{"report_id":"f745ece2-f921-41d6-bd77-116cccffbea3","version":0,"status":"done","tags":[],"date":"2026-09-13T12:46:50Z","url":{"schema":"http","addr":"mail.eliasprobst.eu/","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"mail.eliasprobst.eu/","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"title":"Roundcube Webmail :: Welcome to Roundcube Webmail","dom":{"size":5491,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (474)","md5":"b31210dea0f69c7d727313011bbfa761","sha1":"f78732e3042b90a62550a1265b4fb4fba1b42ec7","sha256":"5f9347cca16bc479c7732ad59afad7bd6e32a8299c82c035e38ba9ad4bcc86f8","sha512":"61885f876d69150b99afc456b21cbc736e8ef3fa4b622636c88453fbeee33e45507ccfc6da151326f66b38f56a15535898822f6ea93e12987aba286f13b0e564","ssdeep":"96:jwpTO4hdtudtsdtoddtPvtENUJob73BKOKg298RyPUefDihuBuroZICeELxC1uG3:MpTO4hdtudtsdtOdtPv6KJob7xXP298j","tlshash":"d3b165412c52de6b506301d4b5afb58885ec9225fb10ec487afed06d6f94f948af23e4","dom_hash":"domhasheb0063f4e974618890fdd7e3220406d6","first_seen":"2026-09-13T12:46:53.287726Z","last_seen":"2026-09-13T12:46:53.287726Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mail.eliasprobst.eu/","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-18T12:46:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"mail.eliasprobst.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mail.eliasprobst.eu","ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-25T21:48:56.439963Z","last_seen":"2026-09-13T12:42:27.293308Z","alert_count":69,"request_count":23,"received_data":735665,"sent_data":12970,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:7.2.13","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"RoundCube","description":"RoundCube is free and open-source web-based IMAP email client.","website":"https://roundcube.net","common_platform_enumeration":"cpe:2.3:a:roundcube:webmail:*:*:*:*:*:*:*:*","icon":"RoundCube.png","categories":["Webmail"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mail.eliasprobst.eu/program/js/jquery.min.js?s=1","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f55459a4c81b2d27974a63460db8c166","sha1":"243434b188195a5db291adb4623b84d78aaaee74","sha256":"5fe631c9bbc4e5640935dfece990f0c18084609a2b82300746fc207ceb9186b3","sha512":"bf186e0fbe2983122c6285f78b63ab94176d57a98d4b36fd346c4f61ed7d2bb7bb74138dbcfcdf4fcf8a6267a3c0b0046c64fb60753ee7b6116da33185734fd7","ssdeep":"1536:UZYNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFt:hxc2yjx4j2uX/kcQDU8Cu9","tlshash":"0c83e6d9b2c67162977730b850bf400bb17a98dab44c8d60f058d5d47eb8a8d907bf2c","size":88107,"data":"","first_seen":"2023-03-07T01:41:24Z","last_seen":"2026-09-13T12:46:53.299874Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.eliasprobst.eu/program/js/jstz.min.js?s=1","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e49675269ad4c407f199cabd3ed5f677","sha1":"037747a66af956ca18c5975764a0ad65c99bcb77","sha256":"c9893f911334bfa540b0ab825cc670dfc4dfbdc6030d67e3658b496f5c7d344a","sha512":"ad0dc120c050391268f592a62a1b21c9c33561fc534349e0435055ba290d22fb4fd24f075313ade41007e5fd93f606583da129f125d911ac8b0269b95a6199b1","ssdeep":"384:WPkZotCTmEyjrZkSjKGVa3v1Nc9kaIvrLrz:W8ZoHJRV4kkRP","tlshash":"f85294df156c50bb06a646f93c09fb85ac1ed018ac8adfc12ab5f16924d0cd7bfe0548","size":13578,"data":"","first_seen":"2023-03-07T01:41:24Z","last_seen":"2026-09-13T12:46:53.29024Z","times_seen":308,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.eliasprobst.eu/plugins/jqueryui/js/jquery-ui.min.js?s=1","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb752c6ba6b88ffa885f1d2a6492ef58","sha1":"e20616dd323e0313e75de00ac055b7d249cb9056","sha256":"59a4c9a75c48cf979e66c5641230bda0e15dfff292666e56ffb52a5a96d78834","sha512":"684a0b794ebbe5ec4f4edbbf7330bfdae7632d78c42657b540bd2b6d383406c34ca9b3c4400ac849059428b76e67824ae84c480c1ed338cb28781f3e98d9cbb5","ssdeep":"3072:amxBUnLO18G0qSLOZD5kn8Ks6BqMi/X+1ghPuQo1Q7SV7opX0MY:ALOnlfc8Kw4ghP70MY","tlshash":"3844084d72003a2295dfe2a5143b2a0fa237515da605845cb43dcede9ebce4431bbfb9","size":259776,"data":"","first_seen":"2023-03-07T01:41:24Z","last_seen":"2026-09-13T12:46:53.301019Z","times_seen":1592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.eliasprobst.eu/","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"a7bf779bf1b210137b4e2e88f6222593","sha1":"b851692bb37b698d14b0f707f17d672bc31c5f5b","sha256":"e8e2b385faf716c54f60ce4f50d4526026c1565675a64d46a89395221f5b1b9b","sha512":"70f14b7c321462cca2058c1664dc5af991db5abda90c28370a0086c5956ca526f69402ffeb8e53fb3aafb5bdb5a87d9889862f2c85d5683274ee9c80ff1b5d9b","ssdeep":"","tlshash":"f1b022823080f038c3023380083a0b80f03c0ee0308afcecc080cce038ae2888200e2f","size":113,"data":"","first_seen":"2023-04-13T01:54:41Z","last_seen":"2026-09-13T12:46:53.304646Z","times_seen":1407,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.eliasprobst.eu/skins/larry/ui.min.js?s=1","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac9f034e4113ea024e996a0fcd539581","sha1":"b0f8e9e195b5c137c4ecf7b1417a50178750b426","sha256":"d71f946293c10abc095121fd5203ee7a7e99c81d68c3b8d137ffec924bbba4e1","sha512":"6f124586dd81b0dab18b03ae973d663d12ae9b0ef2c56f674187776b7eb268f6fba5e7a0c14b0f00f27ccca21a106296fa286d634d971af7f43ece8dc5be0c72","ssdeep":"384:1JVouBsIS1m0bBGkYy52bSfi4kvOrYDEq65aHCksmHuFcq0vm5wd1+hLq9Nxvp:1JVoAIm0FuSf2vUYQabhHcD+1+c","tlshash":"54c2f5edf671397651bba3ab312f2504a1325119ce02a864b69c94e00e3de583377f7e","size":26789,"data":"","first_seen":"2023-03-07T01:41:24Z","last_seen":"2026-09-13T12:46:53.299254Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.eliasprobst.eu/program/js/common.min.js?s=1","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e8af30b0deb6fe6b9edfeb73c519249","sha1":"6a8cc2dea3f4e24e395edbd821439e1faad6c566","sha256":"6a88fff1976e8fdd4b1ae0822dab049b303c716b14ac90c9a3f28988849ac1c3","sha512":"6a15bc41ec2eaae95f4de8fd785f3da580a997590e91068737e988baedf7dcd982bdbfeb29806477052420cc9e727b7426afda4e5e69831203466f8a3d2f29c4","ssdeep":"192:KB0Inw2dongcF4XslAMj/7h1dd01M+4BpGh0P3NsiMOWEXmsK11lreA0mXsO:KB9nw2dog9XiAYfdd01eBpGh4Wmmfrf","tlshash":"d2521bcd72a254790678ae86177b028f7031c9f4f83252b8f654ccd4bc24c5948aefb9","size":14093,"data":"","first_seen":"2023-03-07T01:41:24Z","last_seen":"2026-09-13T12:46:53.302977Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.eliasprobst.eu/program/js/app.min.js?s=1","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf5c561aad525f126b9bfb7a3b85b567","sha1":"6d0897c32c01f77e0904eef8933a249219cc4eed","sha256":"00a6445ea8e8508915647c9e7a0e241fe7a89c3a3b2e65274e1a198f5137ec9c","sha512":"665aefdbf80f6b99fa1c5b926bdda8f30ce918a777718891af65c37aba49f3dffe3a3a71521b2e82cb055073c61561564c10e461c96dfd416c771d2b18e3feab","ssdeep":"3072:QgeAH0P6uW1A70XfCgHombAkkkS9pgtMAuDWzQktZI2:QgeE0P6uWCQ7ombAkkkWgtMZDWzQcb","tlshash":"b4f3e68633a0ec2145ebe7a7345f21026136b609e0409d1db9ace9e74f74f4a2267f7d","size":160876,"data":"","first_seen":"2023-03-07T01:41:24Z","last_seen":"2026-09-13T12:46:53.300469Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mail.eliasprobst.eu/","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-13T12:46:20.768Z","timestamp":1789303580768,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mail.eliasprobst.eu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 23:24:03 GMT","end":"Mon, 16 Nov 2026 23:24:02 GMT"},"fingerprint":{"sha1":"9C:65:48:0F:84:78:EC:AB:CA:B2:CA:DF:F2:2D:52:BD:37:32:B9:C0","sha256":"70:E7:09:BB:48:96:EB:29:46:62:FC:C7:4C:5A:8E:A7:33:36:28:6E:E0:C5:42:C5:3E:FC:FC:27:65:DB:F4:FD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mail.eliasprobst.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Sun, 13 Sep 2026 12:46:20 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/7.2.13\r\nSet-Cookie: roundcube_sessid=4ngchfqgqu9untocogd24e07ef; path=/; HttpOnly\r\nExpires: Sun, 13 Sep 2026 12:46:20 GMT\r\nCache-Control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nLast-Modified: Sun, 13 Sep 2026 12:46:20 GMT\r\nX-DNS-Prefetch-Control: off\r\nX-Frame-Options: sameorigin\r\nContent-Language: en\r\n\r\n","headers":null,"cookies":[{"name":"roundcube_sessid","value":"4ngchfqgqu9untocogd24e07ef","quoted":false,"path":"/","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"roundcube_sessid=4ngchfqgqu9untocogd24e07ef; path=/; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:7.2.13","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"RoundCube","description":"RoundCube is free and open-source web-based IMAP email client.","website":"https://roundcube.net","common_platform_enumeration":"cpe:2.3:a:roundcube:webmail:*:*:*:*:*:*:*:*","icon":"RoundCube.png","categories":["Webmail"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}],"data":{"size":5499,"size_decoded":6042,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (474)","md5":"92853e009b74c9de7478a909985d036d","sha1":"7b506a2fed937dba49dbc7475c2b0fc65e95b6c3","sha256":"3819ef16e3daf5005043bf3b7ae81b1dc30e64c2e86eb48fd1fd8bee89eae53d","sha512":"872ef305d186677b12bd593e759dc6d2085088c4ff0b69d3a4e0198aeb681df57bb5a459775455171cd4fa13e90a84099c07c39332aa5ab2949b6f2849de48a2","ssdeep":"96:5fiL4idtudtsdtoddtPvtENUJob73BKOKg29dRyyUZfDihuBuroZICeELxC1uGHF:liL4idtudtsdtOdtPv6KJob7xXP29dUO","tlshash":"18b176412c52de6b506301d4b4abb58885ec9225fb10ec4876fed06e6f84f9486f23e4","first_seen":"2026-09-13T12:46:53.289078Z","last_seen":"2026-09-13T12:46:53.289078Z","times_seen":1,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":6,"connect":33,"send":0,"wait":91,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"mail.eliasprobst.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.eliasprobst.eu/program/js/jstz.min.js?s=1","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.eliasprobst.eu/","date":"2026-09-13T12:46:21.169Z","timestamp":1789303581169,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mail.eliasprobst.eu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 23:24:03 GMT","end":"Mon, 16 Nov 2026 23:24:02 GMT"},"fingerprint":{"sha1":"9C:65:48:0F:84:78:EC:AB:CA:B2:CA:DF:F2:2D:52:BD:37:32:B9:C0","sha256":"70:E7:09:BB:48:96:EB:29:46:62:FC:C7:4C:5A:8E:A7:33:36:28:6E:E0:C5:42:C5:3E:FC:FC:27:65:DB:F4:FD"}}},"request":{"raw":"GET /program/js/jstz.min.js?s=1 HTTP/1.1\r\nHost: mail.eliasprobst.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.eliasprobst.eu/\r\nCookie: roundcube_sessid=4ngchfqgqu9untocogd24e07ef\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Sun, 13 Sep 2026 12:46:21 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 13578\r\nConnection: keep-alive\r\nLast-Modified: Thu, 01 Jan 1970 00:00:01 GMT\r\nETag: \"350a-f4240\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13578,"size_decoded":13829,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12020)","md5":"e49675269ad4c407f199cabd3ed5f677","sha1":"037747a66af956ca18c5975764a0ad65c99bcb77","sha256":"c9893f911334bfa540b0ab825cc670dfc4dfbdc6030d67e3658b496f5c7d344a","sha512":"ad0dc120c050391268f592a62a1b21c9c33561fc534349e0435055ba290d22fb4fd24f075313ade41007e5fd93f606583da129f125d911ac8b0269b95a6199b1","ssdeep":"384:WPkZotCTmEyjrZkSjKGVa3v1Nc9kaIvrLrz:W8ZoHJRV4kkRP","tlshash":"f85294df156c50bb06a646f93c09fb85ac1ed018ac8adfc12ab5f16924d0cd7bfe0548","first_seen":"2023-03-07T01:41:24Z","last_seen":"2026-09-13T12:46:53.29024Z","times_seen":308,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"mail.eliasprobst.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.eliasprobst.eu/skins/larry/images/favicon.ico","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.eliasprobst.eu/","date":"2026-09-13T12:46:21.466Z","timestamp":1789303581466,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mail.eliasprobst.eu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 23:24:03 GMT","end":"Mon, 16 Nov 2026 23:24:02 GMT"},"fingerprint":{"sha1":"9C:65:48:0F:84:78:EC:AB:CA:B2:CA:DF:F2:2D:52:BD:37:32:B9:C0","sha256":"70:E7:09:BB:48:96:EB:29:46:62:FC:C7:4C:5A:8E:A7:33:36:28:6E:E0:C5:42:C5:3E:FC:FC:27:65:DB:F4:FD"}}},"request":{"raw":"GET /skins/larry/images/favicon.ico HTTP/1.1\r\nHost: mail.eliasprobst.