{"report_id":"02a9823f-07c4-445a-95c7-c69b65829f06","version":6,"status":"done","tags":[],"date":"2025-12-18T08:59:30Z","url":{"schema":"https","addr":"vero-update.com/personal-details.php","fqdn":"vero-update.com","domain":"vero-update.com","tld":"com"},"ip":{"addr":"198.251.89.82","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"final":{"url":{"schema":"https","addr":"vero-update.com/personal-details.php","fqdn":"vero-update.com","domain":"vero-update.com","tld":"com"},"title":"Henkilöasiakkaat - vero.fi","dom":{"size":10686,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"2bdd238a9e858d448e50430c7c2861b6","sha1":"cb6d8e48f34979808c0516e8a7087f0a590114da","sha256":"6e96e605db4555214d1b19b5cd8af8c3bdf328f2d609bf97b9775a8fdc952d00","sha512":"a39fd2cc2355f450cc2899ab7e53118c1a7dd81f1242f8051f59500bd03f027b4c2778f28b84d44f7020fee0dc2b5cda60a423c830382d99e638abc70a58b0fa","ssdeep":"192:nYuJ0dGPYzfAcyo+FUgTgpge1gjgb2tKOwl2:OGPw+FM5Owl2","tlshash":"93221e11d8fe4037918286b57bf12a0e2faa8657c30d8e1472ac4bd96fc7e15ce87469","dom_hash":"domhash4aecc679ac2782a865077652d918a370","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"vero-update.com/personal-details.php","fqdn":"vero-update.com","domain":"vero-update.com","tld":"com"},"ip":{"addr":"198.251.89.82","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"tags":["soteria"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-22T08:59:30Z","useragent":"Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36","referer":"soteria","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"vero-update.com","ip":{"addr":"198.251.89.82","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":13,"received_data":113413,"sent_data":7900,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"todentaminen.posti.fi","ip":{"addr":"108.157.214.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1991-01-01","domain_rank":1224332,"first_seen":"2013-07-17T11:55:09Z","last_seen":"2025-12-18T08:59:26.96068Z","alert_count":0,"request_count":1,"received_data":23806,"sent_data":549,"comment":"","tags":null,"fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.vero.fi","ip":{"addr":"20.73.147.28","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"domain_registered":"1998-04-17","domain_rank":149462,"first_seen":"2017-01-31T11:03:04Z","last_seen":"2025-12-13T07:45:05.807Z","alert_count":0,"request_count":2,"received_data":19834,"sent_data":1126,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Microsoft Power BI","description":"Microsoft Power BI is a data analytics platform that transforms company data into rich visuals for insights and decision-making.","website":"https://www.microsoft.com/en-us/power-platform/products/power-bi","common_platform_enumeration":"","icon":"MicrosoftPowerBI.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Azure Monitor","description":"Azure Monitor collects monitoring telemetry from a variety of on-premises and Azure sources. Azure Monitor helps you maximise the availability and performance of your applications and services.","website":"https://azure.microsoft.com/en-us/services/monitor","common_platform_enumeration":"","icon":"Azure.svg","categories":["Analytics","Performance"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"vero-update.com/personal-details.php","fqdn":"vero-update.com","domain":"vero-update.com","tld":"com"},"ip":{"addr":"198.251.89.82","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"eventHandler","is_inline":false,"md5":"b480967854c4ba729c9f5207ff65d971","sha1":"bafb27f259ed8aa60f84a498861f349ecc94ef40","sha256":"564a4d06910172cd24690791d14076da18278f0663509387392851534ff6c27c","sha512":"5918f5d6342cf7f706dc2fa0cf1bfcd87856a997aff1a99f63596092a2e084aa62610900a9f435614d5f5fee6d6c845bdf5390f47c74400934bf7487fd798033","ssdeep":"","tlshash":"26600000033030c30030000c3003030c000c03ffc003c00000000000fc000c3f0330f0","size":15,"data":"","first_seen":"2023-04-12T02:41:02Z","last_seen":"2026-05-21T11:06:34.099021Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vero-update.com/personal-details.php","fqdn":"vero-update.com","domain":"vero-update.com","tld":"com"},"ip":{"addr":"198.251.89.82","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"62b88a477989863129eb99c2ed984fe8","sha1":"b63ed6fd885c299bafbf43a2b334bebab12fd01f","sha256":"13c72a97e942eceb0a73132688a9686e9291f50bfd05e41a4cadbb78956787d8","sha512":"4f2484cbae3a690d3becf25cf87440b01063136692e978ba78e94d4e363974b772de752c242b75d256502a39a71214f402516cafce97ecb6e848648f70f67abb","ssdeep":"","tlshash":"3b21c0615cb9b0630e671021170fb2992165f043c70dc403351fc7e81fcc988e7879e2","size":1178,"data":"","first_seen":"2025-12-18T08:59:34.457924Z","last_seen":"2025-12-18T09:01:48.846121Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.vero.fi/henkiloasiakkaat/","fqdn":"www.vero.fi","domain":"vero.fi","tld":"fi"},"ip":{"addr":"20.73.147.28","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vero-update.com/personal-details.php","date":"2025-12-18T08:59:10.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.vero.fi","organization":"Verohallinto"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 12 Mar 2025 00:00:00 GMT","end":"Wed, 11 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"85:0B:2F:64:FF:58:9D:68:51:6A:EE:08:3B:1C:A9:D4:52:2D:EE:3F","sha256":"83:A6:A5:68:78:83:75:76:CC:60:E4:44:B5:42:08:69:DD:D7:DA:02:C1:32:DE:DF:79:E2:8D:5F:21:E7:90:EB"}}},"request":{"raw":"GET /henkiloasiakkaat/ HTTP/1.1\r\nHost: www.vero.fi\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vero-update.com/\r\nCookie: ApplicationGatewayAffinityCORS=3348266fe6022f9b71d2a818efb17cff\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 18 Dec 2025 08:59:10 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public,max-age=30\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nRequest-Context: appId=cid-v1:acd6aabc-eb0a-47bb-ba8a-91404dbcd89b\r\nContent-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' occhat.elisa.fi cdn.askem.com customer.cludo.com; img-src 'self' data: occhat.elisa.fi vero.piwik.pro https://analytiikka.ahtp.fi/ master.boost.ai boost-files-general-eu-west-1-test.s3-eu-west-1.amazonaws.com boost-files-general-eu-west-1-prod.s3-eu-west-1.amazonaws.com cdn.askem.com; media-src 'self'; font-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' occhat.elisa.fi vero.piwik.pro vero.containers.piwik.pro https://analytiikka.ahtp.fi/ *.boost.ai cdn.askem.com *.monitor.azure.com *.cdn.applicationinsights.io customer.cludo.com; connect-src 'self' occhat.elisa.fi wss://occhat.elisa.fi vero.piwik.pro https://analytiikka.ahtp.fi/ *.boost.ai youtube.com feedback.askem.com *.in.applicationinsights.azure.com js.monitor.azure.com api.cludo.com; frame-src 'self' hkp.maanmittauslaitos.fi https://www.youtube.com https://app.powerbi.com; frame-ancestors 'self' yritys.tunnistus.fi htesti.katso.tunnistus.fi;\r\nX-Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' occhat.elisa.fi cdn.askem.com customer.cludo.com; img-src 'self' data: occhat.elisa.fi vero.piwik.pro https://analytiikka.ahtp.fi/ master.boost.ai boost-files-general-eu-west-1-test.s3-eu-west-1.amazonaws.com boost-files-general-eu-west-1-prod.s3-eu-west-1.amazonaws.com cdn.askem.com; media-src 'self'; font-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' occhat.elisa.fi vero.piwik.pro vero.containers.piwik.pro https://analytiikka.ahtp.fi/ *.boost.ai cdn.askem.com *.monitor.azure.com *.cdn.applicationinsights.io customer.cludo.com; connect-src 'self' occhat.elisa.fi wss://occhat.elisa.fi vero.piwik.pro https://analytiikka.ahtp.fi/ *.boost.ai youtube.com feedback.askem.com *.in.applicationinsights.azure.com js.monitor.azure.com api.cludo.com; frame-src 'self' hkp.maanmittauslaitos.fi https://www.youtube.com https://app.powerbi.com; frame-ancestors 'self' yritys.tunnistus.fi htesti.katso.tunnistus.fi;\r\nSet-Cookie: EPiStateMarker=true; path=/\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1\r\nStrict-Transport-Security: max-age=15768000\r\nX-Server: 02\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Microsoft Power BI","description":"Microsoft Power BI is a data analytics platform that transforms company data into rich visuals for insights and decision-making.","website":"https://www.microsoft.com/en-us/power-platform/products/power-bi","common_platform_enumeration":"","icon":"MicrosoftPowerBI.