{"report_id":"f17e59a1-6410-4eae-a949-39924542793b","version":6,"status":"done","tags":[],"date":"2026-01-09T06:27:02Z","url":{"schema":"http","addr":"hwa432.de","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"title":"Just a moment...","dom":{"size":15992,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (15992), with no line terminators","md5":"3c0cf4453ece13071306e1480591b5b3","sha1":"98c31aae6a365a96c81300e94a225c2affe0b368","sha256":"ea43339e117ab4aaa01fdcc08171403dd91f11402eba14ecf5666d3b2257a447","sha512":"f2d988c7bc4f42b67abbbf6021c32909f5a2055bedf34eee343c7a5a6acc45068b99b8d2d666941ac2fc7259e8905582b3bd95747ee8ced435ad3d0df9489488","ssdeep":"192:jNa+O9yIPl2boVmJkEq3HcABZwuknnN1LSGbMrToGs3yLXZ:g+Ocq4brJkx3Hu3Bb6fsMp","tlshash":"ea7228774956201f72774eeb7168f7548120f284e702a3aef0b3ae5887c990f26573e8","dom_hash":"domhashccb96f13b4f18ff01522913b8b0dc3f7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hwa432.de","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-13T06:27:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"hwa432.de","ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-09T06:27:08.316797Z","last_seen":"2026-01-09T06:27:08.316797Z","alert_count":0,"request_count":29,"received_data":610866,"sent_data":14224,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-01-04T22:38:35.302055Z","alert_count":0,"request_count":4,"received_data":204638,"sent_data":1864,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"hwa432.de/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9bb1dd225dafb51b","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"af6cc1addb9677e1493420db57ae0573","sha1":"7aff9d7d689a0acd1c0812c8e348ff054fab6e54","sha256":"e44d33ae6ff30a38c93559ea9f15311887d4081ede5ee7665e842d5e8274a202","sha512":"b516f82a63ce52891e498ffb794b808fb7e83dda3ba5115b9062d0d615c03fd3f6771b86c87dde0aefc0ea61691e4e603ba1b41ee98e2966ddc54b306c1d730f","ssdeep":"1536:Bi+sljR3lH2JKUOKRmti/aGcKNLEc2k9JkYSJBcmLvyqhSVwiSLxm:BrstNF2JQti/aGcKNwciBcqyXExm","tlshash":"80b3d88f79de7464433630b4441b39caa1ba6c58281c9d4ffb11a5e4b9d8b187363ef8","size":111947,"data":"","first_seen":"2026-01-09T06:27:16.707818Z","last_seen":"2026-01-09T06:27:16.707818Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"49b68b20d752536a5e56ace163a70fd2","sha1":"a1f425f10141a700d4ce09facb316d070c55ea52","sha256":"e740a29d44420fbfa83b75fea680f96e160720abbf03fd5f2ac2ae0a5fd6acae","sha512":"076e9e0b4de6711599157c292800705488a471300543141b04aaba3952209bd85112449aaa1e60c71e2160faa962061b06d081c26a283b703872c59626908858","ssdeep":"3:N/BKL1XgcgUj:eL1pgUj","tlshash":"695504c054c130f10c31cc04f15034157455c5007d1544017c5f04d517340000410540","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.721096Z","last_seen":"2026-01-09T06:27:16.721096Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d6c4ad71e051321da4f4590c7b04ad3f","sha1":"748ae7b531b144e1aea056859182601f7b471153","sha256":"e3561222307477daf15f28d0ff0bf25ed7c84152af29812c70d0bd7bcd6fee2c","sha512":"e47ebd1a7f5f4c9d7f5afe7771efac85c8d3339bc0b8a3aabf521fbf62d4ac4f06d263fbca5987ed40e55be0136a85e8d15a13906478deb12b57d3590b75580c","ssdeep":"3:N/BKL1Xgcj4:eL1pM","tlshash":"195504c0744130710530cc0cd5503455545544007c155401705d04d5173c0000410540","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.723963Z","last_seen":"2026-01-09T06:27:16.723963Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"83102b4250c7442631d7303a898b1585","sha1":"dfbd20d35f57cb36f362029cdd074a248403fe50","sha256":"7d08512629f5f6f28586c0c9685f84bc7c19fdb685a3c29464249fc971d35bea","sha512":"077809770db587b517070aebc93757598bcab64d3b2fde08139359b7bc8a7a7dbe20675feab599e4618737f687c1458dbe5b01e83fba16a8006e0ddb711d55af","ssdeep":"3:N/BKL1XgctFn:eL1pPn","tlshash":"cf5504c0544130700510cc04d151345554d54400f4154401705d04dd17340005010550","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.726678Z","last_seen":"2026-01-09T06:27:16.726678Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b914c480a3eef09153717b58896f3895","sha1":"bba9d314f9b7a4cbe6fcf2be25157671408c0e9f","sha256":"e39ead8f5c34ec3b390491fcce5b26063ab214eeabf2ca8592e64108f954b065","sha512":"b6faa04e4c0dd78c4e033b3305c6a593b8982fa578b1c7cf6ecc24c52ef3e4eb0cc4ad4759dcdaef3393b18e536edecb40738ad23c726498c98de99ba85e6cf1","ssdeep":"3:N/BKL1XcT:eL1sT","tlshash":"e15504d0554130740510cc04f1551c1575055d115c154405705d04d43f305000154541","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.729091Z","last_seen":"2026-01-09T06:27:16.729091Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"34846501db06277ad86e49baa18b4d81","sha1":"829165db4dfec70a7955d08fc4c6faa18508bd6c","sha256":"98ce73118af1577d399698a8faacedc59d7219adf8c64fb11dd2383098fc1f8c","sha512":"f5da53a561b41445d0db26a6162b7147f965596164218ffd471aa801a91c3e8b9c596678d8cc2d43751949e37178c85bcdc38403584aa843c8added603ba8979","ssdeep":"3:N/BKL1XcAn:eL1sAn","tlshash":"b85504d0754130700710cc04f155141577055500551d4405715d04d41f300401154554","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.731464Z","last_seen":"2026-01-09T06:27:16.731464Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"02fc56d2ed7cee631cd6acac7919da23","sha1":"521dc2e91be558784a68fb6c7aeebef26c8494a0","sha256":"e19c53e5baf5278ae37120205eb750665f85c03335484bc5baf6b8ad81f80445","sha512":"25329469819804b90dd0eec98eef98c20ea520dcbcc976936ae3623f6d6b7b604f69c6315ba37230a2acb0f953e0d6ba616bfcc876385f9d7d0d11eb66310e72","ssdeep":"3:N/BKL1XcOn:eL1sOn","tlshash":"1f5504d0554130f04570dc04f1551515f50755005415440570dd04d41f3400005d4740","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.733418Z","last_seen":"2026-01-09T06:27:16.733418Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a931db1c4691326d2783cf3807a29233","sha1":"36014b1ba996ac93b1e4a70b4decd066348b8dfe","sha256":"bf58092265939fc55f616bee07c159cd840b67c2746e29b0c406f55e4b77f965","sha512":"c8c052173789b7de8e99276f42dbeb56caee0e2d7ff592cb1757f89e49b159f60fced4cf454251534c18420a34f35007f55d91a52bd65051b2f4f7c2698afa6e","ssdeep":"3:N/BKL1Xc3:eL1s3","tlshash":"b65504d0554130700510cc04f1551515750575105415cc05707d04d51f340000154740","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.735386Z","last_seen":"2026-01-09T06:27:16.735386Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/?__cf_chl_rt_tk=1GLroPM9YUacora5JxxMhC2l9PFBCKh_a6CYm8o15S8-1767939994-1.0.1.1-mUKN3KRa.nzpcgUwCI0MrXvlJzpGP726A5jl_ADI3Ko","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-05T11:44:44.588622Z","times_seen":666931,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7faa07c2abd2c779386b066d973d474c","sha1":"66d56ed0bda01557f5d34c325b09c14d0df23a6e","sha256":"cd386785fead7a6dab6d4a7c9af2169640c7f737521d10af2d71f11a9105fa70","sha512":"4f985892f0fc5ea14c4ee5cc491dc669c2fb82f28e534faf2103b29b18b05e0dd0c0ac1bfe02435a8920c1f47b34fee5bf41bae15fe6e35c8f289b6ae089d69b","ssdeep":"3:N/BKL1XgcsXXR:eL1psx","tlshash":"a45504c0544130700414cc05d150345554554400f4154405f05d04d51f340000010540","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.7382Z","last_seen":"2026-01-09T06:27:16.7382Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5c1487f682e39be918c5f4827c420c0c","sha1":"a127275fe817764a616340fc22ceb9e115943e04","sha256":"3e27c5a467d41e09c352a17099239680cbfd814668d1ea41025435c69ca57aa2","sha512":"d8daa56fe1c95ad04877aabb26ea208631d95ae54302446b86e94cb6cbe23b8e66bbbda4e6f1ac2118dc4bccbe08a90508e2220bb6f75c2fb838e1662a4d6226","ssdeep":"3:N/BKL1XgcsSin:eL1psSi","tlshash":"0e5504c0544130700410cc05d15034555cd5440074154405f05d04d517340000014540","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.739824Z","last_seen":"2026-01-09T06:27:16.739824Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/fc21b7e0d793/api.js?onload=Khftj4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32909d53449eec324f7e8211ba9aca5b","sha1":"a230d0412cecbbe89ab7d10c6fb1345293ed7671","sha256":"dacf462ec9bd8786d33afa74942efd047119080b6e2ef7fd0b41d29f85cd2cc4","sha512":"a7cdfb49040795c164203aab169a252950cb24a9f66848683ddeb7867b012487df8272636b25e6c8f039043b6dd4f524ff31de1b788418bbbfcbe459553656a0","ssdeep":"768:/Cofu2DMagL9VAQeLxn2tSv/1odY3drOF8msKULgt9Tr7+CuAUyG13PE0okbsO10:Q2gagL9VAQeLFbCdYNrNRgtt","tlshash":"df332a583196387267dd80e4617b63437325793af94ccc909827d92636acecad233f7a","size":50465,"data":"","first_seen":"2026-01-08T11:23:13.321335Z","last_seen":"2026-01-20T18:54:51.373928Z","times_seen":6943,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0332e5f3c9250fd992dcd61df10ab60b","sha1":"a5a77bf0c95fef1d9d3cdd17b1d8ccd9a07a7f68","sha256":"412c6cc5729269fab9c1c9a3b8ab06ec6cefc417aa3cbbbdfc0f57d837636c73","sha512":"f6d5196e84ba05d34d5391e225e20bd8d74c0709bb784fb0ef145b305f7734afb07f384ea0bf88b6c826bd636b7f721d8352900ca047491ee67dd9b5ccf58310","ssdeep":"3:N/BKL1Xcj:eL1sj","tlshash":"d15504d055c130700511cc04f1751415754555005c1d4c45705d04d41f300100154540","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.74341Z","last_seen":"2026-01-09T06:27:16.74341Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0d866052dc6540324d3883da8de3c9e4","sha1":"327afb00d6e6112eac0e8ae178320a6ac9c394f5","sha256":"bfd531f9f8dc341ccef31e2e4ea34566a170622227f5df95b98f3cb95af193b8","sha512":"d3dff34fba114dd48e9ac9c14324ec53fb8adde2fdaf440b7c04b5e68380c996a2a6da889503843035fb7cb1c04a82733778e9885e81781459cc5c8a302bfd65","ssdeep":"3:N/BKL1Xcmn:eL1sm","tlshash":"9b5504d0d54530700514cc04f5555c1575055500d5154405715d44d43f304411154550","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.745076Z","last_seen":"2026-01-09T06:27:16.745076Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8508d38e2a66931f91cdf4a21c5c6f5c","sha1":"17400232c917285828bd7d7b43bc84e35f14aff0","sha256":"880dd1bd008f3e37d29517b731dd0c527a320ab3fb23ecee951cc385232de8ac","sha512":"9bd6679a69cdf31746073b7aa48b7a278da695fd153bd1a9c769ebcd6f8f7d74ab4cd46f0364840cac183c243b95751d478127eaef2ffaaaabf0d9f18a0d505b","ssdeep":"3:N/BKL1Xdm:eL1Y","tlshash":"8b5504f0554130700d11cc04d1551415750d455054155415705d54d41f300100554540","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.747152Z","last_seen":"2026-01-09T06:27:16.747152Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/fc21b7e0d793/api.js?onload=Khftj4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32909d53449eec324f7e8211ba9aca5b","sha1":"a230d0412cecbbe89ab7d10c6fb1345293ed7671","sha256":"dacf462ec9bd8786d33afa74942efd047119080b6e2ef7fd0b41d29f85cd2cc4","sha512":"a7cdfb49040795c164203aab169a252950cb24a9f66848683ddeb7867b012487df8272636b25e6c8f039043b6dd4f524ff31de1b788418bbbfcbe459553656a0","ssdeep":"768:/Cofu2DMagL9VAQeLxn2tSv/1odY3drOF8msKULgt9Tr7+CuAUyG13PE0okbsO10:Q2gagL9VAQeLFbCdYNrNRgtt","tlshash":"df332a583196387267dd80e4617b63437325793af94ccc909827d92636acecad233f7a","size":50465,"data":"","first_seen":"2026-01-08T11:23:13.321335Z","last_seen":"2026-01-20T18:54:51.373928Z","times_seen":6943,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"31b131dea6bfa9636d92cce04ba54dbf","