{"report_id":"f35e25c3-372c-486d-8de7-9177855a39ec","version":6,"status":"done","tags":[],"date":"2026-03-11T07:57:48Z","url":{"schema":"http","addr":"espressonisten.de/","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"espressonisten.de/","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"title":"„Kaffee ist Kunst – und die ist erlernbar!\" - die espressonisten","dom":{"size":610051,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12451)","md5":"47bb05c1ebbbbab21044430d8c381022","sha1":"0f9807502f02d9e7469a3704fa521c3e02eea800","sha256":"1c1a42f00f6386c2cd4adcaf284575ae1245cb99e8b6a9b33a57cb2bf9bbeece","sha512":"814b1f22417ccd0ecb068648be5bc5708e71be99c5fb351c700328482692d8a42fdc8a07cdf5756c8508883f19f66e1457a5eb374fa955fe4eb2d9e7c92370cd","ssdeep":"6144:KKF1q/BSNSoK0iJ12nwKvXzadHjU1wGiaOsXVKShe5HV0mUHYRDIQtPmSCYgLXRm:KY2","tlshash":"3fd41f726284d73b4dc2c34cd77591e561864087f1faa0dcfbeba7896a0a8f6f274424","dom_hash":"domhashb0900b2cf9fe5623732b3895e0147f94","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"espressonisten.de/","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-15T07:57:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"sibautomation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"espressonisten.clouditalic.de","ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":68691,"sent_data":2142,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.brevo.com","ip":{"addr":"141.101.90.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1999-09-10","domain_rank":261553,"first_seen":"2024-11-06T14:05:18Z","last_seen":"2026-03-04T23:52:03.067158Z","alert_count":0,"request_count":1,"received_data":4029,"sent_data":420,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"in-automate.brevo.com","ip":{"addr":"172.64.150.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1999-09-10","domain_rank":161262,"first_seen":"2023-05-23T10:45:40Z","last_seen":"2026-03-04T22:16:24.92153Z","alert_count":0,"request_count":1,"received_data":215,"sent_data":820,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sibautomation.com","ip":{"addr":"141.101.90.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-01-20","domain_rank":29079,"first_seen":"2017-01-21T15:10:10Z","last_seen":"2026-03-04T20:32:02.216618Z","alert_count":1,"request_count":1,"received_data":15635,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Sails.js","description":"","website":"https://sailsjs.org","common_platform_enumeration":"","icon":"Sails.js.svg","categories":["Web frameworks"]}]},{"fqdn":"espressonisten.de","ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":5870450,"first_seen":"2025-11-14T12:12:54.34033Z","last_seen":"2026-01-09T15:27:30.8991Z","alert_count":87,"request_count":87,"received_data":13185326,"sent_data":47384,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"EWWW Image Optimizer","description":"EWWW Image Optimizer is an image optimisation WordPress plugin designed to improve the performance of your website.","website":"https://github.com/nosilver4u/ewww-image-optimizer","common_platform_enumeration":"","icon":"EWWW Image Optimizer.png","categories":["WordPress plugins","Performance"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Web Font Loader","description":"WebFont Loader is a versatile JavaScript library that provides enhanced control and flexibility in managing web fonts.","website":"https://github.com/typekit/webfontloader","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Elementor:3.35.6","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"espressonisten.de/wp-content/plugins/js_composer_theme/assets/js/dist/js_composer_front.min.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a23d0836d2b52c859438f528b20323c6","sha1":"91dd1906ca28aa4f7cdb4650f4f994d4e1744ffd","sha256":"4a01a62cc50559562c3aa8e6ade062bf6ca811901425bbe57fbc2162ac65f517","sha512":"c1c927a59af3dca468a21a0af020d9c2d7243828e933e10421c1de41af5e304e41ddb01d8e8dc5767a21d03d19f4da3ab08895612dd10192cd6194b6f8f204e9","ssdeep":"384:rOLD4wTE3fD0lHbgRkOKsxqFvRvElKpPtDvz1Z0aZWyIv:rOLD4x3b0lHbgRbAF2lKpPtDvz1Saoyo","tlshash":"bc825369795470f512b37726b1377b1a3023383a958a5110241adcb83ebfd8f1626fee","size":17632,"data":"","first_seen":"2025-10-14T01:34:27.69171Z","last_seen":"2026-07-25T03:12:52.956739Z","times_seen":9193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8aba3ff588355ae1394bab9ef80f827","sha1":"535b7caba10dba4573eed46514389401c605c30d","sha256":"d2b6d570834ad72c0ff96fa452937c2a0041910bd147fd0443c120aaedf1b439","sha512":"a903c7200451ad6cb96e415ff9ecaa1ef8cd46dc009a3388993697043cd5a801e244cce8c50c33a559cb6eaf5d41184918fd84f796f24ca33af94f46d7875603","ssdeep":"","tlshash":"97a022b288080b0b33c0afe00a002b2202f30028ac200c00e30300808200002ac80200","size":66,"data":"","first_seen":"2025-11-14T12:13:03.643097Z","last_seen":"2026-03-17T04:15:42.983986Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"d40223575762de50889e63c10bcb0eb9","sha1":"eb5cf6fdc8d945922d6522e2f8a982fd45b87e42","sha256":"033a4d76a76f3edc32f0bf3a4385ff5999f7ef660197886bc1de8d0035bf208f","sha512":"7b3cf0762698ba5bf460eb475ec07c977f2da77908c576a9ffd5223e09aa6358da2d4fc8ccd5db59f6d236e3624a014dc662a3d035978d8cf6c125e28b753fc4","ssdeep":"","tlshash":"70212179f11b075f3db5b28cb40e2ec19755c05fdb02c6a3a205c04d62c0e8001f6ba2","size":1227,"data":"","first_seen":"2026-03-11T07:58:02.159185Z","last_seen":"2026-03-11T07:58:02.159185Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-statistics-tracker-js-extra","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"eba962a7bd9887e73414a3ba93209280","sha1":"9e0f5f5bb08e682972fa83cb000a2b752e7e4f69","sha256":"2b360ede1a635cf79b4f94cd96998a4a64ba87b00846c787194385ac960b3824","sha512":"74dcd88ae50ac88d69bc46ac1c7c760b02d1b4013ca12b1e702a045451655e5a7aef4b9f8bb9f6f6ce1bdab522100ee9e59db58aeb9da9121c67c64d53445e56","ssdeep":"","tlshash":"ff71ed6af5c44eb439e57bf09108bf2608e75907d9140fb0e3a68d4e02addd8b766316","size":3478,"data":"","first_seen":"2026-03-11T07:58:02.160658Z","last_seen":"2026-03-11T07:58:02.160658Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-i18n-js-after","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a21fbfd9213d98200cce6ec7f5842404","sha1":"f465e38e37795c742735704722e4a6af69036cdc","sha256":"4a4ee46bb060f39b0eb0e4ee1e0ef917d9cb9eb0337dc45fdefd357c5dd768ab","sha512":"144c3de5a56fbafbc3ad4e417ab26e44ccb4a243200275abf4c291c32307901a74f18e16178b9f4edf98ad9e0beb3a00f3abd13ee0c3f8ff9a72e2a22b33bab7","ssdeep":"","tlshash":"70e02b86f0973c80418b97705a63bd024581208bc17e880424d9ca206b724c0f4c231f","size":421,"data":"","first_seen":"2026-01-01T09:13:19.790948Z","last_seen":"2026-07-15T11:14:57.95785Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/sib-front-js-js-extra","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"06ecb1888ab63738eecb96d45a3599cb","sha1":"c4f005bc6dd4a9b04c382c912bc98e6925a2c056","sha256":"003870d787b8ad722f472e4a281e8e87a729017b81a9f8f53c55d62f269296bf","sha512":"726c806b4a28e7b0997d366426979621253e7dbf4109dd1431cc609504e6406096a4d85d5ebccb46eeb1769df0ccceb4d7828c26401101347149f58d77c24688","ssdeep":"","tlshash":"bb012ea1d1c91c873fc03bf4349893030ad264e1eb288c8e866a905d2ae0cd2994430e","size":801,"data":"","first_seen":"2026-03-11T07:58:02.164596Z","last_seen":"2026-03-11T07:58:02.164596Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter/assets/js/plugins/wp-enqueue/webfontloader.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcf9be088a972a25eb7587b15a8f6c1f","sha1":"14af810dad1bd926bed81f6003803a0f805a45da","sha256":"66f1d9c4fc5099fe1296ef5690e6adfb3c765e9e7582f8ed29ee1810919ecb04","sha512":"3e6d14e97e28de87882e261caef627c70a93a7e71071bf3ab060c408f51fcee1d4a00a665f3b0cca37aa925bc3b66bddcc370e5e95ee8d705d3d4e22dee33fe0","ssdeep":"384:okqRm4UjWPL2F/LRqemGNENp0ba6Cm82sSirP:VqRm4PP2NwpMiSC","tlshash":"8442b75c7261b56a425390f2137f050b9572ba2ab84480bc7a99e8d4ac74d78037ffbc","size":12504,"data":"","first_seen":"2023-03-07T12:01:31Z","last_seen":"2026-07-25T00:16:12.295721Z","times_seen":1632,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/enp-popup-script-js-extra","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"219b1c3489a420ab8808eeda4ef51a3a","sha1":"e252ca869779a5a1be116ba403e03c316f746c76","sha256":"79a85c133af66494e0eb6b5f0d4eb6341bc9970434ab65b9c2f4d473c7b48b2b","sha512":"80a8418aa52094cd381e633951ba9e25e910406b54579026eea9e12aa633efb9088ac3f037bd9213cdb860f34af8bface3fb79d3f3eb8ced0e29b27b99b0bfeb","ssdeep":"","tlshash":"c1612563e6ea5affb39557f13cad4ed281d86023c8050e41277dc50fc689d12d540a0a","size":3472,"data":"","first_seen":"2026-03-11T07:58:02.166586Z","last_seen":"2026-03-11T07:58:02.166586Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter/assets/js/core-scripts.6.10.6.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0f0e6c62d22cde4e65b460a8410fa8d","sha1":"edfcdc105b063603fb2184bf4e4cab39f0c4ae08","sha256":"f958bd5b7e2076eb492f2f018c38a028e88a8940cd67014fa80d212a735ce6e0","sha512":"17322e648eacebdc11b7276011815807ca7ed2a240ebca05b6f6b447a99f41cd95accb477820820c342d6dd71be7c2957f0394ac6c80d9e67a4979e9ee9ef1d9","ssdeep":"6144:iTGCILt1TZsiH6kRJYEGul0c8XUkv/IpXxmCVMHHfaJiiARetZphkUMzelElNV56:iTG3lb6EU0ktXZO9lyFHPu5","tlshash":"5cc4f949bfed2125a437b0299b5f6049f27d8027a605c8567c9d91982fc0b3c43befe9","size":554474,"data":"","first_seen":"2023-11-04T10:03:11Z","last_seen":"2026-07-25T00:16:12.296704Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-25T04:52:01.313186Z","times_seen":907845,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/plugins/mailin/js/mailin-front.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"84e18e27eece4754ccb51cd2b604c6b5","sha1":"3dc5bf70a8997923f7bc605009936ffa65f787f0","sha256":"f51781b32d3df9af2bd903a273adf30307a2d040bad313a969584336a05c20d1","sha512":"6f6692abc7030036346d80e6269226eb2fa65230aa560cabc2664dadaf7ccac17a65394349a93eddbc2a36d7f9a3a129db3a8ff8b8c0a8425125c9cc76978000","ssdeep":"384:rDZLFNLKmK8gDDQTF/jE+/ErWVgSz0Ma3/63UF49aph3W9j9qxod86v:rDZmmNgDDQp/jE+/ErWVgsa3/63UF49J","tlshash":"d152751ce8e214c8aa7320fa7eff4314399a9823550ddf00fd9d62746fa48655768fb8","size":14474,"data":"","first_seen":"2024-12-24T13:22:09.390461Z","last_seen":"2026-07-25T05:26:14.083609Z","times_seen":6765,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/plugins/latepoint/public/javascripts/vendor-front.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c525e3fe212f524d6d46470e63db11cb","sha1":"dd45ed5b96bab9a54aad6a653ec97d8edb55f40e","sha256":"e585392c2469b32c7c6758e342f581eb007dd4ff8b8fb5efb9cd012d2b3e3d60","sha512":"58804521ae4b966e8018b581576e8d65652f9fea1c375306d10543e54f99e85a5e678fd58d9f0edf632b6f9f4d1da5bec4a344930140032e2fc9f5a1d5762a15","ssdeep":"6144:EAadx1QUbVflLb9YP5B8eK52+ZmTdTLYXoLV:wdx1QWLJYP/hKg+ZVcV","tlshash":"db8494ebe63c9736a1e57775858eb3ce1a9cbca3c848417836c3b88f527c8d07168615","size":390049,"data":"","first_seen":"2026-02-05T14:13:31.240897Z","last_seen":"2026-07-25T01:00:03.396798Z","times_seen":284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/eio-lazy-load-js-before","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f03d4bed93e0d57a839030777d4833c","sha1":"0a46808c096e58d11061136e6ed595a9ff083a6d","sha256":"c03dfdc8c8a5730f7e7be4ab5fbb6d9a94ed061735e9bcf3f01c3f1826076caa","sha512":"cccbf2cb408dd9c1021e3dbfb72cdd557f93f6b3fa5dd622905cd83958514f4810b1c5dee17ce33559f774929441d83377ce1a99c602f9518b421a7314e4640d","ssdeep":"","tlshash":"bd51c081c0f6e7c9c1704c761d0e1282ddc3c0bdce001518c0065001473004193c1a0a","size":2681,"data":"","first_seen":"2026-03-11T07:58:02.169551Z","last_seen":"2026-03-11T07:58:02.169551Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter/header-builder/includes/assets/js/mkhb-render.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4133d68d090a739171f49a40be7c908a","sha1":"08f698981c6b2efa1210f7bbd16b05a41d7fcf23","sha256":"ea50852b7cf7fa8f8ce91ced08f320ae8a438cfbdc67f45a2e17eca053920990","sha512":"d9eff9dbf7fb17c3c7a21943c58f618d9950f13061005e0aa3638c645bbda06f1ef50776817b7997b98e087b965694d45a1779aeca136143018a434fb18cbfbc","ssdeep":"96:VJxOsv5d+JV+zk30mZUJ6bH/cHvw+dSrKhGFVnzlSCU1LkeUx7+KSz5WXl:VfcVz/8tGs6z0+zd+Ktl","tlshash":"16d12112eb483332d03b205f481f53ea733fc6617244d5a92d4ab95d2c8456dab93f5a","size":6678,"data":"","first_seen":"2023-03-07T12:01:31Z","last_seen":"2026-07-25T00:16:12.355278Z","times_seen":726,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"218411f25029b5b63aa49256e061cd08","sha1":"21815c1255bffdefb62716ad870529fc96f8813a","sha256":"1947e28a06208250d96e669a7e63f89df6beefa23a1a718df301078638edfd98","sha512":"5e7a7938d33882e775e2583b61a2136be9feed8940634e7112b46b22b882ff8df645963aecea7c2c6bcd26e04e05eb93ae39ab7d4d69fbe70bcdc49d74eb1055","ssdeep":"","tlshash":"9bf05cc7866c925f04d1603c3aa62946fe121bd05c0ca585009d525c95f5f14c1b6b59","size":444,"data":"","first_seen":"2025-12-05T01:38:09.009757Z","last_seen":"2026-07-13T11:30:41.963496Z","times_seen":273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/plugins/wp-statistics/assets/js/tracker.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e892010f402de73f9256172018787e5d","sha1":"1e024ae6a16a5d85e1a977e8bcca2c5b2e6c7a14","sha256":"f6cc081c08b204157dec0bc617acb50911f5348a6518302aeae27d2e87ed4913","sha512":"fb1b64a4c5df03cbe0277d10c782ded33882304f4b69a2cee5c5622ce87288d112e138aaab63b76fd6433c9897113cfd40216ce01c56850608427eeae9a8ed46","ssdeep":"96:Z2PrmYOXKnJaAS8r16MO0zrEQWOGZXYgd7n5WdOZPhq0ho7PsERSsgsRniy:vYUv8RjO0HEQWOGZIW75AOZPIa0P","tlshash":"30f174867ac256f2c8f63058563a3b3d75ab0dd23602e170a828ced3546c6c6d747f7a","size":7978,"data":"","first_seen":"2026-02-10T07:20:33.26655Z","last_seen":"2026-07-23T14:23:07.290847Z","times_seen":1028,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/assets/dist/js/main.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0c2be063b1b743e92d53717b2916a14","sha1":"0e034cda8e20f33be8654d063210203d9c938dc6","sha256":"8a9344ab9fb284ca208ad6017a5d11378a510650d7eaaa2fc15e38d866bdd090","sha512":"00297beac3be97798a3e7f608bc790b6575e95b6f17e5ce9c53b633e96380517fb419ab17c43e5e8fb1aeb8882b8767b8be4fc06248d04ea5f10598e5f378875","ssdeep":"1536:jHvAO9ggqv2TzmZqL6KjbMpiGXJDK97MJ4e4KjhQNBlxvHL9SYWoaeZvHMLY:jPAOAv27cDw7MJyQ1c","tlshash":"eb831989a121757682e756ea53a9c241b3b44844b449c4b8b1fc8c6f59bec4c03feff9","size":85246,"data":"","first_seen":"2025-11-14T12:13:03.587853Z","last_seen":"2026-03-17T04:15:42.965852Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/plugins/ewww-image-optimizer/includes/lazysizes.min.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c318a761be370148448e70835907bce6","sha1":"04ddb20e0f1c9251b14fe09a8961c8df89e0f09f","sha256":"bc74614fa92f608c5a30942335391813a24d7614b05cca4c22649d9de4e09e4b","sha512":"9c5c3e3e82a005125732164f28fc49de2f9adbf880b84473416c14c2038b4eaea196f6bd2cc8f04a49b57cc775ccd7e46ee1510f12c9b2cfebe09d9ad6e4f956","ssdeep":"384:rQfPSEtTi+iguVWOHlDPSxV/Lqb88FXNlf2CsnmzV/GAeOvPC4N836qoDVTaf3Vr:rIbtTi+iguIOHBq/Lqb88Plf2TnCV/GH","tlshash":"d772e8ee320975b3a95720f1555f620bb2327437ad079820aa39d8e19d38cd66337e6c","size":17049,"data":"","first_seen":"2025-12-04T20:55:38.388983Z","last_seen":"2026-07-25T00:50:02.706043Z","times_seen":3246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.clouditalic.de/matomo.js","fqdn":"espressonisten.clouditalic.de","domain":"clouditalic.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b32d11120a738ec529e5d64979e9d10","sha1":"deedcd7014f47a999da6c19786713cd7a236040a","sha256":"1762dd6a64fcd59421610b68625258f9224a1f278159c4d99282adb631470465","sha512":"258a126ba730a9f57d0adef037bdf90f349265128ceb8d7d9e5c7754eb14751895dffb3220bc1da307021ea8c37c45b837064c89731313acf22a3245b3812452","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuXEjmbMNfwS9h2BLy1z71B8I6fJIKIQaFLa:AT+Z2fuqXYy1PGJ9d5","tlshash":"3963d8ce72c2753a4bcb6075a43f114ab27e9caa1448c4b4e62ac4f6383491d657bf7c","size":67972,"data":"","first_seen":"2025-09-25T22:45:46.07207Z","last_seen":"2026-07-25T05:19:03.117757Z","times_seen":17355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/latepoint-main-front-js-extra","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e17ba4ef0bb1af85661dcfb48102395a","sha1":"461f5a6dfc53ece2c7590480da78e2627a6a5141","sha256":"19d281f0321bbf6fc59e93f62383f3f420e7480abdadd29ad5fda254dca32d59","sha512":"5edb12c6602766f30716bbf622c8c7c9c751ac807f44d1f003e15a7ed6deb356584244b3132f69993fceec0fd620c73993ddc7e379da3ed22c7930ec5c4f28d0","ssdeep":"","tlshash":"ab61852af478487acfe7d7b0b8589b4f83d85022c180ada5cbccce6c43d856952d7985","size":3415,"data":"","first_seen":"2026-03-11T07:58:02.172737Z","last_seen":"2026-03-11T07:58:02.172737Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/plugins/breeze/assets/js/js-front-end/breeze-prefetch-links.min.