{"report_id":"fad678ab-ca2d-4f7c-a4dc-7f88f5334ff5","version":0,"status":"done","tags":[],"date":"2026-08-22T12:45:06Z","url":{"schema":"http","addr":"dhlorders.de/","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"dhlorders.de/","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"title":"DHL Home - Globale Logistik und internationaler Versand Deutschland","dom":{"size":36026,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"a9b2143b54a841c2945e2ca842565886","sha1":"c0eeb16871ce00e66abe0bdb6648c91bb1230c85","sha256":"8bc0242bb82ba8d57cc4d64b407efe3351b717f1e5e56ee8792c382a0ef87582","sha512":"b9509e1459c6a9ae9ca2b636627b783f5717d7048b8fb83c30ddd2b498e9fe432d21a7b2dd23fc3c6b733ffaadc463f083b61a7206ff224500549a452e4896c5","ssdeep":"384:priNTyIb3iM8MBGUPH6CgF4pld4JlnjMlgZURAUBeUPqvyBdNq:oRiM8MBGIHDpgJBQ6yRAUBeUPqaJq","tlshash":"d4f23115a8f4147340a397eae6a97f27bdd1e207c14a260032fd4aa55fd3dc3d913a2e","dom_hash":"domhash959c619817eff8ea9ee34cc02ab1f4e0","first_seen":"2026-08-22T12:36:03.993566Z","last_seen":"2026-08-22T14:44:12.10372Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dhlorders.de/","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-26T12:45:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"dhlorders.de","ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-22T12:35:54.194453Z","last_seen":"2026-08-22T12:35:54.194454Z","alert_count":116,"request_count":29,"received_data":3037687,"sent_data":14978,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-16T22:23:57.509837Z","alert_count":0,"request_count":1,"received_data":19148,"sent_data":591,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dhlorders.de/assets/shipment_generator-kdNxTXWb.js","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6381d26b10794b38a3632add5dfa103","sha1":"555c723f2797aa86c2cf377572b4aee0b6b8a5b1","sha256":"7f773f7dc7488abccf00e23f9e17875338cec30e728cffc46eb716478990848e","sha512":"0cdaad69f9429a044d84783250fa8e218a48366718b91017f647609f1ade9c8bd9ca35a5f12f7b498dcdd8d56df691c47de6ceefa760e1158837f6bccad3a081","ssdeep":"","tlshash":"173186cc71f2712915892d7ef072d911b2e821a7356dd1d1e17c7c632b12941c6b78ae","size":1593,"data":"","first_seen":"2026-08-22T12:36:04.007482Z","last_seen":"2026-08-22T14:44:12.105293Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/assets/main-BISMd5Qb.js","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"417be228318c72c7d8bec96b61259022","sha1":"a52c096659ed58ee0c10d70fd6c4859bf43bc7e2","sha256":"9e488a56efb8ba6e31fd2ea8009409ef5e86fbdd97d79571c4139e9b095cff96","sha512":"5c68ae51d2f11ec34d7dd516a0a4b24531a9cf95115ea59bc3d4fdb8bc415544d6a6db4f7ef3c442971f2f338931f5d8ed50a8213382d7e2fed56e7c0fec1276","ssdeep":"768:Ebw1G3vXWqrQb3ZADpaU9wQktdNzSnMx2YMPy9U+94UL8zPLlt8ZM/XUquzPHQ+A:QQNyJGQkx1jLSLltUs8axrcU","tlshash":"b0335bb1a0f5053505db4ba7b4a4a7c27b28908b91064064beac8ea34f59cc7cd7f3bd","size":51015,"data":"","first_seen":"2026-08-22T12:36:04.02322Z","last_seen":"2026-08-22T14:44:12.152718Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dhlorders.de/assets/welcome-to-the-future.jpeg","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.427Z","timestamp":1787402678427,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET /assets/welcome-to-the-future.jpeg HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 22 Aug 2026 08:22:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a895c38-126b4\"\r\nexpires: Mon, 21 Sep 2026 12:44:38 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75444,"size_decoded":74170,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3","md5":"6eafc4677146baee820298ac519dd551","sha1":"f9f64d63e7bc9b57dd35fa9f2b80ed564ba57186","sha256":"499e377377e355b3e385e06d2cd3cd63d6b2d7ae64ed1baf15e677b22bcaa2de","sha512":"12bec535b386448f7928484bc9283bef5a66bc89b39c05561b15a258fda32ada0bdbe3edc4bd80b72a53560d0178683be3abd3292f8cb5fd7c3f52d23798ba6e","ssdeep":"1536:8x4uOlTJulVZILAfAdC+0mO5EpNvshKtmpS28fqlrRyTGMVB:hldgAbymO59h428qrRy6Mf","tlshash":"167312050e6488d2956ea9e2ef715dfb083e8bf48ca0217d5994eec33b74db83e1591c","first_seen":"2026-08-22T12:36:04.00083Z","last_seen":"2026-08-22T14:44:12.151613Z","times_seen":3,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/assets/shipment_generator-kdNxTXWb.js","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.395Z","timestamp":1787402678395,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET /assets/shipment_generator-kdNxTXWb.js HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 22 Aug 2026 08:22:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a895c32-639\"\r\nexpires: Sun, 23 Aug 2026 