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Azure Monitor","description":"Azure Monitor collects monitoring telemetry from a variety of on-premises and Azure sources. Azure Monitor helps you maximise the availability and performance of your applications and services.","website":"https://azure.microsoft.com/en-us/services/monitor","common_platform_enumeration":"","icon":"Azure.svg","categories":["Analytics","Performance"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-31T18:31:00.561381Z","times_seen":15971922,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vero-update.com/front_end/front_end_files/posti/posti_background_left.svg","fqdn":"vero-update.com","domain":"vero-update.com","tld":"com"},"ip":{"addr":"198.251.89.82","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vero-update.com/personal-details.php","date":"2025-12-18T08:59:10.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vero-update.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 10:30:16 GMT","end":"Sun, 22 Feb 2026 10:30:15 GMT"},"fingerprint":{"sha1":"9A:02:C0:A8:50:6E:F0:59:F9:B0:7B:7C:6D:EB:73:CF:72:0D:72:F2","sha256":"25:E1:96:1B:50:74:86:B5:D0:FF:F5:38:09:6F:3C:49:55:96:6D:36:68:AC:AA:12:21:1E:29:30:1A:4C:E2:88"}}},"request":{"raw":"GET /front_end/front_end_files/posti/posti_background_left.svg HTTP/1.1\r\nHost: vero-update.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vero-update.com/front_end/front_end_files/posti/style.css\r\nCookie: PHPSESSID=06gfoag73ue9r2lt1hmcafsi0k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Dec 2025 08:59:10 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 16 Dec 2022 12:04:25 GMT\r\netag: \"61bf-639c5ec9-694aa673cc81ecf9;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 7965\r\ndate: Thu, 18 Dec 2025 08:59:10 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25023,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bf6039c35ec648ab802976c2b801efca","sha1":"278ba56a7e8afd3397cdb243b9076002a05be85e","sha256":"ef5e830d7c7e0830b340ac67d5b9bfd46aaca550740548d5cfc5322c75b95bdc","sha512":"ccd67754d594a024254a447a06d854eb9ffc10feabeb9254dc7b6767f4ac5cc682d79d968e82bbdaa0822cea5ff0250f6f7eb88e89a139feb830adb644641113","ssdeep":"384:7JYKTC6d7GCpG+J577MDKt99JovlKsTnchZsNlN/6bBb1zu2uAba5hA8rQBO:72KuslIO09Zvd6on","tlshash":"4eb295ec2af455ec9c4283e6ef2910b53f1fe1fb73804668ee1d1e102952866ec5b9d1","first_seen":"2023-06-09T09:54:11Z","last_seen":"2025-12-18T09:01:51.261255Z","times_seen":9,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vero-update.com/front_end/front_end_files/posti/arrow_right","fqdn":"vero-update.com","domain":"vero-update.com","tld":"com"},"ip":{"addr":"198.251.89.82","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vero-update.com/personal-details.php","date":"2025-12-18T08:59:10.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vero-update.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 10:30:16 GMT","end":"Sun, 22 Feb 2026 10:30:15 GMT"},"fingerprint":{"sha1":"9A:02:C0:A8:50:6E:F0:59:F9:B0:7B:7C:6D:EB:73:CF:72:0D:72:F2","sha256":"25:E1:96:1B:50:74:86:B5:D0:FF:F5:38:09:6F:3C:49:55:96:6D:36:68:AC:AA:12:21:1E:29:30:1A:4C:E2:88"}}},"request":{"raw":"GET /front_end/front_end_files/posti/arrow_right HTTP/1.1\r\nHost: vero-update.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vero-update.com/front_end/front_end_files/posti/style.css\r\nCookie: PHPSESSID=06gfoag73ue9r2lt1hmcafsi0k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Thu, 18 Dec 2025 08:59:10 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-05-31T17:26:22.786229Z","times_seen":130957,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vero-update.com/js/cntdjs/cntd.js","fqdn":"vero-update.com","domain":"vero-update.com","tld":"com"},"ip":{"addr":"198.251.89.82","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vero-update.com/personal-details.php","date":"2025-12-18T08:59:10.