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9043ba100ac24dfd69f3149a88d3fad7","sha1":"8c5e04e5836f12a2fc18b6a1070d2858d0a8b784","sha256":"8ef67a4261e692ccb8332a100a6cf2a452c2be0a99be6a519a3005746b75989b","sha512":"092db2aad7410805e4fafba7c95374e2855c9d18ef7329df6f9f815a49b02de5c7f09b5ea5d70a8dd9455769e136e6a88fe57ef7779377d08d91c61eba05b571","ssdeep":"","tlshash":"09417760fad101bb19c69da4b79e2200607af68c546dc1e0b821a6085d38fd720abcef","size":1888,"data":"","first_seen":"2026-02-10T02:03:25.718997Z","last_seen":"2026-07-24T22:38:47.623105Z","times_seen":1738,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/plugins/latepoint/public/javascripts/front.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a64507916f77182c7633233304dac4a","sha1":"db17366242cf0af7d8d0b1f4d923923ae2f92a90","sha256":"581994528d0ce24f012f770b5995787b4437b88e0c37ccea4618237140216e9e","sha512":"12ce9cfca89e2a59c15af250d79196aba0aba6d3132f0c5b0c7acd972d39181a94af0a64e63d600646e81fdf44a103c3e94e7b49859f4720492f15b21fb3e8b4","ssdeep":"1536:WzKIeZFuWanidkw7VxqZvzCIpV6ZAuzGuPl4kFs3FIxnSzkFruhI:pIeZFuWPdkw7TqZvzCIpV6/zGuPl0I","tlshash":"faa3a20cf07119fb02be1566f8e6b3107317ad32a28b447466d664791e34d8d2dbef29","size":99653,"data":"","first_seen":"2026-02-28T04:02:36.112258Z","last_seen":"2026-07-23T01:13:43.927668Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3fc01f2fd5195583b6378f308ea7e7f9","sha1":"1ee4fe2361fb4459494c1cc6208bc532c46000d7","sha256":"e356c58bf2ac2384f8f59db8c64c041980d67fe4a4febef181dc28437b7d7d4b","sha512":"0eea6cc60baf2a03ea0e1fa18606cb217a34cc718ecefa7db1b53975a225c137a74acb2a877ec98b5a4f7f38c96f4f629168cf31398e24424cab6cb37d17ee8b","ssdeep":"","tlshash":"04d02232608c0e822ee29ff0fa0422a144ca220494fc8819172ace8e0da42908e8288b","size":202,"data":"","first_seen":"2026-03-11T07:58:02.17455Z","last_seen":"2026-03-17T04:15:42.988426Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"824988f7391f9241a437fdc9072fb392","sha1":"8a84976162548e3bfac73f1e272e74a8fcb097f3","sha256":"81d85da8cebd8f1222583c3147741b9a128db3a6dde420caff549dae1a067e40","sha512":"e475f7b5d2585109f625968cea659a9f97f2b72ff1e3a15617636ca4fc5a63e3081faeaa79504cc46019e6ed79ae0be8c9279a1ee0b77a784c077782d7facd7f","ssdeep":"","tlshash":"e8b02b8670973c80418b97705a23bd014541108b416e880424d8ca206b724c0f4c221f","size":125,"data":"","first_seen":"2025-11-18T20:07:03.944426Z","last_seen":"2026-07-24T13:45:10.631013Z","times_seen":20636,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"e01022fc7216fa9aec8e5876a627bbbd","sha1":"e41b6250625affa0df6b209d2a7ce5cd4f2aeff5","sha256":"eccd2979450ac3f5c5499622fb38c9c1be900875ff97706671faf8e65776e004","sha512":"f7fdd889ab2cd72fa36b4a1f1cc5f68c449c758bcc232d1e1b4f8c07eb0d19fc9dedb3e3210d3fb7cbffc197e65453936b0cf27372daa5f8e06c22ec2379e221","ssdeep":"","tlshash":"f951852ab478487acfe7d7b0b8589b4f83d850228180ada5cbccce6c43d856952d7985","size":3113,"data":"","first_seen":"2026-03-11T07:58:02.177156Z","last_seen":"2026-03-11T07:58:02.177156Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/plugins/espressonisten-newsletter-popup/assets/js/popup.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d3ab121ff565cb09711bca91301725b","sha1":"a7a630658512aac818d5fc3f8d905b62349495b2","sha256":"7debe3a0ae3da9237f594cb5a66982ac1797a990b7351f0df3f48aa20bd467c2","sha512":"edf7be8b36f4dbdbbe76f82f2113632a6df7b71996847282a2d6ac95bfb85398d21f40b15f4b39bdf863d3ac9e245eaa113fc1ada8273d959bfca00de10e396b","ssdeep":"192:a34Ax4BSayhDFzkRxUvCO5AIQ/ULd/lk7GaxJTJktSG8fuNelI3zTtWH:U+a5Ta/ed/lk7GBpe","tlshash":"0132324936fb6456c23b22792fdba1073234951b250bdd18be0c1b959f80a3499e2bbd","size":11921,"data":"","first_seen":"2025-11-14T12:13:03.636136Z","last_seen":"2026-03-17T04:15:42.951013Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/plugins/jupiter-donut/assets/js/shortcodes-scripts.min.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8439c4ef7a830a8fef3727fa53149027","sha1":"f42dceb379bb3a433da7ae3946f9317e476b5f87","sha256":"52a47e2221bea6c8e32da7e79f59019c09651a6c0e36fab2b5dea7125bab88f8","sha512":"7b82e04525a76d675d5fe86585418d245b32fdedbe2e7420e75141356b0150dc8c1c07ea07115b627ce4d0a4f984bea2dd64fde6795ecd6d7de6a0deca53e745","ssdeep":"768:SIfN5mfdraIBgU0Y9dKcvpkJvOgNvWEoj03Q12wf5Pp3Ejq3qyIJZC:lSVraY06dK0pk9OgPoY+2wf5KjqZIJc","tlshash":"7473836abeff241180b3703a4faf5148b27a80336905ca157c5d82e45fd452da77afe8","size":78868,"data":"","first_seen":"2025-12-16T02:44:29.523934Z","last_seen":"2026-07-24T02:47:31.804762Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-includes/js/dist/i18n.min.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","size":5314,"data":"","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-07-25T04:25:13.157437Z","times_seen":199683,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-includes/js/dist/hooks.min.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","size":5661,"data":"","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-07-25T04:25:13.163291Z","times_seen":202723,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.brevo.com/js/sdk-loader.js","fqdn":"cdn.brevo.com","domain":"brevo.com","tld":"com"},"ip":{"addr":"141.101.90.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"578af769de80da33f68b9e5f003c5a4e","sha1":"67791b2d2c2acf0332b8e55bb9606e849da17344","sha256":"fe8447fd1ec4dca652b71db2c749fcc24a5bec3875f3654042169fb2418aed09","sha512":"791977af148706b7a4332d96e8c528de09c004077f25fc8e20c98ad60cf4c2106a57fd5c37ec97de7d48df04bb8e397e05d29425efaa0692b330de540855f30a","ssdeep":"","tlshash":"10616b481ce791b601e7b17e4b6be109b575900b1009ed243d4c8f19ff64aae5aebf88","size":3442,"data":"","first_seen":"2024-11-22T16:51:47.23237Z","last_seen":"2026-07-25T00:32:58.615087Z","times_seen":5839,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-includes/js/jquery/jquery.min.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-25T04:50:10.979125Z","times_seen":989923,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"c226c49ccf01c17476c02cd19b9ab924","sha1":"606882ecd5affd23b95c30c24260d6e5c6fcb5aa","sha256":"4d996b7867e32fde395b3deb101b622b145731a614df0ac670ab0a780322b26a","sha512":"a9dd54dec6b97851f0808c7543b6246b5ecbe1d7fcb92d4950d8559713376397b9bf3a894c1ffb3a7ebfc438c9b46f859249ad610113e9e01010219ca7b75779","ssdeep":"","tlshash":"36f0e2a591cd1d873fc03bc4745897034ad264e5ab588d8fc67a905d2af0cd29d4570e","size":492,"data":"","first_seen":"2026-03-11T07:58:02.178708Z","last_seen":"2026-03-11T07:58:02.178708Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed77093016336e2d00eae2411dac952a","sha1":"ae357a77ea0c6e959e9de4002845ad4b042dad16","sha256":"37fa652c65354aabd9f4910c80da871371b2aabbd0fc3d72f34a61a37ccb5e58","sha512":"48a26feef5929a0c3cd911ef5ed8c146372413c0a8dfed41f146bd5e9010d5b9dfffb4d43ecc4b4cc73d9e5b3f7aeb91efc26dc3e4122c5d5fe42c66a2e681ee","ssdeep":"","tlshash":"48a002b0ef3c48bd5725c69e151829c8f5ed67484565c87c1d5df61e90e66060a30b84","size":83,"data":"","first_seen":"2023-03-07T01:02:07Z","last_seen":"2026-07-24T11:17:02.758194Z","times_seen":14053,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter/header-builder/includes/assets/js/mkhb-column.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"522d50a4a11e9758303fe5ea3e31ba93","sha1":"ad6a837a8c8844ef75f3f646f6c50a0ef3a6767b","sha256":"49166e7b873e7fe8986eb3d8a4151b623b7c284f464a15e1621cfd64679193e6","sha512":"86d9e456fd28436575e68cfdba4c5e43beba79709efec8b0a585eefbdcec66759cd345aaf0b98712b449bfe6224d86605cfa560214923fae419c45871a6e9894","ssdeep":"","tlshash":"a561c0527f6e0339f421228e641e665e9f2cca73425a9c71fd50e5b860c1c3cb369fa2","size":3293,"data":"","first_seen":"2023-03-07T12:01:31Z","last_seen":"2026-07-25T00:16:12.292761Z","times_seen":1258,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sibautomation.com/sa.js?key=qvvpywnmo2dv2gh470ojfvvg","fqdn":"sibautomation.com","domain":"sibautomation.com","tld":"com"},"ip":{"addr":"141.101.90.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"94beb53e03c29496f5a7895cba1b94e6","sha1":"7f3de63e2e34dbb779b2946a38d522cc079bb0a2","sha256":"5bf4fb0b1bafe5a95257d90ea923eabc64ec96972b52070a4b7a18e658c33577","sha512":"0d2538ca5f2a43d6621e5bd2908f34ff27f85bf955cc5007cdee7229a8810c203e236279e65bca4e026064900ba83a6c6282bcfeb70789b3bb3c80e2dfe14cd1","ssdeep":"384:CKTQzozLdKB0VdlZz3M4+zNISzKmacaDiV:/K8LdKWVdlZDM4+ZISGmacamV","tlshash":"fd62618e10e76076462370398b9fa40c7535486b2148dd207e5ce1ea6fb09298afbfdd","size":15166,"data":"","first_seen":"2025-12-30T16:36:21.841203Z","last_seen":"2026-07-25T00:26:19.973509Z","times_seen":1015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/mk-webfontloader-js-after","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7d67faae82543ea58b2085f8887e05b","sha1":"9bbdb44b0d51932ace921eeb0adb4b5d1f0c906e","sha256":"6702c9a18634dac2cc6770e3fc33e1f6d626ac81ed2dee3d64e90b3569cdb654","sha512":"9d9560d7438ebc421e20e623671ee53da4611e91ed6b7c20b4b1090e4effa3341e08a1d506786253f9c2e427191c06fa8b3362d073f42a246e1f3ef8946efe17","ssdeep":"","tlshash":"16015cc7c66c925f04d1603c3ae62946fe122bd0dc1cb585009d525c95f5f14c1b6b59","size":702,"data":"","first_seen":"2026-03-11T07:58:02.180901Z","last_seen":"2026-03-11T07:58:02.180901Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a5a102b833bf7e953c88f129b7e5045","sha1":"0355cd76bbb2c9a0981cdf2032c358044b9f7a50","sha256":"541b46f93af86fc8f5a05a5bda9e2863c8036e98eea3d9310266648a4041079b","sha512":"cb0884a51239c336a7961e38b57b60f9e8a5f541be17d472bb8fce7fce7d99f9cd44546dd50e5f9634f66e11ba85a829104867cf3a1a45613df11db45a679035","ssdeep":"","tlshash":"2ef0812559ff1efd713ad27e3dbe4d1973ab2c15a050c4446f4194199eb26c146503c8","size":563,"data":"","first_seen":"2026-03-11T07:58:02.182224Z","last_seen":"2026-03-17T04:15:42.995751Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter/assets/js/components-full.6.10.6.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0be8ef1815882d8ea78c5a22045462aa","sha1":"3c8144f97641d274c06e0e49eb9006f55fa8cb27","sha256":"2cec0e50bcd6a46d1e237a1d03f1fd89d4b0bec01c0dde8c136ff15241fc946f","sha512":"aaa39311bc597b9f5aea4a44325772d51c3a5ff9258e89551a557abd646f7ca5dcf861521a66f2c61f49e0f1a86b9d15ea51ced32438d1378fe23737ccdfb2e1","ssdeep":"","tlshash":"e4611f49f7be6575a0bf202e593f3c8a76391027a5415c193c7d86e90fe082c5b62d38","size":3309,"data":"","first_seen":"2023-03-07T12:04:33Z","last_seen":"2026-07-25T00:16:12.265617Z","times_seen":332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/breeze-prefetch-js-extra","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ece61391ed3b2eba438dbd8d7c8f45a","sha1":"47d705cd5ccce7ca40f27d2ac3e02ac3c6b829f7","sha256":"18b241e7a07856df4b8d89774421f5d35ecded9f480f002510815830d9bc6966","sha512":"63f28001a8e31490fe9b74250955242e0dcf477d28daa4ffa2735246fd871420d6db77114478a2fbd11cfbc877cdfd45ed78f00344924bfaf62675c481638114","ssdeep":"","tlshash":"20f02332d08c0d421dd15ff0fa4412a144c93204d4fc9419171acd8d0d64190cd41587","size":485,"data":"","first_seen":"2026-03-11T07:58:02.183722Z","last_seen":"2026-03-11T07:58:02.183722Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/plugins/latepoint-pro-features/public/javascripts/latepoint-pro-features-front.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8da4a8d1c8b93616969ee90a80cdbe5a","sha1":"97ccb8c5cbfcc019392a0d07ba5c59215c47bde9","sha256":"1f8a8aa8c3322cdc4192497f79bfaa55b7962d34e804c9c50bc4c23ce5caecf0","sha512":"7e5b1e157ff0ea5b09991e9d12d158f281a1ca4dada1c40a2d71cd343dadac47641b65c3c24d33bb582d7d511c4b1c6cf6eb8729b57a236ca9e42516bcbaf4c6","ssdeep":"768:/2OewJU3VE7+fIvYBXP98865tq60gi0h8DSUANzDLyZa:/GIABXeB5R0A","tlshash":"b7c2831ef03005ff07fa0636f8b2730173674d36a24e44a5a29a763a4e38d9429b9f65","size":27461,"data":"","first_seen":"2026-03-11T07:58:02.151371Z","last_seen":"2026-07-20T19:06:07.363325Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/jupiter-donut-shortcodes-js-extra","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a8c5a9c97ea66d5d41e5a3497ebd536","sha1":"3d0d2ad1e55d486c4b6293e649f4bd0ad81d62a8","sha256":"f884a7a6bc391bab248b1fecbb1a69bd58e05b78a11521196803daee4c17ce28","sha512":"204265e0d0adc7427966850fac278d925dafdbfc1fc54d6cfb3c0b5fd383a99844dbe2b22698cba152814ffde75d14107ed192bb470dc64af8a74e6fb20ff398","ssdeep":"","tlshash":"7d51c0f6d88d2a5033a0bff04e18539249d71082de045eacefbb489ce3a1c0149e4f26","size":2885,"data":"","first_seen":"2026-03-11T07:58:02.185231Z","last_seen":"2026-03-11T07:58:02.185231Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/assets/js/main.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b147783fe7bfcbfb8b7c5226a0bd79c","sha1":"e9644a6408b1226f1b65e86c202fc176351145c3","sha256":"75c626e91c515719821810b2735224be489c77b1d21b9e5b3270c583a357f4a8","sha512":"6affc069e9a11d093e8db8c31ff60f3f200d4062c5dfa82d1bda585187ab7bab9dd5a263c31c8ad9dda9bf013db4a904112ebcaca0cc2caf2d6e11785ee8f374","ssdeep":"768:G1t6WvsBZPKBt3FPmS3+EYykK1GPzpiN9sJTPdATgGZ7Nc4hC5orG1TscgZfacmh:X0tVUkkK1GPz6FrG1A1facmh","tlshash":"2b33e909e210372288e711e56217c04e73fbe67abd06c0e076c987d66a5d81dc6e77fa","size":52232,"data":"","first_seen":"2025-11-14T12:13:03.617611Z","last_seen":"2026-03-17T04:15:42.946402Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"espressonisten.de/wp-content/plugins/latepoint/public/stylesheets/front.css","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/plugins/latepoint/public/stylesheets/front.css HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 10 Mar 2026 12:10:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b00a3f-60b21\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":396065,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (39479)","md5":"563187fe5125449505e97fe5a4b57186","sha1":"958665a1bcb369462456314bfd658c9d1fb819dc","sha256":"4af853dedffd5c0ffb2be486c0bc0a304b8bf00a961143aaa2e77fd16c3e977e","sha512":"74a0c0efceacc17744c95a64112ff91c0bdd82074efd382fa90c8b209c8e18e29ac7e3f381a824fae491ea27ae31fb136d381589d4d2d7c9269e5c446a841226","ssdeep":"1536:XtQly3rZQtaw7caEfFQc6SbykcYMcbaG2LZXXX0ponHU2eAdzGjfkaV7o8j5ScNu:AybZQqXy/cbaG2psoc5W4dF+j","tlshash":"d884771ef034153d2116c668f9c8739e27574922a4d319b7e8e3752647aacfe0efe608","first_seen":"2026-02-05T14:13:31.355522Z","last_seen":"2026-07-18T09:27:01.215207Z","times_seen":62,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/assets/fonts/af8cb0b5-9655-472f-9e16-bf6dc2cc3a50.woff2","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter-child/assets/fonts/af8cb0b5-9655-472f-9e16-bf6dc2cc3a50.woff2 HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/wp-content/themes/jupiter-child/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 24088\r\nlast-modified: Tue, 24 Jun 2025 07:12:10 GMT\r\netag: \"685a4fca-5e18\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24088,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24088, version 1.0","md5":"4f375dd854b297c17e50fe2bcae2ff79","sha1":"45e7209cb6839e122eee644981f39c94bf07b330","sha256":"0c9672ef72623fc2500a2714b54a7abb67ec07bf44333f0f48e0b319f2819d3c","sha512":"446cf6478be1b957fa370196fa88d5d18aafe16528aa47335a9a6b2ec8c9ee7e6eff2dca81ac3599e353569674af1eb13066b3243ed80f3916b93d77600583bd","ssdeep":"384:mlaRcodGhMzOhxU4/K153f/K3NJLowc3vyEFsMwT19RkgcAhFvQmyfyORpqd:mlaKozzOhFy19y3NJLowCyBRkg+moyO6","tlshash":"83b2d146d527ed14e37d23bb8d54d099dd6c3da6ea422f6c324f0124aa2f5c4b135a0a","first_seen":"2025-11-14T12:13:03.608583Z","last_seen":"2026-03-17T04:15:42.966797Z","times_seen":5,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.clouditalic.de/matomo.php?action_name=%E2%80%9EKaffee%20ist%20Kunst%20%E2%80%93%20und%20die%20ist%20erlernbar!%22%20-%20die%20espressonisten\u0026idsite=2\u0026rec=1\u0026r=039134\u0026h=7\u0026m=57\u0026s=24\u0026url=https%3A%2F%2Fespressonisten.de%2F\u0026_id=cf4cd4629720bc32\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=klzfyX\u0026pf_net=68\u0026pf_srv=55\u0026pf_tfr=64\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024","fqdn":"espressonisten.clouditalic.de","domain":"clouditalic.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.clouditalic.de","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 11:50:46 GMT","end":"Fri, 29 May 2026 11:50:45 GMT"},"fingerprint":{"sha1":"E9:B2:E4:3C:B6:4D:63:11:BD:21:69:D2:72:3C:83:E1:10:B1:07:56","sha256":"09:67:55:CE:88:2C:A1:71:5C:3F:03:40:8C:A4:FB:4D:AE:69:81:91:AB:86:C7:58:13:76:4A:DD:85:31:30:BA"}}},"request":{"raw":"POST /matomo.php?action_name=%E2%80%9EKaffee%20ist%20Kunst%20%E2%80%93%20und%20die%20ist%20erlernbar!%22%20-%20die%20espressonisten\u0026idsite=2\u0026rec=1\u0026r=039134\u0026h=7\u0026m=57\u0026s=24\u0026url=https%3A%2F%2Fespressonisten.de%2F\u0026_id=cf4cd4629720bc32\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=klzfyX\u0026pf_net=68\u0026pf_srv=55\u0026pf_tfr=64\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024 HTTP/1.1\r\nHost: espressonisten.clouditalic.