00:44:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1593,"size_decoded":1344,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1592)","md5":"f6381d26b10794b38a3632add5dfa103","sha1":"555c723f2797aa86c2cf377572b4aee0b6b8a5b1","sha256":"7f773f7dc7488abccf00e23f9e17875338cec30e728cffc46eb716478990848e","sha512":"0cdaad69f9429a044d84783250fa8e218a48366718b91017f647609f1ade9c8bd9ca35a5f12f7b498dcdd8d56df691c47de6ceefa760e1158837f6bccad3a081","ssdeep":"","tlshash":"173186cc71f2712915892d7ef072d911b2e821a7356dd1d1e17c7c632b12941c6b78ae","first_seen":"2026-08-22T12:36:04.007482Z","last_seen":"2026-08-22T14:44:12.105293Z","times_seen":3,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/assets/intransit-rgb-red.svg","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.420Z","timestamp":1787402678420,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET /assets/intransit-rgb-red.svg HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 387\r\nlast-modified: Sat, 22 Aug 2026 08:21:49 GMT\r\netag: \"6a895c1d-183\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":387,"size_decoded":827,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6227addad4289a64917b3d26401f9fb7","sha1":"cbbbb2b45ce20f38572a9cb18184c962bb772913","sha256":"b7d425b8f1b939a2eb70811279152bae2d168428a57fbb35317853bd6a5ac57a","sha512":"b56227de4dcc59c31c6c2d9af154fb1fb87261b09ff354d760c3042673585e14f6258bc4e3b67cc64fb5f35423d9342be86d510ea1b9c020bcd92f166fa3d855","ssdeep":"","tlshash":"7ee0603b900c03a0f2601b1101e8429300f3789cb92e65d4fb8327090c41cfba8fa30e","first_seen":"2024-05-21T11:13:48Z","last_seen":"2026-08-22T14:44:12.150622Z","times_seen":101,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/assets/dhl-global-connectedness-tracker-2026.jpeg","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.428Z","timestamp":1787402678428,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET /assets/dhl-global-connectedness-tracker-2026.jpeg HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 22 Aug 2026 08:21:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a895bfa-38e9d\"\r\nexpires: Mon, 21 Sep 2026 12:44:38 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":233117,"size_decoded":233571,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x719, components 3","md5":"7643da14c5053835b27d0a72324be488","sha1":"d8bfbc92a3e1d169730d77e1fac3e6b2a8deb504","sha256":"a4ae5cafdd87e19855ed1f1004760a47cc08a20393672175f55ef06cab8adc6a","sha512":"cb84940626b88d52c64fef86e71cfcf6e7c52a9f56fb7c15c96e20d17d937c8835fc1ac1a12e81fa570c4283c1d81c7941edfc03be6ef8dadd40b882c54ea5db","ssdeep":"6144:4lmwx5OTM2Szqowd/uJO+aVHRwemDI1PbI:4bCT0qow4INlmF","tlshash":"5034223817b64b4bb9b1a9c9f477d241eac6e3ec26f8a4fa1018231355d36cb9c4814f","first_seen":"2026-08-22T12:36:04.006301Z","last_seen":"2026-08-22T14:44:12.14562Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/assets/shipment_generator-kHYuUtyV.css","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.398Z","timestamp":1787402678398,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET /assets/shipment_generator-kHYuUtyV.css HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 22 Aug 2026 08:22:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a895c35-1ab27\"\r\nexpires: Sun, 23 Aug 2026 00:44:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":109351,"size_decoded":19710,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"641a91c376033304661868a761670a31","sha1":"514691411354f8a741a1425a6a685547faac3d72","sha256":"6062689d33ccdc261b2fb4d12c1ef4c8fc2aaee925eff00535ec102308102e02","sha512":"96e0db9f188f7a0046991ea4b5d1859542a33efec6285c54466c92c8c51b314104793835404e98c1723d66f6a2eaf9ebbcb72a984ec8858592984c83b17385d4","ssdeep":"768:jh6ahyqdUbXxrnLwPxn+h8itaWdPO3qjl4iiCsywwtoFYS8BMX/KXZHKthN:jMzqdUFrnLw5+h4HBCvw1YBKqKtP","tlshash":"e5b3b77df500613dfc27d5a96ad4abec5028a450d9130bedfd93b2258ac77f30a62a4c","first_seen":"2026-08-22T12:36:04.028304Z","last_seen":"2026-08-22T14:44:12.108255Z","times_seen":3,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/assets/workers-in-warehouse-0001.jpeg","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.412Z","timestamp":1787402678412,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET /assets/workers-in-warehouse-0001.jpeg HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 22 Aug 2026 08:22:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a895c47-68d99\"\r\nexpires: Mon, 21 Sep 2026 12:44:38 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":429465,"size_decoded":429981,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x960, components 