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.eliasprobst.eu/\r\nCookie: roundcube_sessid=4ngchfqgqu9untocogd24e07ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Sun, 13 Sep 2026 12:46:21 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 34494\r\nConnection: keep-alive\r\nLast-Modified: Thu, 01 Jan 1970 00:00:01 GMT\r\nETag: \"86be-f4240\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34494,"size_decoded":34735,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"ef9c0362bf20a086bb7c2e8ea346b9f0","sha1":"fc3ef03acb552dfe09279dccadd99ba8eea5217c","sha256":"20c30fd4340308d6a4ab222acae353fc2460793ac76645bb1ef1d9d61f4f0a9e","sha512":"f2393626825e041755d9bd7c74f73be658d6e7febff0e39a97b807f30798123d0e75db1d5c3550ddf885fe8ceac375c2aa900f8741ae25b15e18304fa2295779","ssdeep":"384:JALjuVpInsX4RG+0q3Ll3/qSrWDpQCLYHANYgYRcVOoIT:JMmIsX4RGg7MsXgjY+IT","tlshash":"9ff22a44370fd1e6dd28c632c84bd956271c3d5baba04a4eb8d9bf1f79b2149808fd89","first_seen":"2023-04-05T18:28:02Z","last_seen":"2026-09-13T12:46:53.290892Z","times_seen":1598,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"mail.eliasprobst.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.eliasprobst.eu/skins/larry/images/messages.png","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.eliasprobst.eu/","date":"2026-09-13T12:46:21.507Z","timestamp":1789303581507,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mail.eliasprobst.eu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 23:24:03 GMT","end":"Mon, 16 Nov 2026 23:24:02 GMT"},"fingerprint":{"sha1":"9C:65:48:0F:84:78:EC:AB:CA:B2:CA:DF:F2:2D:52:BD:37:32:B9:C0","sha256":"70:E7:09:BB:48:96:EB:29:46:62:FC:C7:4C:5A:8E:A7:33:36:28:6E:E0:C5:42:C5:3E:FC:FC:27:65:DB:F4:FD"}}},"request":{"raw":"GET /skins/larry/images/messages.png HTTP/1.1\r\nHost: mail.eliasprobst.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.eliasprobst.eu/\r\nCookie: roundcube_sessid=4ngchfqgqu9untocogd24e07ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Sun, 13 Sep 2026 12:46:21 GMT\r\nContent-Type: image/png\r\nContent-Length: 1264\r\nConnection: keep-alive\r\nLast-Modified: Thu, 01 Jan 1970 00:00:01 GMT\r\nETag: \"4f0-f4240\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1264,"size_decoded":1500,"mime_type":"image/png","magic":"PNG image data, 20 x 110, 8-bit colormap, non-interlaced","md5":"72e916129e088cedb87261223ef57e96","sha1":"365ac51308f2a2df0e1fa8dbf5fabbab086baf9b","sha256":"6e67def07dc1314d8404e019ecdb847a3dab3d26a4f31e545e81333db25be0b5","sha512":"cf04cd48ec308fe4776f6dbd097197cf95dfdc3d9834601083648c99973d3f266baa6007d9165e31fbfdf2aa14e460e935c476b5e14ac7c1012f8c877dee4b4d","ssdeep":"","tlshash":"2821b73cd692f2e1d6f341739f2911728dc09d3e74834604168678271bfa9371c2d9a2","first_seen":"2023-04-21T21:19:20Z","last_seen":"2026-09-13T12:46:53.291577Z","times_seen":312,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"mail.eliasprobst.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.eliasprobst.eu/skins/larry/images/splitter.png","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.eliasprobst.eu/","date":"2026-09-13T12:46:21.513Z","timestamp":1789303581513,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mail.eliasprobst.eu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 23:24:03 GMT","end":"Mon, 16 Nov 2026 23:24:02 GMT"},"fingerprint":{"sha1":"9C:65:48:0F:84:78:EC:AB:CA:B2:CA:DF:F2:2D:52:BD:37:32:B9:C0","sha256":"70:E7:09:BB:48:96:EB:29:46:62:FC:C7:4C:5A:8E:A7:33:36:28:6E:E0:C5:42:C5:3E:FC:FC:27:65:DB:F4:FD"}}},"request":{"raw":"GET /skins/larry/images/splitter.png HTTP/1.1\r\nHost: mail.eliasprobst.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.eliasprobst.eu/\r\nCookie: roundcube_sessid=4ngchfqgqu9untocogd24e07ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Sun, 13 Sep 2026 12:46:21 GMT\r\nContent-Type: image/png\r\nContent-Length: 134\r\nConnection: keep-alive\r\nLast-Modified: Thu, 01 Jan 1970 00:00:01 GMT\r\nETag: \"86-f4240\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":134,"size_decoded":368,"mime_type":"image/png","magic":"PNG image data, 39 x 39, 2-bit colormap, non-interlaced","md5":"6d32a58602744d0049ebad31fce114a7","sha1":"7ee6a6645cdc6eab150dc7b3e6a04d374f45cc47","sha256":"88b650b2204982c01ebed21fff63ece898b76734424d5a785dff204a790cbb9f","sha512":"e3db07eb47583807e8cfa3d18602d15a31544a2244ba040cd1d4f020e56c7a4bc7c11837f507fa209e44c01022d18ec69dee4150152e4cc0ef0a664f0bc63fd1","ssdeep":"","tlshash":"b4c02b86a3123d20da60112e4204c421dd12110c3e80f2c10128a4e21000148d1d4d86","first_seen":"2023-04-21T21:19:20Z","last_seen":"2026-09-13T12:46:53.292189Z","times_seen":279,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"mail.eliasprobst.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.eliasprobst.eu/skins/larry/images/watermark.jpg","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.eliasprobst.eu/","date":"2026-09-13T12:46:21.514Z","timestamp":1789303581514,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mail.eliasprobst.eu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 23:24:03 GMT","end":"Mon, 16 Nov 2026 23:24:02 GMT"},"fingerprint":{"sha1":"9C:65:48:0F:84:78:EC:AB:CA:B2:CA:DF:F2:2D:52:BD:37:32:B9:C0","sha256":"70:E7:09:BB:48:96:EB:29:46:62:FC:C7:4C:5A:8E:A7:33:36:28:6E:E0:C5:42:C5:3E:FC:FC:27:65:DB:F4:FD"}}},"request":{"raw":"GET /skins/larry/images/watermark.jpg HTTP/1.1\r\nHost: mail.eliasprobst.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.eliasprobst.eu/\r\nCookie: roundcube_sessid=4ngchfqgqu9untocogd24e07ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Sun, 13 Sep 2026 12:46:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5000\r\nConnection: keep-alive\r\nLast-Modified: Thu, 01 Jan 1970 00:00:01 GMT\r\nETag: \"1388-f4240\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5000,"size_decoded":5238,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 280x280, components 3","md5":"e78410fc59c722d9a75c0eec9259506b","sha1":"160ee34132370419db286d89ba938053580d7633","sha256":"d19c8e540b1a863fbfae9fbb500290d5a3c4f9fdef989e19f7e5d4148237a183","sha512":"fad7fa72edb14ef41f8b1dbe5be41a08d6076d970ecb66846c1f8050a5389ff082d34caf73d8c3eacde7b646fa1ea9e3bae4faeb2374950985b427184d3c316b","ssdeep":"96:QIBdLulkokCkgX9rppd5Tm/pcwDVPLG8vw5C8VCnjRJ1UhXi/16D:L7Lu+5CLrp35a/CwxPLr/eaBuG16D","tlshash":"9fa15d6477107c02d5b823b865c64fb766388b0badc50b5945d46ec1ed4a2ff0f8179b","first_seen":"2023-04-21T21:19:20Z","last_seen":"2026-09-13T12:46:53.292867Z","times_seen":285,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"mail.eliasprobst.