sha1":"dd261cddda57f2b8f64d1baf3463542c7f1b401b","sha256":"999d3eee3bd68f2e761eabddaf21003f1980166059ad01a6f2bd54bfa9272ad6","sha512":"401bc7f23f96c4f5a7bdd1f52f1d8123cb5ebf406afe1c2cdb0b9ebf1338f00fc26219385b6d9832bcb7c5d6279d9f9bacfa9909f1985803d0a03d56b7a6ba93","ssdeep":"3:N/BKL1Xcx:eL1sx","tlshash":"d35504f0754131704510cc04f1551c35750575005c554405705d04d41f340000155540","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.748898Z","last_seen":"2026-01-09T06:27:16.748898Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4b007dc69d47cbcaa7641ad265a5d0bb","sha1":"9139bf3dd7caa97a0ac9eff14c0cdef114dc779b","sha256":"8cea6a77ed6ceae53ce8340b4d04eefbcb3e254b81721ea3f828067509c34d26","sha512":"5c5651871f9b932ddcea76db79736e12ab9f61e3c1fedfb6c37c666beca296787dc8095dafdcc77d82a989838ac63dd873b1eebdb0f8b42babb1d2e698b6d5f6","ssdeep":"3:N/BKL1XcUT:eL1sUT","tlshash":"445504d0554131700510cc14f15514157515550054155405705d05d51f700001154540","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.750746Z","last_seen":"2026-01-09T06:27:16.750746Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c486bf360ad67164bf45605ff13f5adf","sha1":"9effbd5a97ec2d45ad5aa88a8ec68c4f0b343a90","sha256":"da1760fc2a16835b9728b574b8c1706cec702ab4596a820540de66ef81c07d84","sha512":"3301d0ce33e2dea37d4a0366a1afb84c0bd0de903b8e5eee866eee7b1e40898343988ac94ce74f21327c74ecd01cc791428c982e81f99a2278aca553f03296a0","ssdeep":"","tlshash":"49612ae7c5738353cbea5a8b4577b3482772b8736d11e085a1e0c91cb9abc0b810f2d0","size":3329,"data":"","first_seen":"2026-01-09T06:27:16.752634Z","last_seen":"2026-01-09T06:27:16.752634Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/?__cf_chl_rt_tk=OxwEAdB.admgXtOz8dbkvLPznkPPRc3yE0KacVsm_js-1767940009-1.0.1.1-RKrIWzIMs2PAsOvtvrXxTbDAdZX3rc_2ysco7nmRZKA","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-05T11:44:44.588622Z","times_seen":666931,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9bb1dd816a0c56c6","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2028a0f8eb0d5f1d5f8bdaeefd14b10","sha1":"245bb7ca35ce307d26fdedaba8b657d9352f85ad","sha256":"9850dcddec2d04b0ad9fc4ed57458467305661c271a13eb42de247e946e86044","sha512":"1bcd9549afb383f2bc4dfb52c45c7d44fabbb6e01fb3735114391e6cb66876f0a1ed01f2eaeedb5c389e8cb244c6223eb2662ab3e0c53bf6df1394d9ce563754","ssdeep":"1536:BBIKuIYMoZ0Qo5aIgvDAgJ6cZpFVS/3JkN88rBHyyLgxt6Du+oRPplV5HU:BBiZ0QQgDamNDgxUDn4b0","tlshash":"8db3e88e78de799502269560102b37cf62ba7c44305c496cf291ddd8bce476cb6a3ef8","size":113987,"data":"","first_seen":"2026-01-09T06:27:16.673174Z","last_seen":"2026-01-09T06:27:16.673174Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"33db6de46867ae65b2e974663f86f43e","sha1":"f096142e263a222698e0e26da663be303c497a05","sha256":"cee5bf9600ed001df43c642e4a13c165a09f26e64043bc537f0ba7127688d777","sha512":"47ce59d5601d7e4cd19fa0e188211681be7232c03633f7ac454cff258cd687a3beaa405cd0de20722c94fde09713102bf373aac3154fb35091d10d8d61d9cd62","ssdeep":"3:N/BKL1XdJw:eL1w","tlshash":"a45504d055c530f00754cc04d1551c1575154d1050154405705d04dc3f301100454540","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.754907Z","last_seen":"2026-01-09T06:27:16.754907Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"152bcaf81dc6302541bd671a41381d17","sha1":"f0b9a21b733ab82ab49182581df12b4d62a7ef9a","sha256":"f25dd7cc8f4f03368d2a72c717bcd263c899b959a2bc11a899e3ddfca98bc018","sha512":"42628e706e97abf22404da0f07214f3fe322365b3b7367848d9da8e18d0306ca9920dd7cc8b26b72260a31aa4b019d2785fbd0ff380298f565d3f1a370a78e88","ssdeep":"3:N/BKL1XdTcT:eL1eT","tlshash":"b15504d0554130704510cc04d17534157505451074154445705d04d41f30010005c750","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.757663Z","last_seen":"2026-01-09T06:27:16.757663Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d92adb004a0ccc7aeaba5925002fd53e","sha1":"e8ae1045c03245248f665f23f3e917d677c8020b","sha256":"7508da1f55d92e4cf0de37ae69f581326c043a0eaabbfcf27b786cfb4e6bcd90","sha512":"834e4888b1f05df8684c1ac21bfa0217aa5907417c4bab40ad6865540ce46fca3a1ef7b06d428a1921c37907320f9796b1b8d4de65a37ce39cefdf7ebc05877d","ssdeep":"3:N/BKL1Xck:eL1sk","tlshash":"b65504f05dcd30700510cc04f55514157505550055154c05705d44d41f301000154544","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.760048Z","last_seen":"2026-01-09T06:27:16.760048Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6e455024fae7c2318230b1ad0061b21c","sha1":"978dc2aa90b76bdad7079a556e813e9d6e13a6d5","sha256":"89c4774de01835a1fd1696ff28ba86fc6b9c3ea88ea522a020aec689282ece47","sha512":"ba172a07680ea5172bcbdc367730b42c0eaa03a632b494af88736e706c8b5366bedded55f80d18841c80fecf2d96812d44a3a205074ec1e8dcb26f0420c54734","ssdeep":"3:N/BKL1XcTQ:eL1sc","tlshash":"595504d0754530704510cc04f1551415750575005c5d4405717d04d41f301000154544","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.76327Z","last_seen":"2026-01-09T06:27:16.76327Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"11813f75eb54134fc09bd9e5d93af89f","sha1":"cf77315119d89ed00bf3c9bfafc5e1d82cd7e9fe","sha256":"b5e334c4d78080e01e6486601de1f41b3215341d390b7cafd4fdef9d6728edb6","sha512":"13f48d1ddf8e892e2aef995508a3835b4b8c06ae5080ba58271ec8fed3ead7557e562f5d9a66bd0830b8516a5b3e20354d748cb0e15a78d8d70b9ee379d7cefa","ssdeep":"3:N/BKL1Xcv:eL1sv","tlshash":"385504d0554130740510cc54f15514557555551054174405705d05fc1f341000154540","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.765845Z","last_seen":"2026-01-09T06:27:16.765845Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9760471971d5cf5a7e2df9f1ae97c02d","sha1":"e13c47211547a6d045d905027fc631e35f1175ee","sha256":"c774863facadb032eaaba313f5f3b05ad709dcb0bfa23750d34d17f232df0457","sha512":"48ba8cceef7261b9a9b47ba54d915870b65e9f4a4811fe9124a9bbb8fd1f82705698e9a29c10887184b9165852f99470083e068bc23ca15d20083145d4af8805","ssdeep":"3:N/BKL1XdVU:eL13U","tlshash":"ad5504d0754130714510cc04d1d534157505451050154405707d0cd43f304100054540","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.767779Z","last_seen":"2026-01-09T06:27:16.767779Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"afbf51920ff73fd5f42c718e2e8f7871","sha1":"314e00f1b41d723517b02794173eb499f5df6d43","sha256":"3576e5308169572bb3dd8c84a4bf044693a3012a436ff39fbf0d4ab16dafa29c","sha512":"20930e691eaaaa325927592e4feac673abd9f19aac9ed6e41a7f243505e4f0d3ededc8db5cf25571622e9e2859f1508cee834cc4b011f3e20e1f6c25f7b7540d","ssdeep":"3:N/BKL1XcN:eL1sN","tlshash":"555504d0554130700710dc04f155143575055510d5154c45705d04d41f30004315c540","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.769777Z","last_seen":"2026-01-09T06:27:16.769777Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1dc7e089676121e2b44f68852f0ec4af","sha1":"9196bbea4449fe85fbcab813994a2b19a0f06016","sha256":"35673e4603ecd17cb31d986db4816dbd715d668b0ba1dd589534a962e9177b09","sha512":"ab6154e9d3de3e8aec242f6e79613e271bea506c36e91ad555123e03170036f0a9b48e1d71506df9e85bbed6cd1d238c3346dfb3d2f24e8aa0cb1af62ba19e6e","ssdeep":"3:N/BKL1Xgchc:eL1pm","tlshash":"b55504c0544130700410cc04d3703475545544037515c40170dd04d71f340000014541","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.782736Z","last_seen":"2026-01-09T06:27:16.782736Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9bb1dd31b988b28a","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c39bf27334b294a78014c52ce0d790b","sha1":"9629674f51a3d3e558aacb1b2d02989a97b124fd","sha256":"0779b2bc58890b5e6e323f1640af3991be445e069d16890edc65e92d526f59a3","sha512":"a8043c8d9805071c7d413115b55cbeb8675c708f4ded4ebea2116ad3190a60545b147194fd8b36920ca5628b8fbb7c0f23357800bc6a2efad17f18df3f0f34bd","ssdeep":"1536:BouFMG6oN9I5p2j9DUMYN9J/LuhetrVLKzNw0dtqFRzivvRvDfiEOJkA0HO:BzFmoN9I5p2hbUuhwuzNw0dCzivvRBBO","tlshash":"e2c3f88e38de7565023a30b4142b39daa2aabc68341c9d0efb5199e47c95b187173dfc","size":120892,"data":"","first_seen":"2026-01-09T06:27:16.662888Z","last_seen":"2026-01-09T06:27:16.662888Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"69c6fc9cf7b8e3707a6f0e1553bf15bc","sha1":"ca11552239ba4d58308b10a14afcffe9d9ad7878","sha256":"caf8cce2d786e5c062600eac361e4d503b81006141989ab08497f7f1017bfd4f","sha512":"26c690666f030a2e8b0362692d37875b621b213a22a95d36964c576cf7a3ed37571941695e5419db035bc0079f5201c12e2ee487fdac9e8dc334ce09a828597e","ssdeep":"3:N/BKL1XgciQSX:eL1piQk","tlshash":"4f5504c0545130700410dc04d154341554d5440074154401705d04d51734000001d541","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.787337Z","last_seen":"2026-01-09T06:27:16.787337Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/?__cf_chl_rt_tk=1Cz.9UaXhX3VXACLLLdhLx.9LPgkWfROiqbqYM6J99Q-1767940000-1.0.1.1-DII_RircakIL5qBRTkzFiSR9IZZ5mG3WZhQUYxDrLeY","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-05T11:44:44.588622Z","times_seen":666931,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"64e7a05fe14763e6d97cf28bf691ddfc","sha1":"e74759548aaa582ebc210cde2dd9a936694c7a23","sha256":"b4fe6a6ee3033d51dcbb303371764cbaf75182807fa98a559fa1970d71c52c0d","sha512":"d51cb9f9a744773cc00573ed9c75aa2abb363291f2974a5dc38714fe9fea6a20886ead554d9af317726d30cc0820548aa41bcaac9a63929c4ba9d6966667d3d5","ssdeep":"3:N/BKL1XckX:eL1skX","tlshash":"495504f05dc130700710cc04f15d1415750555005515440df05d44d41f350000154544","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.792407Z","last_seen":"2026-01-09T06:27:16.792407Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e42685c9171b6b2fea7e147da81fc87d","sha1":"7fd9bc642c5ea90736e9857dbc136a30f9464439","sha256":"6e42ea991a09f0a14ec8751db64d343ed7c264e1af1bbb0c20418ab4b5c57d11","sha512":"f53ae19f68a195907e2fa0188f67cda8873e600f63a4f5ae7e6b97334a02e01b7eed2f97168a9ae28b2cebb1fd34adbd154eeaf772cce9f664706adc423feefc","ssdeep":"3:N/BKL1XcWdn:eL1sa","tlshash":"495504d05d4130700510cc04f15514157505550054154c05717d04d41f300003154d40","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.796148Z","last_seen":"2026-01-09T06:27:16.796148Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"422f73f888c43997bd27b775b88e1c39","sha1":"4682cd65b399812c3bb454d2d8289e8a146ebba5","sha256":"ea44b09347c775636d3e3462df79fb49972d799ae7cf2a53ccec3675149d0117","sha512":"9f2bd501614825745e230cac63c281cfe6c487326174d6d0c437529f2c55d43ae6547ae3be2668638047fd168a5b4b0a623671ee4b86f4590bc4e99223b343d2","ssdeep":"3:N/BKL1XdT:eL1l","tlshash":"545504d0554130704510cc04d1751415750545105415440df05d04d41f304100054540","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.797782Z","last_seen":"2026-01-09T06:27:16.797782Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"64e626d3c13966b9502fac5d88eead84","sha1":"f91bc98b93f99018323081650b37e0b48e6a58d4","sha256":"6b18e6be86a5d8aa2a032c134bbd3141abecca4a1b7f54b7a889b509ed24727a","sha512":"b83e06500743a320f463c9417ac690c6b3ac583d7869a9c4b126f9659853bfaaf9a5d093877f150fee86c4490611c317a7d5532ce1b583ff8973f1c556183526","ssdeep":"3:N/BKL1XdCn:eL14n","tlshash":"705504f0554170700510dc04f15514157505471050154405705d04dc5f300100154540","