3","md5":"20aa72afbe4317b5f42aded060265cee","sha1":"a5d5d5990d7d79b8ac9d7a177a57a211bb0e86a9","sha256":"75bb88c1ee869255703cd514b0cc3392398ae46ecb43b8344588db1b7080d8de","sha512":"c7e676d4d13b115683aa3135bcc78eb43f4e87804c6372f00b257a30df3c1359076bbe167993feec99af6e5aa470ec8bba8a695d8f7c83210935746e1efb7c78","ssdeep":"12288:BGWDP2A69X4wL/4zUBmZz3/VxT6w7/LCDk:H2A6t//mJTpj7","tlshash":"2794236b9e9730b58788b5e8184b4515f020bc6677f9b776e6cba380f27ac60dd83143","first_seen":"2025-01-14T11:36:27.109785Z","last_seen":"2026-08-22T14:44:12.136644Z","times_seen":4,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/assets/dhl-courier-doorbell.jpg","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.413Z","timestamp":1787402678413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET /assets/dhl-courier-doorbell.jpg HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 22 Aug 2026 08:21:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a895bf6-b26ec\"\r\nexpires: Mon, 21 Sep 2026 12:44:38 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":730860,"size_decoded":730503,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1920x1280, components 3","md5":"c0ec64bc65e545023774a2f8fe74aefd","sha1":"05ca781fb81c426a66947b6f37fba68276a8acaf","sha256":"038851e1a09549cab85cac0fcd9185061f66f3e0cea6f3a591b0964f014ae49c","sha512":"2b310b39986119919a6e3bb66d585f892b2fcb894ab0205650ae6dea719927ba024c934fc9446de901633443b76a4117daef1b96d2d265b04d170dc4568f50b6","ssdeep":"12288:0AGA08iPBmIzjxefIcIi/JuJ1FLJSbsfJrCDdu1iS0txL3aKYQD4/6zEGVd:0KiPtjQfpIisJ1JPfJODZtxLqbg4/Hk","tlshash":"46f423aae589138fe47b51357dcce3fb8d861a6ed9c39633c036580d42b4ed8948de18","first_seen":"2025-12-26T02:53:19.474925Z","last_seen":"2026-08-22T14:44:12.117059Z","times_seen":5,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/assets/woman-packs-packages-0001.jpeg","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.418Z","timestamp":1787402678418,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET /assets/woman-packs-packages-0001.jpeg HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 22 Aug 2026 08:22:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a895c3b-2ce43\"\r\nexpires: Mon, 21 Sep 2026 12:44:38 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":183875,"size_decoded":184308,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x960, components 3","md5":"c741f265a42beef7322cd29b168443be","sha1":"ef98a96f064847de20a5b1bace7994054ee78c3e","sha256":"af1dd18f6e01c05903f5e6fdad5a4e99ce37f845712414eb693bd4a198e2718c","sha512":"ac7d7a1db6be9623bf4cae5ba1d637fd61b961d921491f2fff0a09560f24deabf7b35075508db1d64aac33db470bee05fde17851aba5bac58461897184f60b97","ssdeep":"3072:HUZTv29zsU3O+75jts/SBeZu6u0xVV41yoau4k5wDekNU+d1Ce5bVnlxEiJNOPTP:HuaBsUL5Kq2DVu1yo94mD+d1CsbfJNOD","tlshash":"0d041253a7304dd8f9360f4b1c5f5bcb2d99bb14928ec008c9c5edfca326ba510a6766","first_seen":"2026-08-22T12:36:04.016022Z","last_seen":"2026-08-22T14:44:12.144221Z","times_seen":3,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/assets/male-dhl-employee-driving-electric-dhl-van.jpeg","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.426Z","timestamp":1787402678426,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET /assets/male-dhl-employee-driving-electric-dhl-van.jpeg HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 22 Aug 2026 08:22:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a895c2b-370f3\"\r\nexpires: Mon, 21 Sep 2026 12:44:38 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":225523,"size_decoded":220831,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x854, components 3","md5":"776e2e3497c702afbf274bedde31521f","sha1":"bfc23736aa522dec4d303ef510307a81bb17e691","sha256":"11ef94e71ce788bc5283c599f8b91b009387b59aa364012c8f2374ce61b51f80","sha512":"cdf36abe0712daac8e53ba6b8970d65bf2b45af542ca7eba71c4b8fb95fa88c7df4e2a01be661fbecdbd391c312c4a47501162c58a173baf7a93df79d1f89fed","ssdeep":"6144:v+dvKVwHiutqftDX+GPI6dDdkFDMiHNavjHW4gxG:29jbqftDjgpYiHxG","tlshash":"392423f16231d2e6e0850560f4de61aabaf2cbc0465ed01de3bf17d4fa63b52463a01e","first_seen":"2026-08-22T12:36:04.019243Z","last_seen":"2026-08-22T15:40:37.684819Z","times_seen":5,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/assets/youtube-new.svg","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.429Z","timestamp":1787402678429,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET /assets/youtube-new.svg HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 818\r\nlast-modified: Sat, 22 Aug 2026 08:22:34 GMT\r\netag: \"6a895c4a-332\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":818,"size_decoded":1258,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"01c198d73e6a3f7c351b61f860e0fd90","sha1":"a7bb3ec37dc19e0b8d07aaa272a0de60d7242330","sha256":"8ab280a31a012ac7c6fb77be3e134d2858d50e3b1d16ffa4b45f35487cadf5bd","sha512":"65a8e6a8e2bbcf3adf8dac8816294e66d2aaba9acec34e0acee7713ec350e64b45cf8afbefc950fcd7ade971779c5afd366b5a056bd9c5a316fe66ff856f42e6","ssdeep":"","tlshash":"af01a3cf3b21f55c48d582219e3afd803b5510b1274501c5d4e67fbd01a72b21c40da9","first_seen":"2024-03-19T15:11:55Z","last_seen":"2026-08-22T15:40:37.685543Z","times_seen":661,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/assets/facebook-new.svg","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.430Z","timestamp":1787402678430,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET /assets/facebook-new.svg HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 821\r\nlast-modified: Sat, 22 Aug 2026 08:21:29 GMT\r\netag: \"6a895c09-335\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":821,"size_decoded":1261,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"79b871b8de76e9e6e4f2f879dac26447","sha1":"8e60e10b0f2183ca4379d89bc27e4d4d69cfc3ee","sha256":"1979d99c5483675a8be762b48f46112909e27301c1f549c8cb35a2be5503f72f","sha512":"939c32a8ed09aa16efeee91704ac394807dd858627665a73365d8f42d9d53aa4b2545863f5e01de682e6ca5469b160fe4d6801b26193fecf571409ed41a61814","ssdeep":"","tlshash":"ee01cee653fdc2aa586eba369e325ac06e111c311b05105dd7e33180ba37aff2c4b684","first_seen":"2024-03-19T15:11:55Z","last_seen":"2026-08-22T15:40:37.686075Z","times_seen":585,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/assets/dhl-logo.svg","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.408Z","timestamp":1787402678408,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET /assets/dhl-logo.svg HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 962\r\nlast-modified: Sat, 22 Aug 2026 08:21:17 GMT\r\netag: \"6a895bfd-3c2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":962,"size_decoded":1402,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"532ab610b8d23e1a76fe835ea38d3f64","sha1":"bb8143056f80f377663a6c2f760e2ba5cd8ba7b9","sha256":"328777be6ed92ae88755009a974a1283abf795957a3df244576ed70f5de4e9c3","sha512":"39464441fe97ae1bab7b9c6f0a079eaceedf401d228cb2f84747d76ded304f82c561672224f6d8325f751a088cf7e74e4b2241c21931f92a647a7b05cab00de9","ssdeep":"","tlshash":"1b11ec5892f4f6769907c7f48f7c957420ea10d441e98b5cace323101354abbe0bedda","first_seen":"2024-03-19T15:11:55Z","last_seen":"2026-08-22T15:40:37.682193Z","times_seen":2785,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/assets/employees-working-in-warehouse-0005.jpeg","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.425Z","timestamp":1787402678425,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET /assets/employees-working-in-warehouse-0005.jpeg HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 22 Aug 2026 08:21:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a895c01-36357\"\r\nexpires: Mon, 21 Sep 2026 12:44:38 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":222039,"size_decoded":222466,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x960, components 3","md5":"b920c077fb0d2b86e3dd82ebd5106bda","sha1":"d642a781e5bbb416dafc82a24d6872baf8f1967e","sha256":"a99b9f72f9d4974840e344ce3f39d033da45976eda6fd37105f6b08a35e2bcf7","sha512":"3c780cb339f3d45301b54770e114ae9aab0f46adaae8e16ff997e328f3ebcb565f0bf1e8477d70b46e70b534ebc285eab49b173a5a86b6dbd44cfe42b1962b67","ssdeep":"6144:7nPa/4kTNCC4RRIk7Sbb3kUIKmDSelc2GEv:rCCbR9Wbb0UIDS12GEv","tlshash":"fd24238f2e9052d2b34b6d36d5a07d84d36e8f789f13df631ca60db9c5dae5c1880912","first_seen":"2026-08-22T12:36:04.02717Z","last_seen":"2026-08-22T14:44:12.139252Z","times_seen":3,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@400;500;600;700;800;900\u0026family=JetBrains+Mono:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.703Z","timestamp":1787402678703,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css2?family=Plus+Jakarta+Sans:wght@400;500;600;700;800;900\u0026family=JetBrains+Mono:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 22 Aug 2026 12:44:38 GMT\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18464,"size_decoded":1653,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"69cf63523ed555952ca1a4f95501886e","sha1":"4548f9fa80d4bf92d6e2c7700c6c4ae7247d1482","sha256":"9bf69db3ee61408045dbdba83bea8d23250899af9fc1fd4efa08fd5568789267","sha512":"fb48d8926b3050b80d683a9b8296879cacd5a01161e40e00f070e2b3693c918f7fa49649d0e5a5d028136e9c54b395b2a482b4cd79d1ed2b54107bdedd2070ae","ssdeep":"192:uG+7p3ZAXYjG9Up3qnXfmG0dp3HKXCFGbep3g5XxGCFJRSdCmaRBUCj3Ro7CcQRy:fOGC6CmOedrF/0","tlshash":"1282dda0041f9504ea431cc673cf7e36ad8ea1572085d4f9dbfe1858adaac3a237475d","first_seen":"2026-01-17T12:07:52.228389Z","last_seen":"2026-08-22T14:44:12.156031Z","times_seen":29,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":2,"connect":14,"send":0,"wait":33,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-22T12:44:38.062Z","timestamp":1787402678062,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 