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.eliasprobst.eu/skins/larry/styles.min.css?s=1","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mail.eliasprobst.eu/","date":"2026-09-13T12:46:21.158Z","timestamp":1789303581158,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mail.eliasprobst.eu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 23:24:03 GMT","end":"Mon, 16 Nov 2026 23:24:02 GMT"},"fingerprint":{"sha1":"9C:65:48:0F:84:78:EC:AB:CA:B2:CA:DF:F2:2D:52:BD:37:32:B9:C0","sha256":"70:E7:09:BB:48:96:EB:29:46:62:FC:C7:4C:5A:8E:A7:33:36:28:6E:E0:C5:42:C5:3E:FC:FC:27:65:DB:F4:FD"}}},"request":{"raw":"GET /skins/larry/styles.min.css?s=1 HTTP/1.1\r\nHost: mail.eliasprobst.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.eliasprobst.eu/\r\nCookie: roundcube_sessid=4ngchfqgqu9untocogd24e07ef\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Sun, 13 Sep 2026 12:46:21 GMT\r\nContent-Type: text/css\r\nContent-Length: 45272\r\nConnection: keep-alive\r\nLast-Modified: Thu, 01 Jan 1970 00:00:01 GMT\r\nETag: \"b0d8-f4240\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45272,"size_decoded":45509,"mime_type":"text/css","magic":"ASCII text, with very long lines (45272), with no line terminators","md5":"893ea1a1dd9f794982bd188ec5b5eb24","sha1":"e70489a26c98482f925232fd02fc1da24f9818d2","sha256":"fbe745f1fee57716424f9c2849290eee654999388594d8b1b13e75a0a3e8cbd7","sha512":"052ba9f8c3857157dd48ff2744c30e699bd7649ab08894735e780fdf7cc24f8325e9a7f68e4ea96fa5eaab14bc87a0f571f20793381e82cdb184f2064bc80af5","ssdeep":"384:yjULqbQklsCi99pp0EcucEB5k16iPr+wU2xQnVWvYiq58DvjWEEpNYG2sUErWtvg:yGhcusU2xQnVWvYiq56ErkDk","tlshash":"f413b560a591363e722bd237b8e162c87138c046d9a31f7d942eb5f497cb4e4207be97","first_seen":"2023-04-05T18:28:02Z","last_seen":"2026-09-13T12:46:53.293612Z","times_seen":1288,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"mail.eliasprobst.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.eliasprobst.eu/skins/larry/images/roundcube_logo.png","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.eliasprobst.eu/","date":"2026-09-13T12:46:21.175Z","timestamp":1789303581175,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mail.eliasprobst.eu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 23:24:03 GMT","end":"Mon, 16 Nov 2026 23:24:02 GMT"},"fingerprint":{"sha1":"9C:65:48:0F:84:78:EC:AB:CA:B2:CA:DF:F2:2D:52:BD:37:32:B9:C0","sha256":"70:E7:09:BB:48:96:EB:29:46:62:FC:C7:4C:5A:8E:A7:33:36:28:6E:E0:C5:42:C5:3E:FC:FC:27:65:DB:F4:FD"}}},"request":{"raw":"GET /skins/larry/images/roundcube_logo.png HTTP/1.1\r\nHost: mail.eliasprobst.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.eliasprobst.eu/\r\nCookie: roundcube_sessid=4ngchfqgqu9untocogd24e07ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Sun, 13 Sep 2026 12:46:21 GMT\r\nContent-Type: image/png\r\nContent-Length: 3792\r\nConnection: keep-alive\r\nLast-Modified: Thu, 01 Jan 1970 00:00:01 GMT\r\nETag: \"ed0-f4240\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3792,"size_decoded":4028,"mime_type":"image/png","magic":"PNG image data, 177 x 49, 8-bit colormap, non-interlaced","md5":"c344bf2b813693240b327482466dda95","sha1":"8582063bfa786e25c37be0b21a335f27056d701e","sha256":"85256d019c76dafce023e67c1942fd2287ced7c7503d207991e54d33ac1b37fd","sha512":"d83f1bf38b752eaacb13b2e28178c61830771c92e4eead2e0e4a463046027e618217f91727fb5bf23f8456ca9d5609ff477f9933e3f56e274e358d2cf29418d9","ssdeep":"","tlshash":"15717c88ab5868342d00072a366f95bd271033978cf28e3912e38996743f27a0fbc246","first_seen":"2023-04-05T18:28:02Z","last_seen":"2026-09-13T12:46:53.294244Z","times_seen":708,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":227,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"mail.eliasprobst.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.eliasprobst.eu/skins/larry/images/ajaxloader.gif","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.eliasprobst.eu/","date":"2026-09-13T12:46:21.497Z","timestamp":1789303581497,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mail.eliasprobst.eu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 23:24:03 GMT","end":"Mon, 16 Nov 2026 23:24:02 GMT"},"fingerprint":{"sha1":"9C:65:48:0F:84:78:EC:AB:CA:B2:CA:DF:F2:2D:52:BD:37:32:B9:C0","sha256":"70:E7:09:BB:48:96:EB:29:46:62:FC:C7:4C:5A:8E:A7:33:36:28:6E:E0:C5:42:C5:3E:FC:FC:27:65:DB:F4:FD"}}},"request":{"raw":"GET /skins/larry/images/ajaxloader.gif HTTP/1.1\r\nHost: mail.eliasprobst.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.eliasprobst.eu/\r\nCookie: roundcube_sessid=4ngchfqgqu9untocogd24e07ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Sun, 13 Sep 2026 12:46:21 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1434\r\nConnection: keep-alive\r\nLast-Modified: Thu, 01 Jan 1970 00:00:01 GMT\r\nETag: \"59a-f4240\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1434,"size_decoded":1670,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"c25240cc70fa55720a429dda913693c3","sha1":"afc2f0a7b5553c0f6fa40faa444ba9f40a6bc650","sha256":"85cbd9b9f9010b5030a4268afbcd5af1c7993de495f3fcc72256f299c9729768","sha512":"410aacf8218fa7d62d7b0dbe6b9899293f187754a11784d0fef5e535e5dcfa10176cf50e6af8ba4705337121ed442ea6dc7a3a88526634d130283e309177d913","ssdeep":"","tlshash":"ff21b90fd328c22bf2ec09bb135c0f396dd27c6500dc1c0f0aa994041f56a4d16b2a36","first_seen":"2023-04-21T21:19:20Z","last_seen":"2026-09-13T12:46:53.294867Z","times_seen":331,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"mail.eliasprobst.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.eliasprobst.eu/skins/larry/images/buttons.png","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.eliasprobst.eu/","date":"2026-09-13T12:46:21.500Z","timestamp":1789303581500,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mail.eliasprobst.eu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 23:24:03 GMT","end":"Mon, 16 Nov 2026 23:24:02 GMT"},"fingerprint":{"sha1":"9C:65:48:0F:84:78:EC:AB:CA:B2:CA:DF:F2:2D:52:BD:37:32:B9:C0","sha256":"70:E7:09:BB:48:96:EB:29:46:62:FC:C7:4C:5A:8E:A7:33:36:28:6E:E0:C5:42:C5:3E:FC:FC:27:65:DB:F4:FD"}}},"request":{"raw":"GET /skins/larry/images/buttons.png HTTP/1.1\r\nHost: mail.eliasprobst.