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 0\r\nOrigin: https://espressonisten.de\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:25 GMT\r\naccess-control-allow-origin: https://espressonisten.de\r\naccess-control-allow-credentials: true\r\nage: 0\r\nx-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T04:51:46.086242Z","times_seen":17521484,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/uploads/2016/06/Slayer.jpg","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/uploads/2016/06/Slayer.jpg HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 87843\r\nlast-modified: Mon, 14 Apr 2025 13:56:25 GMT\r\netag: \"67fd1409-15723\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87843,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2213x596, components 3","md5":"06d0d7002a8137683ba772d66ef27474","sha1":"86108df9b619905a01c4eea79b3b6a4853cea798","sha256":"4bbfa92c184afd9a615ccfc487f1dcdeeaca3c32c558feb1bf892547aca667f7","sha512":"6f3643efa8472487105fea8d07b2ffcef81cc37c48af8e0f5a8e35a4791297410168f770c4384661e5c48e568cf89e6ddb9f4599507958430c42f6c9531550c4","ssdeep":"1536:HOaNKa6WPDFkbSj6fWB13H5ryVVPEdXtz8kQwywNMn1uF:HOyr6EB/j4WB1H5rMEdJ8kQwndF","tlshash":"e4830112f7052b47c438e63c65f7034cbfea59dac597418c4b1ab529fa483e8bd15ac2","first_seen":"2026-03-11T07:58:02.016888Z","last_seen":"2026-03-11T07:58:02.016888Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-json/wp-statistics/v2/hit","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:25.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"POST /wp-json/wp-statistics/v2/hit HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 148\r\nOrigin: https://espressonisten.de\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":148,"data":"wp_statistics_hit=1\u0026source_type=home\u0026source_id=824\u0026search_query=\u0026signature=07e6d821c6a5f3eb7f7720757ed8fef8\u0026endpoint=hit\u0026referred=\u0026page_uri=Lw%3D%3D"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:26 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nx-robots-tag: noindex\r\nlink: \u003chttps://espressonisten.de/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link\r\naccess-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type\r\nallow: POST\r\naccess-control-allow-origin: https://espressonisten.de\r\naccess-control-allow-methods: OPTIONS, GET, POST, PUT, PATCH, DELETE\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding, Origin,Accept-Encoding\r\ncache-control: no-cache, max-age=0, s-maxage=2592000\r\nexpires: Wed, 11 Mar 2026 07:57:25 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"28ec1eee5f4049e3c4f2135069c1d2c8","sha1":"3505519507ca1c2a089c46e100b80408ca278421","sha256":"edc48cd3b0bc4fa7ba23aad40b8508a17d370ca38be174bae2a2f64634e65a2b","sha512":"f71618e40ebaa14ab6d523a2341258c0da264b545388f8fffd14c31c64b35f94b21eb633316c4d77afcd864aade1db588ef6387ee0c4787e6f7770db0abc1183","ssdeep":"","tlshash":"f06000020000002088800a000220aa302a200a20080a0080000c30200020080800a002","first_seen":"2023-04-06T19:00:00Z","last_seen":"2026-07-25T04:26:29.089337Z","times_seen":12720,"resource_available":true,"data":null}},"time_used":767,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":767,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/assets/fonts/3a46542f-f429-4821-9a88-62e3be54a640.woff2","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:25.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter-child/assets/fonts/3a46542f-f429-4821-9a88-62e3be54a640.woff2 HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/wp-content/themes/jupiter-child/style.css\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:25 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 17360\r\nlast-modified: Tue, 24 Jun 2025 07:12:10 GMT\r\netag: \"685a4fca-43d0\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17360,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17360, version 1.0","md5":"9b36197771464b27f64aaa2b30b0f662","sha1":"d908a6e89e5e9127de62df3e27b6cedd274933d0","sha256":"128a909ddb72977f4447788b64f3b542fb71c1bec626cd39256be40cf7f8d527","sha512":"8de77b0dd5cf877b77cde4e9c2245a68122d87a2415b976abf3f9185849f75ddad8a7baa16f97a3c4f071d57faf9f9a0e0b8ff47517aa704b3d77c285fab54db","ssdeep":"384:WTZI2JSKQpkiDfbav1vN2oHbGcz8UjXJ8SMUC+RxlTIrYIotx/+Avt:WTW2JSKQmCfbat1lfbXaUrbOo+AF","tlshash":"5272d0f6152813c2d22d2df7449608eb91088209d40af1c58dcdbcbe56cae5bda9a7cb","first_seen":"2023-04-11T12:13:49Z","last_seen":"2026-07-22T15:37:53.730581Z","times_seen":1495,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/plugins/jupiter-donut/assets/css/shortcodes-styles.min.css","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/plugins/jupiter-donut/assets/css/shortcodes-styles.min.css HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 10 Mar 2026 12:10:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b00a47-64ed2\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":413394,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2fb700a109780658c2c32fd16d0703d9","sha1":"fb1502b7bb58e9aef2db5539f47091eebfc2430f","sha256":"4e18f3edee0ae6d0c2b02d3a600cd3e855a319d492283f70e0da61726d6e8a65","sha512":"a21c0e0af9cb4cbb14366a6a8be54a5d928156641ece11d0e129f9489e2aae9e8ca9b2d47f38a38ad587974ba58d26d95b08c707127158b08741bcb7a1bf2476","ssdeep":"3072:Y0igI7DbUdvfDjdgdfiA/pZpwYfzfdeYJ:zigI7DbUdvfDjdgdfiA/pZpwYfzfdeYJ","tlshash":"a89419b38a2621dc5027c726eec4a6dc7778c152f71319ebf1969a09c3c65cd2272b4e","first_seen":"2025-12-16T02:44:29.475127Z","last_seen":"2026-07-24T02:47:31.803522Z","times_seen":217,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter/assets/js/plugins/wp-enqueue/webfontloader.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter/assets/js/plugins/wp-enqueue/webfontloader.js HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 14 Apr 2025 14:09:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fd172c-30d8\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12504,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2171)","md5":"bcf9be088a972a25eb7587b15a8f6c1f","sha1":"14af810dad1bd926bed81f6003803a0f805a45da","sha256":"66f1d9c4fc5099fe1296ef5690e6adfb3c765e9e7582f8ed29ee1810919ecb04","sha512":"3e6d14e97e28de87882e261caef627c70a93a7e71071bf3ab060c408f51fcee1d4a00a665f3b0cca37aa925bc3b66bddcc370e5e95ee8d705d3d4e22dee33fe0","ssdeep":"384:okqRm4UjWPL2F/LRqemGNENp0ba6Cm82sSirP:VqRm4PP2NwpMiSC","tlshash":"8442b75c7261b56a425390f2137f050b9572ba2ab84480bc7a99e8d4ac74d78037ffbc","first_seen":"2023-03-07T12:01:31Z","last_seen":"2026-07-25T00:16:12.295721Z","times_seen":1632,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/plugins/shortcodes-ultimate/includes/css/shortcodes.css","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/plugins/shortcodes-ultimate/includes/css/shortcodes.css HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Mar 2026 09:15:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69aa9b37-b0c2\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45250,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (45247), with no line terminators","md5":"1867702c86b61e32a5d08146d37c708a","sha1":"d14d77bf1d358bf58b558b415174d3738c6865b0","sha256":"e44cf5e722803a7b93407cc98087c4334f98019a8b319512850ec0eadba8f049","sha512":"d752607a3788007f55c990b322911bdda741e23d7acd7ccc5936696059ed129da048db574752558df674bdc1e6e9250510a77d083c36cfa649d6343acd4f7e8c","ssdeep":"384:Dr2t/uoNjsps4cl6Vhn0lX2blbaeeiQm+30CIoVIukF206q31NY/SN7WO:Dqt/uoWpgAw2Rbaeei258eCjY/SN7F","tlshash":"b313a731f2852159ab33c701b6c5a6a4723dc92dd3915eade2e7b224cfcb0da0436e5d","first_seen":"2026-02-04T07:38:14.085845Z","last_seen":"2026-07-24T08:08:30.39749Z","times_seen":686,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/plugins/js_composer_theme/assets/js/dist/js_composer_front.min.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/plugins/js_composer_theme/assets/js/dist/js_composer_front.min.js HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 06 Mar 2026 09:19:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69aa9c1e-44e0\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17632,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17632), with no line terminators","md5":"a23d0836d2b52c859438f528b20323c6","sha1":"91dd1906ca28aa4f7cdb4650f4f994d4e1744ffd","sha256":"4a01a62cc50559562c3aa8e6ade062bf6ca811901425bbe57fbc2162ac65f517","sha512":"c1c927a59af3dca468a21a0af020d9c2d7243828e933e10421c1de41af5e304e41ddb01d8e8dc5767a21d03d19f4da3ab08895612dd10192cd6194b6f8f204e9","ssdeep":"384:rOLD4wTE3fD0lHbgRkOKsxqFvRvElKpPtDvz1Z0aZWyIv:rOLD4x3b0lHbgRbAF2lKpPtDvz1Saoyo","tlshash":"bc825369795470f512b37726b1377b1a3023383a958a5110241adcb83ebfd8f1626fee","first_seen":"2025-10-14T01:34:27.69171Z","last_seen":"2026-07-25T03:12:52.956739Z","times_seen":9193,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/assets/img/btn-slider-w.svg","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter-child/assets/img/btn-slider-w.svg HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/wp-content/themes/jupiter-child/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 24 Jun 2025 07:12:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a4fca-248\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":584,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ad20c2bcf3a401cfefb7f842c0d77c17","sha1":"9e57f6b8d0ca381de5c4afa32a291a3059a29b27","sha256":"0fcb17ee6ba5e33518ca9c46c168aa7f352782f5767fa8791e5ccc7d4ce88266","sha512":"33e8fef00aea550c5c324b234e9a340d6d596dbcbd6aa8e7cb2ad344e9d60459127c39afc520e31a151f4caf7a39de6f56b056b764e6a9f9f792e2954680df00","ssdeep":"","tlshash":"37f0e1594b87a83a6015434563f8a1ca53b679cbb2e03d99c1f36ff9e30a5d00e3a4dc","first_seen":"2026-03-11T07:58:02.028618Z","last_seen":"2026-03-11T07:58:02.028618Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/uploads/2025/01/espressonisten-latte-kurs-01.jpg","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/uploads/2025/01/espressonisten-latte-kurs-01.jpg HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 447949\r\nlast-modified: Mon, 14 Apr 2025 14:03:17 GMT\r\netag: \"67fd15a5-6d5cd\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447949,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1400x1400, components 3","md5":"44997b84090f0484dade6d5d57104caa","sha1":"a8a40501f9b0423e8b6d5ddcbc3d6870fec26bb1","sha256":"9537c49b8d217d1059e065d2a614309e3b568c1995aa99b9d430f051fd29c530","sha512":"5942c060195047ff915ce8d79fc72c519d33880250e922676297b15c01c64841adce6c85db67d6565cd033a371e7ae028dd6e3fd0ed694ec574db7164834f75a","ssdeep":"6144:rbbRLLiiM7VS8ZnkjrcOoTNuTk/KM4Nlei7k4vzG7elOBMwqPYAJ+FqzN2WVhns6:rRaj7VS8ZkjrosQWoygeUBM+AN2WV/rl","tlshash":"789423f8b34a05ded415613a82ab2dbb2e14be8da7e5c1139c73c151bb63277c780e94","first_seen":"2026-03-11T07:58:02.030954Z","last_seen":"2026-03-11T07:58:02.030954Z","times_seen":1,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/assets/fonts/c19c9e09-f38b-429a-b7c0-a0f3f3f0dbd6.woff2","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:25.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter-child/assets/fonts/c19c9e09-f38b-429a-b7c0-a0f3f3f0dbd6.woff2 HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/wp-content/themes/jupiter-child/style.css\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:25 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 24388\r\nlast-modified: Tue, 24 Jun 2025 07:12:10 GMT\r\netag: \"685a4fca-5f44\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24388,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24388, version 1.0","md5":"ed61e98b9381ea9f2823196b5237c015","sha1":"93fd51b1e2c5f5dc9514b36c16730d41da03a3f8","sha256":"850491da34a2a2f185a513b3fc729f40b6e978a861c70318847560f54d1fd8e9","sha512":"bd552dd42c7bdbe412c22b3b0ea5971c3453abb0294d9e5cf258ac19fb44e2c317216a83f3b89451eb43bb097664d9f39091c82a5326aa35c5451007df58ac12","ssdeep":"384:bYIBJf63k0vB84aoprJQScuMSzRUteDb1RctDrUwo5ViE+YFbpCfN65LQYbBCQvV:bYIBpsKPGWp8HRct3A0By1Cfl8CQ3qsV","tlshash":"8ab2f1311ff76f0195754a23aff70b1a92780e960f8e78a42fe06468f24d1f64549b8d","first_seen":"2024-07-29T16:57:56Z","last_seen":"2026-03-25T16:57:45.64609Z","times_seen":13,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/uploads/2001/09/synesso_w_slider-01.svg","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:27.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/uploads/2001/09/synesso_w_slider-01.svg HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:27 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 14 Apr 2025 14:03:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fd1595-2674\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9844,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5172de6648dd9d12910e867c8a404fcb","sha1":"e79e54144a2b993eab4bbac4aa32177287f1bb4b","sha256":"f8d15e6f17371793bafa6328acf75872706c2cc0938b87f4700018fde1199f79","sha512":"a233e548a3a6f731530e85c2040421d63c13ee3b46f3d0ccee377b3a0cd24f135fef00b8063aad21decaa956b5c5d4dc8a8838668830e1d2677ae2bf17551976","ssdeep":"192:IW6mkVJNzWbmJ0PJK/Sk1RPt5RASkvb3TmWqCpTdE4zb3Tv0Wt:InHiAs4R15/MX","tlshash":"f71273f2033ce4f4e0e128ddeb2422d73bf958ab94b45650c75a7c2a2c43d94d9a1e79","first_seen":"2026-03-11T07:58:02.040797Z","last_seen":"2026-03-11T07:58:02.040797Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/plugins/latepoint-google-calendar/public/stylesheets/latepoint-google-calendar-front.css","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/plugins/latepoint-google-calendar/public/stylesheets/latepoint-google-calendar-front.css HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Mar 2026 09:14:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69aa9b04-34d\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":845,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (779)","md5":"2a4c544177bb2de5fe3b026f5b52a29b","sha1":"292cf9d97595f37b80d76a15ed60c05abadbc3fc","sha256":"acbeb1263ded2b5270ab133723ed8a3353a82b8b2ccc990a9999a90be6c9ffc8","sha512":"4041d7c315a864995ec7a72de6662082fca4311cd08f434a9ea376db5eb452cfb1cda11c3330ea3a98ac4978a0761e67046ebc61aecb98eb055d6d0ba903c0c7","ssdeep":"","tlshash":"5401889fba20130f7413d59fead2434560294853cd7fa643da73d013e4637111ea7e41","first_seen":"2025-06-10T00:59:24.682032Z","last_seen":"2026-07-24T09:27:35.637318Z","times_seen":63,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 14 Apr 2025 14:09:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fd1721-3509\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-25T04:52:01.313186Z","times_seen":907845,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/plugins/latepoint/public/javascripts/vendor-front.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/plugins/latepoint/public/javascripts/vendor-front.js HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Mar 2026 12:10:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b00a3f-5f3a4\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":390052,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65369)","md5":"c525e3fe212f524d6d46470e63db11cb","sha1":"dd45ed5b96bab9a54aad6a653ec97d8edb55f40e","sha256":"e585392c2469b32c7c6758e342f581eb007dd4ff8b8fb5efb9cd012d2b3e3d60","sha512":"58804521ae4b966e8018b581576e8d65652f9fea1c375306d10543e54f99e85a5e678fd58d9f0edf632b6f9f4d1da5bec4a344930140032e2fc9f5a1d5762a15","ssdeep":"6144:EAadx1QUbVflLb9YP5B8eK52+ZmTdTLYXoLV:wdx1QWLJYP/hKg+ZVcV","tlshash":"db8494ebe63c9736a1e57775858eb3ce1a9cbca3c848417836c3b88f527c8d07168615","first_seen":"2026-02-05T14:13:31.240897Z","last_seen":"2026-07-25T01:00:03.396798Z","times_seen":284,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/assets/fonts/135a2177-0c5b-445b-98cc-c19f5a991e5e.woff2","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter-child/assets/fonts/135a2177-0c5b-445b-98cc-c19f5a991e5e.woff2 HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/wp-content/themes/jupiter-child/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 24180\r\nlast-modified: Tue, 24 Jun 2025 07:12:10 GMT\r\netag: \"685a4fca-5e74\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24180,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24180, version 1.0","md5":"afec7eccf3972781223bc64966cb87cd","sha1":"b80b1392e4913968fe744dc2f4d7b95b433c7e1f","sha256":"193d5426816e5408a75d36766cf58c35add2583329e777f8c614b26009aa2fc4","sha512":"8c8e4acb6f331c691c92ea1b4c32ec466d1c884b616f5e0389e4ab369d267620824d8b56c3380c699d3eeef5bcffed8718af05864bb900a8043a01c735f7cb70","ssdeep":"384:KPLE7Rn9u0Bxj9jo7vAQHAmZZNCjwkxj3uOF2cTsJ4Ihg+QQgTzJef3NakPB6H7l:KjCRZBzjo0QHA8CjpxTuq2RJDPgn4f4/","tlshash":"2ab2e123547ea59cdd7e773382498eb569b70e530367817363fcd888831ab9248ce52d","first_seen":"2024-07-29T16:57:56Z","last_seen":"2026-03-25T16:57:45.657608Z","times_seen":13,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/assets/fonts/af8cb0b5-9655-472f-9e16-bf6dc2cc3a50.woff2","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:25.