times_seen":3,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":270,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/etc/clientlibs/myif/berliner-sk/sfp/universal_analytics.min.a8f3d908faf3794bbce36b6bb4f9b750.js","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.700Z","timestamp":1784029806700,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /etc/clientlibs/myif/berliner-sk/sfp/universal_analytics.min.a8f3d908faf3794bbce36b6bb4f9b750.js HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:06 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 86080\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\ncache-control: public, max-age=3600\r\netag: \"15040-6568e078296dd\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:11 GMT\r\nvary: Cookie,Accept-Encoding,User-Agent\r\nx-ua-compatible: IE=edge\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86080,"size_decoded":86446,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65471), with CRLF line terminators","md5":"a8f3d908faf3794bbce36b6bb4f9b750","sha1":"789b888cda21c25ed8240c3c52b7b816607b0d03","sha256":"a2f9a195d6ffab922b65beaad2ef6922893d290e2a466d0e5722774ace5c39a4","sha512":"d28ca7315bed2dad7a5b8018a8108ca40ac52a7e9ba179c08ef024167dfb02ab467a0a54c520f28f9c4c528c6f292d46b7099c9749d51008e17e492e1307443f","ssdeep":"1536:e7AHf3+Nu7jP780JCDCoSFQDuuqlxhkzv8AEIdPXPPcFEZ6wU:Au7jP73Hhk5ts2U","tlshash":"42832a6c7197a87206fe12199b9f330a733a2693654b4c10e122dcd57534e4fd2e3eba","first_seen":"2026-06-22T16:40:02.946246Z","last_seen":"2026-07-14T11:50:42.485674Z","times_seen":7,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":30,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/content/myif/berliner-sk/work/filiale/de/home/siegel/_jcr_content/awards/parsys/award_6cc/image.img.png/1775552972241.png","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.731Z","timestamp":1784029806731,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /content/myif/berliner-sk/work/filiale/de/home/siegel/_jcr_content/awards/parsys/award_6cc/image.img.png/1775552972241.png HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 69554\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"10fb2-6568e079d2f04\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:13 GMT\r\nset-cookie: TS0191c25c=01172bcd7b61adceee918187bcc15a03d59cfdec9837788ec7f5245938a2af79cef136649ef1c6aa228be893c4f0d522cd9e3b76f3; Path=/; Secure\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69554,"size_decoded":70045,"mime_type":"image/png","magic":"PNG image data, 600 x 791, 8-bit/color RGBA, non-interlaced","md5":"e021db7994a7d4eaa60fe543c26b9b7e","sha1":"852f614f765f34e1dc5ab995158047779be6bb21","sha256":"98224daf38a2a03a20b59dbd17d7254be56bc579665f59a2dd8a753ab110736b","sha512":"06c23073b4ccb4d6722db01d1172c56c8ab4f73cede59b1797bfe5753ffde506cc466770b14e55831d4605899040803c4592b93de890b467cfc67dbb17f8e263","ssdeep":"1536:iGGGjfjveYyR4G70H0jC8P7YCAOr3nzZz0u4Qhl1zTahXplUL50snPZ8PPE:b7vbyR4F8PqOd0uR9dPZT","tlshash":"4063e1d3a34b1ec291db5e3a455ade8840533ff97ae6b4c865d1c84da04bf016bba484","first_seen":"2026-01-08T12:00:10.661622Z","last_seen":"2026-07-14T11:50:42.486179Z","times_seen":4,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":273,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/content/myif/berliner-sk/work/filiale/de/home/siegel/_jcr_content/awards/parsys/award_6dab/image.img.jpg/1767801985716.jpg","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.733Z","timestamp":1784029806733,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /content/myif/berliner-sk/work/filiale/de/home/siegel/_jcr_content/awards/parsys/award_6dab/image.img.jpg/1767801985716.jpg HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:07 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 119251\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"1d1d3-6568e07a3ce58\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:13 GMT\r\nset-cookie: TS0191c25c=01172bcd7b61adceee918187bcc15a03d59cfdec9837788ec7f5245938a2af79cef136649ef1c6aa228be893c4f0d522cd9e3b76f3; Path=/; Secure\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119251,"size_decoded":119744,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 878x1133, components 3","md5":"1cd5bb5aef1a678221301879a8ba83a3","sha1":"a2be332d7ccdfc2f76ef7d2f1d77c3329c69ece4","sha256":"5a5008d4f085dc1e14ee86e26d69aabe4bc5c3cf7db2892d89e42d9874c791ce","sha512":"a6c1add2cb028391999ad57487ae20a832ef6ecda6fbd552180a0311482296ded78d91738b1fa342144559d6e839752caaa2d9f20aed294661cc7a9a5f6e55eb","ssdeep":"3072:lIkIzmLHKJE7yDADn61zgPtxQ3UVAib1a1oEQbL:lIknKJEuDAD6tG1VA8NEQbL","tlshash":"16c39d538c081e57656dc33abe171f3c6f4cae19a5d23beb01b10e8637a82610d9f16e","first_seen":"2025-11-09T14:13:30.234291Z","last_seen":"2026-07-14T11:50:42.486755Z","times_seen":5,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":314,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/etc/clientlibs/myif/berliner-sk/sfp/s_app_info.min.b729555ea47c738ecb5ab39df1f0cfbc.js","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.689Z","timestamp":1784029806689,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /etc/clientlibs/myif/berliner-sk/sfp/s_app_info.min.b729555ea47c738ecb5ab39df1f0cfbc.js HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:06 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 262451\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\ncache-control: public, max-age=3600\r\netag: \"40133-6568e085252c1\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:25 GMT\r\nvary: Cookie,Accept-Encoding,User-Agent\r\nx-ua-compatible: IE=edge\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":262451,"size_decoded":262818,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (43064)","md5":"b729555ea47c738ecb5ab39df1f0cfbc","sha1":"ae37873cc6d42575d051ce72875ab854eec96376","sha256":"da59b6e60f7199b9535ebfe1f29885b10860dd06e7160f8922ebe3e87986547a","sha512":"23c135370f0eb306e7db7ae13cf2290001fe1d4464e45dba378abf124a189a7033581c02b5ccfde0822cceff3bd5a602a88af265a804c3f2e20f4d678ea3b69d","ssdeep":"3072:i1i4pGCSaH0V+kBcH5xYW6fhsTJ9+eWLoBtlHewVTk3FNBgkMMKL6nO4gR0G4iKc:iDQ/vZC5qhP1QPHbTk3FNBZtAotbk","tlshash":"ed442be8326db6229fa342e5109f1207727c2933680c4860b151fead77b554991bbffe","first_seen":"2026-07-14T08:35:27.469067Z","last_seen":"2026-07-14T11:50:42.487393Z","times_seen":3,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":57,"receive":86,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/etc/designs/myif/master/filiale/cat-kundenansprache/mod-beraterchat/img/linda_lightmode.svg","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.712Z","timestamp":1784029806712,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /etc/designs/myif/master/filiale/cat-kundenansprache/mod-beraterchat/img/linda_lightmode.svg HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:06 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 25546\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"63ca-6568e07b46cb9\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:14 