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.eliasprobst.eu/\r\nCookie: roundcube_sessid=4ngchfqgqu9untocogd24e07ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Sun, 13 Sep 2026 12:46:21 GMT\r\nContent-Type: image/png\r\nContent-Length: 9130\r\nConnection: keep-alive\r\nLast-Modified: Thu, 01 Jan 1970 00:00:01 GMT\r\nETag: \"23aa-f4240\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9130,"size_decoded":9367,"mime_type":"image/png","magic":"PNG image data, 52 x 2145, 8-bit colormap, non-interlaced","md5":"d70cace6418426b8e20abb0302a32742","sha1":"df8026b3c1e72b38485b51e5e65f03a37533a14d","sha256":"283246420c8ddc585831699f9623caf0985097ce116a5d640f4d869becfcceca","sha512":"1c71fb03eb62239b4f8114a194fc59753ff7949fa5b03b76a1884ecf521000009d8cc942f0e985ca1f38d581dff3be482847402472b84c496efd7a2965ad11e7","ssdeep":"192:IkD61NIK3jpjF4+MTA9Zsrb15iQmcfXI35zTy+6cmKK5fvd:hD6TIK5FPM2s/nTXI35ZXjK5nd","tlshash":"fa12bf4f7829b411e7657036c65f89e80a28932c206d83f6c2c9e59fff217d2812adf5","first_seen":"2023-05-31T02:16:49Z","last_seen":"2026-09-13T12:46:53.295499Z","times_seen":270,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"mail.eliasprobst.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.eliasprobst.eu/skins/larry/images/addcontact.png","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.eliasprobst.eu/","date":"2026-09-13T12:46:21.502Z","timestamp":1789303581502,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mail.eliasprobst.eu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 23:24:03 GMT","end":"Mon, 16 Nov 2026 23:24:02 GMT"},"fingerprint":{"sha1":"9C:65:48:0F:84:78:EC:AB:CA:B2:CA:DF:F2:2D:52:BD:37:32:B9:C0","sha256":"70:E7:09:BB:48:96:EB:29:46:62:FC:C7:4C:5A:8E:A7:33:36:28:6E:E0:C5:42:C5:3E:FC:FC:27:65:DB:F4:FD"}}},"request":{"raw":"GET /skins/larry/images/addcontact.png HTTP/1.1\r\nHost: mail.eliasprobst.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.eliasprobst.eu/\r\nCookie: roundcube_sessid=4ngchfqgqu9untocogd24e07ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Sun, 13 Sep 2026 12:46:21 GMT\r\nContent-Type: image/png\r\nContent-Length: 265\r\nConnection: keep-alive\r\nLast-Modified: Thu, 01 Jan 1970 00:00:01 GMT\r\nETag: \"109-f4240\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":265,"size_decoded":500,"mime_type":"image/png","magic":"PNG image data, 20 x 13, 8-bit/color RGBA, non-interlaced","md5":"c1d8a9a5f3afe96020c1c9220652a3a4","sha1":"9d63a7b07726f56a7c6b704f95583fec7d68ef3c","sha256":"f096e89432cdb9516c40188402a8002ff3b7d2ef75bd8dcc552bd0b776ee7d77","sha512":"881b0fd08dcb4047be81a9892c719e361ce51723c9a59119f119bda6a794343588e0e613404f1deec54ea895e35a8a9933537707b15c034d300102e83ab650de","ssdeep":"","tlshash":"8ad0956bf5fd5c19cc87d93e40238b34d96bdf151433590e410bc41eba94d15410617f","first_seen":"2023-04-21T21:19:20Z","last_seen":"2026-09-13T12:46:53.296065Z","times_seen":262,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"mail.eliasprobst.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.eliasprobst.eu/skins/larry/images/messages_dark.png","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.eliasprobst.eu/","date":"2026-09-13T12:46:21.509Z","timestamp":1789303581509,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mail.eliasprobst.eu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 23:24:03 GMT","end":"Mon, 16 Nov 2026 23:24:02 GMT"},"fingerprint":{"sha1":"9C:65:48:0F:84:78:EC:AB:CA:B2:CA:DF:F2:2D:52:BD:37:32:B9:C0","sha256":"70:E7:09:BB:48:96:EB:29:46:62:FC:C7:4C:5A:8E:A7:33:36:28:6E:E0:C5:42:C5:3E:FC:FC:27:65:DB:F4:FD"}}},"request":{"raw":"GET /skins/larry/images/messages_dark.png HTTP/1.1\r\nHost: mail.eliasprobst.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.eliasprobst.eu/\r\nCookie: roundcube_sessid=4ngchfqgqu9untocogd24e07ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Sun, 13 Sep 2026 12:46:21 GMT\r\nContent-Type: image/png\r\nContent-Length: 601\r\nConnection: keep-alive\r\nLast-Modified: Thu, 01 Jan 1970 00:00:01 GMT\r\nETag: \"259-f4240\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":601,"size_decoded":836,"mime_type":"image/png","magic":"PNG image data, 22 x 111, 8-bit/color RGBA, non-interlaced","md5":"8e5325b6bc78e8838138a6162e7d75bc","sha1":"6b50300ef37a24a7f116f511a2ad99b8f3b47e49","sha256":"fc4aef55a2180ec5ed7db61c1e9c46c6966136c21d86762f414aab947e620c75","sha512":"5d9d7c6ba726a98a1096cbce0a67543ad7a8ab32c96ff427d6c8304f0b0eb08401bbb2d570975efde918aae415d3e65eb7ddeda45ab5e7f3a559fb121423df28","ssdeep":"","tlshash":"28f04167b7e727eeed5906d903614223d937250d27e23892210ee9bd0a39f60842c180","first_seen":"2023-04-21T21:19:20Z","last_seen":"2026-09-13T12:46:53.29662Z","times_seen":274,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"mail.eliasprobst.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.eliasprobst.eu/skins/larry/images/selector.png","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.eliasprobst.eu/","date":"2026-09-13T12:46:21.512Z","timestamp":1789303581512,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mail.eliasprobst.eu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 23:24:03 GMT","end":"Mon, 16 Nov 2026 23:24:02 GMT"},"fingerprint":{"sha1":"9C:65:48:0F:84:78:EC:AB:CA:B2:CA:DF:F2:2D:52:BD:37:32:B9:C0","sha256":"70:E7:09:BB:48:96:EB:29:46:62:FC:C7:4C:5A:8E:A7:33:36:28:6E:E0:C5:42:C5:3E:FC:FC:27:65:DB:F4:FD"}}},"request":{"raw":"GET /skins/larry/images/selector.png HTTP/1.1\r\nHost: mail.eliasprobst.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.eliasprobst.eu/\r\nCookie: roundcube_sessid=4ngchfqgqu9untocogd24e07ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Sun, 13 Sep 2026 12:46:21 GMT\r\nContent-Type: image/png\r\nContent-Length: 118\r\nConnection: keep-alive\r\nLast-Modified: Thu, 01 Jan 1970 00:00:01 GMT\r\nETag: \"76-f4240\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":118,"size_decoded":352,"mime_type":"image/png","magic":"PNG image data, 23 x 32, 2-bit colormap, non-interlaced","md5":"0d5b22d446de2b17942a7c0c5f1bc692","sha1":"16c49ad4a6f2f2be49310da9fe89d641e6aa6073","sha256":"6b554f693e3888407bb5217c3e9c619c471398a9ae8d6fcf1d284b6d9beddd3d","sha512":"33c13037c609b90b3712a6ea9350825da125c832beb9643669805ec4730c0a591eff91fcbe499afffcff8aaa81960262fc78ff74c39d72c9b422d40c160b99a8","ssdeep":"","tlshash":"62b09bd972799d73d5d403f251555140ddd55034163234973405847215e5754c1a49cd","first_seen":"2023-04-21T21:19:20Z","last_seen":"2026-09-13T12:46:53.297258Z","times_seen":279,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"mail.eliasprobst.