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter-child/assets/fonts/af8cb0b5-9655-472f-9e16-bf6dc2cc3a50.woff2 HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/wp-content/themes/jupiter-child/style.css\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:25 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 24088\r\nlast-modified: Tue, 24 Jun 2025 07:12:10 GMT\r\netag: \"685a4fca-5e18\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24088,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24088, version 1.0","md5":"4f375dd854b297c17e50fe2bcae2ff79","sha1":"45e7209cb6839e122eee644981f39c94bf07b330","sha256":"0c9672ef72623fc2500a2714b54a7abb67ec07bf44333f0f48e0b319f2819d3c","sha512":"446cf6478be1b957fa370196fa88d5d18aafe16528aa47335a9a6b2ec8c9ee7e6eff2dca81ac3599e353569674af1eb13066b3243ed80f3916b93d77600583bd","ssdeep":"384:mlaRcodGhMzOhxU4/K153f/K3NJLowc3vyEFsMwT19RkgcAhFvQmyfyORpqd:mlaKozzOhFy19y3NJLowCyBRkg+moyO6","tlshash":"83b2d146d527ed14e37d23bb8d54d099dd6c3da6ea422f6c324f0124aa2f5c4b135a0a","first_seen":"2025-11-14T12:13:03.608583Z","last_seen":"2026-03-17T04:15:42.966797Z","times_seen":5,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/uploads/2016/07/rocket_w-1.svg","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:41.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/uploads/2016/07/rocket_w-1.svg HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:41 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 14 Apr 2025 13:55:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fd13c6-1070\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4208,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3dd41be757acc65fde83945d486c46c1","sha1":"9144d7bdf077bf1f0bb1f6cad155f1befd049bd0","sha256":"c08036f40874f396ec6fe302892ab33be5fccf5a426b2199fda9df7cac84b6fb","sha512":"8d79a2de3c8c0af154c064bde22622f9240facb8ce15303914378ea2a436d6f59b9206e0e6f62622d9b8653e3d90db0955e0ccbeddaff131f71b72012d588961","ssdeep":"96:y5fW3owQ7EX4eDvHMp2AYDKEpKxRimG51OVK8tU3FVQd0a:oW4MzHMp9EpUXmjva","tlshash":"159123174381cef9adaa45a4e62c1c5479b5e8ca9078f2c4eeef0457d58c8f4e14c6bc","first_seen":"2026-03-11T07:58:02.047825Z","last_seen":"2026-03-11T07:58:02.047825Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter/header-builder/includes/assets/css/mkhb-column.css","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter/header-builder/includes/assets/css/mkhb-column.css HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 14 Apr 2025 14:09:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fd172b-11cf\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4559,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"76518f15addb3509d30d0e85523f745a","sha1":"25e4af190f9b6ade8b443c796c18c17fed91235f","sha256":"341097a731b4a090cae8d7a7c7bdcc78de39db93b28b7dfe1a252f1efe3b165e","sha512":"27cba7c014d44331c9c2192008260e40e58bdbc566a37006bd47b7bd261bbd5b47dcde42867fe1c926bd34d3a660e95fded1a05af57c697ac7bf44b95f601132","ssdeep":"48:BO7eiInueku3e01y01rEaJxaBIIXFkp8Pd14Cta23Cae/hSFFpRySAq:ee1uLaJMBII148Pd14Sa2Xe/hIbRySAq","tlshash":"d7918147d9b11f144816391d2e987b047116a00ba63fef83bbaebc8d4f4634799a1f87","first_seen":"2023-04-05T21:20:11Z","last_seen":"2026-07-25T00:16:12.326081Z","times_seen":1190,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/plugins/latepoint/public/javascripts/front.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/plugins/latepoint/public/javascripts/front.js HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Mar 2026 12:10:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b00a3f-18545\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":99653,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7a64507916f77182c7633233304dac4a","sha1":"db17366242cf0af7d8d0b1f4d923923ae2f92a90","sha256":"581994528d0ce24f012f770b5995787b4437b88e0c37ccea4618237140216e9e","sha512":"12ce9cfca89e2a59c15af250d79196aba0aba6d3132f0c5b0c7acd972d39181a94af0a64e63d600646e81fdf44a103c3e94e7b49859f4720492f15b21fb3e8b4","ssdeep":"1536:WzKIeZFuWanidkw7VxqZvzCIpV6ZAuzGuPl4kFs3FIxnSzkFruhI:pIeZFuWPdkw7TqZvzCIpV6/zGuPl0I","tlshash":"faa3a20cf07119fb02be1566f8e6b3107317ad32a28b447466d664791e34d8d2dbef29","first_seen":"2026-02-28T04:02:36.112258Z","last_seen":"2026-07-23T01:13:43.927668Z","times_seen":163,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.clouditalic.de/matomo.js","fqdn":"espressonisten.clouditalic.de","domain":"clouditalic.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.clouditalic.de","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 11:50:46 GMT","end":"Fri, 29 May 2026 11:50:45 GMT"},"fingerprint":{"sha1":"E9:B2:E4:3C:B6:4D:63:11:BD:21:69:D2:72:3C:83:E1:10:B1:07:56","sha256":"09:67:55:CE:88:2C:A1:71:5C:3F:03:40:8C:A4:FB:4D:AE:69:81:91:AB:86:C7:58:13:76:4A:DD:85:31:30:BA"}}},"request":{"raw":"GET /matomo.js HTTP/1.1\r\nHost: espressonisten.clouditalic.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Mar 2026 09:34:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a55992-10984\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67972,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2923)","md5":"4b32d11120a738ec529e5d64979e9d10","sha1":"deedcd7014f47a999da6c19786713cd7a236040a","sha256":"1762dd6a64fcd59421610b68625258f9224a1f278159c4d99282adb631470465","sha512":"258a126ba730a9f57d0adef037bdf90f349265128ceb8d7d9e5c7754eb14751895dffb3220bc1da307021ea8c37c45b837064c89731313acf22a3245b3812452","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuXEjmbMNfwS9h2BLy1z71B8I6fJIKIQaFLa:AT+Z2fuqXYy1PGJ9d5","tlshash":"3963d8ce72c2753a4bcb6075a43f114ab27e9caa1448c4b4e62ac4f6383491d657bf7c","first_seen":"2025-09-25T22:45:46.07207Z","last_seen":"2026-07-25T05:19:03.117757Z","times_seen":17355,"resource_available":true,"data":null}},"time_used":406,"timings":{"blocked":163,"dns":74,"connect":41,"send":0,"wait":79,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/assets/img/ESPR_Logo.svg","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter-child/assets/img/ESPR_Logo.svg HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 24 Jun 2025 07:12:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a4fca-117c\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4476,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2c0cb3978d6fb601b69f81dfc6026417","sha1":"c41d98170b307e8b592013fc8770e1e9bad035f1","sha256":"5b54989bba91664d224cd9ee5d1b5405c7f2ad28d69bb271e37deac03dd41051","sha512":"c879e924c8ff7ea9bc97539ac964f1b08345a16304cf356076d2b0157e93ba8bc9084419fa0d17812c6c66ca69a0750c00d37294d505c3a5a6a02a8e948e6c57","ssdeep":"96:fLfkXJdyAUDXbs9WBt8PJPhF9qHWXcv2ceObXbJeE:DAXUDXg9WBEJpF9oTv6ObXlF","tlshash":"d39110234311cafcede94528a7a53590b5e4aca4f4b4e2d4f79f1402d06c4e4b5ac7ee","first_seen":"2025-11-14T12:13:03.616583Z","last_seen":"2026-03-17T04:15:42.974595Z","times_seen":5,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/uploads/2016/07/tassengold-bg.svg","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:25.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/uploads/2016/07/tassengold-bg.svg HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:25 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 14 Apr 2025 14:07:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fd16bb-9a62b\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":632363,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a0a991145ddc1c03d6dbe697c3f13ff9","sha1":"7451be09293c58112cead985ea14c24d0830f8dd","sha256":"a680c6a7c6ee5daeb757b35c4e588a3c84a162791a87392e384e78d5957da159","sha512":"597c83919897aa0317a543a07c783bee5210c247c9d97d39454cbfd14c20bacb331c52a784d592616cd2159371fcc26cdb73e77f7c60129ddd2f88bdc3d8a578","ssdeep":"1536:PSqibikxTXCSP9QdBiOneiMWLFW0eGdHwEomMZzI+J/eLNEKk/Jn+nNHRF2kmze3:2icvcFXkNsa3c8nXY6e","tlshash":"4cd4151b0316c79abe9d641cac84085db5f0ddd7a4b8f2c0bb5b541bd48c4f4aa8cbad","first_seen":"2026-03-11T07:58:02.053778Z","last_seen":"2026-03-11T07:58:02.053778Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/uploads/2016/07/beans-4.svg","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:25.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/uploads/2016/07/beans-4.svg HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:25 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 14 Apr 2025 13:57:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fd142d-44190\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":278928,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a9563032e9eb330d4bd88a58aa553cca","sha1":"7d55c5779a36698233f8837770a6593a66f46ca5","sha256":"a231dedd4503efdcedf9ab5b9fb00e0fdae8b8ddee0fc4aa2168241e9facc0e9","sha512":"db1f7a474ae9315adae542455aad3051273e7910b49a72bf9e3f770d4525b5c873f52af50bdd4ddbbed09ccf6ed02785e2939d4614a6736dc7c4a7af70c3aefb","ssdeep":"1536:Y1+Jv4449AJ0dkdJxJkJRqoJm6CJlJJJp1crMPH5JoU9C94IoeBhJVJfGJDJyhLM:FPDPAP4TH1AjGVLmtIo/YodrdXpQ","tlshash":"4c54e56703928bd6fb8d9328d540401975e5ecd3b470f1d8bb6f341ae98d8c6bc5c2aa","first_seen":"2026-03-11T07:58:02.055747Z","last_seen":"2026-03-11T07:58:02.055747Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter/assets/stylesheet/core-styles.6.10.6.css","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter/assets/stylesheet/core-styles.6.10.6.css HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 14 Apr 2025 14:09:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fd172c-32e21\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":208417,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ecc18a4b91b9cb11e6eb1ab5c33a2ad2","sha1":"e1cb3ee61022518978802b5b72cc4ae65c916a43","sha256":"f88717e4ff3896239864f694d9470dc5dcf6bdaf1517b651495ae8a40d726485","sha512":"73d3c8ada88504df7c6f57fd6312d82a976f33e9c59dbf209bb668e0f0d8ef45bd8ea68b888e05c5d9287d9247e891f7d7a971678f0603967c2cf51f47c382c2","ssdeep":"6144:jVvL1Xfzq1X/6BwqrCa2rbQz/LOmszVvLqI3k:jVvL1XfzqsBwqrCa2rbQz/LOmszVvL5U","tlshash":"a114b5959ef21d846027c469e9823be4fb6c4002970eedb8fae5701c9fcd6d541abb4c","first_seen":"2025-10-05T17:57:34.318937Z","last_seen":"2026-07-07T05:36:56.950615Z","times_seen":13,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.brevo.com/js/sdk-loader.js","fqdn":"cdn.brevo.com","domain":"brevo.com","tld":"com"},"ip":{"addr":"141.101.90.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brevo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:27:16 GMT","end":"Sun, 03 May 2026 14:27:12 GMT"},"fingerprint":{"sha1":"C3:B1:80:7F:0F:74:59:56:50:71:7E:70:34:C6:A6:E8:41:B8:E6:55","sha256":"CA:A4:3C:68:B2:F4:0D:44:4F:4C:30:79:3B:44:B6:D2:FC:ED:C0:7E:F9:3E:9F:AD:15:A2:58:91:D5:CA:0F:E7"}}},"request":{"raw":"GET /js/sdk-loader.js HTTP/1.1\r\nHost: cdn.brevo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9da902123e99ecbb-WAW\r\ncontent-encoding: br\r\nx-amz-id-2: EDUyS4MP8oblmQ7AAIfkzNeOn90Uk+go/aXMz3Ofd5EzFyMSnCdD5iVEcUdRuzYTzuZegOG+fAk=\r\nx-amz-request-id: KAFQV14DA0E9J5TF\r\nlast-modified: Tue, 20 Aug 2024 06:41:17 GMT\r\netag: \"578af769de80da33f68b9e5f003c5a4e\"\r\nx-amz-server-side-encryption: AES256\r\ncf-cache-status: HIT\r\nexpires: Wed, 11 Mar 2026 15:57:24 GMT\r\ncache-control: public, max-age=28800\r\nvary: Accept-Encoding\r\nvia: 1.1 google\r\nage: 2516\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3442,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"578af769de80da33f68b9e5f003c5a4e","sha1":"67791b2d2c2acf0332b8e55bb9606e849da17344","sha256":"fe8447fd1ec4dca652b71db2c749fcc24a5bec3875f3654042169fb2418aed09","sha512":"791977af148706b7a4332d96e8c528de09c004077f25fc8e20c98ad60cf4c2106a57fd5c37ec97de7d48df04bb8e397e05d29425efaa0692b330de540855f30a","ssdeep":"","tlshash":"10616b481ce791b601e7b17e4b6be109b575900b1009ed243d4c8f19ff64aae5aebf88","first_seen":"2024-11-22T16:51:47.23237Z","last_seen":"2026-07-25T00:32:58.615087Z","times_seen":5839,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":30,"dns":32,"connect":1,"send":0,"wait":51,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter/assets/js/core-scripts.6.10.6.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter/assets/js/core-scripts.6.10.6.js HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 14 Apr 2025 14:09:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fd172c-875ea\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":554474,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (309)","md5":"d0f0e6c62d22cde4e65b460a8410fa8d","sha1":"edfcdc105b063603fb2184bf4e4cab39f0c4ae08","sha256":"f958bd5b7e2076eb492f2f018c38a028e88a8940cd67014fa80d212a735ce6e0","sha512":"17322e648eacebdc11b7276011815807ca7ed2a240ebca05b6f6b447a99f41cd95accb477820820c342d6dd71be7c2957f0394ac6c80d9e67a4979e9ee9ef1d9","ssdeep":"6144:iTGCILt1TZsiH6kRJYEGul0c8XUkv/IpXxmCVMHHfaJiiARetZphkUMzelElNV56:iTG3lb6EU0ktXZO9lyFHPu5","tlshash":"5cc4f949bfed2125a437b0299b5f6049f27d8027a605c8567c9d91982fc0b3c43befe9","first_seen":"2023-11-04T10:03:11Z","last_seen":"2026-07-25T00:16:12.296704Z","times_seen":70,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/assets/js/navigation-fix.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter-child/assets/js/navigation-fix.js HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nlink: \u003chttps://espressonisten.de/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nage: 0\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"EWWW Image Optimizer","description":"EWWW Image Optimizer is an image optimisation WordPress plugin designed to improve the performance of your website.","website":"https://github.com/nosilver4u/ewww-image-optimizer","common_platform_enumeration":"","icon":"EWWW Image Optimizer.png","categories":["WordPress plugins","Performance"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Web Font Loader","description":"WebFont Loader is a versatile JavaScript library that provides enhanced control and flexibility in managing web fonts.","website":"https://github.com/typekit/webfontloader","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Elementor:3.35.6","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":75400,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12451)","md5":"2ca39713ef3ec7edcfb908c4902d0b5d","sha1":"59096def7ef176c78d4202582843f886bbdf8459","sha256":"73ae369511294f396c5de3d548fa7d0253d7ba0fcd0c1136a434fcc74b570ae6","sha512":"d738dfd552458e9a71135e38d923d9f33ffe54975270cacab4afe723802432fd9a3793b4ff6bf3ae566a69de2ea9bb8308f9bd6a393f6bbd87d73888b0f3b313","ssdeep":"1536:vHGDRGG4jrUfGAGKo51C+8DMONgC2zNFz3sypx0tFhdTpCXZk1xM+/mXAD3c0zwD:X9MtFhdTpCXZkjM+m77gk4W+7osF54/L","tlshash":"b47309b398ad1575721aab84e6d8a71895aa8103cf024eb5b3fd605ccbc0ed506f371f","first_seen":"2026-03-11T07:58:02.060614Z","last_seen":"2026-03-11T07:58:02.060614Z","times_seen":1,"resource_available":false,"data":null}},"time_used":825,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":825,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/uploads/2022/10/cropped-espressonisten_logo-192x192.png","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:25.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/uploads/2022/10/cropped-espressonisten_logo-192x192.png HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 4701\r\nlast-modified: Mon, 14 Apr 2025 14:06:12 GMT\r\netag: \"67fd1654-125d\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4701,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"61a5985c506a930890706b96db9d3f0d","sha1":"6ef59d50cfe2ecdb4297291964598d0911d19895","sha256":"995c97b9e657747496594232eadf8472f0ce069f4954b6a36b3c2bda73d5dca3","sha512":"a80b8738e1f59e6f3514f14367718ff3bd90f2d968b520876514ccd12e3ed2973d8383c89800f94f3a77ac30a714124e1d2777cabbcd337a42054502a27bde7f","ssdeep":"96:lBf33Pf3sXJ3Pf3GRhl8Gh7AD2lx9OoXaClchREeTAmf41TRbmI:lBnkXZeLmOlrdXaPf5Tx3I","tlshash":"c0a16c0e9a7c5d7efd6b88b453ec493129483447464e6a7a53fec49251c908400c667f","first_seen":"2025-11-14T12:13:03.605972Z","last_seen":"2026-03-17T04:15:42.932788Z","times_seen":5,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/assets/fonts/3dac71eb-afa7-4c80-97f0-599202772905.woff2","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:25.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter-child/assets/fonts/3dac71eb-afa7-4c80-97f0-599202772905.woff2 HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/wp-content/themes/jupiter-child/style.css\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:25 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 17524\r\nlast-modified: Tue, 24 Jun 2025 07:12:10 GMT\r\netag: \"685a4fca-4474\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17524,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17524, version 1.0","md5":"175966adf4329b52f730efa26f76deae","sha1":"bca9e3afddec05e9ceb2fdd9bff9053b138e3443","sha256":"562ad3d96d6e027d80df3e123943691a950001e4b538365e6e86068eaca2ee09","sha512":"73d992a3f49208d9af0ae5639632c2949e1b92a568ababa7592e747c34cd5dbf4031d6b2622566a5bd91cd0b0848fa793a5606898935cd06617898dc7a4deed3","ssdeep":"384:Eg4vX2/ebRD+5HvB9vU59jCveRkyaXsl3ONbUjPgn9xiZvpUb14y:IbWHv+9WpXW3ONr9xiZvpUh4y","tlshash":"8672d04a5d411243e20cd239a1bb4fa95749ba860c43678baf77d0ff00c9563223e26a","first_seen":"2023-05-04T07:48:56Z","last_seen":"2026-07-22T15:37:53.770457Z","times_seen":1660,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/assets/fonts/135a2177-0c5b-445b-98cc-c19f5a991e5e.woff2","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:25.