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.799342Z","last_seen":"2026-01-09T06:27:16.799342Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/fc21b7e0d793/api.js?onload=Khftj4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32909d53449eec324f7e8211ba9aca5b","sha1":"a230d0412cecbbe89ab7d10c6fb1345293ed7671","sha256":"dacf462ec9bd8786d33afa74942efd047119080b6e2ef7fd0b41d29f85cd2cc4","sha512":"a7cdfb49040795c164203aab169a252950cb24a9f66848683ddeb7867b012487df8272636b25e6c8f039043b6dd4f524ff31de1b788418bbbfcbe459553656a0","ssdeep":"768:/Cofu2DMagL9VAQeLxn2tSv/1odY3drOF8msKULgt9Tr7+CuAUyG13PE0okbsO10:Q2gagL9VAQeLFbCdYNrNRgtt","tlshash":"df332a583196387267dd80e4617b63437325793af94ccc909827d92636acecad233f7a","size":50465,"data":"","first_seen":"2026-01-08T11:23:13.321335Z","last_seen":"2026-01-20T18:54:51.373928Z","times_seen":6943,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f245f0c1e32b5303c26f9317e60688eb","sha1":"755a30761f48d558809151be2c157466dd1c24a8","sha256":"a9d4c515b628a2c7cd82f7a12d6c730a08281635bafdb0a40c33dde348162761","sha512":"ed4da91c1a7dcd257a9ae16e646c3eca7fd64b765fe372adae7569548cc8fa86174e444b82ab08841830b37f4264d486a66ac62b3560e93fcabb70dd5d33fc5b","ssdeep":"3:N/BKL1XgchQn:eL1pGn","tlshash":"2c5504c0544130701430cc07d1503435545544407415444170dd04d517340004010741","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.800877Z","last_seen":"2026-01-09T06:27:16.800877Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9bb1dd4ceed34e4c","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"de1d596044f7500f7ae00af5cbb98be5","sha1":"3d6031010c42ce7eb82c6c563c8c4af28ec67f4f","sha256":"2068b469f2dbe84f460daafee6d2293a35982111b98ecd38f379fdaa5eb76bbe","sha512":"c9be1da0524cd04ca6e43a200c5fa01a7850a2f3dd513fecbcef51b6f49e766e2efd3c0352d824f40fc7eaecb84aa9bcd3ce7ce52f48add1cf0a8ea454cc20ab","ssdeep":"1536:B9A2akz7f1Bag6NNTanpLAWU0R5HJkUzK:B9An6NBkLgpAY5FzK","tlshash":"15b3face7ccd799502669464202b27cb61ba7c50705d492df1d2dde8bce0b28ba53ef8","size":109179,"data":"","first_seen":"2026-01-09T06:27:16.690809Z","last_seen":"2026-01-09T06:27:16.690809Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ff4ba7c448f7a149a1b0967fbacde664","sha1":"0abb99b572810833f952e39202e826a0fddf4216","sha256":"fa5d6c8279e006fe70ba05cc62e3fa872767a9862e0a979065966af48836f476","sha512":"546550437ebc6a0c034c640b76d0eba1a4acd54955cb7d312724307fe22af0ebd5189395c0dceab04034914bd255fa30bd4bd8d2e36f3828e3ade948cc311ef7","ssdeep":"3:N/BKL1XcbU:eL1sbU","tlshash":"6e5504f0554130700511cc04f1551c357545554054354407705d04d41f300000354540","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.80274Z","last_seen":"2026-01-09T06:27:16.80274Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/fc21b7e0d793/api.js?onload=Khftj4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32909d53449eec324f7e8211ba9aca5b","sha1":"a230d0412cecbbe89ab7d10c6fb1345293ed7671","sha256":"dacf462ec9bd8786d33afa74942efd047119080b6e2ef7fd0b41d29f85cd2cc4","sha512":"a7cdfb49040795c164203aab169a252950cb24a9f66848683ddeb7867b012487df8272636b25e6c8f039043b6dd4f524ff31de1b788418bbbfcbe459553656a0","ssdeep":"768:/Cofu2DMagL9VAQeLxn2tSv/1odY3drOF8msKULgt9Tr7+CuAUyG13PE0okbsO10:Q2gagL9VAQeLFbCdYNrNRgtt","tlshash":"df332a583196387267dd80e4617b63437325793af94ccc909827d92636acecad233f7a","size":50465,"data":"","first_seen":"2026-01-08T11:23:13.321335Z","last_seen":"2026-01-20T18:54:51.373928Z","times_seen":6943,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3f4ad0e077e529ade7a3054d63267462","sha1":"f31848568c5c2417405abd430cf302cd21645a82","sha256":"9800378568cc3b7c928b4c379c375a01b68b7c6055f96a4ddb4287efba972430","sha512":"8bf2ba8ea9d8ca02d9947ee4f29a2fe54885ce8fbdbbf67242264dddb4beaecdf235877821f7bc206352d00379096662d7c3004bb91f8cf74ca954288e125522","ssdeep":"3:N/BKL1Xcnn:eL1sn","tlshash":"765504f0554330f04510cc04f15d14157515570054154405705d04d41f3000001d4540","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.804849Z","last_seen":"2026-01-09T06:27:16.804849Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d41d4cff9fd79ae78d0d81f07abfe0dc","sha1":"a5e3e36854b7e7649f2c69420f0968067d2d2658","sha256":"4569d6c315cccfad96b7dea2935dd2079b32e61aa8c31cee9e3c0d5b3b37addf","sha512":"a6a9d3c5768f34dc8a4e168d91cc84ad656d15ea93633afcb344446d9d386d3c09ec61c0fc2d8a5d92573efb7ba5910a9eebbcc183ab979f37eb544837ae6e9a","ssdeep":"3:N/BKL1XgcgS7n:eL1pgS7n","tlshash":"155504c454413cf00411cc04d150355574f54440f4155401745d04d5173400000105c0","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.806799Z","last_seen":"2026-01-09T06:27:16.806799Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/?__cf_chl_rt_tk=9_IYsoaFukBhuIuYY3Pm_dEZ.tPhlDObIWOqQ65wsus-1767939996-1.0.1.1-XpSpJ6dNvMjxkarLEiKiJdHjCOwVCbxm8olxCx41nJI","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-05T11:44:44.588622Z","times_seen":666931,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7880299661e081d346ccc6e8d4e97344","sha1":"32f7623a924f7dc98ab4d941b51171d69e56df16","sha256":"3f28d13e62d04de0049a043029d728f315ec0414f8750c1f879c50ac50b656ed","sha512":"9e6b7525d53291e8888a4a2b5c33c9f14e3dc2b81be7d62bf14058023241841b2d287565e25cb94731855473a4d312d4be6ec7fc4d647d51680aa19c31c04b2c","ssdeep":"3:N/BKL1XgcjeW:eL1pKW","tlshash":"e05504c0544370700410cc0dd550341554d54400f4554401f05d0cd5177c0001010541","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.808945Z","last_seen":"2026-01-09T06:27:16.808945Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"41e4b9b647c322f76069f3230599753e","sha1":"09be298810881f830208cc4c0b037b28ddd571a6","sha256":"74590c42afa7e34bdaee63172ffc521fcff5da516462188e0eefc184cc3dc932","sha512":"db12e28535b7509d5305ec97f9c1bfd975f00e5524dda039c5b8874ecc185cde01f3f379a842ced8ee65b4c71a7bb9df2bc8b72085c15ec1fc420d0a47b4cae4","ssdeep":"3:N/BKL1XgctFn:eL1pL","tlshash":"be5504c0544130701510cc05d150341554d5440174154401f05d04d517340004010540","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.81095Z","last_seen":"2026-01-09T06:27:16.81095Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c44c5b09889333cb37a45bacbb90eb0f","sha1":"f0a3537a273d23c303960c81a1aa89f03aa10a8f","sha256":"ac164b010049c8939ca469d09ddad555348c0b6c75b5f913579f867308874ba0","sha512":"ca946219dc0b4e9960d2cd357efbd52d1af9f77a7dffb8e3e6b28ba136d573d69f6ce6dee4fbcd46fec71dac0df5e48f826163a6d273b46acb3be31178c7f023","ssdeep":"3:N/BKL1XcgR:eL1sU","tlshash":"9a5504d1554131700d10dc04f1551535750d55105d1d4c0570dd05d43f3c0040154740","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.814771Z","last_seen":"2026-01-09T06:27:16.814771Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a6c2ce35ef951b79003989cd3ca64cd0","sha1":"f881b3ef92eb0da03aecc1ff07560a99eee97cdb","sha256":"10d7fd04bf697c17874cf64d81d2c204e7e58a0145c75e8198e49adbef8ea6d0","sha512":"4b7c3ac7dd934cf0dfb9fec015a79e8eb73f00630498c8f590de923384340abc79d8413357340894fbe90a78f05f2f58b6263b08483809e7081b27b0838582fe","ssdeep":"3:N/BKL1Xckn:eL1skn","tlshash":"655504d0554130700530cc04f1551457750755105415550570dd04d41f300100554740","size":1337359,"data":"","first_seen":"2026-01-09T06:27:16.816789Z","last_seen":"2026-01-09T06:27:16.816789Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-09T06:26:33.973Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 09 Jan 2026 06:26:34 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=g4TwwgUjjws0%2BJUtEwtsxehlW13OOifXPTKc6QQiVcEdRPSz1yN43IMKU9XgBrhqk3DKcc10vBzRASUs66sya2Rn8TUJWVyyYw4HwKRW6MQjS9A44wvZOM22yU0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9bb1dd225dafb51b-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9bb1dd225dafb51b\", cfL4;desc=\"?proto=TCP\u0026rtt=496\u0026min_rtt=496\u0026rtt_var=248\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=394\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5310,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5310), with no line terminators","md5":"bc0d5c0ade4a39da9cd0bdd62e640a80","sha1":"308f36ee4a16951ca86d8d7051df1c24483217d5","sha256":"9f7ef828970061e5da0dbd82cbe99f90cf11bfacadd05943039a9502823d9e2d","sha512":"fc1a31fef084d962fa2ba0edf598ccee099d171a0fe58269dc78771ef36bc00c5a89eb985fb51eb488a6df142a4eda0923dd21bf0172bb36015fa8564780cd51","ssdeep":"96:PNybXZtIEb0EFW87IVxtpM2kIzzLj4kj9hhhPg3Yzueh8smw:PNadBstCIXfj9hhhPgIyhw","tlshash":"36b14cb7b5122027c3bf479b84b373485b11d195eb0aa0a4f8e1cc0c86dff1789954d5","first_seen":"2026-01-09T06:27:16.633718Z","last_seen":"2026-01-09T06:27:16.633718Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/fc21b7e0d793/api.js?onload=Khftj4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hwa432.de/","date":"2026-01-09T06:26:40.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/g/fc21b7e0d793/api.js?onload=Khftj4\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://hwa432.de\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 09 Jan 2026 06:26:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Wed, 07 Jan 2026 17:21:54 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: http://hwa432.de\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=Wcr44uJno6S6VeIJ7asqbt9pyvN2fx8tuzTnULWRxXk-1767940000928-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9bb1dd4dbcc95699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50465,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50464)","md5":"32909d53449eec324f7e8211ba9aca5b","sha1":"a230d0412cecbbe89ab7d10c6fb1345293ed7671","sha256":"dacf462ec9bd8786d33afa74942efd047119080b6e2ef7fd0b41d29f85cd2cc4","sha512":"a7cdfb49040795c164203aab169a252950cb24a9f66848683ddeb7867b012487df8272636b25e6c8f039043b6dd4f524ff31de1b788418bbbfcbe459553656a0","ssdeep":"768:/Cofu2DMagL9VAQeLxn2tSv/1odY3drOF8msKULgt9Tr7+CuAUyG13PE0okbsO10:Q2gagL9VAQeLFbCdYNrNRgtt","tlshash":"df332a583196387267dd80e4617b63437325793af94ccc909827d92636acecad233f7a","first_seen":"2026-01-08T11:23:13.321335Z","last_seen":"2026-01-20T18:54:51.373928Z","times_seen":6943,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/favicon.ico","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hwa432.de/","date":"2026-01-09T06:26:40.912Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hwa432.de/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Fri, 09 Jan 2026 06:26:41 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 28\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nLocation: /login\r\nVary: Accept, Accept-Encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uhO4s3yxcO3Gp%2F9wB1gTQiBDEO3NxEh1vwfCZNbmdgHig%2FhkpIhHoqL2KmN4nGbUX1oA8HQZqqt1KwU38FKbwCa1xu%2FU%2FmU%3D\"}]}\r\ncf-cache-status: BYPASS\r\nServer: cloudflare\r\nCF-RAY: 9bb1dd4dbf0a56c1-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5325,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":3,"dns":1,"connect":3,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/favicon.ico","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hwa432.de/","date":"2026-01-09T06:26:36.521Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hwa432.de/?