22 Aug 2026 08:22:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a895c60-90a7\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37031,"size_decoded":8012,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"d088bf7948c19d85a45ec3b1c4818a01","sha1":"d03a6bcba5179d2b3cccff9acd104c523141eefe","sha256":"5adc0813f6e0c6c65f1736a1be9705afbee9b94c272f0d4c0189e2399ee8da50","sha512":"a45de0e296b99d0ac58000eddfec8ff573b869cbca620f9c9d641d46c61edadacb089b25db8e202d6684a05c44c2b3042fb23a5fe8ec84a9b38f172c1e3d0464","ssdeep":"384:ViNZD5JziM8MBG1PHzCzR+HldmxlvdTalxZURAUBeURg6nFgs:EBiM8MBGhHtHuxJdGfyRAUBeURg2Ss","tlshash":"27f23215acf4147340a397eae6a97f27bdd1e207c14a260031fd4aa55fd3e83d913a2e","first_seen":"2026-08-22T12:36:04.013575Z","last_seen":"2026-08-22T14:44:12.149545Z","times_seen":3,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":42,"connect":23,"send":0,"wait":32,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/assets/default-4bcce82160b8c6f178f0.woff2","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.862Z","timestamp":1787402678862,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET /assets/default-4bcce82160b8c6f178f0.woff2 HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/assets/shipment_generator-kHYuUtyV.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42636\r\nlast-modified: Sat, 22 Aug 2026 08:21:00 GMT\r\netag: \"6a895bec-a68c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42636,"size_decoded":43076,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42636, version 2.-32768","md5":"86d772f3cb778df5c29f6ff0edb3404c","sha1":"1f2d53da878b30223ca5ddacd794f39ef1bf9b3e","sha256":"0ca0bf391d99f806640039855834587d6cbb5fbce16e73c3e415ba4a2aab1eb9","sha512":"6acaefbda47d884d8a2765516cb12b34c5c1df5ab0f5db790a36d4d9b5ea3d421501040c9af8781dc4d901cf0d1f48d5edf153658648692dee604e37fa5cf610","ssdeep":"768:3Z4yehGbZj4qbGQ4C7vGIX51ebPt/4anlqJkJZLVeZIy9d5M6PgfDTqac:3BehGbPEC7vUt/4anl8kJZReOyP5Yfvg","tlshash":"831302ba14fd31bb26cc6f52e7e3552783c505f848c1eb95c912ee003a72fc55e42a2a","first_seen":"2023-05-01T10:33:17Z","last_seen":"2026-08-22T14:44:12.141675Z","times_seen":734,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/assets/glo-footer-logo.svg","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.434Z","timestamp":1787402678434,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET /assets/glo-footer-logo.svg HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 22 Aug 2026 08:21:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a895c16-f32\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3890,"size_decoded":2262,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5ccb5ea15c3e242b155a1645fb30d717","sha1":"7c14c7cd33894f70df1f5ff821cf6dea8e65d3f5","sha256":"eec352f272b13be3883b6b13674898e718d277a690011c4e6eb1e47189656433","sha512":"51678b3755d2434d7e38390e8cc868edc9599fbce60662fa9a1fd35e830f59c3be33b183f60445bcd82f4c2d44086e0f1d28338b91f2bd8bc23b33991c6746e3","ssdeep":"","tlshash":"338196c36330f1a9580bcfed6e797d75169ea0f56a5506e989d34304428b9bafc60fc0","first_seen":"2024-03-19T15:11:55Z","last_seen":"2026-08-22T15:40:37.692826Z","times_seen":714,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/assets/manifest-received-rgb-red.svg","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.410Z","timestamp":1787402678410,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET /assets/manifest-received-rgb-red.svg HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 432\r\nlast-modified: Sat, 22 Aug 2026 08:22:05 GMT\r\netag: \"6a895c2d-1b0\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":432,"size_decoded":872,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"55defb3c31a831b86168aa5f98df985d","sha1":"8cf87f76ba5c71de6e2c4d57f1ba67b04fc5fe26","sha256":"354587dbaa872752509e6b18fc13c0d8d53d17b02a6b8e31654e0bca9eb4cfce","sha512":"288983719d953627a7c854e226820a0df28624bf9220ea4a44d358dad5d3b572a7e5f64d52ded7f45f3c32031ab590e370eebc751425dd16b5cc7ba509fd1b0d","ssdeep":"","tlshash":"72e05c77a2588d01aa04c655421cbdda109ae089f440011bff4a1e03a8589636c377f5","first_seen":"2024-03-25T13:05:35Z","last_seen":"2026-08-22T14:44:12.115904Z","times_seen":294,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/assets/calendar-rgb-red.svg","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.411Z","timestamp":1787402678411,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET /assets/calendar-rgb-red.svg HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 228\r\nlast-modified: Sat, 22 Aug 2026 08:20:53 GMT\r\netag: \"6a895be5-e4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":228,"size_decoded":667,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0c2615a62d8030fb00e02b0f2b56fde6","sha1":"ab235b03b5cee209ba8193f883d4ea8861fcdf17","sha256":"27af7ced5e75433a6dca20e8874ad6d109f268e0572e344a7efb7d98ca3d4fd7","sha512":"f4a4f1f0d979c421caef3605c7ca23d7357c6e66313677fe62ec6165d80f21c7c87c7feb1d5e48a04586c0d1c6eee8eace01028f7573e212243db2769f3e3575","ssdeep":"","tlshash":"bbd0a7517434d806c5dc4229362da5d92477acd955cc9178f7e023180b21eda7daf2b8","first_seen":"2024-03-25T13:05:35Z","last_seen":"2026-08-22T14:44:12.107113Z","times_seen":288,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/assets/plane-take-off-rgb-red.svg","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.422Z","timestamp":1787402678422,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET /assets/plane-take-off-rgb-red.svg HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 369\r\nlast-modified: Sat, 22 Aug 2026 08:22:08 GMT\r\netag: \"6a895c30-171\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":369,"size_decoded":809,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"348067f2d7b423b098acb44c6479b595","sha1":"4fa58f101d2cdee24c890b0b864c5d6e66c55789","sha256":"3b9efb49a9db2d5290d18a8cc9ac3c60dbe6b85c88fbb15028361a7db6bf9218","sha512":"9a40af67ae5d30895c48192a210f1c050b51f81baf315f227d25ee86437e5d7e0af30039a7ee0e7a116aefd5f57687444fd3dfaef77c60196774e7e7a5f3c547","ssdeep":"","tlshash":"a0e0f8b49b95202c606089881e21bed12b6e207aaf882208a68f129226428d3f843089","first_seen":"2024-05-21T11:13:48Z","last_seen":"2026-08-22T14:44:12.138142Z","times_seen":100,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/assets/linkedIn-new.svg","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.431Z","timestamp":1787402678431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET /assets/linkedIn-new.svg HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 22 Aug 2026 08:21:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a895c20-41e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1054,"size_decoded":974,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2fff9adf3097c217f1849b01babba2fb","sha1":"7e8144a89322cb04e7fbcc57817f802423cadb9b","sha256":"86a4a9a96396b1de82e1616e6c1c62a2185f808328816c40e2abb03c37c4e965","sha512":"8e33897427026d426ba2f8f89053ae014d30af0a9cf24588e0620448cad2c75bee21e4672318daf7286b30193bb2fb6e8d3c5327d900fe49cd809c6ab32c4a1b","ssdeep":"","tlshash":"b11112b1e6a4ccf8a5659df4adf3b55e572834dbb70101fc9071a06248d75f4a301d89","first_seen":"2024-03-19T15:11:55Z","last_seen":"2026-08-22T15:40:37.69331Z","times_seen":659,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/assets/instagram-new.svg","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.432Z","timestamp":1787402678432,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET /assets/instagram-new.svg HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 22 Aug 2026 08:21:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a895c1b-d9d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3485,"size_decoded":1731,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3acb3282b220833f708c5a9be810bcf2","sha1":"fd26e6ea27a510af8b14da5f5fc8510cf0794e06","sha256":"f27026fef42b128c001a2c722d427044a148b50fc90c55f898c4447838580237","sha512":"0d967c5539fc77fa951fd48cb816adb873a2137f2f67c3bf09a5ee736fabce3a2ddea5146986c46008a20da00ef2e7aad8606028cc7a1fa36d6e908ca94bc225","ssdeep":"","tlshash":"8d7144e367d4728513899b96be3ab06d951b34f3b47a70fcc2c7b14565039e2bc048a9","first_seen":"2024-03-19T15:11:55Z","last_seen":"2026-08-22T15:40:37.687153Z","times_seen":587,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/assets/default-15a7ed37f53bdda49a82.woff2","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.863Z","timestamp":1787402678863,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET /assets/default-15a7ed37f53bdda49a82.woff2 HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/assets/shipment_generator-kHYuUtyV.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 46480\r\nlast-modified: Sat, 22 Aug 2026 08:20:56 GMT\r\netag: \"6a895be8-b590\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46480,"size_decoded":46920,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46480, version 2.