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter-child/assets/fonts/135a2177-0c5b-445b-98cc-c19f5a991e5e.woff2 HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/wp-content/themes/jupiter-child/style.css\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:25 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 24180\r\nlast-modified: Tue, 24 Jun 2025 07:12:10 GMT\r\netag: \"685a4fca-5e74\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24180,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24180, version 1.0","md5":"afec7eccf3972781223bc64966cb87cd","sha1":"b80b1392e4913968fe744dc2f4d7b95b433c7e1f","sha256":"193d5426816e5408a75d36766cf58c35add2583329e777f8c614b26009aa2fc4","sha512":"8c8e4acb6f331c691c92ea1b4c32ec466d1c884b616f5e0389e4ab369d267620824d8b56c3380c699d3eeef5bcffed8718af05864bb900a8043a01c735f7cb70","ssdeep":"384:KPLE7Rn9u0Bxj9jo7vAQHAmZZNCjwkxj3uOF2cTsJ4Ihg+QQgTzJef3NakPB6H7l:KjCRZBzjo0QHA8CjpxTuq2RJDPgn4f4/","tlshash":"2ab2e123547ea59cdd7e773382498eb569b70e530367817363fcd888831ab9248ce52d","first_seen":"2024-07-29T16:57:56Z","last_seen":"2026-03-25T16:57:45.657608Z","times_seen":13,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/uploads/2016/10/edelschwarz-01.svg","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:25.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/uploads/2016/10/edelschwarz-01.svg HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:25 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 14 Apr 2025 14:08:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fd16c0-2524e8\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2434280,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e58d5151e7a5cac8bd835ce6510ad74","sha1":"e0049882301a8f8950816003ffb164e98cd82326","sha256":"b9abbfe84e72aa04934c6c9d179c6b744e76c2e40168db72d6fd11a15d73b76f","sha512":"e7a3435fab7ad9120b885c64a4422d338dad0e06325c152b41fb90caee4e0b514f44418ef92dd44fc117b54e530a136ab1239d28fa82d1d12788bc0112bb3702","ssdeep":"12288:RxIRWCQPMEwsy9U8UYkdMColXZsnpFIBvMxUbA6/VFAlIw5U9HrYehbRXI97ZRp4:G","tlshash":"6225f52703169bdbae9d9618e954184871b0d8dba5a4f1c0ff4b380ad4cc0e5bd6cfe9","first_seen":"2026-03-11T07:58:02.065024Z","last_seen":"2026-03-11T07:58:02.065024Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-includes/css/dist/block-library/style.min.css","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 10 Mar 2026 12:14:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b00b2c-1d23e\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119358,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55871)","md5":"b592e353685f2eabaf8f935e377a95a0","sha1":"30d4a0ff9561f9c96a0a29cce379dfbde9749a65","sha256":"3b44e208bba827e614cf1e36e639e3c7cfb849771fb17e99bb38e14022d30d16","sha512":"193686fe6c1766b540e311015484745ad2ceddb9ffc3f883ac3ae66f1d29e32bca94ba11d40f3d0f6689c306f7760ae167d8af73a22778aba93a772e076a9cd4","ssdeep":"3072:WoeJBCCUQg5MG7x+qehvP0xdclkWwbFpPu:CfUQg5MG7x+qehvP0xdclkWiF0","tlshash":"cfc3621417b4dcf935ffa73a5e4ee258a107aa41c68a67e6e066d190718ca490cf3f0f","first_seen":"2026-02-03T19:45:02.649878Z","last_seen":"2026-07-25T04:39:34.771969Z","times_seen":49504,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/style.css","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter-child/style.css HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 Aug 2025 16:48:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a74dfa-fe27\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65063,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"d68a6e6fdca9841dc11874cb550134f8","sha1":"e37bacb6305d59fe58bfdde7ae7ef223b00d9492","sha256":"2c9caf5da508705e54e67d18fdb06e9009f9f602608cc420a3a0f2dc585e7b14","sha512":"7db2d48d0618d8bf7f05afba852126ae0ac9381135bae1e4572975a8aec00dc24dded53ed638b05d8758dde8b84ea8762a378c493e373ca9ec65f3254c2dd3c6","ssdeep":"384:C1BCHZ1XVomBIxXB1MAUG2pU0L8BRorxlaN9JNCq8OTqLm+ToAL0rqQ47X4aYeYV:C6HbmmaMAUG2pU0L8BRlTq6C2/qu","tlshash":"e25343469bb32548651bd0686b7e6354372d9007d30feda8bf8c6248dfc92a185f2f9c","first_seen":"2025-11-14T12:13:03.611033Z","last_seen":"2026-03-17T04:15:42.97284Z","times_seen":5,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/assets/img/Footer_Rasterelement1-3.svg","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter-child/assets/img/Footer_Rasterelement1-3.svg HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/wp-content/themes/jupiter-child/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 24 Jun 2025 07:12:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a4fca-539\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1337,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9c3335f82291266c6872862064252c99","sha1":"604ad7a528efd412461ea74c050a822c6f219f90","sha256":"6b22a22df2f03bd8c916c00231df849f870ca82b0af4b081cbb64da869996fd6","sha512":"8d0bd9cb473cf0da18860aeef9a55d50e299bba5fc6f3950c2894d697712595e65423ec5f6b2296c1f0c1ab0521ffeefb95ba8ebec1c4f7798577ef0272af0c6","ssdeep":"","tlshash":"37210eb5a641b83de4126185abf4bac9b3e79403c2446c4cd0f2be77e228c880d781ed","first_seen":"2025-11-14T12:13:03.623966Z","last_seen":"2026-03-17T04:15:42.952373Z","times_seen":5,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/uploads/2024/06/header-ligre-espresso.jpg","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/uploads/2024/06/header-ligre-espresso.jpg HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 137590\r\nlast-modified: Mon, 14 Apr 2025 14:05:08 GMT\r\netag: \"67fd1614-21976\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137590,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x925, components 3","md5":"cbfc536bed69b571e00c9d45ff413a2d","sha1":"655964a3d2a2a4ca95c5a1d03baa00a142c9949d","sha256":"b65c6a5311d8f35b40bcff754a00481cbce76cbd2565f0deba0aff60fe4de989","sha512":"716a8a6e385ff5204987bb43477dbfb588bd5b752274150401e1273f952a3459e8619a743f289df326d9d27be44ca96105994f1e224f9204e42d0ee8c90f8a02","ssdeep":"3072:Ja7L4+JPicVOrsuOA8vEg+Fsl7d4WzWH3:o7LlwhgZEsl653","tlshash":"e3d31278a35c4d08defd44652ac24b3477794d4e70822fb285bf0d29706faac98fa51b","first_seen":"2026-03-11T07:58:02.070465Z","last_seen":"2026-03-11T07:58:02.070465Z","times_seen":1,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/uploads/2001/09/synesso_startheader_vis-e1631174481768.jpg","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/uploads/2001/09/synesso_startheader_vis-e1631174481768.jpg HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 106098\r\nlast-modified: Mon, 14 Apr 2025 14:03:30 GMT\r\netag: \"67fd15b2-19e72\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106098,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 2213x596, components 3","md5":"4fc7bd94cbc58c8128863f25f4add4e8","sha1":"1e322753de234324c5ec0a7e8059d66f1e5d77ae","sha256":"3d5fc38be5463b1d452f865cc3044ae104198dfe3c75fe5167be0f2a02239f44","sha512":"fc2f0724534b81f2967ae84992d33eaa49110b24e9c25486cb931410891fb0136aa5d82c1264bf654eda044b6af8d637cb4d1871a9bc0df20a163afce0e8bc7f","ssdeep":"3072:tIKcXS6rVhHVqYrfeuP6983bcvQKgFVNbX:23SUVnq2GPvQK+t","tlshash":"d3a302e4800f3812f2490f7749cd326b5346375592ffd32872f59aa182faef265118e6","first_seen":"2026-03-11T07:58:02.08203Z","last_seen":"2026-03-11T07:58:02.08203Z","times_seen":1,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/uploads/2020/11/slide-hafensilber.png","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:25.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/uploads/2020/11/slide-hafensilber.png HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 312500\r\nlast-modified: Mon, 14 Apr 2025 13:57:27 GMT\r\netag: \"67fd1447-4c4b4\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":312500,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 594, 8-bit/color RGBA, non-interlaced","md5":"384f4e4453c7f62b41e9f08f99475f00","sha1":"7ab52060110559b1e196312c532ba4072193e0c0","sha256":"62892ea7c9054108ed99aeb36c3c7572c34a3cbe32110b13d10a54913ae57913","sha512":"7d4e2f39c22ff36125ed932e7636141a70c563a58a4d5735cb72844122f2dc7712aa6d363330e8f69d8a4823bad34690cc747001e7804813c60c72816a101554","ssdeep":"6144:8ckjHyqG+SlCJ/R+DeU7cuRlzBMK8mTzxId/+VJhJ6DV2ejbGDcxEBf:pULSo/RMeycUzWK8mPG1+VJhJ62efc","tlshash":"786422c42195fe66349d90d2423efeef3a89202f632d9cc64dea704495e471b796f28c","first_seen":"2026-03-11T07:58:02.084399Z","last_seen":"2026-03-11T07:58:02.084399Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/uploads/2016/07/keesvanderwesten_w-1.svg","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:34.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/uploads/2016/07/keesvanderwesten_w-1.svg HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:34 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 14 Apr 2025 14:02:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fd158e-3ed4\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16084,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"51dc0d561e90f13859bc017021278bf6","sha1":"e39ff27e6d17586280c88fc86ec3980f858fa91c","sha256":"0dad598ec0c14bc64f41915f66de63a8a58cd5c19cdb0460bb33fde179db8f04","sha512":"3997cdf3ec95d695d76c8656a888b6b89bf601c4421434784baad2d06de382b79856b943e3db95834773cc303d8d116458225341c29fd00c4fce124bf9788ad3","ssdeep":"384:oO6oWMRWOTJvgJdjKTYyZJfZNBPVeZDufjU281ku:NWzOTmJ11y/TB9eZwA","tlshash":"8a7248270312c7dafead562cad5414497590d8dbe4b0e1c4bb6b740ae88c4e6be4c7ec","first_seen":"2026-03-11T07:58:02.087285Z","last_seen":"2026-03-11T07:58:02.087285Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/popup.css","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter-child/popup.css HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 24 Jun 2025 07:12:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a4fcc-739\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1849,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"d0da20ce5e60fcffd7bbe8dcdc31bfdc","sha1":"921cade6025853d3b3ec816d328cfd0019e2bb8d","sha256":"89a200e41583fab606098f0ca89b3e7094705f94bf0a317456c11cbde1236c5c","sha512":"8032246eab1f2623912e2fa971ce0c2bccae8212fedbd2fb1e68e285fae023c4c20e84e214028b736802e9acf12cb1bbc0494c3cbb4cc8b9c199a9115fc3ef3a","ssdeep":"","tlshash":"6331806616677540f81fd6582fba5705212d9047f24ecc787bc832488f89998d8e2bed","first_seen":"2025-11-14T12:13:03.597784Z","last_seen":"2026-03-17T04:15:42.964997Z","times_seen":5,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter/header-builder/includes/assets/css/mkhb-render.css","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter/header-builder/includes/assets/css/mkhb-render.css HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 14 Apr 2025 14:09:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fd172c-15db\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5595,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5ad9cbba7acca3df7cb72011c7a73ff7","sha1":"b7f0963e07daab8e15625550f31f0004ff0130a0","sha256":"a1171c1acfba6934a84527c0bdb9f70c0f661bc6afbc9b6c2f36490345be95f6","sha512":"38ee7a757989b21d226bf96331bd7dd7e8abe8eb710e8664a6b2dff60c47e9c144dc91e552e5850c86dc93e2a488f8daf97ab506974ad6905db6c8f5c959c788","ssdeep":"48:PS2lJS2lc3oBNMe7jaQanHyeFVq6k7evd29w8vMa3XY+Hq6RT+ITfT+oT2T+wTl0:iYBNL7gnHymVbSj66RiITio6iwxjduHl","tlshash":"d3b1cf57cfb11e246e67a04c1f9da31472598413daaffee9784ab10c9fca34604a1fd8","first_seen":"2023-04-06T11:44:05Z","last_seen":"2026-07-25T00:16:12.303398Z","times_seen":1236,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-includes/js/dist/hooks.min.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Mar 2026 12:14:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b00b2c-161d\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5661,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5626)","md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-07-25T04:25:13.163291Z","times_seen":202723,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter/assets/js/components-full.6.10.6.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter/assets/js/components-full.6.10.6.js HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 14 Apr 2025 14:09:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fd172c-ced\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3309,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"0be8ef1815882d8ea78c5a22045462aa","sha1":"3c8144f97641d274c06e0e49eb9006f55fa8cb27","sha256":"2cec0e50bcd6a46d1e237a1d03f1fd89d4b0bec01c0dde8c136ff15241fc946f","sha512":"aaa39311bc597b9f5aea4a44325772d51c3a5ff9258e89551a557abd646f7ca5dcf861521a66f2c61f49e0f1a86b9d15ea51ced32438d1378fe23737ccdfb2e1","ssdeep":"","tlshash":"e4611f49f7be6575a0bf202e593f3c8a76391027a5415c193c7d86e90fe082c5b62d38","first_seen":"2023-03-07T12:04:33Z","last_seen":"2026-07-25T00:16:12.265617Z","times_seen":332,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/plugins/jupiter-donut/assets/js/shortcodes-scripts.min.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/plugins/jupiter-donut/assets/js/shortcodes-scripts.min.js HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Mar 2026 12:10:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b00a47-13414\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78868,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"8439c4ef7a830a8fef3727fa53149027","sha1":"f42dceb379bb3a433da7ae3946f9317e476b5f87","sha256":"52a47e2221bea6c8e32da7e79f59019c09651a6c0e36fab2b5dea7125bab88f8","sha512":"7b82e04525a76d675d5fe86585418d245b32fdedbe2e7420e75141356b0150dc8c1c07ea07115b627ce4d0a4f984bea2dd64fde6795ecd6d7de6a0deca53e745","ssdeep":"768:SIfN5mfdraIBgU0Y9dKcvpkJvOgNvWEoj03Q12wf5Pp3Ejq3qyIJZC:lSVraY06dK0pk9OgPoY+2wf5KjqZIJc","tlshash":"7473836abeff241180b3703a4faf5148b27a80336905ca157c5d82e45fd452da77afe8","first_seen":"2025-12-16T02:44:29.523934Z","last_seen":"2026-07-24T02:47:31.804762Z","times_seen":239,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/uploads/2016/06/Espressonisten_fav.ico","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:25.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/uploads/2016/06/Espressonisten_fav.ico HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:25 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 14 Apr 2025 14:01:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fd154d-423e\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cf253af37de37660bf50874d8faba08e","sha1":"f36f63d3c75c0859b42b2c6864ced4043a84f436","sha256":"38b8f164b639d46d1332e10349221dfc71dc3c88449d59cd18b5a4c107103fe2","sha512":"5eafc6109460c691a11ef3f01cec78f79e6e21492509d493f50ea6e60f8f12858223c5ba5ba0b5b47da8f093b58fe11a54d4f725c10a76087d40735aeed8d40f","ssdeep":"48:OoxDYtUsIN3UHvxHr+69qWutvREB5V+wab5WlKxRbF3sYk3mUVV32fmUm8Qu:jMt2N3+xHjrKEowaFvbFaV32d","tlshash":"0572500832bad987c008263d0ad1e3776275ac516cb18b1ab7d07faf3777244b5143b4","first_seen":"2026-03-11T07:58:02.095421Z","last_seen":"2026-03-11T07:58:02.095421Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/assets/fonts/bc2cf076-1615-4dc9-8cea-1393c1930273.woff2","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:25.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter-child/assets/fonts/bc2cf076-1615-4dc9-8cea-1393c1930273.woff2 HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/wp-content/themes/jupiter-child/style.css\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:25 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 24576\r\nlast-modified: Tue, 24 Jun 2025 07:12:10 GMT\r\netag: \"685a4fca-6000\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24576,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24576, version 1.0","md5":"d07b6a71ae63387ec745af83e544ae5b","sha1":"f90c8886390299747264d7be5709a0f41267db69","sha256":"de75feed9b38d91713a8c4961aa9d666954d9f4f7d8d18fe128fec2acd3ee7e6","sha512":"599298407678cd31faf41f47412dd331b8d29442970d966ce8571dae89b5d7770bea8ef5dbe47a4a0fbc4b053097a51ac43f7c3768f51a6bd21686b6eb815cad","ssdeep":"384:31TfSkdrWwfH01SjFaGNQa0/sNaQMPsjOFKBDS8dZRv3hjA8BWJZH9d:31LFrWwfUkjFta0YeOO/dZVppOZdd","tlshash":"a3b2e190529591967b4f2b30611d1e88a3342cd7199a16c0430f72fdde8d2b48ee77f8","first_seen":"2026-03-11T07:58:02.099903Z","last_seen":"2026-03-17T04:15:42.96174Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/assets/fonts/531c5a28-5575-4f58-96d4-a80f7b702d7b.woff2","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:25.