GMT\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25546,"size_decoded":25893,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a1a93b93d0664735a135754e0a54535e","sha1":"d1bc63eb86d0f85881bea099719d410a5fcfe05e","sha256":"bd3dac7ee5a954866d0253cc472f0aca2288324c80b84e1288f79208719e7086","sha512":"3ea80f9060adc88225121af24e6e19612de9398f9747b1bd3c5494f763f702829c17088bf4aa218aa767a0a34a159b303a4e1cefa534d01f525173ebfe2cce1d","ssdeep":"384:gbHwRmDkNvpiXvmKvPLdqkYza92LHGvDH06RkNgPzo36/v3yL:g/OKn5YzfjMHWNQtve","tlshash":"2bb2b69473aa82fcf104b3b84767b8382e1629d63922d05c87f92c66d9a051f4caddd7","first_seen":"2024-10-17T22:56:52.174749Z","last_seen":"2026-07-14T11:50:42.48794Z","times_seen":115,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":212,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/de/home/_jcr_content/opener/openerref1.epimgref.png/1780035908849.png","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.713Z","timestamp":1784029806713,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /de/home/_jcr_content/opener/openerref1.epimgref.png/1780035908849.png HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: TS01a7420f=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:06 GMT\r\nContent-Type: image/png\r\nContent-Length: 918179\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"e02a3-6568e0857772b\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:25 GMT\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":918179,"size_decoded":918524,"mime_type":"image/png","magic":"PNG image data, 1280 x 357, 8-bit/color RGBA, non-interlaced","md5":"ed68774878258701056cea82d23fc856","sha1":"9677e182f2bf0306249212c19890da7fbbb110cb","sha256":"b4d87894e3035ccd9eeabd95008c20bed300f517ec580beeb2f67cfd87f4c92b","sha512":"814c343a9844b26117dc264cc942a3fc4819e35de1873bd75e7c9c4c61437f4f0e15968ed3a3bc7eeca0e29b8161a9c4c4db7c1881b37ac2d9fcb48625d93903","ssdeep":"24576:CV+9bq1Z+sL4dnZddKxX3JgscwXJb6wb3r7Gk0uo:CkbqX+sL4nCRJuwb3W","tlshash":"e21533dae6ddb7b5c38c3c25c9674e2afc3d8729a9044f1d7706dcae942e36015231a8","first_seen":"2026-07-14T08:35:27.487089Z","last_seen":"2026-07-14T11:50:42.488916Z","times_seen":3,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":212,"dns":0,"connect":0,"send":0,"wait":32,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/content/myif/berliner-sk/work/filiale/de/home/_jcr_content/homepagearea/parsys/imagebox12_41fd/image.img.jpg/1775131709046.jpg","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.722Z","timestamp":1784029806722,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /content/myif/berliner-sk/work/filiale/de/home/_jcr_content/homepagearea/parsys/imagebox12_41fd/image.img.jpg/1775131709046.jpg HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:06 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 58154\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"e32a-6568e08a9e884\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:30 GMT\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":58154,"size_decoded":58498,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1278x469, components 3","md5":"f0674254175054f32359d3c62709d17c","sha1":"f053cbd3810b5978f2dbb44724fd6e2c4ea91677","sha256":"3781bcd3676981dc2c8623b0d122cd631c39d3fa4251be9f04bad1bd55f41727","sha512":"d6eed972498853e34f94946a0450bf2fadef85d77c29cdc926412e830f905ea76f0af63d3e845db0fb36ef2a2fd388b6119c8e83f1b6dbb720541baad659e5f4","ssdeep":"1536:LY+Cq72F98hw2DsLKzDH/5ST0s5WbVAxqI7ydhS:jC/Gw2RDHUzpAW","tlshash":"f343011e641cf86402f68a60733bc9a8ea76ee53b19e6d8d3c576f46f454cce090298c","first_seen":"2026-07-14T08:35:27.504596Z","last_seen":"2026-07-14T11:50:42.489489Z","times_seen":3,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":243,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/etc/clientlibs/myif/master/base/internetfiliale/fonts/pictos-if.woff","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:07.383Z","timestamp":1784029807383,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /etc/clientlibs/myif/master/base/internetfiliale/fonts/pictos-if.woff HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://berliner-sparkasse.vu/etc/clientlibs/myif/master/base/internetfiliale.min.7bbf7a262e375520ab1b0e71d522881a.css\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b61adceee918187bcc15a03d59cfdec9837788ec7f5245938a2af79cef136649ef1c6aa228be893c4f0d522cd9e3b76f3; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; SPK_COOKIE=YmFua2NvZGU9MTAwNTAwMDA%3D; SPK_COOKIE_EXTRAS=YWNjdXJhY3k9aGlnaCZiYW5rY29kZT0xMDA1MDAwMCZiYW5rbmFtZT1CZXJsaW5lcitTcGFya2Fzc2Umc291cmNlPXNlcnZsZXQ%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:07 GMT\r\nContent-Type: font/woff\r\nContent-Length: 220208\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"35c30-6568e079b071a\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:13 GMT\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":220208,"size_decoded":220553,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 220208, version 1.0","md5":"0adc78d4748ef49494120467b8aca82f","sha1":"7dfe5a2f33a6f28857c08b90eabdc052beaedbeb","sha256":"05ea717d5eec5c4ddbe0dafa2adc63b0a7a0d111450ee2feb89a97bd16c66777","sha512":"78ce3b8855127998824bf8a14febb69cb2327304ed569573368192bf35dff7d13f48c52a6abdc39b85809659b85b8ac7fd2d5bc25545b2c74beb2a8b61565c2e","ssdeep":"6144:0JG4b7cb+FZWzT3S96MWSSh9FRc+feQsT9gbLgh4Gri:UG4b++FMjS9M7FFfej9gnFGr","tlshash":"50246c5697aaee8edd02aa794943c03394fdb908df299a1efec5185cd40acb0cd7d604","first_seen":"2025-11-24T08:21:20.895246Z","last_seen":"2026-07-14T11:50:42.490104Z","times_seen":83,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/etc/clientlibs/myif/berliner-sk/sfp/wp_kursleiste.min.93beae6122b2b63b0915c10c81d8276c.js","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.695Z","timestamp":1784029806695,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /etc/clientlibs/myif/berliner-sk/sfp/wp_kursleiste.min.93beae6122b2b63b0915c10c81d8276c.js HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:06 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 296197\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\ncache-control: public, max-age=3600\r\netag: \"48505-6568e0853b252\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:25 GMT\r\nvary: Cookie,Accept-Encoding,User-Agent\r\nx-ua-compatible: IE=edge\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":296197,"size_decoded":296564,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (48127), with CRLF line terminators","md5":"93beae6122b2b63b0915c10c81d8276c","sha1":"b6c5611b503c394b6b55463b54865b3179d81f6b","sha256":"e0947277c702f0d9dca1ebb2104504f28f2c476aa1222bb26a26396eff6916ee","sha512":"f85814743ccd4a69161f172849736a749e197b902c3fa7ee1a60add2560894123802c8c6ea464b80d9585c34258015eaa803ae28ce3d5238dbcb4370f65cb669","ssdeep":"3072:yXSHQVvQsJ7IClRjmeHloZgeSPqRFNHDX+gN01OFTG+6mu50ytKIXMl:yXSH8xlRjmeHqmeE2ZXlFH6mu6y/Xw","tlshash":"66544bd8366db5377ae351b510af154bb2283c23680c8861f121edac22f525752fbfad","first_seen":"2026-04-18T14:21:07.283077Z","last_seen":"2026-07-14T11:50:42.490595Z","times_seen":7,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":27,"send":0,"wait":56,"receive":88,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/content/dam/myif/berliner-sk/work/bilder/nbf-logos/logo_weiss.svg","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.707Z","timestamp":1784029806707,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /content/dam/myif/berliner-sk/work/bilder/nbf-logos/logo_weiss.svg HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:07 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 5850\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"16da-6568e07837585\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:11 GMT\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5850,"size_decoded":6196,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"25f1de4b9f6a6a5d1674a1cf9a415a15","sha1":"0d0a0413ff43540cf44d321802655752d2fbb1fd","sha256":"ac82d4a148ba6e4e654aac242d48baf7ebe83ea303ddcad420ddb017657ed3b6","sha512":"3881b53f769e1a851cf1682fc78fdf1e4296da2004bdca73b86862c84db0138664e06ff8d426a7e8aae8ff8d0d0f1dad26bdf042e01fb984d0bfc9815319dccb","ssdeep":"96:T2gfxcfaXqd4bMp3Zrap1Zrahhehqew9n2n6xL29v:T28xcCfMp3ZC1Zgzt26Nqv","tlshash":"33c17317277ca7bcea890714822554a33beb645af039f3dcdb3b8652f4869f0406c479","first_seen":"2024-08-19T21:51:10.826837Z","last_seen":"2026-07-14T11:50:42.495012Z","times_seen":10,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":312,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/content/dam/myif/berliner-sk/work/bilder/icons/apple-touch-icon-180x180px.png","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:07.722Z","timestamp":1784029807722,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /content/dam/myif/berliner-sk/work/bilder/icons/apple-touch-icon-180x180px.png HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7bb3eaa9306139a6fb5a07a383522d75c2e70e4b4c68e56cf0bbd25659656e911c6696d0fb18703f3600ed817144eeeeda; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; SPK_COOKIE=YmFua2NvZGU9MTAwNTAwMDA%3D; SPK_COOKIE_EXTRAS=YWNjdXJhY3k9aGlnaCZiYW5rY29kZT0xMDA1MDAwMCZiYW5rbmFtZT1CZXJsaW5lcitTcGFya2Fzc2Umc291cmNlPXNlcnZsZXQ%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 1829\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"725-6568e079a4b4e\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:13 GMT\r\nset-cookie: TS0191c25c=01172bcd7b6c816c55445eb3a7b8a8ecc371fc0bb3f41e2024b1916a055554da2186663a3717a701a4ee307fee790209e013ad4dc7; Path=/; Secure\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1829,"size_decoded":2317,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"6371e51806dc8417fdca081a5b3b790f","sha1":"60f6247a2d7d9656e4042c31cdf5323f4265875b","sha256":"70718559e06e4f00752feb8a7ced473f42875d45b181d89d49d76991e7cb5d7a","sha512":"3e3e26b2605f0e722329aebda67c9586c43a75b4f554d59cf225f32fd951aa5b954ba5822c0cf8b2dd9122204b89d15ae383d34f5ddb7756878e3f2bece36725","ssdeep":"","tlshash":"3a312bbacbba5cc4ce14e1f7f265109520a6df0cf31e345c50aa2ea3dc54e16d912c80","first_seen":"2023-05-04T23:24:28Z","last_seen":"2026-07-14T11:50:42.495546Z","times_seen":242,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/api/track.js","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:07.792Z","timestamp":1784029807792,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /api/track.js HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b8f8ec97c92a594efcfa02d8e9c4843c3b7b74347936295425c1236afd03bf9dee9cb5014c40b93bcaa6e3cc38ddd8a19; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; SPK_COOKIE=YmFua2NvZGU9MTAwNTAwMDA%3D; SPK_COOKIE_EXTRAS=YWNjdXJhY3k9aGlnaCZiYW5rY29kZT0xMDA1MDAwMCZiYW5rbmFtZT1CZXJsaW5lcitTcGFya2Fzc2Umc291cmNlPXNlcnZsZXQ%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:07 