-32768","md5":"405ee55d59cc72b33dfca356007d158a","sha1":"5b3fdb0fbee3db06bd5e51375afb72b3769a8273","sha256":"c666a3ea59aeb107899f70d6f80cd1c5397be3a04ad70a2766f5cee3bdb266a9","sha512":"d6677bb2704100f89a5309efb887179fc93ae1135799a6bb0f3d580bced2dd66dddc3de6b08f75e3f3da177e23d15a2f7ee24c1745fcb49ee295e2fd59393ad2","ssdeep":"768:I9aTW+H+LbTg6FhO4FkyB6ahzGuRf5cs+XbFcsFFqCR8DSG4iDtL2+BNnspIYhtp:CaTXu86FNkG6kz75z2GsFFMDH4i1Xnsp","tlshash":"2923f1481be257fee1f9c65d37e40cad32c96afc14e6ae146dc8a524897dee03d48701","first_seen":"2023-12-13T14:26:08Z","last_seen":"2026-08-22T14:44:12.147451Z","times_seen":696,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/assets/dhl-logo.svg","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.817Z","timestamp":1787402678817,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET /assets/dhl-logo.svg HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 962\r\nlast-modified: Sat, 22 Aug 2026 08:21:17 GMT\r\netag: \"6a895bfd-3c2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":962,"size_decoded":1402,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"532ab610b8d23e1a76fe835ea38d3f64","sha1":"bb8143056f80f377663a6c2f760e2ba5cd8ba7b9","sha256":"328777be6ed92ae88755009a974a1283abf795957a3df244576ed70f5de4e9c3","sha512":"39464441fe97ae1bab7b9c6f0a079eaceedf401d228cb2f84747d76ded304f82c561672224f6d8325f751a088cf7e74e4b2241c21931f92a647a7b05cab00de9","ssdeep":"","tlshash":"1b11ec5892f4f6769907c7f48f7c957420ea10d441e98b5cace323101354abbe0bedda","first_seen":"2024-03-19T15:11:55Z","last_seen":"2026-08-22T15:40:37.682193Z","times_seen":2785,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/assets/woman-signs-for-package-0002.jpeg","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.417Z","timestamp":1787402678417,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET /assets/woman-signs-for-package-0002.jpeg HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 22 Aug 2026 08:22:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a895c3f-37286\"\r\nexpires: Mon, 21 Sep 2026 12:44:38 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":225926,"size_decoded":226378,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x960, components 3","md5":"5d7af4d3eb4d0e2ecaa1d455291eadb5","sha1":"206c9772e4bdb76d1600378dfe9c36f3de451b6c","sha256":"fa1270999bb614d6a8679ddaa2777beab9dfeaf0cfba29a27b73c73a37d426ea","sha512":"ed47cb5cb71bfb75c6c7d983a12596f2c8ba4dc4bbe94a0efa10eb720d1f946ca1c986ab25a61f9986917c15044a317f682f2058e0d48c5b8e3ee63819750957","ssdeep":"6144:mCmR7I6IUP/jQHh6RiU+me4xOQa8XYDv8nXtIXwYgCH:fmR7I6IUPcsixh4xrXYL8n9xYn","tlshash":"522422e1214ce2bb7ac7278d965a8e73f9f8cd903e207e1c19c01be5694a84f86c517d","first_seen":"2026-08-22T12:36:04.010995Z","last_seen":"2026-08-22T15:40:37.692092Z","times_seen":5,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/assets/main-BISMd5Qb.js","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.396Z","timestamp":1787402678396,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET /assets/main-BISMd5Qb.js HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 22 Aug 2026 08:21:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a895c27-c747\"\r\nexpires: Sun, 23 Aug 2026 00:44:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51015,"size_decoded":15852,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (22098)","md5":"417be228318c72c7d8bec96b61259022","sha1":"a52c096659ed58ee0c10d70fd6c4859bf43bc7e2","sha256":"9e488a56efb8ba6e31fd2ea8009409ef5e86fbdd97d79571c4139e9b095cff96","sha512":"5c68ae51d2f11ec34d7dd516a0a4b24531a9cf95115ea59bc3d4fdb8bc415544d6a6db4f7ef3c442971f2f338931f5d8ed50a8213382d7e2fed56e7c0fec1276","ssdeep":"768:Ebw1G3vXWqrQb3ZADpaU9wQktdNzSnMx2YMPy9U+94UL8zPLlt8ZM/XUquzPHQ+A:QQNyJGQkx1jLSLltUs8axrcU","tlshash":"b0335bb1a0f5053505db4ba7b4a4a7c27b28908b91064064beac8ea34f59cc7cd7f3bd","first_seen":"2026-08-22T12:36:04.02322Z","last_seen":"2026-08-22T14:44:12.152718Z","times_seen":3,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/assets/glo-core-gogreen-warehousing.svg","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.414Z","timestamp":1787402678414,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET /assets/glo-core-gogreen-warehousing.svg HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 350\r\nlast-modified: Sat, 22 Aug 2026 08:21:34 GMT\r\netag: \"6a895c0e-15e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":350,"size_decoded":790,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8da5b9475e8ca8003c914252dd02daee","sha1":"5e111db8e09f8f22433cf8d0c53d67fdfd1c4abc","sha256":"685ef6a7fa4b012c32cf17ca60911f2aa5f491656ed16463bc341a0dd9ec97fb","sha512":"a2f88d47533ec81d003f6d57e9968515a690c1015e6c72eb6ef713c697dd049b4b71e572d6067e01bca43a9a0b85827bcef35e018ba4be32b3f649eda01b0492","ssdeep":"","tlshash":"c5e02604ab9fd07044908ff1863d5bfc31ef509c04739229989acb90d1601e8300a9fc","first_seen":"2024-03-19T15:11:55Z","last_seen":"2026-08-22T15:40:37.682684Z","times_seen":372,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/assets/glo-core-person-holding-paperwork.jpeg","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.416Z","timestamp":1787402678416,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET /assets/glo-core-person-holding-paperwork.jpeg HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 22 Aug 2026 08:21:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a895c14-26220\"\r\nexpires: Mon, 21 Sep 2026 12:44:38 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":156192,"size_decoded":156451,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x1280, components 3","md5":"b9c1f194d04da5774803b3db00c63aad","sha1":"43cab28acfa22445450c6ebff0ea0e4e11372b18","sha256":"9c529d3ef81928141e77889d5b6faa32a600c115d4e22823e2d3b4d6562005f3","sha512":"79440c2d0eca8b3fa04f8802291d19163b624611217fc671e6182d925d6eefaf5acc063030d90e11cac1461f9a7f49f18fb46a70de9b052289f15933fa9e0e61","ssdeep":"3072:mTTUiHDcKb1KKaxPLePb0Uu0vZ0O18U+iS0O+6815XalLeRq:m/rQKb1taAPAUd0OONiS0b6815XaBP","tlshash":"9ae32322c17505c6f9b853ff0cd63fe26fe14eb2a8c0b45385a90d60ec49aae095579b","first_seen":"2026-08-22T12:36:04.009844Z","last_seen":"2026-08-22T15:40:37.683231Z","times_seen":5,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/assets/workers-at-the-container-port-0001.jpeg","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.424Z","timestamp":1787402678424,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET /assets/workers-at-the-container-port-0001.jpeg HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 22 Aug 2026 08:22:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a895c42-2feec\"\r\nexpires: Mon, 21 Sep 2026 12:44:38 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":196332,"size_decoded":196773,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x875, components 3","md5":"41ebb1854c3bec2118e7c34266f04d2d","sha1":"62da517f9d2d0cc96be4d0362956d1b5dfb8c2d6","sha256":"ddc50af9b9c72fbbda81ca87fc8bd2a3b92d58a87f9a783e80eedd4b129b0772","sha512":"93b968dc302c84ba974858fdbdbf53b3869104fe9469739eaee613d3d5ba250186e3b239836020524d617e53504cdba79827631c45f00eb0d90a3b4b47494c0d","ssdeep":"3072:AaeDGCcbOogBx8RvhXKY0RuWXlIAkS27pdmGkXI2XOFLycgCdRhdX:AadfgBx8RvhXapkSaDk4YGLygdRz","tlshash":"491412b4041fb1d9eff4c553a88abc0957e26de8a1cd66df3da18a05b0a615db03c27c","first_seen":"2026-08-22T12:36:03.997318Z","last_seen":"2026-08-22T15:40:37.684233Z","times_seen":5,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlorders.de/assets/default-b8062306a9c370ef50f5.woff2","fqdn":"dhlorders.de","domain":"dhlorders.de","tld":"de"},"ip":{"addr":"169.58.2.83","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dhlorders.de/","date":"2026-08-22T12:44:38.865Z","timestamp":1787402678865,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhlorders.de","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 20:11:48 GMT","end":"Thu, 19 Nov 2026 20:11:47 GMT"},"fingerprint":{"sha1":"0B:9A:08:E2:D9:DB:26:E3:8C:BC:77:55:5A:71:E4:EA:72:47:A3:DA","sha256":"66:41:34:32:C2:E3:56:12:5C:1B:76:CC:98:34:56:DE:69:2F:71:60:39:52:23:7E:05:4D:8F:37:76:C6:91:46"}}},"request":{"raw":"GET /assets/default-b8062306a9c370ef50f5.woff2 HTTP/1.1\r\nHost: dhlorders.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhlorders.de/assets/shipment_generator-kHYuUtyV.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 22 Aug 2026 12:44:38 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 43256\r\nlast-modified: Sat, 22 Aug 2026 08:21:03 GMT\r\netag: \"6a895bef-a8f8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43256,"size_decoded":43696,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43256, version 2.-32768","md5":"7c78ed94c58cacd1f24bec2dd0724c41","sha1":"5946e418e8aa97e82d1a221546d3b8548c9686c1","sha256":"964428f3546449e96f666cacf33cc3fbe9c47f67d6f062697e0e68151aaa1691","sha512":"3242a850f1327657187c0691fe68c7d2d6780dc7b0f1ec0c1c3c58f9b9e8c1fb3a2a2b51c6823cc7be1ff1844f86254f3bfdf013b64126b1ae55e13011f16789","ssdeep":"768:/BG96KLcPWffIY++aePqxV+GoDGri5D/u1IC3jX+0KAQxgRIhe:/A6dPWfTTWxZPO1/uKO9TYk","tlshash":"1213f1e500ca80cdb8650af26d864f4ef0cdd1da59bc4654b119f8acbb14b943f772e2","first_seen":"2023-05-01T10:33:17Z","last_seen":"2026-08-22T14:44:12.148408Z","times_seen":728,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"dhlorders.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"dhlorders.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}