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.eliasprobst.eu/skins/larry/images/ajaxloader_dark.gif","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.eliasprobst.eu/","date":"2026-09-13T12:46:21.499Z","timestamp":1789303581499,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mail.eliasprobst.eu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 23:24:03 GMT","end":"Mon, 16 Nov 2026 23:24:02 GMT"},"fingerprint":{"sha1":"9C:65:48:0F:84:78:EC:AB:CA:B2:CA:DF:F2:2D:52:BD:37:32:B9:C0","sha256":"70:E7:09:BB:48:96:EB:29:46:62:FC:C7:4C:5A:8E:A7:33:36:28:6E:E0:C5:42:C5:3E:FC:FC:27:65:DB:F4:FD"}}},"request":{"raw":"GET /skins/larry/images/ajaxloader_dark.gif HTTP/1.1\r\nHost: mail.eliasprobst.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.eliasprobst.eu/\r\nCookie: roundcube_sessid=4ngchfqgqu9untocogd24e07ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Sun, 13 Sep 2026 12:46:21 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1849\r\nConnection: keep-alive\r\nLast-Modified: Thu, 01 Jan 1970 00:00:01 GMT\r\nETag: \"739-f4240\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1849,"size_decoded":2085,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"cf1bb985a52a1295f782ffb8f4c96150","sha1":"ed0293efaf490ad8cd8f1ff8d54523f6981856a2","sha256":"2c562c6ca2471b474c5d3fd5644b17614e31a6cf27ee3b022d61f153c1baffbc","sha512":"ffe9b03d92420b855c66a6ae260e370e179419ca736404bb35c326f58f6ff5cb01b8e35015ff4e2d5811e2dedaaced988d287fcc53346831fa5a6cafa0bd8f58","ssdeep":"","tlshash":"28318041e3ee83bbe25d38fbca0f83ad24855924000c1bd0487585aeec1a6bd533ef85","first_seen":"2023-04-21T21:19:20Z","last_seen":"2026-09-13T12:46:53.297943Z","times_seen":322,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"mail.eliasprobst.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.eliasprobst.eu/plugins/jqueryui/themes/larry/jquery-ui.css?s=1","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mail.eliasprobst.eu/","date":"2026-09-13T12:46:21.159Z","timestamp":1789303581159,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mail.eliasprobst.eu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 23:24:03 GMT","end":"Mon, 16 Nov 2026 23:24:02 GMT"},"fingerprint":{"sha1":"9C:65:48:0F:84:78:EC:AB:CA:B2:CA:DF:F2:2D:52:BD:37:32:B9:C0","sha256":"70:E7:09:BB:48:96:EB:29:46:62:FC:C7:4C:5A:8E:A7:33:36:28:6E:E0:C5:42:C5:3E:FC:FC:27:65:DB:F4:FD"}}},"request":{"raw":"GET /plugins/jqueryui/themes/larry/jquery-ui.css?s=1 HTTP/1.1\r\nHost: mail.eliasprobst.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.eliasprobst.eu/\r\nCookie: roundcube_sessid=4ngchfqgqu9untocogd24e07ef\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Sun, 13 Sep 2026 12:46:21 GMT\r\nContent-Type: text/css\r\nContent-Length: 41241\r\nConnection: keep-alive\r\nLast-Modified: Thu, 01 Jan 1970 00:00:01 GMT\r\nETag: \"a119-f4240\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41241,"size_decoded":41478,"mime_type":"text/css","magic":"ASCII text, with very long lines (2363)","md5":"283a8860d287f25535e0d42266f62691","sha1":"d4621ff863cf3b23a02923a9a9414a83a3f85323","sha256":"9e6a2f457e5c0c9619a2226bda332cdf8cae20bd9db822347506e044861a67ee","sha512":"6294baf5db3e89286ae7fb05a44fd52daecf9cd76cd20e9f007860092ae67fa4d77d5a72941c6bc1910db3cf4784c7c4624d3d415192fea5eff398053dee04b4","ssdeep":"384:vCEW1yof+ve1ebDPiF5fy/EoDS25qNnHnrAz:vpVFl1DS2InHnrAz","tlshash":"df031f316a43290db91bd1a429a15bf7e72f1302ed1b6e7f646a346cc3d94e080bf5b4","first_seen":"2023-04-05T18:28:02Z","last_seen":"2026-09-13T12:46:53.298571Z","times_seen":1557,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":63,"receive":33,"ssl":69},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"mail.eliasprobst.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.eliasprobst.eu/skins/larry/ui.min.js?s=1","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.eliasprobst.eu/","date":"2026-09-13T12:46:21.163Z","timestamp":1789303581163,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mail.eliasprobst.eu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 23:24:03 GMT","end":"Mon, 16 Nov 2026 23:24:02 GMT"},"fingerprint":{"sha1":"9C:65:48:0F:84:78:EC:AB:CA:B2:CA:DF:F2:2D:52:BD:37:32:B9:C0","sha256":"70:E7:09:BB:48:96:EB:29:46:62:FC:C7:4C:5A:8E:A7:33:36:28:6E:E0:C5:42:C5:3E:FC:FC:27:65:DB:F4:FD"}}},"request":{"raw":"GET /skins/larry/ui.min.js?s=1 HTTP/1.1\r\nHost: mail.eliasprobst.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.eliasprobst.eu/\r\nCookie: roundcube_sessid=4ngchfqgqu9untocogd24e07ef\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Sun, 13 Sep 2026 12:46:21 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 26789\r\nConnection: keep-alive\r\nLast-Modified: Thu, 01 Jan 1970 00:00:01 GMT\r\nETag: \"68a5-f4240\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26789,"size_decoded":27040,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (546)","md5":"ac9f034e4113ea024e996a0fcd539581","sha1":"b0f8e9e195b5c137c4ecf7b1417a50178750b426","sha256":"d71f946293c10abc095121fd5203ee7a7e99c81d68c3b8d137ffec924bbba4e1","sha512":"6f124586dd81b0dab18b03ae973d663d12ae9b0ef2c56f674187776b7eb268f6fba5e7a0c14b0f00f27ccca21a106296fa286d634d971af7f43ece8dc5be0c72","ssdeep":"384:1JVouBsIS1m0bBGkYy52bSfi4kvOrYDEq65aHCksmHuFcq0vm5wd1+hLq9Nxvp:1JVoAIm0FuSf2vUYQabhHcD+1+c","tlshash":"54c2f5edf671397651bba3ab312f2504a1325119ce02a864b69c94e00e3de583377f7e","first_seen":"2023-03-07T01:41:24Z","last_seen":"2026-09-13T12:46:53.299254Z","times_seen":102,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":74,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"mail.eliasprobst.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.eliasprobst.eu/program/js/jquery.min.js?s=1","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.eliasprobst.eu/","date":"2026-09-13T12:46:21.165Z","timestamp":1789303581165,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mail.eliasprobst.eu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 23:24:03 GMT","end":"Mon, 16 Nov 2026 23:24:02 GMT"},"fingerprint":{"sha1":"9C:65:48:0F:84:78:EC:AB:CA:B2:CA:DF:F2:2D:52:BD:37:32:B9:C0","sha256":"70:E7:09:BB:48:96:EB:29:46:62:FC:C7:4C:5A:8E:A7:33:36:28:6E:E0:C5:42:C5:3E:FC:FC:27:65:DB:F4:FD"}}},"request":{"raw":"GET /program/js/jquery.min.js?s=1 HTTP/1.1\r\nHost: mail.eliasprobst.