__cf_chl_rt_tk=9_IYsoaFukBhuIuYY3Pm_dEZ.tPhlDObIWOqQ65wsus-1767939996-1.0.1.1-XpSpJ6dNvMjxkarLEiKiJdHjCOwVCbxm8olxCx41nJI\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Fri, 09 Jan 2026 06:26:36 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 28\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nLocation: /login\r\nVary: Accept, Accept-Encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mCCHqNfquXnrV9bC53YohgUbjD6xJtiZSgZ1cu199cTlrhaOtEZntFLYibkqasyA4XID8WnORMIQFRCqGSrChDL4Bull61GMSw%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\nServer: cloudflare\r\nCF-RAY: 9bb1dd32491f0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5453,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/favicon.ico","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hwa432.de/","date":"2026-01-09T06:26:36.559Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hwa432.de/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Fri, 09 Jan 2026 06:26:36 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 28\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nLocation: /login\r\nVary: Accept, Accept-Encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8YUAn2LXB9y2S2zQlM%2FAWjnDFBI8DSfsNtU7DkWWWRuKXt8j15u5U8X5I6A3wcylv1XLO4dvxRa11fNh1gMXcJ7kqFdbAEU%3D\"}]}\r\ncf-cache-status: BYPASS\r\nServer: cloudflare\r\nCF-RAY: 9bb1dd32888556a4-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":5325,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":2,"dns":1,"connect":1,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/cdn-cgi/challenge-platform/h/g/flow/ov1/700589983:1767935618:ScaFBVzqkeCkx7vM2OVCUzmzn6gKzD2mcp-aKe4Mous/9bb1dd31b988b28a/EheJdQjfOFGUB2x1OE.tiR9QCO2zrh5k9oafBvW5eYs-1767939996-1.2.1.1-zgpnNDUe.XNOg8lZM0uj33OjueIpMRzVeGbgpfreZpo0WkvIZSreBY0aOaQmlthu","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://hwa432.de/","date":"2026-01-09T06:26:36.744Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/700589983:1767935618:ScaFBVzqkeCkx7vM2OVCUzmzn6gKzD2mcp-aKe4Mous/9bb1dd31b988b28a/EheJdQjfOFGUB2x1OE.tiR9QCO2zrh5k9oafBvW5eYs-1767939996-1.2.1.1-zgpnNDUe.XNOg8lZM0uj33OjueIpMRzVeGbgpfreZpo0WkvIZSreBY0aOaQmlthu HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hwa432.de/\r\ncf-chl: EheJdQjfOFGUB2x1OE.tiR9QCO2zrh5k9oafBvW5eYs-1767939996-1.2.1.1-zgpnNDUe.XNOg8lZM0uj33OjueIpMRzVeGbgpfreZpo0WkvIZSreBY0aOaQmlthu\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1975\r\nOrigin: http://hwa432.de\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1975,"data":"5MM71BzySjNRJ68vXyq8r2nxGVawNFKHKdx+O42y1NUHJjFarZgks9QxtUgbeX3gubdo$LdkJ2Hrru9vLLZ9b7pMXVpqq38G05P-Dw0tX6282R5+69u$8WUTOS09W3dGHpFbZjfte0DV15HuaEdO3JY02+RH7h10pfGEymek4ai-vwBGrMMJuuDYQawExegdZYCUZ1K9+O2oyTkObfL+f6pMet3JWxZzei5nomhkUQDA1CqgNYPyGuLyOKo7saTjrRTE0wDokW2izEjQWNhTL6rQ5g0SSV6odYn+7GZNt$vzxic5kcrFDcuvb2H-6yQnoQm8aJj5x$7$mzFei9sWXOPbZrsSRxiaqeOrqwQsAZ6i3j43Ct1teACH$8WW0cp++TW2Cp54kFoh0Zm5HvSdxMQSDpfKNOFV09Gr5l7ftchxb4l-oKL4WGjOnmnVQqpxEh7Jf3LaNKR6p9c9qbFcANsYXHBDgZaDjngbqwkE77x83UnqUnREYHcnSQeG8wxaKwcAcb4fq7v21M18Hm8LPuwz$utFusSqAPomd50HAUzZsLkhCKJ6ceO9+xfpFOQikO5D$usdxisetorJP5Rzp977T+f-xjhlrnjX4RuKo6XMyc8SPio3zJO0T9uqmEcpSlK4PhOiJFzN1KMPS$Mqz9TLvOmSd92JNVFNVLhsqgAUCkb6RumC2eeFPwwukEeJaYcywchjrZ9aBSkomcv88zjr4OoCUrs+wm8a9WtJowRvgVMS2oVtFO+JML1zaBZWb$rqH87EQGEUvBD+woPm5DqvT0eC+biefbxyd46ouc8KTgPO2iOl8VjBO6tULBWt5qYVXgkTSPOiOGe0Ay8Map5fRkx$brYuW5gUlYkf5e9PC+UR05ySgRKEutr+Pozz18LD5yZE-qKHfVCyPr-vqpvrbLRQu2y$P5VuRwosfmgZRtjl9$uhSOGf+4j6W4K$ezKmAb8kdnx58l498VlemTLpwqcKHl2flRRtn0Cg9Qc9ZbYTHl4BkQDmoS6lDvGZ1F7RcyMJW6SWrlM--iWDMpv4cE9ndjz8KzRPp5nbe4CUS19USp6mBclkMgQiznsAJ+sY0tejD88UY$RQvWZxOJnY0CA5aH0KwsoTFzUfES82JcFEypz9wOWeWGJ7rUTVkELFcpFVTFMSCS5ylfCqlGFHXicLoQ6E$L7l7LtMkpZ9D+qFtUDAgY9irYM6Rk6snOxReY$Wrprz7d9jTT7S8GVNWEu-2XRD-vqrqDQpAYR+RD0aWSjt9DeUiejeBNaj9fH-HECKsOBXmxMoyYTRZiShhKlFXdS296brecRh+Un0$PaOoM2e87ajMFgX7G3TsNXwzvvEguowTQBkn0lwW51WdRusl4-r$iaJoioUlxjowi32RZtkEfZ3dQZ1Xu5N7plX8ttb5Uz3EYkb-cLjYXGT8hswoPoU505a3B6OZHOARwODAHh$kQ-AhBtl5SqBimiTyWTK7mvPLa0maENC3FLnUT+wP09V19jgy75uaGnJlySwAyLFE2DC4qr+1jD6wL+Fk8qvACxZUfo28UeANMub0EjV+eLWmzaEfvUp+xuuJpwYj$9hGiPuuP4$3t0Tf14$7cG6rj+Jjdl6whmRG6peky+JH6yzejXmsEtsefvbo5V1190bp$B5TCmgrM0egEpqvwT+3COtb2nHTwmxQApSp0hSSc627o4wsSHKi6dAQYx5QlKEm7uF01cQZe2fp$lXSniUO3k68KCXqfCQXNs7QzxX8Qqi8ou2q+y0F33YgaQxqc3+G4OwXe6Z6B8w8gNbBfU6WaeArAwdVKVuVBvFpnunTnmKqAr0Ju+c9yiP39tgKkrmxrcXlrcyLRiSr5T$O9YczW2tBPysGZcho6G+mOwJsC-O3GVBRZmP+tWX2M5SEBXxh9oWywSi0szHfmx+dMKQFUyNG1Axn284u28Wm6MXqj9qwPlLvpSeClQ6N-WlbRyiVOO"}},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nDate: Fri, 09 Jan 2026 06:26:36 GMT\r\nContent-Type: application/json\r\nContent-Length: 14\r\nConnection: keep-alive\r\nCF-RAY: 9bb1dd33aa4d4e4c-OSL\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncf-chl-out: I/unV1PV5Pb6ip88nfDEvUeLurMyT3FLutNBved+6ywblXWZSUREPCYLw1HtlWz6rRl4HI2aKKZskaIKBBv5iA==$EzETZ8OVFtWBOoemgEpGTA==\r\ntiming-allow-origin: http://hwa432.de\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=axOF3gKvxMbCS0M%2BN%2FC9SdHuSLEJLOWjr%2BwdhR1d91EvinTr6HxwpDyHrv5WWlZOXYpS%2BNjBs5WncQSWojWhqQh3Y%2FTzNVb35FlyRrS265h%2F5TEIXE514x7J1wc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=494\u0026min_rtt=494\u0026rtt_var=247\u0026sent=2\u0026recv=5\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=2798\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c388aee5b895e903e82a624bb011e200","sha1":"35f272c9e20b19d540385f51d8e6a3d0f3ae5131","sha256":"3a77ba941559f70e32300f869db092307592a75e6733693e985ce002239814a9","sha512":"486ad8f4e805a2547f544cdfea1eb9362a0e7721d90c01e9c03f0bd84cccfd69b4999f1096e3d68895e2e48f0a96212c9a38cf93d5afee760e3d9bbce7c05fc9","ssdeep":"","tlshash":"90600000f3f0000c00c0000c300c000c0300c0c300f300003300030c0030f00c000000","first_seen":"2024-10-11T08:37:20.57558Z","last_seen":"2026-03-15T07:01:33.819158Z","times_seen":8854,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":2,"dns":1,"connect":1,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/login","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hwa432.de/","date":"2026-01-09T06:26:41.048Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /login HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hwa432.de/?__cf_chl_rt_tk=1Cz.9UaXhX3VXACLLLdhLx.9LPgkWfROiqbqYM6J99Q-1767940000-1.0.1.1-DII_RircakIL5qBRTkzFiSR9IZZ5mG3WZhQUYxDrLeY\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 09 Jan 2026 06:26:41 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=v3zawhOfscrdt%2FHJOA4IghGhmgeI3AXNmnWi1zS4oGqC6HtJX03k5O%2FWy9YDh0D38M1OiKay%2FbyBoY%2BL6fn0dRzes%2B5sp9iRmT6YA4Jz09i76Z1AgMIAQFpIRjQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9bb1dd4e8f8156c1-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9bb1dd4e8f8156c1\", cfL4;desc=\"?proto=TCP\u0026rtt=680\u0026min_rtt=523\u0026rtt_var=308\u0026sent=3\u0026recv=5\u0026lost=0\u0026retrans=0\u0026sent_bytes=635\u0026recv_bytes=850\u0026delivery_rate=2768642\u0026cwnd=250\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5453,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5453), with no line terminators","md5":"5e82396921c7c8db0c5cb3097d734d4e","sha1":"f2568e8f2e36aadd1c0b21742798dce76213bdef","sha256":"29fcc16ca94b614a84ce18a0a65722d57de93369444907779bdb87cebf1e3d8f","sha512":"7b9622524d9ed2ff59f7ce09cdae81ef95aed86ef17b96ddacdf43cbceb74b0e7d864ffe59b768d302dae8463a96e3f95c5d9de8420eeaa6a141f3676997e10a","ssdeep":"96:PNybXZtIEb0EFW87IEaoX9FIzNjpiLrjoTeYzueh8b9mw:PNadB+oNFP0TjyJgw","tlshash":"b1b12af3d6534037a3bb0ef6807fb704b219a5518b01946df9d0e90cc6dad4fc29a55a","first_seen":"2026-01-09T06:27:16.647512Z","last_seen":"2026-01-09T06:27:16.647512Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/login","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hwa432.de/","date":"2026-01-09T06:26:34.412Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /login HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hwa432.de/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 09 Jan 2026 06:26:34 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=K3X3Ylel%2B5WvFqtK5idhza5hX1P1vxhItxASqw7mwcNbM0%2FP6zGxUks5opWYuaRhcbxL25ty%2FegdoT90f0o5ZgZ%2BV%2BVHSc%2FlStDVbxHdaAbizrJ66c%2BuhxWSsw0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9bb1dd24fbb90daa-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9bb1dd24fbb90daa\", cfL4;desc=\"?proto=TCP\u0026rtt=1994\u0026min_rtt=1994\u0026rtt_var=749\u0026sent=3\u0026recv=5\u0026lost=0\u0026retrans=0\u0026sent_bytes=637\u0026recv_bytes=680\u0026delivery_rate=724362\u0026cwnd=250\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5303,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5303), with no line terminators","md5":"85d6f2be62d6bcac0baf53afe9d07cca","sha1":"7798c538eb800e96e222cd6befab859b4f118a43","sha256":"3070939d8224380ee369500e965b00d16ce3ad7dce06a598c896074042cf12c4","sha512":"5774e1c2a77d9b0c1a7aeed7de1ada6aad4b1cc45f81f6ae1666dc1e9307550ea2f8fb9d329caf8b61f0a02c8d5db93aff59c8fbe03a559cddd254de43f761c1","ssdeep":"96:PNybXZtIEb0EFW87ITXXZ23Su9Kvt/jEFHpf3B9NqdWYzueh8Wimw:PNadB4MQFEFHL9NkbyUw","tlshash":"40b139e7e2531127c7ba05fb907733242620e9a99b0286d9e5f4cc4c86dff4bc54a354","first_seen":"2026-01-09T06:27:16.655396Z","last_seen":"2026-01-09T06:27:16.655396Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/fc21b7e0d793/api.js?onload=Khftj4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hwa432.de/","date":"2026-01-09T06:26:36.