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vero-update.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 10:30:16 GMT","end":"Sun, 22 Feb 2026 10:30:15 GMT"},"fingerprint":{"sha1":"9A:02:C0:A8:50:6E:F0:59:F9:B0:7B:7C:6D:EB:73:CF:72:0D:72:F2","sha256":"25:E1:96:1B:50:74:86:B5:D0:FF:F5:38:09:6F:3C:49:55:96:6D:36:68:AC:AA:12:21:1E:29:30:1A:4C:E2:88"}}},"request":{"raw":"GET /js/cntdjs/cntd.js HTTP/1.1\r\nHost: vero-update.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vero-update.com/personal-details.php\r\nCookie: PHPSESSID=06gfoag73ue9r2lt1hmcafsi0k\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Thu, 18 Dec 2025 08:59:10 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-05-31T17:26:22.786229Z","times_seen":130957,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vero-update.com/js/shared/loading.js","fqdn":"vero-update.com","domain":"vero-update.com","tld":"com"},"ip":{"addr":"198.251.89.82","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vero-update.com/personal-details.php","date":"2025-12-18T08:59:10.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vero-update.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 10:30:16 GMT","end":"Sun, 22 Feb 2026 10:30:15 GMT"},"fingerprint":{"sha1":"9A:02:C0:A8:50:6E:F0:59:F9:B0:7B:7C:6D:EB:73:CF:72:0D:72:F2","sha256":"25:E1:96:1B:50:74:86:B5:D0:FF:F5:38:09:6F:3C:49:55:96:6D:36:68:AC:AA:12:21:1E:29:30:1A:4C:E2:88"}}},"request":{"raw":"GET /js/shared/loading.js HTTP/1.1\r\nHost: vero-update.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vero-update.com/personal-details.php\r\nCookie: PHPSESSID=06gfoag73ue9r2lt1hmcafsi0k\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Thu, 18 Dec 2025 08:59:10 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-05-31T17:26:22.786229Z","times_seen":130957,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"todentaminen.posti.fi/uas/template/postifi/logo.ico?locale=en","fqdn":"todentaminen.posti.fi","domain":"posti.fi","tld":"fi"},"ip":{"addr":"108.157.214.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vero-update.com/personal-details.php","date":"2025-12-18T08:59:10.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prd.auth.posticloud.fi","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 03 Dec 2025 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"53:66:F0:BA:35:07:AC:E7:C2:4A:8F:DD:E4:58:81:53:DE:37:D7:05","sha256":"B8:87:48:69:1A:86:EF:A7:AF:4C:B4:A4:90:67:D1:9F:C4:71:15:69:E0:47:79:DB:C5:D2:0B:B8:36:4E:C2:D6"}}},"request":{"raw":"GET /uas/template/postifi/logo.ico?locale=en HTTP/1.1\r\nHost: todentaminen.posti.fi\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vero-update.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/x-icon\r\ncontent-length: 22382\r\nserver: CloudFront\r\ndate: Thu, 18 Dec 2025 08:59:06 GMT\r\nset-cookie: AWSALB=zPnwJhUzN1FzSGuEHnhajoANQav6IOZkaW50Mlp58pLdLArRBMNRdHDvV1jIfeuElHmXnaKqjcc1BjSX0a5bhvYjlMT0TpPnaWbD0Ndqk+w6vBO01oPaNlxng4OQ; Expires=Thu, 25 Dec 2025 08:59:06 GMT; Path=/; Secure; SameSite=None\nAWSALBCORS=zPnwJhUzN1FzSGuEHnhajoANQav6IOZkaW50Mlp58pLdLArRBMNRdHDvV1jIfeuElHmXnaKqjcc1BjSX0a5bhvYjlMT0TpPnaWbD0Ndqk+w6vBO01oPaNlxng4OQ; Expires=Thu, 25 Dec 2025 08:59:06 GMT; Path=/; SameSite=None; Secure\r\ncache-control: public\r\nexpires: Thu, 18 Dec 2025 09:59:06 GMT\r\nlast-modified: Wed, 12 Apr 2023 10:37:44 GMT\r\ncontent-security-policy: default-src 'none';            connect-src 'self';            frame-src *.posti.fi *.posti.com *.netposti.fi *.omaposti.fi *.omaposti.com *.itella.fi *.itella.com *.postinext.fi *.postinext.com *.posticloud.fi;            script-src 'self' 'unsafe-inline';            img-src 'self';            style-src 'self' 'unsafe-inline';            font-src 'self';\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: deny\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e2bc8da8a8d03748525187195f797d86.