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.eliasprobst.eu/\r\nCookie: roundcube_sessid=4ngchfqgqu9untocogd24e07ef\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Sun, 13 Sep 2026 12:46:21 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 88107\r\nConnection: keep-alive\r\nLast-Modified: Thu, 01 Jan 1970 00:00:01 GMT\r\nETag: \"1582b-f4240\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88107,"size_decoded":88359,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32033)","md5":"f55459a4c81b2d27974a63460db8c166","sha1":"243434b188195a5db291adb4623b84d78aaaee74","sha256":"5fe631c9bbc4e5640935dfece990f0c18084609a2b82300746fc207ceb9186b3","sha512":"bf186e0fbe2983122c6285f78b63ab94176d57a98d4b36fd346c4f61ed7d2bb7bb74138dbcfcdf4fcf8a6267a3c0b0046c64fb60753ee7b6116da33185734fd7","ssdeep":"1536:UZYNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFt:hxc2yjx4j2uX/kcQDU8Cu9","tlshash":"0c83e6d9b2c67162977730b850bf400bb17a98dab44c8d60f058d5d47eb8a8d907bf2c","first_seen":"2023-03-07T01:41:24Z","last_seen":"2026-09-13T12:46:53.299874Z","times_seen":164,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":62,"receive":63,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"mail.eliasprobst.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.eliasprobst.eu/program/js/app.min.js?s=1","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.eliasprobst.eu/","date":"2026-09-13T12:46:21.167Z","timestamp":1789303581167,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mail.eliasprobst.eu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 23:24:03 GMT","end":"Mon, 16 Nov 2026 23:24:02 GMT"},"fingerprint":{"sha1":"9C:65:48:0F:84:78:EC:AB:CA:B2:CA:DF:F2:2D:52:BD:37:32:B9:C0","sha256":"70:E7:09:BB:48:96:EB:29:46:62:FC:C7:4C:5A:8E:A7:33:36:28:6E:E0:C5:42:C5:3E:FC:FC:27:65:DB:F4:FD"}}},"request":{"raw":"GET /program/js/app.min.js?s=1 HTTP/1.1\r\nHost: mail.eliasprobst.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.eliasprobst.eu/\r\nCookie: roundcube_sessid=4ngchfqgqu9untocogd24e07ef\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Sun, 13 Sep 2026 12:46:21 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 160876\r\nConnection: keep-alive\r\nLast-Modified: Thu, 01 Jan 1970 00:00:01 GMT\r\nETag: \"2746c-f4240\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":160876,"size_decoded":161129,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (706)","md5":"cf5c561aad525f126b9bfb7a3b85b567","sha1":"6d0897c32c01f77e0904eef8933a249219cc4eed","sha256":"00a6445ea8e8508915647c9e7a0e241fe7a89c3a3b2e65274e1a198f5137ec9c","sha512":"665aefdbf80f6b99fa1c5b926bdda8f30ce918a777718891af65c37aba49f3dffe3a3a71521b2e82cb055073c61561564c10e461c96dfd416c771d2b18e3feab","ssdeep":"3072:QgeAH0P6uW1A70XfCgHombAkkkS9pgtMAuDWzQktZI2:QgeE0P6uWCQ7ombAkkkWgtMZDWzQcb","tlshash":"b4f3e68633a0ec2145ebe7a7345f21026136b609e0409d1db9ace9e74f74f4a2267f7d","first_seen":"2023-03-07T01:41:24Z","last_seen":"2026-09-13T12:46:53.300469Z","times_seen":77,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":77,"receive":62,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"mail.eliasprobst.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.eliasprobst.eu/plugins/jqueryui/js/jquery-ui.min.js?s=1","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.eliasprobst.eu/","date":"2026-09-13T12:46:21.169Z","timestamp":1789303581169,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mail.eliasprobst.eu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 23:24:03 GMT","end":"Mon, 16 Nov 2026 23:24:02 GMT"},"fingerprint":{"sha1":"9C:65:48:0F:84:78:EC:AB:CA:B2:CA:DF:F2:2D:52:BD:37:32:B9:C0","sha256":"70:E7:09:BB:48:96:EB:29:46:62:FC:C7:4C:5A:8E:A7:33:36:28:6E:E0:C5:42:C5:3E:FC:FC:27:65:DB:F4:FD"}}},"request":{"raw":"GET /plugins/jqueryui/js/jquery-ui.min.js?s=1 HTTP/1.1\r\nHost: mail.eliasprobst.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.eliasprobst.eu/\r\nCookie: roundcube_sessid=4ngchfqgqu9untocogd24e07ef\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Sun, 13 Sep 2026 12:46:21 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 259776\r\nConnection: keep-alive\r\nLast-Modified: Thu, 01 Jan 1970 00:00:01 GMT\r\nETag: \"3f6c0-f4240\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":259776,"size_decoded":260029,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33303)","md5":"fb752c6ba6b88ffa885f1d2a6492ef58","sha1":"e20616dd323e0313e75de00ac055b7d249cb9056","sha256":"59a4c9a75c48cf979e66c5641230bda0e15dfff292666e56ffb52a5a96d78834","sha512":"684a0b794ebbe5ec4f4edbbf7330bfdae7632d78c42657b540bd2b6d383406c34ca9b3c4400ac849059428b76e67824ae84c480c1ed338cb28781f3e98d9cbb5","ssdeep":"3072:amxBUnLO18G0qSLOZD5kn8Ks6BqMi/X+1ghPuQo1Q7SV7opX0MY:ALOnlfc8Kw4ghP70MY","tlshash":"3844084d72003a2295dfe2a5143b2a0fa237515da605845cb43dcede9ebce4431bbfb9","first_seen":"2023-03-07T01:41:24Z","last_seen":"2026-09-13T12:46:53.301019Z","times_seen":1592,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":115,"dns":0,"connect":0,"send":0,"wait":33,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"mail.eliasprobst.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.eliasprobst.eu/skins/larry/images/filetypes.png","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.eliasprobst.eu/","date":"2026-09-13T12:46:21.503Z","timestamp":1789303581503,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mail.eliasprobst.eu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 23:24:03 GMT","end":"Mon, 16 Nov 2026 23:24:02 GMT"},"fingerprint":{"sha1":"9C:65:48:0F:84:78:EC:AB:CA:B2:CA:DF:F2:2D:52:BD:37:32:B9:C0","sha256":"70:E7:09:BB:48:96:EB:29:46:62:FC:C7:4C:5A:8E:A7:33:36:28:6E:E0:C5:42:C5:3E:FC:FC:27:65:DB:F4:FD"}}},"request":{"raw":"GET /skins/larry/images/filetypes.png HTTP/1.1\r\nHost: mail.eliasprobst.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.eliasprobst.eu/\r\nCookie: roundcube_sessid=4ngchfqgqu9untocogd24e07ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Sun, 13 Sep 2026 12:46:21 GMT\r\nContent-Type: image/png\r\nContent-Length: 4718\r\nConnection: keep-alive\r\nLast-Modified: Thu, 01 Jan 1970 00:00:01 GMT\r\nETag: \"126e-f4240\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4718,"size_decoded":4955,"mime_type":"image/png","magic":"PNG image data, 25 x 626, 8-bit colormap, non-interlaced","md5":"a0f55c02b728a90b18aa4d44ed3df57e","sha1":"94bde2de2ec0fd8c7d01e34bcc46bb3b05944001","sha256":"7818dd64565bff50328cec0a552e8b4790fc5bbc538f37d7f7ce05ed87fed405","sha512":"9428d4291fde793104697c26c1e37cc7ee20c59251bf784f23a74b9c386846fbc65374a871ba4b781025c6d2c51f113a0365d2e78ad487a1e89619c86621d6d8","ssdeep":"96:LUYz5wv+gU3FClv+neqzh+7FOMn9RizYbkI4Rs3XEo4t+jrdY6DwkQ:TOrUYgh+7FrnP4YbkOUo4wm0W","tlshash":"8ca19ec11e5e67a13d1bb7ce2b40b066c03c628acfab424181e8c78d4f33223c472ea5","first_seen":"2023-04-21T21:19:20Z","last_seen":"2026-09-13T12:46:53.301639Z","times_seen":252,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"mail.eliasprobst.