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/g/fc21b7e0d793/api.js?onload=Khftj4\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://hwa432.de\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 09 Jan 2026 06:26:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Wed, 07 Jan 2026 17:21:54 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: http://hwa432.de\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=rXsVwAyXdkoMPyD_gGBg965jlE.sV7CsZwsCu6o4MhI-1767939996573-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9bb1dd328d62569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50465,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50464)","md5":"32909d53449eec324f7e8211ba9aca5b","sha1":"a230d0412cecbbe89ab7d10c6fb1345293ed7671","sha256":"dacf462ec9bd8786d33afa74942efd047119080b6e2ef7fd0b41d29f85cd2cc4","sha512":"a7cdfb49040795c164203aab169a252950cb24a9f66848683ddeb7867b012487df8272636b25e6c8f039043b6dd4f524ff31de1b788418bbbfcbe459553656a0","ssdeep":"768:/Cofu2DMagL9VAQeLxn2tSv/1odY3drOF8msKULgt9Tr7+CuAUyG13PE0okbsO10:Q2gagL9VAQeLFbCdYNrNRgtt","tlshash":"df332a583196387267dd80e4617b63437325793af94ccc909827d92636acecad233f7a","first_seen":"2026-01-08T11:23:13.321335Z","last_seen":"2026-01-20T18:54:51.373928Z","times_seen":6943,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/login","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hwa432.de/","date":"2026-01-09T06:26:36.644Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /login HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hwa432.de/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 09 Jan 2026 06:26:36 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aO5U0Ry18XBNFcnc%2BbRRdsIf1ehlSdvmKQiE60Di14pHH8Fzh2bZiSztHci3%2Fo7XmNqWZqGiOdCW4q7LHjj2Uxk7Bn%2B5%2BQLU6AEKUAf%2BTQtwA1cxirXndaYNvQ4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9bb1dd330a960883-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9bb1dd330a960883\", cfL4;desc=\"?proto=TCP\u0026rtt=6414\u0026min_rtt=549\u0026rtt_var=11192\u0026sent=40\u0026recv=23\u0026lost=0\u0026retrans=0\u0026sent_bytes=49228\u0026recv_bytes=1381\u0026delivery_rate=47586854\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5325,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5325), with no line terminators","md5":"980dd408b34187546d4682f85a0a28f8","sha1":"f98bb43760ee0f24fbcf6334318e6afede3ee914","sha256":"d83dad3821d65aab6037ef4f58622f3a3696ca710c3c47fac2f037a4ca16c980","sha512":"167ced60bdf66fbb4258c03e13f2ccc1128562e69816a0ee3ab244729c76ad6b317f1abf0e36f79afd54fdccb78695dd84054e2bb0b2fa29fba0b2dcee5eeb1c","ssdeep":"96:PNybXZtIEb0EFW87IPm+1IlBPIVYY9q2kfUAYzueh84mw:PNadBN+ADV8hyZw","tlshash":"54b15ce2d5131039d3fb0aaa447b77045262f096ab06d965f5f0ee4c83eef07c22e165","first_seen":"2026-01-09T06:27:16.660164Z","last_seen":"2026-01-09T06:27:16.660164Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/favicon.ico","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hwa432.de/","date":"2026-01-09T06:26:40.867Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hwa432.de/?__cf_chl_rt_tk=1Cz.9UaXhX3VXACLLLdhLx.9LPgkWfROiqbqYM6J99Q-1767940000-1.0.1.1-DII_RircakIL5qBRTkzFiSR9IZZ5mG3WZhQUYxDrLeY\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Fri, 09 Jan 2026 06:26:40 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 28\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nLocation: /login\r\nVary: Accept, Accept-Encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aoPum99bfvMzy%2FwfqjyelipU1LHw50VYZpiAqd0aUNCxHF1PfcCHPOAX8fXhkBbwcgDZkAL0mFnQG3xqTQ3r3UNz8tAgWxM%3D\"}]}\r\ncf-cache-status: BYPASS\r\nServer: cloudflare\r\nCF-RAY: 9bb1dd4d6a5a56a8-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5453,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/fc21b7e0d793/api.js?onload=Khftj4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hwa432.de/","date":"2026-01-09T06:26:34.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/g/fc21b7e0d793/api.js?onload=Khftj4\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://hwa432.de\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 09 Jan 2026 06:26:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Wed, 07 Jan 2026 17:21:54 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: http://hwa432.de\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=.wcYeh54ASrhthIgHic6bkKSdzvmRkCO1NbOHuXZEis-1767939994312-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9bb1dd244bb9569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50465,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50464)","md5":"32909d53449eec324f7e8211ba9aca5b","sha1":"a230d0412cecbbe89ab7d10c6fb1345293ed7671","sha256":"dacf462ec9bd8786d33afa74942efd047119080b6e2ef7fd0b41d29f85cd2cc4","sha512":"a7cdfb49040795c164203aab169a252950cb24a9f66848683ddeb7867b012487df8272636b25e6c8f039043b6dd4f524ff31de1b788418bbbfcbe459553656a0","ssdeep":"768:/Cofu2DMagL9VAQeLxn2tSv/1odY3drOF8msKULgt9Tr7+CuAUyG13PE0okbsO10:Q2gagL9VAQeLFbCdYNrNRgtt","tlshash":"df332a583196387267dd80e4617b63437325793af94ccc909827d92636acecad233f7a","first_seen":"2026-01-08T11:23:13.321335Z","last_seen":"2026-01-20T18:54:51.373928Z","times_seen":6943,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":87,"dns":56,"connect":4,"send":0,"wait":24,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9bb1dd31b988b28a","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hwa432.de/","date":"2026-01-09T06:26:36.484Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9bb1dd31b988b28a HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hwa432.de/?__cf_chl_rt_tk=9_IYsoaFukBhuIuYY3Pm_dEZ.tPhlDObIWOqQ65wsus-1767939996-1.0.1.1-XpSpJ6dNvMjxkarLEiKiJdHjCOwVCbxm8olxCx41nJI\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 09 Jan 2026 06:26:36 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UOMYqnQJoZTEofl%2BdyTagZ7upkP3sJ%2BNXHyWhByxcUQ8LKZuIKPwNKvwNbjZUNx4TXCEIAhG%2FV9ZoffXcrXL%2B%2BnTc4KWUHvm2tMYpB2CeI5kxS37MTMoqlVIcQA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9bb1dd3208ba0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=549\u0026min_rtt=549\u0026rtt_var=274\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=531\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120892,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5c39bf27334b294a78014c52ce0d790b","sha1":"9629674f51a3d3e558aacb1b2d02989a97b124fd","sha256":"0779b2bc58890b5e6e323f1640af3991be445e069d16890edc65e92d526f59a3","sha512":"a8043c8d9805071c7d413115b55cbeb8675c708f4ded4ebea2116ad3190a60545b147194fd8b36920ca5628b8fbb7c0f23357800bc6a2efad17f18df3f0f34bd","ssdeep":"1536:BouFMG6oN9I5p2j9DUMYN9J/LuhetrVLKzNw0dtqFRzivvRvDfiEOJkA0HO:BzFmoN9I5p2hbUuhwuzNw0dCzivvRBBO","tlshash":"e2c3f88e38de7565023a30b4142b39daa2aabc68341c9d0efb5199e47c95b187173dfc","first_seen":"2026-01-09T06:27:16.662888Z","last_seen":"2026-01-09T06:27:16.662888Z","times_seen":1,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":2,"dns":1,"connect":1,"send":0,"wait":24,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/login","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hwa432.de/","date":"2026-01-09T06:26:36.662Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /login HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hwa432.de/?__cf_chl_rt_tk=9_IYsoaFukBhuIuYY3Pm_dEZ.tPhlDObIWOqQ65wsus-1767939996-1.0.1.1-XpSpJ6dNvMjxkarLEiKiJdHjCOwVCbxm8olxCx41nJI\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 09 Jan 2026 06:26:36 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XlZ9lZQb7Ud5r8EAkawWBAziBmKphD40XOkF9cC1qsnLKelMySg%2F5f%2FdnjTa5MVkZ9%2BR%2FHe2dfdE6aQOlwZ2SZRgmeuJ2wwwgYyDN7ATjWdFdQsmkEb245esTpo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9bb1dd33290056a4-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9bb1dd33290056a4\", cfL4;desc=\"?proto=TCP\u0026rtt=472\u0026min_rtt=455\u0026rtt_var=205\u0026sent=3\u0026recv=5\u0026lost=0\u0026retrans=0\u0026sent_bytes=629\u0026recv_bytes=850\u0026delivery_rate=2437710\u0026cwnd=250\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5453,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5453), with no line terminators","md5":"e8a8e44f45e29a375705fc0c70800ec0","sha1":"ddf1fe42669b6aed324916c2eaa2a07a724b6d76","sha256":"aee9aa858d674cfc0e703b6542b623f4e426e1091d3520e464c82f0967d11dad","sha512":"c020c365295030ce986ce473d7ce30fea46b8b48649d8ac345e9268e31ac98bd92ed4b1685d299d0d296b662c0f7dba534b0847c24d5d49f3f7a399dc79980a7","ssdeep":"96:PNybXZtIEb0EFW87IhEd/ANNL9C856dzvw2wC9JSrb2SYzueh8Nzmw:PNadBWa/SH56q2n9JSri/yuw","tlshash":"ecb14df79212301ba7fb9b77807a73042224f1a99b07a54ce9e0f99c47dde07816a190","first_seen":"2026-01-09T06:27:16.665832Z","last_seen":"2026-01-09T06:27:16.665832Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-09T06:26:49.185Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=3\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 09 Jan 2026 06:26:49 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VDIzy2S%2BdwDAtjjfmS5ifm2DAEyK1tSUJZ%2BDhSTHUYNN0SGgpwFwHCTUpO43de7WWFsGuODdVJezO3zKVuu9R7n%2FIbFunB3P59ZhgchGC3oK0pLTs15xBk8%2FXIE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9bb1dd816a0c56c6-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9bb1dd816a0c56c6\", cfL4;desc=\"?proto=TCP\u0026rtt=2370\u0026min_rtt=2279\u0026rtt_var=1037\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=1016\u0026recv_bytes=3217\u0026delivery_rate=481382\u0026cwnd=250\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5331,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5331), with no line terminators","md5":"b4a2c3a0aeed7eddc9a24c6ea589b21f","sha1":"032ab052836679fe262c8616dfbe75f6f1efdea4","sha256":"91da75afe048e67ad154f7b62a0911c57038ec496db67d87352a0966e05b461d","sha512":"0c9f50a361e4ebda986b9c385e98125d217a62d71fea38bfb49256d172a52bc164fe442fbf0924c2494c10f1c0ee049646ee97a766e13724584e35489141287a","ssdeep":"96:PNybXZtIEb0EFW87IxKwY3knn7x1LBsM3bMrToG356qYzueh8Smw:PNadBZwuknnN1LSGbMrToGs3yLw","tlshash":"b8b13bf78562512be3b64edb10b7b3485321f461ab02d085e5f1da1c9aded0b814f394","first_seen":"2026-01-09T06:27:16.668219Z","last_seen":"2026-01-09T06:27:16.668219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/favicon.ico","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hwa432.de/","date":"2026-01-09T06:26:49.283Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hwa432.de/?__cf_chl_rt_tk=OxwEAdB.admgXtOz8dbkvLPznkPPRc3yE0KacVsm_js-1767940009-1.0.1.1-RKrIWzIMs2PAsOvtvrXxTbDAdZX3rc_2ysco7nmRZKA\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Fri, 09 Jan 2026 06:26:49 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 28\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nLocation: /login\r\nVary: Accept, Accept-Encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aDVRySMXWnk3sj4ZFtnoLGMGowqP0OUsr%2BcqaSz11Gbn8FWYNRu%2BEU7I6ANdf8PC%2FCMLpjvwOHOiPVBrgdS4ihuwQTzWmqUbzQ%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\nServer: cloudflare\r\nCF-RAY: 9bb1dd820d131ae6-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5453,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/login","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hwa432.de/","date":"2026-01-09T06:26:49.459Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /login HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hwa432.de/?