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter-child/assets/fonts/531c5a28-5575-4f58-96d4-a80f7b702d7b.woff2 HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/wp-content/themes/jupiter-child/style.css\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:25 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 17660\r\nlast-modified: Tue, 24 Jun 2025 07:12:10 GMT\r\netag: \"685a4fca-44fc\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17660,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17660, version 1.0","md5":"4622c9999e38ce864c1553f4b79830d5","sha1":"858f5ebf8e376bb3da0cffc2f93a5a102ca26bf7","sha256":"5f822f38968846d38e3d08895fd07ac1a981ffb50e95c4465d4da4ee50c22af0","sha512":"c6eae554e48cb4f6a98eb848545ae0ccf9288b080dbf9e5884f9ebf42bba2c98e4e832cab86e8348a289d78078bbb37966d225eb2c41771d440aaa9549234c8b","ssdeep":"384:hQz1mqt1nwDd7kSTneIkOWHohcsO95TPO:Ghy/DeIVWpsO957O","tlshash":"5782d0117b12e4b0a4e58ffae2fa4f4b0a4e1d7155b9088b46b38d72f5b17962062740","first_seen":"2023-05-05T18:08:33Z","last_seen":"2026-07-22T15:37:53.740018Z","times_seen":1502,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/assets/dist/css/styles.css","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter-child/assets/dist/css/styles.css HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 24 Jun 2025 07:12:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a4fca-3367\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13159,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13158)","md5":"e129e47a452f5eb01a759f9b18ff0e71","sha1":"24791f12e6bcba938ca958c193b245e0801207ab","sha256":"cfe0f5f6801e6a5a783239d1da3f56acaa971cac6e62341d84d357588abd7b25","sha512":"ed0f297c308253bc732340813190d8cc8dac5b93256d52ae34366c2b2483c952518dfedf13e9bdbde01284138538182bf6a3db6bfc7ce2ff40c090bb4b7080d5","ssdeep":"384:A7X8dfNumiC8lf+mBjvejLwN6opgfyCHf37:A7M2Y85+mBjvcLwMzfy4fr","tlshash":"9d429811e249202eb227c632f5a5ea6d71386017a2170bedf7c7679ecac31b50363bd5","first_seen":"2025-11-14T12:13:03.633192Z","last_seen":"2026-03-17T04:15:42.960328Z","times_seen":5,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/plugins/breeze/assets/js/js-front-end/breeze-prefetch-links.min.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/plugins/breeze/assets/js/js-front-end/breeze-prefetch-links.min.js HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 06 Mar 2026 09:13:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69aa9aae-760\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1888,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1844)","md5":"9043ba100ac24dfd69f3149a88d3fad7","sha1":"8c5e04e5836f12a2fc18b6a1070d2858d0a8b784","sha256":"8ef67a4261e692ccb8332a100a6cf2a452c2be0a99be6a519a3005746b75989b","sha512":"092db2aad7410805e4fafba7c95374e2855c9d18ef7329df6f9f815a49b02de5c7f09b5ea5d70a8dd9455769e136e6a88fe57ef7779377d08d91c61eba05b571","ssdeep":"","tlshash":"09417760fad101bb19c69da4b79e2200607af68c546dc1e0b821a6085d38fd720abcef","first_seen":"2026-02-10T02:03:25.718997Z","last_seen":"2026-07-24T22:38:47.623105Z","times_seen":1738,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/uploads/2016/07/espr-web-head-keesvanderwesten.jpg","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/uploads/2016/07/espr-web-head-keesvanderwesten.jpg HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 224549\r\nlast-modified: Mon, 14 Apr 2025 13:55:38 GMT\r\netag: \"67fd13da-36d25\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":224549,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2560x692, components 3","md5":"c33c9c65bd474361ab0ad8294ebea5cd","sha1":"e342643a8f8870f79030e0b65a86ebdc2499fb21","sha256":"01bfdfe7c31cb027436a8d731a66544cd412ea4085ee69c553c7199f14560f24","sha512":"ed22a79de92aac54d3f179c2c648087f89fe559d4153201fd347a6e2d075ceeec73babfd4e16fd105991a84d7fb5b25b2f8fd2be21b84c9b66bfbef7f20887ff","ssdeep":"6144:+D9FlTYxkhaBE4Iu9gdEDLIHll+9A7MoB:YF0kQEZd6L+n7MoB","tlshash":"de2413aaf52598318fb49f2da01b31d2e4ed1f9cc43162f13471e1f552171ea0db6a93","first_seen":"2026-03-11T07:58:02.111685Z","last_seen":"2026-03-11T07:58:02.111685Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/uploads/2025/10/kachel-host.jpg","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:27.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/kachel-host.jpg HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 702946\r\nlast-modified: Tue, 28 Oct 2025 17:18:48 GMT\r\netag: \"6900faf8-ab9e2\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":702946,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1920, components 3","md5":"ca741ddcfddb1c73b775c56fba36a2ff","sha1":"b8a10ae720fa91dad8ff176b9522fcc03711f46f","sha256":"6b852a6b4e8e7ab4ad5789b8fe6c644679b524c19b2ac79ea01c8c230d5c687b","sha512":"1871877aa0355862c22396ad9ea859e76c6a7f98b751fa17e79ece0ff0272ff4a72fcaa3b9c96c86a5c5f25d0d2e66ac40fc3af56b9aaccd180ef4e5f55ce901","ssdeep":"12288:qrZQ1+4X/nY+Kwam1yVLKC8nndTD56eWtKfj1z+R5gHDK604tIvuP:qW1+K/F91y5vOdTUHKfj1z+ex04tIvuP","tlshash":"a3e4237ef8fa6d87fe88d3396007c520a3354bf77d43c4a962946b2099f86406397d89","first_seen":"2026-03-11T07:58:02.115585Z","last_seen":"2026-03-11T07:58:02.115585Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/uploads/2025/07/content-ecm_technika_6-6.jpg","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:28.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/content-ecm_technika_6-6.jpg HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 256295\r\nlast-modified: Sat, 26 Jul 2025 06:35:23 GMT\r\netag: \"6884772b-3e927\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":256295,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 934x934, components 3","md5":"ddc647964f8c4ad5a9dea4fc3f440cc0","sha1":"9f945f6d932416112eee5b9879645ad05fc292d6","sha256":"8d2af8ff2044fc2f48e1d0b6aedbac71bd862294c2a0090e6245aa90c1f2cac1","sha512":"c6b344b2d9f8bcf420cf8c65be9bdc5d410ebbaa710bb6e922d60df89d67536c4c6aa0d23761674030a8c24085c6e3d25f2a9fa9cd5bcca08e1cb665c9f4e6b1","ssdeep":"6144:5Mt8IEabAK+7+fageNr23ARWpe0tlBxE68y:+t8IEabNvigVA4B3xEY","tlshash":"ef4423c251a6bf73619d0bf0187357f932183177026ec1942cfec995618f6e7a22396b","first_seen":"2025-11-14T12:13:03.619986Z","last_seen":"2026-03-17T04:15:42.969668Z","times_seen":5,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter/header-builder/includes/assets/css/mkhb-row.css","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter/header-builder/includes/assets/css/mkhb-row.css HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 14 Apr 2025 14:09:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fd172b-73f\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1855,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e21896818496cb122d74914c92290867","sha1":"9def28e1f1d18dd3e51b7d260867301bc7b84038","sha256":"523f66c9700c41888b1857eadf379a6c0f79de41ae0b99076ba3234237e04571","sha512":"c0b31435829e136e69b6a7fe61a91c9d78cf2a8d1e871a7d887cde1dd32d09c7871e324bf5ca958886060937c6bb854eb5a89a61b6454865a6f4c30e81b2f415","ssdeep":"","tlshash":"a2317a58df950d5df957a02d2f684760ba1c8803db0eafe97805f09cdf8a3820462ad6","first_seen":"2023-04-05T21:20:11Z","last_seen":"2026-07-25T00:16:12.338597Z","times_seen":1192,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/plugins/mailin/css/mailin-front.css","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/plugins/mailin/css/mailin-front.css HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Mar 2026 09:13:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69aa9ab8-a79\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2681,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"af1456e33d7180e00002f436e794138b","sha1":"89fb4f30aa3793331b0b7bd034fa4ddb64a37787","sha256":"3c288f0c3cb0999bbd6a9f6486f6b13064ead24052234ac35f8b053b9db9ae96","sha512":"17d4240a59850ab51f7bce139db0f2534ba0dc155aec4eadfd950f755c9434bd748f0f7fb671a8bc2b6a1beb1fe039549d2d38cd9febd5157a906fb9e8dfddfa","ssdeep":"","tlshash":"db519a3ddb00250af377d3e42bf11746eb6941238b024da8bbd663139f765e88899db1","first_seen":"2023-04-06T16:17:37Z","last_seen":"2026-07-25T05:26:14.250354Z","times_seen":7317,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/assets/fonts/c19c9e09-f38b-429a-b7c0-a0f3f3f0dbd6.woff2","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter-child/assets/fonts/c19c9e09-f38b-429a-b7c0-a0f3f3f0dbd6.woff2 HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/wp-content/themes/jupiter-child/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 24388\r\nlast-modified: Tue, 24 Jun 2025 07:12:10 GMT\r\netag: \"685a4fca-5f44\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24388,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24388, version 1.0","md5":"ed61e98b9381ea9f2823196b5237c015","sha1":"93fd51b1e2c5f5dc9514b36c16730d41da03a3f8","sha256":"850491da34a2a2f185a513b3fc729f40b6e978a861c70318847560f54d1fd8e9","sha512":"bd552dd42c7bdbe412c22b3b0ea5971c3453abb0294d9e5cf258ac19fb44e2c317216a83f3b89451eb43bb097664d9f39091c82a5326aa35c5451007df58ac12","ssdeep":"384:bYIBJf63k0vB84aoprJQScuMSzRUteDb1RctDrUwo5ViE+YFbpCfN65LQYbBCQvV:bYIBpsKPGWp8HRct3A0By1Cfl8CQ3qsV","tlshash":"8ab2f1311ff76f0195754a23aff70b1a92780e960f8e78a42fe06468f24d1f64549b8d","first_seen":"2024-07-29T16:57:56Z","last_seen":"2026-03-25T16:57:45.64609Z","times_seen":13,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/uploads/2016/07/hafensilber.svg","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:25.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/uploads/2016/07/hafensilber.svg HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:25 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 14 Apr 2025 14:05:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fd162f-1d19b8\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1907128,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0d10602cda62dbb81d6b34d343651216","sha1":"6cadba30b2a6a05a2bd3fbaf3709bed48e603d9b","sha256":"c741681bdb6bdd6f62f4bf58fa9ae621dc20923fd7f0f584dd9b885badc11f3c","sha512":"d1e7623ce0d0fae367e83d7ad12f96eb9ceee85b178736a8ea1867457938d44ce3deebe33eadee61e8af482851bb4f16b3ab6005b2a24742c384f34d2023f17e","ssdeep":"12288:W2j/U+BtUVyeh3ueXJ9giVb8GMucjWxw4HR30XFTAOOVcM+rS060jI9ZPKGSJhbl:Z","tlshash":"1925582703169bdafb9e5658e888148e71e0d9dbe4a4e0c0bb173406e4dd4e9bd4c7ec","first_seen":"2026-03-11T07:58:02.122532Z","last_seen":"2026-03-11T07:58:02.122532Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/uploads/2019/02/espressonisten_webkontor_w_slider-01.svg","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:26.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/uploads/2019/02/espressonisten_webkontor_w_slider-01.svg HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 14 Apr 2025 14:02:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fd1587-31b5\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12725,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"80a633e37e202a102e3dc9fa4e7e5cbe","sha1":"f9d41fe587746b8025b6c590d6457a02c650d316","sha256":"4b12b30d10564d3b8f99255f5814b89cca255ce1825f2dcef28f0cc99c407983","sha512":"f24beb9185e3585fb61e12e5ae6833eaf598a31917814e59ee4417c11b3fc617171c13300224f1dfcd03e0910680c8a5d5d22dbca0a24b9fca32a2f015d87eb4","ssdeep":"384:IxlkUgZXulmgAstA0G0Un8Eedm3NDp3+VzzGp/nu/yr1uXQeD:0kUgZSWgA0hm9gqBnu/yJuX9","tlshash":"a742965a5334c1f8f5d824a49f2517c63fb068ae99b9e380d33b2d061983ff66068d78","first_seen":"2026-03-11T07:58:02.124731Z","last_seen":"2026-03-11T07:58:02.124731Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.clouditalic.de/matomo.php?e_c=Newsletter%20Popup\u0026e_a=popup_shown\u0026e_n=%7B%7D\u0026ca=1\u0026idsite=2\u0026rec=1\u0026r=804073\u0026h=7\u0026m=57\u0026s=28\u0026url=https%3A%2F%2Fespressonisten.de%2F\u0026_id=cf4cd4629720bc32\u0026_idn=0\u0026send_image=0\u0026_refts=0\u0026pf_net=68\u0026pf_srv=55\u0026pf_tfr=64\u0026pf_dm1=1161\u0026pf_dm2=622\u0026pf_onl=17\u0026pv_id=klzfyX\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024","fqdn":"espressonisten.clouditalic.de","domain":"clouditalic.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:28.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.clouditalic.de","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 11:50:46 GMT","end":"Fri, 29 May 2026 11:50:45 GMT"},"fingerprint":{"sha1":"E9:B2:E4:3C:B6:4D:63:11:BD:21:69:D2:72:3C:83:E1:10:B1:07:56","sha256":"09:67:55:CE:88:2C:A1:71:5C:3F:03:40:8C:A4:FB:4D:AE:69:81:91:AB:86:C7:58:13:76:4A:DD:85:31:30:BA"}}},"request":{"raw":"POST /matomo.php?e_c=Newsletter%20Popup\u0026e_a=popup_shown\u0026e_n=%7B%7D\u0026ca=1\u0026idsite=2\u0026rec=1\u0026r=804073\u0026h=7\u0026m=57\u0026s=28\u0026url=https%3A%2F%2Fespressonisten.de%2F\u0026_id=cf4cd4629720bc32\u0026_idn=0\u0026send_image=0\u0026_refts=0\u0026pf_net=68\u0026pf_srv=55\u0026pf_tfr=64\u0026pf_dm1=1161\u0026pf_dm2=622\u0026pf_onl=17\u0026pv_id=klzfyX\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024 HTTP/1.1\r\nHost: espressonisten.clouditalic.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 0\r\nOrigin: https://espressonisten.de\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:28 GMT\r\naccess-control-allow-origin: https://espressonisten.de\r\naccess-control-allow-credentials: true\r\nage: 0\r\nx-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T04:51:46.086242Z","times_seen":17521484,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter/header-builder/includes/assets/js/mkhb-render.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter/header-builder/includes/assets/js/mkhb-render.js HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 14 Apr 2025 14:09:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fd172c-1a16\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6678,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"4133d68d090a739171f49a40be7c908a","sha1":"08f698981c6b2efa1210f7bbd16b05a41d7fcf23","sha256":"ea50852b7cf7fa8f8ce91ced08f320ae8a438cfbdc67f45a2e17eca053920990","sha512":"d9eff9dbf7fb17c3c7a21943c58f618d9950f13061005e0aa3638c645bbda06f1ef50776817b7997b98e087b965694d45a1779aeca136143018a434fb18cbfbc","ssdeep":"96:VJxOsv5d+JV+zk30mZUJ6bH/cHvw+dSrKhGFVnzlSCU1LkeUx7+KSz5WXl:VfcVz/8tGs6z0+zd+Ktl","tlshash":"16d12112eb483332d03b205f481f53ea733fc6617244d5a92d4ab95d2c8456dab93f5a","first_seen":"2023-03-07T12:01:31Z","last_seen":"2026-07-25T00:16:12.355278Z","times_seen":726,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/plugins/wp-statistics/assets/js/tracker.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/plugins/wp-statistics/assets/js/tracker.js HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 06 Mar 2026 09:19:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69aa9c0f-1f2a\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7978,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7978), with no line terminators","md5":"e892010f402de73f9256172018787e5d","sha1":"1e024ae6a16a5d85e1a977e8bcca2c5b2e6c7a14","sha256":"f6cc081c08b204157dec0bc617acb50911f5348a6518302aeae27d2e87ed4913","sha512":"fb1b64a4c5df03cbe0277d10c782ded33882304f4b69a2cee5c5622ce87288d112e138aaab63b76fd6433c9897113cfd40216ce01c56850608427eeae9a8ed46","ssdeep":"96:Z2PrmYOXKnJaAS8r16MO0zrEQWOGZXYgd7n5WdOZPhq0ho7PsERSsgsRniy:vYUv8RjO0HEQWOGZIW75AOZPIa0P","tlshash":"30f174867ac256f2c8f63058563a3b3d75ab0dd23602e170a828ced3546c6c6d747f7a","first_seen":"2026-02-10T07:20:33.26655Z","last_seen":"2026-07-23T14:23:07.290847Z","times_seen":1028,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/assets/fonts/531c5a28-5575-4f58-96d4-a80f7b702d7b.woff2","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter-child/assets/fonts/531c5a28-5575-4f58-96d4-a80f7b702d7b.woff2 HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/wp-content/themes/jupiter-child/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 17660\r\nlast-modified: Tue, 24 Jun 2025 07:12:10 GMT\r\netag: \"685a4fca-44fc\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17660,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17660, version 1.0","md5":"4622c9999e38ce864c1553f4b79830d5","sha1":"858f5ebf8e376bb3da0cffc2f93a5a102ca26bf7","sha256":"5f822f38968846d38e3d08895fd07ac1a981ffb50e95c4465d4da4ee50c22af0","sha512":"c6eae554e48cb4f6a98eb848545ae0ccf9288b080dbf9e5884f9ebf42bba2c98e4e832cab86e8348a289d78078bbb37966d225eb2c41771d440aaa9549234c8b","ssdeep":"384:hQz1mqt1nwDd7kSTneIkOWHohcsO95TPO:Ghy/DeIVWpsO957O","tlshash":"5782d0117b12e4b0a4e58ffae2fa4f4b0a4e1d7155b9088b46b38d72f5b17962062740","first_seen":"2023-05-05T18:08:33Z","last_seen":"2026-07-22T15:37:53.740018Z","times_seen":1502,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/assets/fonts/3a46542f-f429-4821-9a88-62e3be54a640.woff2","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter-child/assets/fonts/3a46542f-f429-4821-9a88-62e3be54a640.woff2 HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/wp-content/themes/jupiter-child/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 17360\r\nlast-modified: Tue, 24 Jun 2025 07:12:10 GMT\r\netag: \"685a4fca-43d0\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17360,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17360, version 1.0","md5":"9b36197771464b27f64aaa2b30b0f662","sha1":"d908a6e89e5e9127de62df3e27b6cedd274933d0","sha256":"128a909ddb72977f4447788b64f3b542fb71c1bec626cd39256be40cf7f8d527","sha512":"8de77b0dd5cf877b77cde4e9c2245a68122d87a2415b976abf3f9185849f75ddad8a7baa16f97a3c4f071d57faf9f9a0e0b8ff47517aa704b3d77c285fab54db","ssdeep":"384:WTZI2JSKQpkiDfbav1vN2oHbGcz8UjXJ8SMUC+RxlTIrYIotx/+Avt:WTW2JSKQmCfbat1lfbXaUrbOo+AF","tlshash":"5272d0f6152813c2d22d2df7449608eb91088209d40af1c58dcdbcbe56cae5bda9a7cb","first_seen":"2023-04-11T12:13:49Z","last_seen":"2026-07-22T15:37:53.730581Z","times_seen":1495,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/assets/img/ESPR_Facebook_white.svg","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter-child/assets/img/ESPR_Facebook_white.svg HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/wp-content/themes/jupiter-child/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 24 Jun 2025 07:12:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a4fca-346\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":838,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a67caff862a63eff7e35ea3d3f2fdb39","sha1":"eea9f6995e170ac951d7e2ecc010441ae63465d7","sha256":"c2f2bbfa037083385f28456aefb9cfb89c0f35c39b98d87c841fe8f87d24bd5d","sha512":"a146e0f1e4a327e12c158606b69349df9044a88323d824a824797cfa10bc12f03f27d422df0c450addcc6c7a3439ae7e29f6d1171c0199d7d7b873d913873b30","ssdeep":"","tlshash":"5101121d03589cf66c04971163f8a6c2fb70ad8a73d8e9cc9aeb1879e15e4805555cc8","first_seen":"2025-11-14T12:13:03.600732Z","last_seen":"2026-03-17T04:15:42.943514Z","times_seen":5,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"in-automate.brevo.com/p?key=qvvpywnmo2dv2gh470ojfvvg\u0026cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1\u0026ma_url=https%3A%2F%2Fespressonisten.de%2F\u0026sib_type=page\u0026ma_title=%E2%80%9EKaffee%20ist%20Kunst%20%E2%80%93%20und%20die%20ist%20erlernbar!