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: g_t7gue1ISOjNdSGW-mbJfDU_FNRWW0uSM9zhauItyWd0Q8mHTkK5Q==\r\nage: 4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":22382,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 64x64, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c0b87f3f792f0030838fbdecea9c6e07","sha1":"dc33b2d63565b18ce12c3fecde3721075b6278dc","sha256":"ea6ec16c4b53ef2fa344f940002b96b8625c755514ca25229ebdcb3a197ced14","sha512":"94261bfef7dbc738ce16f68b4e5c2781c23dde11596374c74e9ec431e5ded615a0521714f397d07149a07898c58362701a8e5aec69a1845d200896e61bd85e0a","ssdeep":"96:kojMuKDZQYWIRFcIZieg4S7nxYH0gvQF:kojMuKDRZTcIZieg91YH1QF","tlshash":"e9a2596ba00163f5ca6e4a7b0eaf9946407ffc4e15645101898cbf1fb73316a15a7f0e","first_seen":"2023-10-25T04:34:19Z","last_seen":"2025-12-18T09:01:51.279049Z","times_seen":11,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":1,"connect":8,"send":0,"wait":31,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vero-update.com/personal-details.php","fqdn":"vero-update.com","domain":"vero-update.com","tld":"com"},"ip":{"addr":"198.251.89.82","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-18T08:59:08.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vero-update.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 10:30:16 GMT","end":"Sun, 22 Feb 2026 10:30:15 GMT"},"fingerprint":{"sha1":"9A:02:C0:A8:50:6E:F0:59:F9:B0:7B:7C:6D:EB:73:CF:72:0D:72:F2","sha256":"25:E1:96:1B:50:74:86:B5:D0:FF:F5:38:09:6F:3C:49:55:96:6D:36:68:AC:AA:12:21:1E:29:30:1A:4C:E2:88"}}},"request":{"raw":"GET /personal-details.php HTTP/1.1\r\nHost: vero-update.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: PHPSESSID=06gfoag73ue9r2lt1hmcafsi0k; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 2384\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ndate: Thu, 18 Dec 2025 08:59:10 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11699,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"56539cedd4b5d6c3e240e6b418f91e04","sha1":"e51138bdaea8029c87a868ca9713583f52746396","sha256":"5b597efee6ff7c3de3bff95d03d0b22830a4abbf10e60601d9a6ccd97fc65274","sha512":"4e143ab36d570518246d8297f1ad20c2db266665097d0ff13f868e097b5bf816e5a5c59ee0e117163b915ca205c59916b51ec3e622ab233754e9df8a94c6fc67","ssdeep":"192:xGuJWdGFYzfAByo+FUgp2H2k2x2mtKOEly:IGF9+FyOEly","tlshash":"ce322011d8fe5033928286b57bf12b0e2fa78257c34d8e0472ac4bd96fc7a14de83469","first_seen":"2025-12-18T08:59:34.453692Z","last_seen":"2025-12-18T09:01:48.840233Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1683,"timings":{"blocked":162,"dns":1,"connect":66,"send":0,"wait":1355,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vero-update.com/js/cntdjs/jquery.js","fqdn":"vero-update.com","domain":"vero-update.com","tld":"com"},"ip":{"addr":"198.251.89.82","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vero-update.com/personal-details.php","date":"2025-12-18T08:59:10.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vero-update.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 10:30:16 GMT","end":"Sun, 22 Feb 2026 10:30:15 GMT"},"fingerprint":{"sha1":"9A:02:C0:A8:50:6E:F0:59:F9:B0:7B:7C:6D:EB:73:CF:72:0D:72:F2","sha256":"25:E1:96:1B:50:74:86:B5:D0:FF:F5:38:09:6F:3C:49:55:96:6D:36:68:AC:AA:12:21:1E:29:30:1A:4C:E2:88"}}},"request":{"raw":"GET /js/cntdjs/jquery.js HTTP/1.1\r\nHost: vero-update.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vero-update.com/personal-details.php\r\nCookie: PHPSESSID=06gfoag73ue9r2lt1hmcafsi0k\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Thu, 18 Dec 2025 08:59:10 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-05-31T17:26:22.786229Z","times_seen":130957,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vero-update.com/front_end/front_end_files/posti/chevron_down_gray","fqdn":"vero-update.com","domain":"vero-update.com","tld":"com"},"ip":{"addr":"198.251.89.82","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vero-update.com/personal-details.php","date":"2025-12-18T08:59:10.