__cf_chl_rt_tk=OxwEAdB.admgXtOz8dbkvLPznkPPRc3yE0KacVsm_js-1767940009-1.0.1.1-RKrIWzIMs2PAsOvtvrXxTbDAdZX3rc_2ysco7nmRZKA\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 09 Jan 2026 06:26:49 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yICRZZ3UB6zJ8VxL8BnPkcV42bDr%2FwP3jCvkoH2q7S3B1dZo36cWl9wkW8lYUaar6DuUDW1X79%2F0%2BaZX3BYOo9nIoxOcUe0TjrXbQNg85Vfble3k%2BDmJUJwvtTU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9bb1dd8328001a30-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9bb1dd8328001a30\", cfL4;desc=\"?proto=TCP\u0026rtt=518\u0026min_rtt=487\u0026rtt_var=246\u0026sent=3\u0026recv=5\u0026lost=0\u0026retrans=0\u0026sent_bytes=643\u0026recv_bytes=850\u0026delivery_rate=1951482\u0026cwnd=250\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5453,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5453), with no line terminators","md5":"2e93d88395595aa4b737b43a2058071e","sha1":"5f43c71440f69b192c399ab2344c298cface0d00","sha256":"050d07e34d2715d2c62b0e6d0bacc8e2b8e897b7bbea905de2311b79cc8de9d7","sha512":"a16941b7f02bd146ea10bee99dcaf2afed48f77ea347d5a9ca0cbf4f177352514d7ecf805dd83270d4e57a5fc269576a0e689dc888a7df6a1e2694371d084608","ssdeep":"96:PNybXZtIEb0EFW87IbaPLMWXkojFwBJ4TGFFLMfmxYzueh8kmw:PNadBpPgRrBJSGFFJmyhw","tlshash":"fdb15df7da12602adb7906e618b77348e261f190db00c11cf5f5dc5c6ae9e8b915e28c","first_seen":"2026-01-09T06:27:16.670649Z","last_seen":"2026-01-09T06:27:16.670649Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/cdn-cgi/challenge-platform/h/g/flow/ov1/1796455274:1767939192:QZUMcTVIYmabEBxIUcwdqgvBp87bt3WrkcKRysE07Hg/9bb1dd816a0c56c6/54yQkSsG0lRJcQch2kl9QAlquOWX6N0kB8M8PW.Ifgs-1767940009-1.2.1.1-XidnUe10HoCm6ZOA4sq2TyXgFo2t7AYOUl2T_nF.iSrBfvhr.LE_PBa3SbZTph8N","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://hwa432.de/","date":"2026-01-09T06:26:49.521Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1796455274:1767939192:QZUMcTVIYmabEBxIUcwdqgvBp87bt3WrkcKRysE07Hg/9bb1dd816a0c56c6/54yQkSsG0lRJcQch2kl9QAlquOWX6N0kB8M8PW.Ifgs-1767940009-1.2.1.1-XidnUe10HoCm6ZOA4sq2TyXgFo2t7AYOUl2T_nF.iSrBfvhr.LE_PBa3SbZTph8N HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hwa432.de/\r\ncf-chl: 54yQkSsG0lRJcQch2kl9QAlquOWX6N0kB8M8PW.Ifgs-1767940009-1.2.1.1-XidnUe10HoCm6ZOA4sq2TyXgFo2t7AYOUl2T_nF.iSrBfvhr.LE_PBa3SbZTph8N\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1986\r\nOrigin: http://hwa432.de\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1986,"data":"r$vv804cUyT42SqDKbB9$gvJ-U8YZJxZ$PI34jMUOHM6wcuUVVBnsysJtgFZz9FOyNErRgGt0uu2cwOCWe-OWHOg65sCUn4phs2z6didelE6hsvy+RhXp2FQNZzfCliWDCOE70OzHDsTRlA5IP9yAl43j2AnBxEKDf8C27IGLrFnSoq7xpFUOsToICBjUj29IgegXbIb9jAHNvq1k3S8dQat2ViWIByGZNOPI6HGkOWe10fAjdhjx0opY2n46fyF0VYCeIkzPOxdJ5PR4w6K6EFhUyOayTdKhGDrUCwTHBZ6YhlcJa0F1AHVbYKd52ePxht9juQI3XyoIfzNzlVptYyIWEay1ZlcQ-Fvr-fnkWdwI-oGbG565szD+IbdjDfyZzQ3+aYJn-FRwZH8kxpbDIu+8Hz+nRgb8lGX2y2Baq-trcMDZ8UgaXy-NzQ6jF$kF1af-uvGNUh0FFp3QC3UEjggbAaMfTx+vQypO6YCzL7qcdKUnGTFG9kpVlZvbiXF9EWhZ$3QCaBAjUJs0dFEaSRMDAxDGJ4SkZMZ3r6efUOJZjpxSNzGFZCEHXt3GOOX82uIsQ8o1nCYC-vYwMlyA1BiSKza26MPCy6CuM1B0PabRxAxesQ+SYuNURXSVWJyGBPStrNJBg4SccxdU-PcEvsRTuS0yvpREUpXTGg2Plyac1$4x$Aj2E2L+CPSjC-VUG+P6nd1jZR6ygOclOxOC40fitpc6a2Ad8kxhto$n$4iMncp1A7O7JtAjgSCptKZfo0GYc0ZdSVpb9MdQClG8jFk+wMyxYfQ8exkWo6LqWHhUsucCDbo0HkfoJTnP5LETxkajf$4LuCPdh7-QGYeaeUSqOSCydSv8Gwnn0$f9aOscCICla3phIdAiKFgj7gE1px+8raFd-GFE7Vr0CVhjNtq4ht6Ncvu$Joxb5lqqjjj1AJ+wlPSUvcjUSkPDZFE-8gOF6i3b-q5dcAtuwIWerstSYMWL4io-3hMrnEBoFBMwbuz9ThhSkjzzi+owY7-qRsF$zWsrZ+oeW2JnMyuyaQFZZClWTJaR9S5EYFAZZ57uoaY$Za7dTUDThoVUssRV3O8SLpf7iV7A3kfc0gJWeM1bWQTGd8QFG+iatXG$vd$qx8WyCijLVQDVIC$slfjF9bRr6YZczv6l94W7iw+WwEHOuefTYZNFRToQH8SJQBWDQEMYFGvb1$5ZN-hv71hP9vspGlOYJh5+yknGgw-1y$rzCoAb2qN1hiFwN$RDhyWEVgZyRskBA4s1geLgInsN09JTiHnWJvZuEatWNdsQBIUHK7pdKcYhe$8BRNZ0F3p6BsUIUR1iokXW6QaYGwaeg+AHtM5NbIUQIy93xw27PMz-jyFcVnI2l2u2TMGEqE1jhiJiNPVsUVz5T3SvuPP-E46QQvL78EYplDLFwYXGd4RtgEZXg39W+3y-87cduIGI$V4$IGYqxakHGa029FGEs6sEsMw7XIICZKtfn$kwqzzu9+Bi4-1YjIcSflvM$JYBONoa8ItcABn4+Mpl6S9ZfQxaKW3Sv+M-Gw$hlO-GLXzvD7h$nk9bZH-oeGoEVMhe-APYc+xC4TQ1Tf-xjYo-V8r5QhGpJDn+pgwJS-RDZu+yjg$LEXdsL084ELejd8$bYV$4ZYDYPJq6MLFaQsoFe$u53Zxn2P6I7PbiPadewT9ZDXco8pIdGFCyWRn7Rf5rEvv25tfDA3eru4Ufsp1Xcz6rKaSvWlo$CWhXWrqWCDLhc385d1DkgzcGDOKWtzRqohjzXbKKNwzyhcQcb3tZSHo-ylSQNAjGVg6OWBtgQM+AKNtdQqkRaweTxU0sysy1Eu437nQAhTFZ0S3DftQ4zJFP$V3e0tHjYSCwuu9BfO540fgyqLEIU97oFiclXnBBqL85KxnK5c1ipGD0GejSXo+q7J-0Zd96O-ibDM10xWWf3aPliAd9bcYu9nssjedEklHTGbKtqgvdjyrFQhQfF"}},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nDate: Fri, 09 Jan 2026 06:26:49 GMT\r\nContent-Type: application/json\r\nContent-Length: 14\r\nConnection: keep-alive\r\nCF-RAY: 9bb1dd839c2856b1-OSL\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncf-chl-out: VaT52cgLJeboNWP/TvWwvdQS8890jMkeh89kphdNObLQmeFmsZT2VS1FKPfpIWHqtDqTxHAG0zZa723V4+cNaQ==$awtoTAr75kZ6MOWUFmBGqw==\r\ntiming-allow-origin: http://hwa432.de\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3Aqr3aAgkT%2Blx2uiJfxD%2BmkoxjYFGBF%2Bnye2s773XgPkBLsruHV4KMf2DV7qIzJ9eJ6QEhNbyZ6qA4BP%2FcndW5GV%2FeCJd2rs%2F9%2B%2BUoIpHmI3mCc3uT%2F6suVrx3Y%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=557\u0026min_rtt=557\u0026rtt_var=278\u0026sent=3\u0026recv=5\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=2810\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c388aee5b895e903e82a624bb011e200","sha1":"35f272c9e20b19d540385f51d8e6a3d0f3ae5131","sha256":"3a77ba941559f70e32300f869db092307592a75e6733693e985ce002239814a9","sha512":"486ad8f4e805a2547f544cdfea1eb9362a0e7721d90c01e9c03f0bd84cccfd69b4999f1096e3d68895e2e48f0a96212c9a38cf93d5afee760e3d9bbce7c05fc9","ssdeep":"","tlshash":"90600000f3f0000c00c0000c300c000c0300c0c300f300003300030c0030f00c000000","first_seen":"2024-10-11T08:37:20.57558Z","last_seen":"2026-03-15T07:01:33.819158Z","times_seen":8854,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":10,"dns":10,"connect":2,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/cdn-cgi/challenge-platform/h/g/flow/ov1/700589983:1767935618:ScaFBVzqkeCkx7vM2OVCUzmzn6gKzD2mcp-aKe4Mous/9bb1dd225dafb51b/esQ7PTYnYC8FYGLptFInSdEm8StCTepAIFpkixNOEZA-1767939994-1.2.1.1-_MYEV9HBS9JS1nBrbWPuy5PxekLhdJCd.hksBJ_ElKAeIcfMFZy8vY8FuWH0N8Ak","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://hwa432.de/","date":"2026-01-09T06:26:34.388Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/700589983:1767935618:ScaFBVzqkeCkx7vM2OVCUzmzn6gKzD2mcp-aKe4Mous/9bb1dd225dafb51b/esQ7PTYnYC8FYGLptFInSdEm8StCTepAIFpkixNOEZA-1767939994-1.2.1.1-_MYEV9HBS9JS1nBrbWPuy5PxekLhdJCd.hksBJ_ElKAeIcfMFZy8vY8FuWH0N8Ak HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hwa432.de/\r\ncf-chl: esQ7PTYnYC8FYGLptFInSdEm8StCTepAIFpkixNOEZA-1767939994-1.2.1.1-_MYEV9HBS9JS1nBrbWPuy5PxekLhdJCd.hksBJ_ElKAeIcfMFZy8vY8FuWH0N8Ak\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2007\r\nOrigin: http://hwa432.de\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2007,"data":"sfXiw7uU$yCMeOfmOlUlZWjtsRM0s7YBKlL-f6cKfPtuU4hQ2Jgp8JdcjZxyaz6MVMaqo4N6QBfWTqEi7U35Hiqp6Otwb-b99Aml8ogQSLcB$vSjh6LbTW3EKyity1tzy+gGZ0Pml6Wo4Gf9ix-F0J2e2pXSp8$WYoHO4t+JVricjKf1jYptMgDL2pChXN+nsRqx0z8HxpLHPJkDsVPNryu$FwO6mequoq2XNcipQ6k+gu7G8SJRvL9xEbhV0FXw4oEzq8bpvjpL26L6j8VqFbB+UFF+zkYpW$Y1ga7VnBKkME4rsD$SVvBhL+uCseak+F2n9MXK1DGQOX++z6N-hU127tFk$FqTi3JrOwONhB-rPPvUPhJK7Zan9N5jTxtNhNQap9B$-e8LDH9tva611OR7mtB2QnqbYoB3er53RmyUU2toX$ONW-LGh2SY0vy1$WpFcXNjCUzD8N+U$4VrpqjJ2pMlGDxoV1V0m5Wnp+pBjFdpyalijmxzeZDi-xOrYoD0KSNoF0MHvdxzVUA2Vxfwkm24Lk4RK+$MZWAgciCJQu41fjlZmj0FgEke61FYWi$K3pAw6WERy2QeX7mqMH-Me4WktRWruokWP9rSOhWej5ZzvLAHacrazUtZrbFxiOXYjr1y3+pHj0cmswzDKgEQK$k+kCGBY$wwE3bHy-sV2pio5h4s3EBuPV1UN0gRAt63+QU2Lr6N$S1XAxpShwgu3ilV8ZAmo-X8ERNjBiWV3BcO9V9vNFV1LumUjam$0+9RAPjO3cpU-E65hc9TCdVfPAF$J4R9rJgZks8KjyfyqcjXyQ$v74lYQnzJQ+17buvajeXB$0Blzj-NE+-B$EwPlMvfHzD1FVCWZVP2XeBdYxe6CbirU0BtLtX9Som8BBLvwe$03yyv+QSopYrQXpXf5VaCrseC9mnjhi6amTrTU7gwr+aWq$LsZhh-wLnKjcQY96r+Dj8vshH1$wQQMsrQc6gcUG5dcaCJAkhtLs5wniW7FtnRrQYQfCvNe+-SkSz0KEgmVZ+MP9MO2rhZ07AKEBk52puAr7JToNX$woekaotC1nhy05Y+sludeuOgmFVfw9hdmkHCoOBG8YD84OY5LxHCn0W0vzVQJJT4t5+BPpSR8-yuYVY1gD-PEPljPxyhlXupJm+jq5ho3hZAm65CJvNufuW7HW2TouM3GpDnmQk6TKKtsRQlsk1B8ajAzxaMuwvB7ZFh7E6kKG-Fo7dD-8+1C7okm7CyRu6+XJUNBshloqCLrx6UVRiGoq$6C8u7KeQfvQC-7boU5lCbPb5rq2b7eUHiqyy1NSMEnBTU5Z04S6GEVYiWLgYBD+YkAU4ir2$oecMJjF5Zn89Ra9wDBaJHkPvdPEfMLpXwtHFB2E2tGbqX7+u$bkL8igC7uRFwj4QvkGCP0eslfXh8xSPTWzTjkiePdTkt57ds0fQetP4TRp4malJir2CLkaqe9XLWpWdeeoPCGSgTOd$48xpJGAh36X1sQJXGPEHJB+Qszu0XgdZDESvPd+bQ5-wrboaV2hqpENvPR0942RKEHCKJWM5ERSB+yRXH+KuXFx5dGjtT+YWclSHxpUss6QE8VCqNgUFLP97AYiy7ONTt0S$2j0lqm7Jzyy2mx-KCPM4rgerbyWa-a6DZ7OzYZogVS2KVyUBcjvPccxkwJnM+$NJ$G6MsJS6RKX-jTzeAfmFmCDjU-YQRa6ShfoZv8NpWry2A+d4RBgD7c7blL-Jw+TUF9uOrjPaX$-AYSeyaxH$1WcuSM11+JzcoLO7pf5WTjaKJJ0VmvV3CtaDPw1-yHODuFqrw4EpAQpGDMJSG$uAsCTDxq+EC51-FP6mlP5YRtOmYdnvekdlNhhaA2LFZt++lyRB2xK8r9iehGuWbXSyKkzdesfaxEa7e0Xswv3j5BzmmDFud2q$4R0iu4cTWG$3Mv3TR9+pKsNBQh+SagbfyxC8OA86mWgHftrq-RtWBGfkeD9D2gxjOLv98ujgYT0F"}},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nDate: Fri, 09 Jan 2026 06:26:34 GMT\r\nContent-Type: application/json\r\nContent-Length: 14\r\nConnection: keep-alive\r\nCF-RAY: 9bb1dd24ed4f568e-OSL\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncf-chl-out: ApgXsdbXQKxGsywyibS6NyqvMDVX1qEdALQnW5H3yXw4UwIAnrlTVuxQbqJB0E/OT+BoQod4/Dh3RBMezQSa8Q==$on4JI2SGro9hkiKktpC4+Q==\r\ntiming-allow-origin: http://hwa432.de\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BBqNJxyM9trF%2BC264OQb5ocy7otpNLAIzN3ZFbouraud9Q5ZO47Zq9TEpQiXJRVEiEIfC59ExJLas4Vmi7sdQ38NrVD0w65f8Rzy27OjN2QTPhtI6%2BZKJtKCYZw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=8064\u0026min_rtt=705\u0026rtt_var=13304\u0026sent=38\u0026recv=25\u0026lost=0\u0026retrans=0\u0026sent_bytes=45642\u0026recv_bytes=3778\u0026delivery_rate=19817518\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c388aee5b895e903e82a624bb011e200","sha1":"35f272c9e20b19d540385f51d8e6a3d0f3ae5131","sha256":"3a77ba941559f70e32300f869db092307592a75e6733693e985ce002239814a9","sha512":"486ad8f4e805a2547f544cdfea1eb9362a0e7721d90c01e9c03f0bd84cccfd69b4999f1096e3d68895e2e48f0a96212c9a38cf93d5afee760e3d9bbce7c05fc9","ssdeep":"","tlshash":"90600000f3f0000c00c0000c300c000c0300c0c300f300003300030c0030f00c000000","first_seen":"2024-10-11T08:37:20.57558Z","last_seen":"2026-03-15T07:01:33.819158Z","times_seen":8854,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/favicon.ico","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hwa432.de/","date":"2026-01-09T06:26:49.323Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hwa432.de/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Fri, 09 Jan 2026 06:26:49 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 28\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nLocation: /login\r\nVary: Accept, Accept-Encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bo%2BVrixV391fiti1BEyKrhHwRTMZkebt24la%2Fcsq1QcetTvo%2FUSmihIUv%2BxUruDm%2BklMgVbtmpCu19FHsAhThvfGxWPxtKVI4g%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\nServer: cloudflare\r\nCF-RAY: 9bb1dd824e371a30-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5325,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/fc21b7e0d793/api.js?onload=Khftj4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hwa432.de/","date":"2026-01-09T06:26:49.