%22%20-%20die%20espressonisten\u0026sib_name=%E2%80%9EKaffee%20ist%20Kunst%20%E2%80%93%20und%20die%20ist%20erlernbar!%22%20-%20die%20espressonisten\u0026ma_referrer=\u0026ma_path=%2F","fqdn":"in-automate.brevo.com","domain":"brevo.com","tld":"com"},"ip":{"addr":"172.64.150.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:25.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brevo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 13:27:16 GMT","end":"Sun, 03 May 2026 14:27:12 GMT"},"fingerprint":{"sha1":"C3:B1:80:7F:0F:74:59:56:50:71:7E:70:34:C6:A6:E8:41:B8:E6:55","sha256":"CA:A4:3C:68:B2:F4:0D:44:4F:4C:30:79:3B:44:B6:D2:FC:ED:C0:7E:F9:3E:9F:AD:15:A2:58:91:D5:CA:0F:E7"}}},"request":{"raw":"GET /p?key=qvvpywnmo2dv2gh470ojfvvg\u0026cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1\u0026ma_url=https%3A%2F%2Fespressonisten.de%2F\u0026sib_type=page\u0026ma_title=%E2%80%9EKaffee%20ist%20Kunst%20%E2%80%93%20und%20die%20ist%20erlernbar!%22%20-%20die%20espressonisten\u0026sib_name=%E2%80%9EKaffee%20ist%20Kunst%20%E2%80%93%20und%20die%20ist%20erlernbar!%22%20-%20die%20espressonisten\u0026ma_referrer=\u0026ma_path=%2F HTTP/1.1\r\nHost: in-automate.brevo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://espressonisten.de\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 11 Mar 2026 07:57:25 GMT\r\ncf-ray: 9da9021aace4783d-OSL\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T04:51:46.086242Z","times_seen":17521484,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":55,"dns":34,"connect":1,"send":0,"wait":104,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/uploads/2020/12/slide-edelschwarz.png","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:25.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/uploads/2020/12/slide-edelschwarz.png HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 149047\r\nlast-modified: Mon, 14 Apr 2025 13:57:49 GMT\r\netag: \"67fd145d-24637\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":149047,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 594, 8-bit/color RGBA, non-interlaced","md5":"6f7147a93a93e1a98c0fb1e2d8d206d0","sha1":"d2a15bf482c6b8ecc74ea1b54580ba04de0f6848","sha256":"7d1faf1b26c401158c0dfc9029f3ddfd66340e194fbd046575fd25e463f23ada","sha512":"399c041bc2b3518aa0ed993daef2a58ca087da8438f646621a30cf08bbcca8d658f2cbeac6e4524ffffad020dda4febf981d2d3c080ede043ebaa6edd967f30f","ssdeep":"3072:747HkbbcRyMrTiaqMKkPe9YI9iiXntdM03r/DyH7qWkVoeVWpABlia1cW:76HOcwM3iD2Oii3tTr7YbAodeBliScW","tlshash":"40e3125a58b4e0c9d26dc05b7c48aa64615baaf82b1bc270ff390338fe3bac4f534550","first_seen":"2026-03-11T07:58:02.130098Z","last_seen":"2026-03-11T07:58:02.130098Z","times_seen":1,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/uploads/2024/06/ligre-logo-white.svg","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:27.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/uploads/2024/06/ligre-logo-white.svg HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:27 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 14 Apr 2025 13:57:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fd1451-4d4\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1236,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"46cc9155ec843c12920cdf4bd97fc88e","sha1":"3da89c8565919b294a6d6ee832eb169a2386a176","sha256":"6e6046d8b915175ed971a4df2660fbef7d8e92f7043f3e3a0cf70cc13c83c1a9","sha512":"b216ebcebb71b9d3ae8aa2d1714b88a3b4373c054e9f0ef38368d8365947ad4a231af0aa614b818c1a2bbda1e6ac781c9125d6227a5404e4a03872ff64a02a90","ssdeep":"","tlshash":"16215135d61dca36b54487a92174431a78f330ccae2547a8a1f227227930ce267f940f","first_seen":"2026-03-11T07:58:02.13155Z","last_seen":"2026-03-11T07:58:02.13155Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/plugins/js_composer_theme/assets/css/js_composer.min.css","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/plugins/js_composer_theme/assets/css/js_composer.min.css HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Mar 2026 09:19:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69aa9c1e-71d69\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":466281,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65379)","md5":"daf01a50425f7cf55796615edae865e8","sha1":"12d3ed8e413451fe1380fa9b596c1244c9707730","sha256":"d3afb5415b06e2ecaf686eb5087b1b8aa6289aeacb31a0a226673dff91edf2e3","sha512":"a37cc6d3b8497a4095f17af759bf52b0e41259572e876a4537d1ce7eb2f01730f289124040e235dc336e56103d34bd29369986ed0f76af7366dca27d71c232f1","ssdeep":"3072:4Rs4PIe+GDLrmKEY8OCtVGNz+iosqqxvEtkwRy5X9HLtkBJHQbXBH6QUt+eWAHpJ:4Rse09","tlshash":"7ca443b2f894245f23a74cbd30a0f92abe1701f2d9c25fae3464e6945e0586f353a735","first_seen":"2025-10-29T02:33:08.533623Z","last_seen":"2026-07-25T03:12:53.004004Z","times_seen":6162,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/plugins/mailin/js/mailin-front.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/plugins/mailin/js/mailin-front.js HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 06 Mar 2026 09:13:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69aa9ab8-388a\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14474,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"84e18e27eece4754ccb51cd2b604c6b5","sha1":"3dc5bf70a8997923f7bc605009936ffa65f787f0","sha256":"f51781b32d3df9af2bd903a273adf30307a2d040bad313a969584336a05c20d1","sha512":"6f6692abc7030036346d80e6269226eb2fa65230aa560cabc2664dadaf7ccac17a65394349a93eddbc2a36d7f9a3a129db3a8ff8b8c0a8425125c9cc76978000","ssdeep":"384:rDZLFNLKmK8gDDQTF/jE+/ErWVgSz0Ma3/63UF49aph3W9j9qxod86v:rDZmmNgDDQp/jE+/ErWVgsa3/63UF49J","tlshash":"d152751ce8e214c8aa7320fa7eff4314399a9823550ddf00fd9d62746fa48655768fb8","first_seen":"2024-12-24T13:22:09.390461Z","last_seen":"2026-07-25T05:26:14.083609Z","times_seen":6765,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/assets/img/btn-slider.svg","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter-child/assets/img/btn-slider.svg HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/wp-content/themes/jupiter-child/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 24 Jun 2025 07:12:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a4fca-248\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":584,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b0eb399b4f8ee2e214393e2be5d1f9fe","sha1":"e6b6f703dcef16829cac578a8b88262fc873d6ae","sha256":"2f7a85741f550728085d3f7d75e70b66be05c882cc8390b26018044233782231","sha512":"f7bfad5548ac04823e5254b9c29c68cfb7cd4852e85dbc20ceb617a4bc84e4c9497825e29aba195c843db83d868637b83cd51945aeb3c41d6b7f38b3b4ab66e8","ssdeep":"","tlshash":"faf0e1694b87a839a115430563f8a1c653b6788be2e02d89c1f26ff9e30a4900e3a4dc","first_seen":"2026-03-11T07:58:02.134327Z","last_seen":"2026-03-11T07:58:02.134327Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/assets/fonts/3dac71eb-afa7-4c80-97f0-599202772905.woff2","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter-child/assets/fonts/3dac71eb-afa7-4c80-97f0-599202772905.woff2 HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/wp-content/themes/jupiter-child/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 17524\r\nlast-modified: Tue, 24 Jun 2025 07:12:10 GMT\r\netag: \"685a4fca-4474\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17524,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17524, version 1.0","md5":"175966adf4329b52f730efa26f76deae","sha1":"bca9e3afddec05e9ceb2fdd9bff9053b138e3443","sha256":"562ad3d96d6e027d80df3e123943691a950001e4b538365e6e86068eaca2ee09","sha512":"73d992a3f49208d9af0ae5639632c2949e1b92a568ababa7592e747c34cd5dbf4031d6b2622566a5bd91cd0b0848fa793a5606898935cd06617898dc7a4deed3","ssdeep":"384:Eg4vX2/ebRD+5HvB9vU59jCveRkyaXsl3ONbUjPgn9xiZvpUb14y:IbWHv+9WpXW3ONr9xiZvpUh4y","tlshash":"8672d04a5d411243e20cd239a1bb4fa95749ba860c43678baf77d0ff00c9563223e26a","first_seen":"2023-05-04T07:48:56Z","last_seen":"2026-07-22T15:37:53.770457Z","times_seen":1660,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/uploads/2016/10/beans-2.svg","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:25.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/uploads/2016/10/beans-2.svg HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:25 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 14 Apr 2025 14:04:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fd15fb-444eb\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":279787,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dc42106e05c9ba91f047f4889a2ce9d1","sha1":"1c44650a23a49e9b1ae04b7c6b0de4ff5147eb13","sha256":"271dcaa9d5dc30ad2469746d51257a6ed2e2414f0017559925bc507febdf34a8","sha512":"5c8c1890e89ec6853dc22efb83a285f1520f8d22e6c618d8ebe4e5ae3e2764a7e7fd332360dcd204f7ff83109840b545b1b407b149daf45eb0af477ed84475a4","ssdeep":"1536:q7k3d444YdkcJmJZzJ9qxJlJGJp1wBfwmOxJoU9C9QSUJtJSnJ/FrzbaJoJ7O7Mr:P+zoTe5v7WZzM7wNCDqswjc7sDAlkPvN","tlshash":"7954f56703928bd6fb8d9328d540005975e5ecd3b470f1d8bb6f241ae98d8c6bc5c2ab","first_seen":"2026-03-11T07:58:02.135589Z","last_seen":"2026-03-11T07:58:02.135589Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/uploads/2016/10/slide-tassengold.png","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:27.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/uploads/2016/10/slide-tassengold.png HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 278856\r\nlast-modified: Mon, 14 Apr 2025 14:03:01 GMT\r\netag: \"67fd1595-44148\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":278856,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 594, 8-bit/color RGBA, non-interlaced","md5":"6ac35a2b64cffd094ef6a5ca2c60ce15","sha1":"177a15492f9e7e6b02daa2bf9da10ef900ea19fa","sha256":"6949bb7b02688cd109da1cd97fedcc6dae7d64aedb18554e506574ddf1800e9b","sha512":"4bca8fde95e96a9e60a4478e38c619aae0f55ee9e55ab374be190357e106ff2f34416d758c5a246a6721056bbd12587af7e68810765c968f8f79f164053401e5","ssdeep":"6144:cbrqk4iPg+0la2XGlsBJcq0QWZ3x0emBQvZwjcUzo:K+qSGKJR0/RKecQv+/M","tlshash":"c9542355b9868ee7e32c24b32d91010c3b7be5e2e220dd03a2939965755b2c8fb7464f","first_seen":"2026-03-11T07:58:02.137111Z","last_seen":"2026-03-11T07:58:02.137111Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/uploads/2026/01/gbw-teaser.jpg","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:27.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/gbw-teaser.jpg HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 223805\r\nlast-modified: Thu, 15 Jan 2026 13:00:46 GMT\r\netag: \"6968e4fe-36a3d\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":223805,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x1200, components 3","md5":"0a50b6f989fc0523e10233839cfe393f","sha1":"25ccf13f58fe8b6eb78f1832a881eb1dd5786850","sha256":"ba7820f5b3ab2b8c903d7cf8b1b3af057f4ce9742fcc74b6942ad85e42fdf8ce","sha512":"325c3b42926802d07dae0cce5727c0e86781c86352210799318b0995e98eec2513ba043c4109c13c106c72d451e5473b5e6685406a9f724a7f38b59586eaa83b","ssdeep":"6144:bX3wwGgssEPJklbKGon0ldwjNjfsnKuUchaLtox:7gwG5PJ0je0nK4haLGx","tlshash":"b224121f04359b8fd6fc9c1ce36962783f8fdb81a0b618491a635f8237d009ac6e95b5","first_seen":"2026-03-11T07:58:02.138666Z","last_seen":"2026-03-11T07:58:02.138666Z","times_seen":1,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-includes/js/dist/i18n.min.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Mar 2026 12:14:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b00b2c-14c2\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5314,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-07-25T04:25:13.157437Z","times_seen":199683,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/plugins/ewww-image-optimizer/includes/lazysizes.min.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/plugins/ewww-image-optimizer/includes/lazysizes.min.js HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 06 Mar 2026 09:13:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69aa9abf-4299\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17049,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17049), with no line terminators","md5":"c318a761be370148448e70835907bce6","sha1":"04ddb20e0f1c9251b14fe09a8961c8df89e0f09f","sha256":"bc74614fa92f608c5a30942335391813a24d7614b05cca4c22649d9de4e09e4b","sha512":"9c5c3e3e82a005125732164f28fc49de2f9adbf880b84473416c14c2038b4eaea196f6bd2cc8f04a49b57cc775ccd7e46ee1510f12c9b2cfebe09d9ad6e4f956","ssdeep":"384:rQfPSEtTi+iguVWOHlDPSxV/Lqb88FXNlf2CsnmzV/GAeOvPC4N836qoDVTaf3Vr:rIbtTi+iguIOHBq/Lqb88Plf2TnCV/GH","tlshash":"d772e8ee320975b3a95720f1555f620bb2327437ad079820aa39d8e19d38cd66337e6c","first_seen":"2025-12-04T20:55:38.388983Z","last_seen":"2026-07-25T00:50:02.706043Z","times_seen":3246,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-11T07:57:23.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 177160\r\nlink: \u003chttps://espressonisten.de/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://espressonisten.de/wp-json/wp/v2/pages/824\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://espressonisten.de/\u003e; rel=shortlink\r\ncache-control: max-age=0, s-maxage=2592000\r\nexpires: Wed, 11 Mar 2026 04:32:42 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 12278\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Web Font Loader","description":"WebFont Loader is a versatile JavaScript library that provides enhanced control and flexibility in managing web fonts.","website":"https://github.com/typekit/webfontloader","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"Elementor:3.35.6","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"EWWW Image Optimizer","description":"EWWW Image Optimizer is an image optimisation WordPress plugin designed to improve the performance of your website.","website":"https://github.com/nosilver4u/ewww-image-optimizer","common_platform_enumeration":"","icon":"EWWW Image Optimizer.png","categories":["WordPress plugins","Performance"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":594653,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12451)","md5":"44a368e88a7dc3893f03905151ebedf0","sha1":"d32bf25a9e8c548fb859a70d27aaccd23a2781f5","sha256":"6c892d6bdeca8af8acbf5f8d350c493a3574c5b315d59c9aeb80d676bf463022","sha512":"5ac542821d8252fd7084bea0c2ab89b060e575d76f1848d62a91e0f7ceef32fba7a31a1bf170fafc37bf3cf46478434dc6c2601cdc60ee307975ce711966641e","ssdeep":"6144:soOOoK0iJ12nwKvXzDdHjU1wGiaOsXVKrhe5HV0mUHYRDIQtPmSCYgLXGgWZ94Dp:O1B","tlshash":"88c420726244d77a4dc2c34cd77591e561864087f1faa0ecfbeba7896a0a8f7f234424","first_seen":"2026-03-11T07:58:02.141922Z","last_seen":"2026-03-11T07:58:02.141922Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":68,"dns":1,"connect":27,"send":0,"wait":54,"receive":64,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter/assets/stylesheet/components-full.6.10.6.css","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter/assets/stylesheet/components-full.6.10.6.css HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 14 Apr 2025 14:09:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fd172c-1cc\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":460,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b34e96f66bca85ae0685bba480530e69","sha1":"ce77f3babcfe58bf5e14371e0ce8233e2b74f1ac","sha256":"fdd42c2172fb7e788901c20f25e7ae005879b01c79926b17d107d5fbdb70115d","sha512":"3802905a03730c018ca74855774d5edf14fdf75a77b9091bb0f0f8b27b9e9d78ed79545324abb06d6a28d2455be4c2e726499f94998f90535ea666188613ab01","ssdeep":"","tlshash":"c5f02e10ba93b0ec382fd354fd121b74a9bc1015e7153d38b962366f1f990a4c16ac76","first_seen":"2023-05-19T01:52:52Z","last_seen":"2026-07-08T15:22:25.481974Z","times_seen":80,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/assets/dist/js/main.