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.eliasprobst.eu/skins/larry/images/listicons.png","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.eliasprobst.eu/","date":"2026-09-13T12:46:21.506Z","timestamp":1789303581506,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mail.eliasprobst.eu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 23:24:03 GMT","end":"Mon, 16 Nov 2026 23:24:02 GMT"},"fingerprint":{"sha1":"9C:65:48:0F:84:78:EC:AB:CA:B2:CA:DF:F2:2D:52:BD:37:32:B9:C0","sha256":"70:E7:09:BB:48:96:EB:29:46:62:FC:C7:4C:5A:8E:A7:33:36:28:6E:E0:C5:42:C5:3E:FC:FC:27:65:DB:F4:FD"}}},"request":{"raw":"GET /skins/larry/images/listicons.png HTTP/1.1\r\nHost: mail.eliasprobst.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.eliasprobst.eu/\r\nCookie: roundcube_sessid=4ngchfqgqu9untocogd24e07ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Sun, 13 Sep 2026 12:46:21 GMT\r\nContent-Type: image/png\r\nContent-Length: 10409\r\nConnection: keep-alive\r\nLast-Modified: Thu, 01 Jan 1970 00:00:01 GMT\r\nETag: \"28a9-f4240\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10409,"size_decoded":10647,"mime_type":"image/png","magic":"PNG image data, 48 x 2360, 8-bit colormap, non-interlaced","md5":"c458e41a4b5462b808695eb226c87b4c","sha1":"64d854985d93164eff4fe0d54cf1a4cad6addbf3","sha256":"7ebebfc80fd23649c2d8c9fb81babe8be585931a12fc90befded5f3e37f1eaef","sha512":"853c91f08f9529017a62d2b71164e09c27b96d6fbacc3b56849cccafc30687a34488af2cfcb6277227eccd7dfcbc3b494e2ed0bcbb0121f2fa11e805b096e008","ssdeep":"192:gWhCF7OnhaTTM0J35WhKxVIgVL24QxibYRpjaQZrYrbAWSdUt8myLB:pK76aTw0J35G7gVfi3R5obAfquLB","tlshash":"2f22c0b47d8a564f2451060bb1ac21cddb3370a46adfcb5bee01b4e6a08d8f0657c85b","first_seen":"2023-05-31T02:16:49Z","last_seen":"2026-09-13T12:46:53.302283Z","times_seen":100,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"mail.eliasprobst.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.eliasprobst.eu/program/js/common.min.js?s=1","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.eliasprobst.eu/","date":"2026-09-13T12:46:21.166Z","timestamp":1789303581166,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mail.eliasprobst.eu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 23:24:03 GMT","end":"Mon, 16 Nov 2026 23:24:02 GMT"},"fingerprint":{"sha1":"9C:65:48:0F:84:78:EC:AB:CA:B2:CA:DF:F2:2D:52:BD:37:32:B9:C0","sha256":"70:E7:09:BB:48:96:EB:29:46:62:FC:C7:4C:5A:8E:A7:33:36:28:6E:E0:C5:42:C5:3E:FC:FC:27:65:DB:F4:FD"}}},"request":{"raw":"GET /program/js/common.min.js?s=1 HTTP/1.1\r\nHost: mail.eliasprobst.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.eliasprobst.eu/\r\nCookie: roundcube_sessid=4ngchfqgqu9untocogd24e07ef\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Sun, 13 Sep 2026 12:46:21 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 14093\r\nConnection: keep-alive\r\nLast-Modified: Thu, 01 Jan 1970 00:00:01 GMT\r\nETag: \"370d-f4240\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14093,"size_decoded":14344,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1479)","md5":"4e8af30b0deb6fe6b9edfeb73c519249","sha1":"6a8cc2dea3f4e24e395edbd821439e1faad6c566","sha256":"6a88fff1976e8fdd4b1ae0822dab049b303c716b14ac90c9a3f28988849ac1c3","sha512":"6a15bc41ec2eaae95f4de8fd785f3da580a997590e91068737e988baedf7dcd982bdbfeb29806477052420cc9e727b7426afda4e5e69831203466f8a3d2f29c4","ssdeep":"192:KB0Inw2dongcF4XslAMj/7h1dd01M+4BpGh0P3NsiMOWEXmsK11lreA0mXsO:KB9nw2dog9XiAYfdd01eBpGh4Wmmfrf","tlshash":"d2521bcd72a254790678ae86177b028f7031c9f4f83252b8f654ccd4bc24c5948aefb9","first_seen":"2023-03-07T01:41:24Z","last_seen":"2026-09-13T12:46:53.302977Z","times_seen":100,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":72,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"mail.eliasprobst.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.eliasprobst.eu/skins/larry/images/quota.png","fqdn":"mail.eliasprobst.eu","domain":"eliasprobst.eu","tld":"eu"},"ip":{"addr":"195.201.140.168","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.eliasprobst.eu/","date":"2026-09-13T12:46:21.511Z","timestamp":1789303581511,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mail.eliasprobst.eu","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 23:24:03 GMT","end":"Mon, 16 Nov 2026 23:24:02 GMT"},"fingerprint":{"sha1":"9C:65:48:0F:84:78:EC:AB:CA:B2:CA:DF:F2:2D:52:BD:37:32:B9:C0","sha256":"70:E7:09:BB:48:96:EB:29:46:62:FC:C7:4C:5A:8E:A7:33:36:28:6E:E0:C5:42:C5:3E:FC:FC:27:65:DB:F4:FD"}}},"request":{"raw":"GET /skins/larry/images/quota.png HTTP/1.1\r\nHost: mail.eliasprobst.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.eliasprobst.eu/\r\nCookie: roundcube_sessid=4ngchfqgqu9untocogd24e07ef\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Sun, 13 Sep 2026 12:46:21 GMT\r\nContent-Type: image/png\r\nContent-Length: 1389\r\nConnection: keep-alive\r\nLast-Modified: Thu, 01 Jan 1970 00:00:01 GMT\r\nETag: \"56d-f4240\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1389,"size_decoded":1625,"mime_type":"image/png","magic":"PNG image data, 24 x 504, 8-bit colormap, non-interlaced","md5":"aaa4c6fee94ce555840737261c5c11ec","sha1":"96bedbe0403eb9dbdae09966d5330ea4ca03ff43","sha256":"1913a29d546d09dcc5aae49d7791e8db972adfed11194980b6fe4a1b479ce05f","sha512":"b9b1c8372bf44733cad199e425a51a57e1d0cd97acebfb872dbec16c92d9caac700d2592b40756b746177f54bc662e3b9f4c405cdbe30df430ffd926575db7d1","ssdeep":"","tlshash":"4a21d6f8816256f64472be24c4fbc104e401287e0b0bca9347a6700c1baa2fae00caca","first_seen":"2023-04-21T21:19:20Z","last_seen":"2026-09-13T12:46:53.303755Z","times_seen":235,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"mail.eliasprobst.eu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"mail.eliasprobst.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}