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/g/fc21b7e0d793/api.js?onload=Khftj4\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://hwa432.de\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 09 Jan 2026 06:26:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Wed, 07 Jan 2026 17:21:54 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: http://hwa432.de\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=Atj4ozS_Rd6e1fZYQrTMMowl8B1aseMI8qHiFiKP7V4-1767940009344-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9bb1dd825f965699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50465,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50464)","md5":"32909d53449eec324f7e8211ba9aca5b","sha1":"a230d0412cecbbe89ab7d10c6fb1345293ed7671","sha256":"dacf462ec9bd8786d33afa74942efd047119080b6e2ef7fd0b41d29f85cd2cc4","sha512":"a7cdfb49040795c164203aab169a252950cb24a9f66848683ddeb7867b012487df8272636b25e6c8f039043b6dd4f524ff31de1b788418bbbfcbe459553656a0","ssdeep":"768:/Cofu2DMagL9VAQeLxn2tSv/1odY3drOF8msKULgt9Tr7+CuAUyG13PE0okbsO10:Q2gagL9VAQeLFbCdYNrNRgtt","tlshash":"df332a583196387267dd80e4617b63437325793af94ccc909827d92636acecad233f7a","first_seen":"2026-01-08T11:23:13.321335Z","last_seen":"2026-01-20T18:54:51.373928Z","times_seen":6943,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/cdn-cgi/challenge-platform/h/g/flow/ov1/1796455274:1767939192:QZUMcTVIYmabEBxIUcwdqgvBp87bt3WrkcKRysE07Hg/9bb1dd4ceed34e4c/eqZLBlDSETBCN0zQyKlKnj1m.AA_fSDAoQhJGZ2QCCo-1767940000-1.2.1.1-_DHJtYIzX_8DRaUUVAA9aQCbAP0m.jWz4HvqnS3ojMDYDGBThPEE06enHQwmmOAN","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://hwa432.de/","date":"2026-01-09T06:26:41.131Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1796455274:1767939192:QZUMcTVIYmabEBxIUcwdqgvBp87bt3WrkcKRysE07Hg/9bb1dd4ceed34e4c/eqZLBlDSETBCN0zQyKlKnj1m.AA_fSDAoQhJGZ2QCCo-1767940000-1.2.1.1-_DHJtYIzX_8DRaUUVAA9aQCbAP0m.jWz4HvqnS3ojMDYDGBThPEE06enHQwmmOAN HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hwa432.de/\r\ncf-chl: eqZLBlDSETBCN0zQyKlKnj1m.AA_fSDAoQhJGZ2QCCo-1767940000-1.2.1.1-_DHJtYIzX_8DRaUUVAA9aQCbAP0m.jWz4HvqnS3ojMDYDGBThPEE06enHQwmmOAN\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1975\r\nOrigin: http://hwa432.de\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1975,"data":"fZdKbzXfBwYuH856$u4Q-sS2b87ZwdGEWgS+0vvuYSyyeQ7M7Ggx4qZG1rKr89-hkMK8GyfGkwlxjoTMse2F6MakPahWGhb+Pw5ltZEiPw+aAfF1u+pJ6RU5ENtow4cBc8boS3VcL3swZwfdGdW+cj5WAx85wf0r4OxbWouVCHk$C8NfOQTdiSfgvLf04MN11Jq12xNOrp26XAwU8egcju2ln5ZsUINJaH48+V6WGgMguzv7GuiPdpsQziSz7ZpRvdMnNl+QQgt-SCnNenz3sQ+I8UKjUv34TUYQwlzlLHcJBP+hU8YQkdxCqW6VKMBOR9QvueXiAiploDf1jUBJ1qzPQGsI93S$tYyIBE2pcScl6dCr+$wu8JIsJlM46zQrTQdrHPhss7Khq$TgbzBNOCj2i7hTIoYdqEqS2ZKih9LMd+D0CuAQ4iIJo6rNZb-gx8K7sH0NhPKW4KVS7GSY3yIetS1LS7Z31KkstekJsxxqY$Cx02SOgN$TRc2hIzX9Ve23F-X9yPQrvyAFdk2ze6-ZxfoD8WO8XawMLUyebIEF84SkXIHg2gen-fsi5WrQaTFYpq$rP-tbsYHYBQ3gi6EGEOriSTWoB8brSU6nxpZhKc98$FvypsDroo-DNxZsyr4ED$4zV3TKfbZujnz5fR7tRhP9Z5Jk74yGPF2c5ct1HhSCHrQwdOuOKi-r2YI9IYSu9NOv3qXKgvhUgUpR6CXDJ$CzQ-zQHsFF4CrSGls74NbKNfHwNlfKx0zr+fNoayT28goq7vB2qbJrviir6PUvlTjgBb7a84JrWyUONEb20jOkT7I7bMnSxYhbcVYMn$d4$qdNHV5tjrvNodV2AFh8-02-d8R-nnWrnldIkDMaNNPUsi5dnuji4bKnvKZ6Wapbp66YpHGeqIlZHdP6djaiKXMMUa1SrI-GH+gR7Oyn+YOoYqENCuxQrTRxzaP$T$fH79pjWJMS$JsgX1CI4WsavK3ep4GRfGX9GV$qUIXq0axCyIQeG-SXWSUHGuEDTeY5$geDM24rDECrYX07OHl+8CFbs1-nxd0swZoFOlODzqXVe1vgf6VZiNdPW10fVITdkIBSGIxbUUM9443wHch0K7Dnheev$oLiEcsJSBZN5Pz+si8Q+M-co+9Xfp-7hLuxFycbV+oasAVg0YE$odgDbo8WE9yfveZ+cdcyi29nrZvc+CIIpLa2pcexOkotGlLXuWwrcWVxYg4Qq5AC9K$CF0Njur5nOD91Pq2D5e5SLVnd+aHQ$qki1SQzL2MZfNSHrv3Ituf-5+sgfjD8XjSx88w0WSd+wAQE8VJysDTPAuR6OR8qqSkeQresRy7$bCrgskTgid84weN1fjx19KVpKtkJEEgZA9VqoBHtGQ0SKXqKl-I7Zou5$S3hultnn3eR2gitz6f0$nxeKN-z41R7EI8-aqeH7RZ0nUAgHeGo+fPMa2EHvPQV3CU2$UsIp51N2DW6DHE0DRRgVqJOO2PQi3+tQS42yJcQZvgyfwgAhO8l9uq+fJ3Qj5nI9CJ7btRQvZUlPO4u1O80z8ud2M3GjVGew$aOyRGlwUI6He5SgdTzBjxP6OD4HOxnR4Lq$iPxZovKAfGS$tATbT5GbdJp37tsoYMvhIA7OIbXJgqr+ZqGTvbNjkSd-2iFSf8UEXrEkHdIcMt$zDQV$PXABAj7rfASH7iWUzUbTbk5PJ0MyedITHCjQ5P3Nrgr48JLr6afW5d9QeH2X3cClWrBMJ-YqM6gl5L4w1DJVn5o6NU0nrOSR0IDf3qW5ZB--GoLNbKc3Gu9J2CSiW2oIEyfJU8xYSawfqRLu5ER9Z4-j$qCWPf6cqATBzPfAVwf7O3DYtuhE$11l+TzRVZ07qE-qsihW+ZUnHZvLfJoA7+ZQYzsKQfx2sWtaeSW-ErgHjH+iFWR06JLZpy08ovfciLl6DJJCt8PwZ06uIPzz8w$qeLHFurbqB2flv1"}},"response":{"raw":"HTTP/1.1 400 Bad Request\r\nDate: Fri, 09 Jan 2026 06:26:41 GMT\r\nContent-Type: application/json\r\nContent-Length: 14\r\nConnection: keep-alive\r\nCF-RAY: 9bb1dd4f1bb856c6-OSL\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncf-chl-out: C/jokcn99aLvONJKSJcxc9oyDJNLcUEZcfIK1xuSVC5EffTrd/6QMX6YQHLJ2BQIjf8EADsDFJNQBukgbHc37g==$sOroiB9xiYokAaJj6QR9Bw==\r\ntiming-allow-origin: http://hwa432.de\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=EkMrmEpfo8WHMdKZlM8XLzTbTHsd4FEQeIMZcOfmsUzQupdvGrfBAeZ2LNKxSTtrwyah8pXAk10DYYSGb%2FgMJ1gAkYgIKNqKN0qDuw7se14Z%2Fl6LFXBSYfsQrms%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2279\u0026min_rtt=2279\u0026rtt_var=1139\u0026sent=3\u0026recv=5\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=2799\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c388aee5b895e903e82a624bb011e200","sha1":"35f272c9e20b19d540385f51d8e6a3d0f3ae5131","sha256":"3a77ba941559f70e32300f869db092307592a75e6733693e985ce002239814a9","sha512":"486ad8f4e805a2547f544cdfea1eb9362a0e7721d90c01e9c03f0bd84cccfd69b4999f1096e3d68895e2e48f0a96212c9a38cf93d5afee760e3d9bbce7c05fc9","ssdeep":"","tlshash":"90600000f3f0000c00c0000c300c000c0300c0c300f300003300030c0030f00c000000","first_seen":"2024-10-11T08:37:20.57558Z","last_seen":"2026-03-15T07:01:33.819158Z","times_seen":8854,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":4,"dns":1,"connect":3,"send":0,"wait":29,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9bb1dd816a0c56c6","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hwa432.de/","date":"2026-01-09T06:26:49.244Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9bb1dd816a0c56c6 HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hwa432.de/?__cf_chl_rt_tk=OxwEAdB.admgXtOz8dbkvLPznkPPRc3yE0KacVsm_js-1767940009-1.0.1.1-RKrIWzIMs2PAsOvtvrXxTbDAdZX3rc_2ysco7nmRZKA\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 09 Jan 2026 06:26:49 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=M1aqQNl%2FLbqZIs47bqlcyEkUGBuKT6Lc10DNZdSAzb21LY%2BVgUDutiHtMQYFKsrrSpXOguGNIsuOT0xtqZE4ReW%2FUPkDX2f3mquhRbzTiAzS%2FDVED3tefpkqP5U%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9bb1dd81ccf31ae6-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=463\u0026min_rtt=463\u0026rtt_var=231\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=531\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113987,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c2028a0f8eb0d5f1d5f8bdaeefd14b10","sha1":"245bb7ca35ce307d26fdedaba8b657d9352f85ad","sha256":"9850dcddec2d04b0ad9fc4ed57458467305661c271a13eb42de247e946e86044","sha512":"1bcd9549afb383f2bc4dfb52c45c7d44fabbb6e01fb3735114391e6cb66876f0a1ed01f2eaeedb5c389e8cb244c6223eb2662ab3e0c53bf6df1394d9ce563754","ssdeep":"1536:BBIKuIYMoZ0Qo5aIgvDAgJ6cZpFVS/3JkN88rBHyyLgxt6Du+oRPplV5HU:BBiZ0QQgDamNDgxUDn4b0","tlshash":"8db3e88e78de799502269560102b37cf62ba7c44305c496cf291ddd8bce476cb6a3ef8","first_seen":"2026-01-09T06:27:16.673174Z","last_seen":"2026-01-09T06:27:16.673174Z","times_seen":1,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":24,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/favicon.ico","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hwa432.de/","date":"2026-01-09T06:26:34.141Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hwa432.de/?__cf_chl_rt_tk=1GLroPM9YUacora5JxxMhC2l9PFBCKh_a6CYm8o15S8-1767939994-1.0.1.1-mUKN3KRa.nzpcgUwCI0MrXvlJzpGP726A5jl_ADI3Ko\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Fri, 09 Jan 2026 06:26:34 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 28\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nLocation: /login\r\nVary: Accept, Accept-Encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aONqMZY2eQxrlILyBKyEqOAN9nsiha68K06zZB6LVAHsUq1OU0KzgrSXEJX9cyzeuepHOqKeik%2B9YXIU1paiVXIM03BsMvA%3D\"}]}\r\ncf-cache-status: BYPASS\r\nServer: cloudflare\r\nCF-RAY: 9bb1dd236bf1568e-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5453,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/favicon.ico","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hwa432.de/","date":"2026-01-09T06:26:34.189Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hwa432.de/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Fri, 09 Jan 2026 06:26:34 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 28\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nLocation: /login\r\nVary: Accept, Accept-Encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FQs2jzc6fbRfCrvxEU0vWOxT2RIYrIkCX9wCMC62LuKBSM3DQgKDMWLac3WCH1lqr%2BxMjoOsPA4MAiA3CALdIlSwrXsik5cIGw%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\nServer: cloudflare\r\nCF-RAY: 9bb1dd23b9670daa-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5303,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":1,"dns":1,"connect":1,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-09T06:26:40.778Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=2\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 09 Jan 2026 06:26:40 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IG4j9ReP3wPN1qAwqDNMt0i30y4g%2Fbw0exq8z5jTrsV23JQUq5UiyfcfWsXy1R7UyNz5q%2BwBLvSi0CY2%2B1mArCzW1twyI92D1o3ScX17tiumDbiFtXuvNNb5MMs%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9bb1dd4ceed34e4c-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9bb1dd4ceed34e4c\", cfL4;desc=\"?proto=TCP\u0026rtt=493\u0026min_rtt=489\u0026rtt_var=186\u0026sent=3\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=1021\u0026recv_bytes=3216\u0026delivery_rate=2961145\u0026cwnd=250\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5331,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5331), with no line terminators","md5":"f28dfd6ac0c158dc774da0d3d65eb9bc","sha1":"56c1df21e7711c9bc98a266d464c18444b5da68b","sha256":"00b97689b7d225d606153b0e732f3cc249e5262656692dff5db92a13202b0cb9","sha512":"881666064e8408c019b6415aa3b682b018436e00d7e472edecd9076cb9c98d1bf5e5e5e51ce91ddae66581d7d605c28cdb07cb64c2e3bcdc338cee4d06231745","ssdeep":"96:PNybXZtIEb0EFW87IKSI55R2I55epEe3cJYiwX/zvyUs8nYzueh8bI55Cmw:PNadB2M/2Mkp8OrvysYyZM/w","tlshash":"e5b14df3ca52503bd3aa1aa648bb73445211b2919f0a9568f4d1ec8d9dcff0b827d148","first_seen":"2026-01-09T06:27:16.676398Z","last_seen":"2026-01-09T06:27:16.676398Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9bb1dd4ceed34e4c","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hwa432.de/","date":"2026-01-09T06:26:40.834Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9bb1dd4ceed34e4c HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hwa432.de/?