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14942,"size_decoded":15191,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"5f78d1c0285afd82b5a9d9781e10d589","sha1":"9dc741aff16af686ab4c9b77af887ef173b06277","sha256":"97d5e31d2fe2ba2f0d5bdae79f56f47c18325a567011a710ff8af19e873e2560","sha512":"a97c4bcb8878ec745be685c09659a33852dca162e0249139c068389001510174d0a8b3819cf0c326c478fcb4be17339c07241d07b33a3e0ce0d8e795cebe3c9c","ssdeep":"384:/7wnjDe+Lb75Cff7ci1C/vQO1g16QQQhg2QSQtJg+3SNb0:/7wnjDe+LbAWzCPPO51bg+W0","tlshash":"d36230ca68db31b2a56360390bffda01772e14534849ee21fd6c92056fd882d6376bdc","first_seen":"2026-07-14T08:35:27.483101Z","last_seen":"2026-07-14T11:50:42.496076Z","times_seen":3,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/etc/clientlibs/myif/master/base/internetfiliale/fonts/Sparkasse_web_Rg.woff","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:07.380Z","timestamp":1784029807380,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /etc/clientlibs/myif/master/base/internetfiliale/fonts/Sparkasse_web_Rg.woff HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://berliner-sparkasse.vu/etc/clientlibs/myif/master/base/internetfiliale.min.7bbf7a262e375520ab1b0e71d522881a.css\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b61adceee918187bcc15a03d59cfdec9837788ec7f5245938a2af79cef136649ef1c6aa228be893c4f0d522cd9e3b76f3; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; SPK_COOKIE=YmFua2NvZGU9MTAwNTAwMDA%3D; SPK_COOKIE_EXTRAS=YWNjdXJhY3k9aGlnaCZiYW5rY29kZT0xMDA1MDAwMCZiYW5rbmFtZT1CZXJsaW5lcitTcGFya2Fzc2Umc291cmNlPXNlcnZsZXQ%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:07 GMT\r\nContent-Type: font/woff\r\nContent-Length: 25076\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"61f4-6568e079a66f2\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:13 GMT\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25076,"size_decoded":25419,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 25076, version 0.0","md5":"b1a37aec8a915b633ed040bab5213e3a","sha1":"278d6e0d619204d1c74318c2c9d0c33dc9fa8abd","sha256":"43a2c75ca73d8c1101ff7ae617e6dbc6934e8aa1cd72d64ce50908ac297156cb","sha512":"b40c9245a86b2c919f6f300179e007aed1442246770175625b22bea8f4abab5e86a5d050c11befe5b0743c10277e07ea246da91f6019c8928c3fd4ace3968251","ssdeep":"768:39jMDidZtJfAsJA2etrQ4ZsCUHqfFAGZp6Gq:VMmdZZA2etrfnUiH6V","tlshash":"d5b2e19d1f4f7d439d6a2dbf6f8727902c441a8aa019b42bd23830f2d9d62944515ebc","first_seen":"2023-05-04T02:51:58Z","last_seen":"2026-07-14T11:50:42.496662Z","times_seen":290,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/content/myif/berliner-sk/work/filiale/de/home/_jcr_content/homepagearea/parsys/imagebox12_f7b8/image.img.jpg/1775132245946.jpg","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.725Z","timestamp":1784029806725,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /content/myif/berliner-sk/work/filiale/de/home/_jcr_content/homepagearea/parsys/imagebox12_f7b8/image.img.jpg/1775132245946.jpg HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:07 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 188800\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"2e180-6568e08ac70f5\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:31 GMT\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":188800,"size_decoded":189146,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x417, components 