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter-child/assets/dist/js/main.js HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 24 Jun 2025 07:12:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a4fca-14cfe\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85246,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f0c2be063b1b743e92d53717b2916a14","sha1":"0e034cda8e20f33be8654d063210203d9c938dc6","sha256":"8a9344ab9fb284ca208ad6017a5d11378a510650d7eaaa2fc15e38d866bdd090","sha512":"00297beac3be97798a3e7f608bc790b6575e95b6f17e5ce9c53b633e96380517fb419ab17c43e5e8fb1aeb8882b8767b8be4fc06248d04ea5f10598e5f378875","ssdeep":"1536:jHvAO9ggqv2TzmZqL6KjbMpiGXJDK97MJ4e4KjhQNBlxvHL9SYWoaeZvHMLY:jPAOAv27cDw7MJyQ1c","tlshash":"eb831989a121757682e756ea53a9c241b3b44844b449c4b8b1fc8c6f59bec4c03feff9","first_seen":"2025-11-14T12:13:03.587853Z","last_seen":"2026-03-17T04:15:42.965852Z","times_seen":5,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/assets/js/main.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter-child/assets/js/main.js HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 24 Jun 2025 07:12:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a4fca-cc08\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52232,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32075)","md5":"9b147783fe7bfcbfb8b7c5226a0bd79c","sha1":"e9644a6408b1226f1b65e86c202fc176351145c3","sha256":"75c626e91c515719821810b2735224be489c77b1d21b9e5b3270c583a357f4a8","sha512":"6affc069e9a11d093e8db8c31ff60f3f200d4062c5dfa82d1bda585187ab7bab9dd5a263c31c8ad9dda9bf013db4a904112ebcaca0cc2caf2d6e11785ee8f374","ssdeep":"768:G1t6WvsBZPKBt3FPmS3+EYykK1GPzpiN9sJTPdATgGZ7Nc4hC5orG1TscgZfacmh:X0tVUkkK1GPz6FrG1A1facmh","tlshash":"2b33e909e210372288e711e56217c04e73fbe67abd06c0e076c987d66a5d81dc6e77fa","first_seen":"2025-11-14T12:13:03.617611Z","last_seen":"2026-03-17T04:15:42.946402Z","times_seen":5,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sibautomation.com/sa.js?key=qvvpywnmo2dv2gh470ojfvvg","fqdn":"sibautomation.com","domain":"sibautomation.com","tld":"com"},"ip":{"addr":"141.101.90.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sibautomation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:48:31 GMT","end":"Sun, 19 Apr 2026 20:48:28 GMT"},"fingerprint":{"sha1":"E5:38:8E:BA:CB:36:47:5D:3F:35:75:12:30:1C:50:A8:46:80:A1:F3","sha256":"BA:9F:CE:01:EF:FE:FF:ED:4E:57:76:B9:6D:1B:0A:EC:13:E9:10:A1:B6:0C:16:F6:02:2C:02:21:71:AC:88:A8"}}},"request":{"raw":"GET /sa.js?key=qvvpywnmo2dv2gh470ojfvvg HTTP/1.1\r\nHost: sibautomation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9da90214bf47f12c-CDG\r\nx-powered-by: Sails \u003csailsjs.com\u003e\r\netag: W/\"3b3e-fz3mPi4027d5spRqONUizAebsKI\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 50\r\ncf-cache-status: HIT\r\nage: 6903\r\nexpires: Wed, 11 Mar 2026 07:58:24 GMT\r\ncache-control: public, max-age=60\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Sails.js","description":"","website":"https://sailsjs.org","common_platform_enumeration":"","icon":"Sails.js.svg","categories":["Web frameworks"]}],"data":{"size":15166,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (304)","md5":"94beb53e03c29496f5a7895cba1b94e6","sha1":"7f3de63e2e34dbb779b2946a38d522cc079bb0a2","sha256":"5bf4fb0b1bafe5a95257d90ea923eabc64ec96972b52070a4b7a18e658c33577","sha512":"0d2538ca5f2a43d6621e5bd2908f34ff27f85bf955cc5007cdee7229a8810c203e236279e65bca4e026064900ba83a6c6282bcfeb70789b3bb3c80e2dfe14cd1","ssdeep":"384:CKTQzozLdKB0VdlZz3M4+zNISzKmacaDiV:/K8LdKWVdlZDM4+ZISGmacamV","tlshash":"fd62618e10e76076462370398b9fa40c7535486b2148dd207e5ce1ea6fb09298afbfdd","first_seen":"2025-12-30T16:36:21.841203Z","last_seen":"2026-07-25T00:26:19.973509Z","times_seen":1015,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":112,"dns":22,"connect":2,"send":0,"wait":47,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"sibautomation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/assets/img/ESPR_Instagram_white.svg","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter-child/assets/img/ESPR_Instagram_white.svg HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/wp-content/themes/jupiter-child/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 24 Jun 2025 07:12:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a4fca-684\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1668,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"623ae4b4a1e04c58dbd036fe5e5f3ad0","sha1":"c21f915029eae98feab54e68c21488ebaf4dda12","sha256":"1560aa2c04683a73638dc548c5c27fcd6487bcef8275b73ee0e660994f546ec0","sha512":"54fe69b0ea907ee63a17f53ce30bf59c1f0dedbe43cd11ac6ce4289af08999d5d41a9e5dcc1b8cb0b5d3ab44ec92ae10ac411d70c48dd43e276c15ea41af8ef9","ssdeep":"","tlshash":"84312647834de7f72d024525f2f460d578d8e88bb1f0b6d876ef105bd05c8d4948c1a5","first_seen":"2025-11-14T12:13:03.564919Z","last_seen":"2026-03-17T04:15:42.936301Z","times_seen":5,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/uploads/2016/07/espr-web-head-rocket.jpg","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/uploads/2016/07/espr-web-head-rocket.jpg HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nCookie: sib_cuid=3e5b60af-a2a6-4e22-a7fa-37ae0b0053d1; _pk_id.2.0c07=cf4cd4629720bc32.1773215845.; _pk_ses.2.0c07=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 304023\r\nlast-modified: Mon, 14 Apr 2025 14:03:16 GMT\r\netag: \"67fd15a4-4a397\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":304023,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2560x692, components 3","md5":"7c8df2a1b04fac3e16a66913f8136670","sha1":"a280ae38563bbf58daa64982c916c92d9c065970","sha256":"1007e1369bd92c8842cd7ce07e889d752934ee193d3a68f6cd0a706077c537db","sha512":"8f5cf64dc1a59143f850afa92fc3a1407cc5ff7413d006b2ecf5c15934a49d3a50218231e470b5dda456d6defbc2d35b3410f547f9c8def06259e554f3420578","ssdeep":"6144:nTbupeNXFU7Cwrfo71hl2jcMUODgDwgZLJtLlPVDq2bcsqW35x:nvFy7C/Zhl2PgDf7q2bcsbH","tlshash":"805413d37af02c6c6e39245f35fc627dc6128d0a6d467527a9b8fc084c2cabd0e68657","first_seen":"2026-03-11T07:58:02.147995Z","last_seen":"2026-03-11T07:58:02.147995Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/plugins/espressonisten-newsletter-popup/assets/css/popup.css","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/plugins/espressonisten-newsletter-popup/assets/css/popup.css HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 Aug 2025 10:03:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689b1178-2eb6\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11958,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"67584c384fb3f4673035f20171f6b607","sha1":"b0c9e22b59bf8dba9306db8f99c3e8e9a48b667c","sha256":"1939ab59b819b3bf21a7b3cce78a292f39403521becfcac471f57e4362806fa4","sha512":"6df0f24d58986ead8cca855c51fbde3bc0d0a9b946e46e3d2a77696a1d98dcf89be9d7950bb6ceca91229f81beede3f96f1003e79ce5babffd75d45531c407a2","ssdeep":"192:2l7X7KqeAyK3ZjqUs7GEvbMTakf0d80gEVckIJeMcNesJRYDjHnORR/4y1tYFhff:2l7X7KqeAyCU4aksd80g2c7IoH43RK99","tlshash":"ca323495b99320e1b52b6329fbfb974d3628b5035406ce7b3b8832154fc52fd81917ac","first_seen":"2025-11-14T12:13:03.585147Z","last_seen":"2026-03-17T04:15:42.938907Z","times_seen":5,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/uploads/mk_assets/theme-options-production-1773163923.css","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/uploads/mk_assets/theme-options-production-1773163923.css HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 10 Mar 2026 17:32:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b05593-a0d7\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41175,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d7448c761b7c213e3fc18983cbf9f008","sha1":"a4797eab7999c74a741a5c36aa16d3b3fc8863a5","sha256":"c4505310b7314c450ebe058641dc54d4fe3e606aefa8aa42dc768b46239ea596","sha512":"1b96152dc0e39ee01551a51542715cfe6fd662d1d7dd249c6c8e16f04f7bc766cdf52ca56c066f13b8e9616e22bef7a4e440db9aa94ba0635423230b7a169746","ssdeep":"768:7tKSJDRPmE/mbxMkMS77DUidr9IwnqhTgMCu4hyee07LLzjXy+d4bDAogOXXf5us:7tHJ","tlshash":"3c031389da9568b8213b801ad8cafd709ffe6150cf416aa1f9f1d12f43c4649d3f2b49","first_seen":"2025-11-14T12:13:03.570907Z","last_seen":"2026-03-17T04:15:42.979731Z","times_seen":5,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/plugins/latepoint-pro-features/public/javascripts/latepoint-pro-features-front.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/plugins/latepoint-pro-features/public/javascripts/latepoint-pro-features-front.js HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Mar 2026 12:10:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b00a35-6b45\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27461,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (27461), with no line terminators","md5":"8da4a8d1c8b93616969ee90a80cdbe5a","sha1":"97ccb8c5cbfcc019392a0d07ba5c59215c47bde9","sha256":"1f8a8aa8c3322cdc4192497f79bfaa55b7962d34e804c9c50bc4c23ce5caecf0","sha512":"7e5b1e157ff0ea5b09991e9d12d158f281a1ca4dada1c40a2d71cd343dadac47641b65c3c24d33bb582d7d511c4b1c6cf6eb8729b57a236ca9e42516bcbaf4c6","ssdeep":"768:/2OewJU3VE7+fIvYBXP98865tq60gi0h8DSUANzDLyZa:/GIABXeB5R0A","tlshash":"b7c2831ef03005ff07fa0636f8b2730173674d36a24e44a5a29a763a4e38d9429b9f65","first_seen":"2026-03-11T07:58:02.151371Z","last_seen":"2026-07-20T19:06:07.363325Z","times_seen":25,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/assets/img/arrow_b.svg","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter-child/assets/img/arrow_b.svg HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/wp-content/themes/jupiter-child/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 24 Jun 2025 07:12:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685a4fca-1d7\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":471,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bcb4b5277d457f5fb2ab62274b023265","sha1":"1672bc46f24fbfd46bcdc41f523ae79bba539609","sha256":"55162790ea3002615864abf5363c51107e0122cbefe6eda8410baa23e902d8fa","sha512":"42116fe87e551d1697145fcdc004a6a2e025caabf9d0b9db923575a2a59b3feccb687980462a96f16da42528bf39ecbde92d1fa77e2fdb7bc3b5b447e99695f5","ssdeep":"","tlshash":"c2f0d4198749d97990109732a3fcd283937430db80e409dcd89f19faf6691c55b167fc","first_seen":"2026-03-11T07:58:02.152901Z","last_seen":"2026-03-11T07:58:02.152901Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/plugins/latepoint-pro-features/public/stylesheets/latepoint-pro-features-front.css","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/plugins/latepoint-pro-features/public/stylesheets/latepoint-pro-features-front.css HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 10 Mar 2026 12:10:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b00a35-db90\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56208,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (37205)","md5":"1fe65787d90ebe0f29e3bf40a7a67e73","sha1":"5e65bcdd04cbc4aa9fc73e23519cc0b3d3a93cf9","sha256":"4bcfaaf8605d5eae302f01c7a33328a422a00b2e19b7f9ac941608f3d98fbceb","sha512":"7dc00aa07e7e3a11232fed7c6c005f2b700caeab2060aca23566e39b9e8d8371536ef9b84df9e88b715ce8e451231bf73e5bab383ff948f8b1c20a8d25d10491","ssdeep":"768:SjXlRxJJxfXKPYGqwqHhS3Y0nCMM2jS6f:sXlRyjt","tlshash":"0643852cf030086e751783a8b881b3ee7a2a453371764ee7e4dbb62e4dd59ed05b6350","first_seen":"2026-03-11T07:58:02.154006Z","last_seen":"2026-07-20T19:06:07.315904Z","times_seen":30,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-includes/js/jquery/jquery.min.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 14 Apr 2025 14:09:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fd1720-15601\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-25T04:50:10.979125Z","times_seen":989923,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/plugins/espressonisten-newsletter-popup/assets/js/popup.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/plugins/espressonisten-newsletter-popup/assets/js/popup.js HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Aug 2025 10:03:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"689b1178-2e92\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11922,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"8d3ab121ff565cb09711bca91301725b","sha1":"a7a630658512aac818d5fc3f8d905b62349495b2","sha256":"7debe3a0ae3da9237f594cb5a66982ac1797a990b7351f0df3f48aa20bd467c2","sha512":"edf7be8b36f4dbdbbe76f82f2113632a6df7b71996847282a2d6ac95bfb85398d21f40b15f4b39bdf863d3ac9e245eaa113fc1ada8273d959bfca00de10e396b","ssdeep":"192:a34Ax4BSayhDFzkRxUvCO5AIQ/ULd/lk7GaxJTJktSG8fuNelI3zTtWH:U+a5Ta/ed/lk7GBpe","tlshash":"0132324936fb6456c23b22792fdba1073234951b250bdd18be0c1b959f80a3499e2bbd","first_seen":"2025-11-14T12:13:03.636136Z","last_seen":"2026-03-17T04:15:42.951013Z","times_seen":5,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter/header-builder/includes/assets/js/mkhb-column.js","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter/header-builder/includes/assets/js/mkhb-column.js HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 14 Apr 2025 14:09:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fd172c-cdd\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3293,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"522d50a4a11e9758303fe5ea3e31ba93","sha1":"ad6a837a8c8844ef75f3f646f6c50a0ef3a6767b","sha256":"49166e7b873e7fe8986eb3d8a4151b623b7c284f464a15e1621cfd64679193e6","sha512":"86d9e456fd28436575e68cfdba4c5e43beba79709efec8b0a585eefbdcec66759cd345aaf0b98712b449bfe6224d86605cfa560214923fae419c45871a6e9894","ssdeep":"","tlshash":"a561c0527f6e0339f421228e641e665e9f2cca73425a9c71fd50e5b860c1c3cb369fa2","first_seen":"2023-03-07T12:01:31Z","last_seen":"2026-07-25T00:16:12.292761Z","times_seen":1258,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espressonisten.de/wp-content/themes/jupiter-child/assets/fonts/bc2cf076-1615-4dc9-8cea-1393c1930273.woff2","fqdn":"espressonisten.de","domain":"espressonisten.de","tld":"de"},"ip":{"addr":"167.71.45.8","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://espressonisten.de/","date":"2026-03-11T07:57:24.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espressonisten.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 15:58:48 GMT","end":"Fri, 29 May 2026 15:58:47 GMT"},"fingerprint":{"sha1":"D0:60:A8:12:22:7E:B1:C6:8A:97:22:EC:23:15:FB:2C:9E:47:E0:29","sha256":"90:F3:5B:07:9E:B8:B4:6F:5F:F5:02:82:15:3A:DD:BF:D5:39:4D:2C:B8:1C:9A:AF:04:32:BC:28:65:15:D3:75"}}},"request":{"raw":"GET /wp-content/themes/jupiter-child/assets/fonts/bc2cf076-1615-4dc9-8cea-1393c1930273.woff2 HTTP/1.1\r\nHost: espressonisten.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espressonisten.de/wp-content/themes/jupiter-child/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Mar 2026 07:57:24 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 24576\r\nlast-modified: Tue, 24 Jun 2025 07:12:10 GMT\r\netag: \"685a4fca-6000\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24576,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24576, version 1.0","md5":"d07b6a71ae63387ec745af83e544ae5b","sha1":"f90c8886390299747264d7be5709a0f41267db69","sha256":"de75feed9b38d91713a8c4961aa9d666954d9f4f7d8d18fe128fec2acd3ee7e6","sha512":"599298407678cd31faf41f47412dd331b8d29442970d966ce8571dae89b5d7770bea8ef5dbe47a4a0fbc4b053097a51ac43f7c3768f51a6bd21686b6eb815cad","ssdeep":"384:31TfSkdrWwfH01SjFaGNQa0/sNaQMPsjOFKBDS8dZRv3hjA8BWJZH9d:31LFrWwfUkjFta0YeOO/dZVppOZdd","tlshash":"a3b2e190529591967b4f2b30611d1e88a3342cd7199a16c0430f72fdde8d2b48ee77f8","first_seen":"2026-03-11T07:58:02.099903Z","last_seen":"2026-03-17T04:15:42.96174Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"espressonisten.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}