__cf_chl_rt_tk=1Cz.9UaXhX3VXACLLLdhLx.9LPgkWfROiqbqYM6J99Q-1767940000-1.0.1.1-DII_RircakIL5qBRTkzFiSR9IZZ5mG3WZhQUYxDrLeY\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 09 Jan 2026 06:26:40 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rH2RzqkVUgrtQRfFkGb055sXyQVhW2V4SWag%2F5Cgu1GkVzrWOVUV8he%2F2ezBiVaFV7hBcCk9tDPn91j94JsUPwgytckPTaW0z79rRW98HRFIUOZF6v6fKvDrPIk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9bb1dd4d3a3556a8-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=498\u0026min_rtt=498\u0026rtt_var=249\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=531\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109179,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"de1d596044f7500f7ae00af5cbb98be5","sha1":"3d6031010c42ce7eb82c6c563c8c4af28ec67f4f","sha256":"2068b469f2dbe84f460daafee6d2293a35982111b98ecd38f379fdaa5eb76bbe","sha512":"c9be1da0524cd04ca6e43a200c5fa01a7850a2f3dd513fecbcef51b6f49e766e2efd3c0352d824f40fc7eaecb84aa9bcd3ce7ce52f48add1cf0a8ea454cc20ab","ssdeep":"1536:B9A2akz7f1Bag6NNTanpLAWU0R5HJkUzK:B9An6NBkLgpAY5FzK","tlshash":"15b3face7ccd799502669464202b27cb61ba7c50705d492df1d2dde8bce0b28ba53ef8","first_seen":"2026-01-09T06:27:16.690809Z","last_seen":"2026-01-09T06:27:16.690809Z","times_seen":1,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":2,"dns":2,"connect":1,"send":0,"wait":19,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/login","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hwa432.de/","date":"2026-01-09T06:26:49.444Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /login HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hwa432.de/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 09 Jan 2026 06:26:49 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=b7QEzsUXw0iSQkAoWVoZzZDBlj7Kz00WlQRk9s3m4V%2B%2F4AGIybbBgDcnHR%2BwwwaRZZvX%2BUzyr2Ps0nFaQll8JW3YrgzmsnIWmwzpuTtSm0PtTKYudXiU68bAs68%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9bb1dd830dd21ae6-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9bb1dd830dd21ae6\", cfL4;desc=\"?proto=TCP\u0026rtt=6005\u0026min_rtt=463\u0026rtt_var=10573\u0026sent=38\u0026recv=22\u0026lost=0\u0026retrans=0\u0026sent_bytes=46228\u0026recv_bytes=1381\u0026delivery_rate=42550311\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5325,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5325), with no line terminators","md5":"a99b5945e33714c76399da37ff550900","sha1":"fd03e9e5654da2122ccfd9ee33ac6fa2ff3b9a8d","sha256":"1a17cd645f51e461874e2304335f2dfa6e7232a2dc777238cbab9e3a41dd937d","sha512":"9ebae81bfdcc86e13384252bbd66a980b55eae7d7e6055a4509aed3d35c39c008234ca18f08b435fac20ef4cdb3b5440dc8dd59a1b90c54c53ebc818aac88038","ssdeep":"96:PNybXZtIEb0EFW87IosKpXEciX0lMxMmoc+RRjWFW5224GYdlYzueh87Tmw:PNadBJQX0lMx2cEYFrkaiyww","tlshash":"f9b15ce7e757401ad3ba1af7c07bb3106311d3a0d704c194a8f6d81cdafed474285295","first_seen":"2026-01-09T06:27:16.698571Z","last_seen":"2026-01-09T06:27:16.698571Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/login","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hwa432.de/","date":"2026-01-09T06:26:41.031Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /login HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hwa432.de/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 09 Jan 2026 06:26:41 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IB7EWlveAf%2FsUbo6rIVda7HrqKq3tuPwpCEjDlVswgK9K%2B2eZghSHBNmDnN%2B6Tlzq9%2FpA4%2Bcnx9RaUeuPhJ22MtnhZiXQrTPugGWXibBADBDRp5t6n%2FcC1tMino%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9bb1dd4e7b1456a8-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9bb1dd4e7b1456a8\", cfL4;desc=\"?proto=TCP\u0026rtt=6445\u0026min_rtt=498\u0026rtt_var=11417\u0026sent=35\u0026recv=23\u0026lost=0\u0026retrans=0\u0026sent_bytes=44171\u0026recv_bytes=1381\u0026delivery_rate=43052527\u0026cwnd=256\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5325,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5325), with no line terminators","md5":"8bd92fc3f126850ab93fbc3af93d17e0","sha1":"8d27a961bc7c9559544d7b4dcf07d9ece5c2e57a","sha256":"2ecaa5d285dd352a275a82c13639247735cab302a4bc0dc2890c65018b2da4c7","sha512":"3ed9182416670213e8165b44a8341eab66d40acdeed08bc4c0a81886cb719e8eb0a06d333c52b67d295427ded2ed32fb08c2828c2b5dad92a0b88ecba3c41258","ssdeep":"96:PNybXZtIEb0EFW87IQR8Jm2Blo5P8ccJYSI4qyYzueh8smw:PNadBv8Jm2C5P8chSIFfyNw","tlshash":"92b13bf7ea525039abbb0ea6817b33109329f1119f027948e9d1e90cd9dee03c2e9194","first_seen":"2026-01-09T06:27:16.701252Z","last_seen":"2026-01-09T06:27:16.701252Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-09T06:26:33.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hwa432.de","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 18:07:57 GMT","end":"Tue, 07 Apr 2026 19:04:55 GMT"},"fingerprint":{"sha1":"EC:1A:06:EE:21:D6:53:10:A7:06:A7:17:7A:D7:22:EF:70:9F:42:2D","sha256":"55:19:0A:53:79:28:37:95:02:A4:79:C0:1E:76:B5:35:EA:6C:15:10:2C:99:AB:B5:D4:E5:3C:53:38:1C:4D:36"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Fri, 09 Jan 2026 06:26:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VMP4Lz0TdiKWV%2Fw7y9GHd2AdI%2BhgE6RV%2Bxj6nM%2FIfe5nlLypGyiSQe6GHqYP7ZdtwSoPaNLTmhG56tJfsIwivvSIGT%2BkPCSxc3D6sCRpe1JNUvkoDwdmp%2BB%2B79Y%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9bb1dd21ae15b4f3-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: chlray;desc=\"9bb1dd21ae15b4f3\", cfL4;desc=\"?proto=TCP\u0026rtt=548\u0026min_rtt=529\u0026rtt_var=110\u0026sent=6\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3268\u0026recv_bytes=1243\u0026delivery_rate=6787500\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=5578d662497a0688\u0026ts=31\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7571,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (7571), with no line terminators","md5":"552a7e13e5172eb0058eee527d6f9f47","sha1":"2cb68316bd9770a23c0d04ce21298fcb361119c6","sha256":"483c29fb1f94d3842650f47c936f2cd7a373206b12cbb516032677baa006be19","sha512":"e28a20b42c403331fabe6d4724f12860b78a985d8ee1e51c349c08a62607c8c366308a947b48dbb6e80931b92fcf71313751972cbf83f76e6d3cf6095bf2c3f1","ssdeep":"96:PNybXZtIEb0EFW87IWSX9sNW+WCC7jDGNxUOPHaCIJtQcaaGJ8xW03m4BRZ0wW6E:PNadB/E9w0DGNi+61JtQMQiBPW6Tgynw","tlshash":"bdf16ce35124501b83bb1ff7d87ff285a261d590db4221a4f4b0ea6cd3cea0f5929458","first_seen":"2026-01-09T06:27:16.703726Z","last_seen":"2026-01-09T06:27:16.703726Z","times_seen":1,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":36,"dns":18,"connect":1,"send":0,"wait":16,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9bb1dd225dafb51b","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://hwa432.de/","date":"2026-01-09T06:26:34.104Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9bb1dd225dafb51b HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hwa432.de/?__cf_chl_rt_tk=1GLroPM9YUacora5JxxMhC2l9PFBCKh_a6CYm8o15S8-1767939994-1.0.1.1-mUKN3KRa.nzpcgUwCI0MrXvlJzpGP726A5jl_ADI3Ko\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 09 Jan 2026 06:26:34 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UzE8%2B1GAys17Uiy%2FHKcYbAkDX8RKqz5fzgAhPP5FtSDqpOe%2B2EB57IbccAw4VVNNIDS3baz8FkkuuKujc%2BXuApN8pfhD7nHyO9SbhwB7Dm1ZCBFyrrS%2BkyDhgPE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9bb1dd233ba6568e-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=4378\u0026min_rtt=4378\u0026rtt_var=2189\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=507\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111947,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"af6cc1addb9677e1493420db57ae0573","sha1":"7aff9d7d689a0acd1c0812c8e348ff054fab6e54","sha256":"e44d33ae6ff30a38c93559ea9f15311887d4081ede5ee7665e842d5e8274a202","sha512":"b516f82a63ce52891e498ffb794b808fb7e83dda3ba5115b9062d0d615c03fd3f6771b86c87dde0aefc0ea61691e4e603ba1b41ee98e2966ddc54b306c1d730f","ssdeep":"1536:Bi+sljR3lH2JKUOKRmti/aGcKNLEc2k9JkYSJBcmLvyqhSVwiSLxm:BrstNF2JQti/aGcKNwciBcqyXExm","tlshash":"80b3d88f79de7464433630b4441b39caa1ba6c58281c9d4ffb11a5e4b9d8b187363ef8","first_seen":"2026-01-09T06:27:16.707818Z","last_seen":"2026-01-09T06:27:16.707818Z","times_seen":1,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":6,"dns":1,"connect":6,"send":0,"wait":20,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/login","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://hwa432.de/","date":"2026-01-09T06:26:34.431Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /login HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://hwa432.de/?__cf_chl_rt_tk=1GLroPM9YUacora5JxxMhC2l9PFBCKh_a6CYm8o15S8-1767939994-1.0.1.1-mUKN3KRa.nzpcgUwCI0MrXvlJzpGP726A5jl_ADI3Ko\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 09 Jan 2026 06:26:34 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=SvDTR313R%2BNAcRELXn6lI%2FJ16%2Fw6XP2sUy9RlNCmv2ndRjU1LHFiRNGe9C%2Bpjro4rgoTldrADLxgcgRR9ah8kRY4Xh989LVU2NlIUxEBzQI5LoEVSYWWmX0eYTQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9bb1dd253d7c568e-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9bb1dd253d7c568e\", cfL4;desc=\"?proto=TCP\u0026rtt=7135\u0026min_rtt=633\u0026rtt_var=11836\u0026sent=39\u0026recv=27\u0026lost=0\u0026retrans=0\u0026sent_bytes=46671\u0026recv_bytes=4261\u0026delivery_rate=19817518\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5453,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5453), with no line terminators","md5":"26b56065276f460847382fd517c9eabc","sha1":"2cb33b4d71346b5dabcfd49d38f0cdaca088187c","sha256":"f1c71ebc9b4a953f0411046d0d3f6ec0e573c59c87558fc6f2a856a2c53e65e8","sha512":"668cf23a6ce1423271cf61c50d6d6b69fe2e7d2aafec7a237ab92d257595476ec70feea0cc19c3a48a05991e6eb22c7fe4f77c04324da649ac91caf1930b20fe","ssdeep":"96:PNybXZtIEb0EFW87IkFnoChwoC+UEdhpDrxDZVGI7VguI06HthIqsDYzueh8VoCI:PNadBjFomXyEzd8SVhuthRscyw0w","tlshash":"8eb12cb781565037a3ba0fe640bb7314a12979947f06c258f8f1d87cc6dde07c517698","first_seen":"2026-01-09T06:27:16.712891Z","last_seen":"2026-01-09T06:27:16.712891Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"hwa432.de/","fqdn":"hwa432.de","domain":"hwa432.de","tld":"de"},"ip":{"addr":"104.21.17.188","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-09T06:26:36.428Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: hwa432.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_chl_rc_ni=1\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Fri, 09 Jan 2026 06:26:36 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XXXorUspoK8RiTQeXenjbtxujX7WKbzICkKSNmfFuAimNWtMo5%2BHbn5Hsmnu6ekLoEfd%2BRlZ%2F7801wYKo8HctxtZ3qCZsvWXJieQexDWe7%2FaZC0bn0mD2ii5Kc4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9bb1dd31b988b28a-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9bb1dd31b988b28a\", cfL4;desc=\"?proto=TCP\u0026rtt=602\u0026min_rtt=602\u0026rtt_var=301\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=418\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5331,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5331), with no line terminators","md5":"9885a124f6c5bba59c7d73d26ef75ea6","sha1":"36dc6820f638f68ea72a10e1e9d691691b712395","sha256":"27c4d8e4af4598a64d2345311f301742276a6d26a7f21a4ca00c40ab332deb63","sha512":"d076b2d045de3a10c826ff88f71b781e05489156fc7cf3bd5adebb10974e9a65a7ff3d366824622b30fc06b678d411bdb908cd37d008f0e9ef87222630062315","ssdeep":"96:PNybXZtIEb0EFW87I156mqHzEaBctATO54k7wEl2iCC/E96J35Yzueh8vfmw:PNadBnJHzDBct9l7X8Tp6BOyww","tlshash":"78b12c93c6021026e3beafee917333947725d112b70a6179f5b1898cc1def0b85aa684","first_seen":"2026-01-09T06:27:16.715412Z","last_seen":"2026-01-09T06:27:16.715412Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":2,"dns":1,"connect":1,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}