3","md5":"98a06e744113a8612e4cd2e5b35cb63b","sha1":"25673341428e074fd163c3b2604087dc775ce213","sha256":"1d37ca8c8eb0bfc0eb69532624e70ed30df3f9f35d08dd9b3c8e8459f7335329","sha512":"e9dcbc126c5703668c93a2abb0257d71eed263ca88a2669f6f0a105f52371dc920262ddeb88dd28f2112412586884ace6c69d71987285c161251291f918a6be5","ssdeep":"3072:4tcZcQxtNfeTbGV7+ObshWDjwA9ZUldBCMQo3PtGOhiR5Kc4MgFhgWSUY:4tcZcIfePq8adYCMN3PoR574MWhFc","tlshash":"ce04238cedc9041ccd9eabfa701440b03dde3ad4731b956c146ab05d319a4bada9eedc","first_seen":"2026-07-14T08:35:27.496799Z","last_seen":"2026-07-14T11:50:42.497184Z","times_seen":3,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":272,"dns":0,"connect":0,"send":0,"wait":30,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berliner-sparkasse.vu/content/myif/berliner-sk/work/filiale/de/home/siegel/_jcr_content/awards/parsys/award_69a9/image.img.png/1776944576124.png","fqdn":"berliner-sparkasse.vu","domain":"berliner-sparkasse.vu","tld":"vu"},"ip":{"addr":"108.165.164.58","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berliner-sparkasse.vu/","date":"2026-07-14T11:50:06.729Z","timestamp":1784029806729,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berliner-sparkasse.vu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 14:51:10 GMT","end":"Thu, 08 Oct 2026 14:51:09 GMT"},"fingerprint":{"sha1":"31:AC:C7:56:7F:8A:5B:C9:E2:34:FE:4A:AA:17:09:24:5D:13:43:40","sha256":"2F:14:80:66:79:0E:69:0F:6A:79:11:98:22:19:DC:E6:2B:2B:BE:75:96:24:17:7B:73:A3:A0:58:F8:F7:3E:AA"}}},"request":{"raw":"GET /content/myif/berliner-sk/work/filiale/de/home/siegel/_jcr_content/awards/parsys/award_69a9/image.img.png/1776944576124.png HTTP/1.1\r\nHost: berliner-sparkasse.vu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://berliner-sparkasse.vu/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=0000sEDRkemjn3jUHBAMtUtz2mh:fce68b158; IF6CONTEXT=SVBTVEFOREFSRDoxMDA1MDAwMDpkZTpJRjpiZXJsaW5lci1zaw==; IFCLONE=fce68b158; IF_SPKDE_CHECK=SPKDE_CHECK; TS0191c25c=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2; TS0127acf0=01172bcd7b4aa82323db434948d3ad5a85bfcd67e2901467b85da88ef6c605981f07631e165a2c36287b7e883e59ff84954ac9cbf2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 14 Jul 2026 11:50:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 37134\r\nConnection: keep-alive\r\naccept-ranges: bytes\r\netag: \"910e-6568e079d36d4\"\r\nlast-modified: Tue, 14 Jul 2026 08:31:13 GMT\r\nset-cookie: TS0191c25c=01172bcd7b735a304d9d623c46e7f1e8789cd7592a3912db5770cfcf3db07e6cb9fec3fa0e33f81631316323fc4c83e7ed862345a2; Path=/; Secure\r\nvary: Cookie,User-Agent\r\nx-ua-compatible: IE=edge\r\ncache-control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37134,"size_decoded":37624,"mime_type":"image/png","magic":"PNG image data, 241 x 400, 8-bit/color RGBA, non-interlaced","md5":"d42ba5a1b54763dbd384824a4f77ed79","sha1":"2551df466591d14db7a79bf6e83dab9494d8a243","sha256":"d8c4a5ffb783c263018a5f2298e3a14e307445b8666ef73175ce71102a714579","sha512":"173e8058e92970bcf0b2b285156d7b5a773db63bc8b0995e92e36c2736e16526c29fab9fc9c51c6ab56c9ee8a3dd30b9a04297a668929fec41e15b46e3894d3a","ssdeep":"768:f7x2Z5UWcaOH6N7VyJcnkzknHi2PTi+amC6xqOVsmSDzEEILmcf:fIUkOH6NVk38e/cBgDzEhR","tlshash":"4cf2e11ff51634df94598a2b03ec1ec29abfc1afec6a0825519b697431c773b90446dc","first_seen":"2026-07-14T08:35:27.4782Z","last_seen":"2026-07-14T11:50:42.497745Z","times_seen":3,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":284,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"berliner-sparkasse.vu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"berliner-sparkasse.vu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}