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vero-update.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 10:30:16 GMT","end":"Sun, 22 Feb 2026 10:30:15 GMT"},"fingerprint":{"sha1":"9A:02:C0:A8:50:6E:F0:59:F9:B0:7B:7C:6D:EB:73:CF:72:0D:72:F2","sha256":"25:E1:96:1B:50:74:86:B5:D0:FF:F5:38:09:6F:3C:49:55:96:6D:36:68:AC:AA:12:21:1E:29:30:1A:4C:E2:88"}}},"request":{"raw":"GET /front_end/front_end_files/posti/chevron_down_gray HTTP/1.1\r\nHost: vero-update.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vero-update.com/front_end/front_end_files/posti/style.css\r\nCookie: PHPSESSID=06gfoag73ue9r2lt1hmcafsi0k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Thu, 18 Dec 2025 08:59:10 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-05-31T17:26:22.786229Z","times_seen":130957,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vero-update.com/front_end/front_end_files/posti/montserrat-latin.woff2","fqdn":"vero-update.com","domain":"vero-update.com","tld":"com"},"ip":{"addr":"198.251.89.82","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vero-update.com/personal-details.php","date":"2025-12-18T08:59:10.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vero-update.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 10:30:16 GMT","end":"Sun, 22 Feb 2026 10:30:15 GMT"},"fingerprint":{"sha1":"9A:02:C0:A8:50:6E:F0:59:F9:B0:7B:7C:6D:EB:73:CF:72:0D:72:F2","sha256":"25:E1:96:1B:50:74:86:B5:D0:FF:F5:38:09:6F:3C:49:55:96:6D:36:68:AC:AA:12:21:1E:29:30:1A:4C:E2:88"}}},"request":{"raw":"GET /front_end/front_end_files/posti/montserrat-latin.woff2 HTTP/1.1\r\nHost: vero-update.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vero-update.com/front_end/front_end_files/posti/style.css\r\nCookie: PHPSESSID=06gfoag73ue9r2lt1hmcafsi0k\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Dec 2025 08:59:10 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 16 Dec 2022 12:02:07 GMT\r\netag: \"4ae4-639c5e3f-a81f2ebd9e562d07;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 19172\r\ndate: Thu, 18 Dec 2025 08:59:10 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19172,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19172, version 1.0","md5":"bc3aa95dca08f5fee5291e34959c27bc","sha1":"7b7c670ef2f0ba7fc0ce6437e523ccbdc847fde2","sha256":"8767f01caa430c5bd4e3b008a8e9dfe022156a4e91a23c394fdcb05c267f1b94","sha512":"85cc524212a46027603f8d6874a7cab0fa3073945d1e19114e078cee8d3a569f223f29e46ae6193f50a6920999021f813dc8d31db5e742193daf03642e71771e","ssdeep":"384:Ilgjo21aYq24KoEX8J2ewKprK8lwNPz+TCD3nRmaKTdxZe:IlIjq24ku2exprKNVYA","tlshash":"0d82e0108a92d2e5f8f9061642a4635fc9760d84fc32f28584ee17ecb4bb5b724d5e3c","first_seen":"2023-04-30T18:40:31Z","last_seen":"2026-05-31T15:58:15.144282Z","times_seen":3288,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vero-update.com/front_end/front_end_files/posti/style.css","fqdn":"vero-update.com","domain":"vero-update.com","tld":"com"},"ip":{"addr":"198.251.89.82","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vero-update.com/personal-details.php","date":"2025-12-18T08:59:10.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vero-update.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 10:30:16 GMT","end":"Sun, 22 Feb 2026 10:30:15 GMT"},"fingerprint":{"sha1":"9A:02:C0:A8:50:6E:F0:59:F9:B0:7B:7C:6D:EB:73:CF:72:0D:72:F2","sha256":"25:E1:96:1B:50:74:86:B5:D0:FF:F5:38:09:6F:3C:49:55:96:6D:36:68:AC:AA:12:21:1E:29:30:1A:4C:E2:88"}}},"request":{"raw":"GET /front_end/front_end_files/posti/style.css HTTP/1.1\r\nHost: vero-update.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vero-update.com/personal-details.php\r\nCookie: PHPSESSID=06gfoag73ue9r2lt1hmcafsi0k\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Dec 2025 08:59:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 16 Dec 2022 12:04:39 GMT\r\netag: \"4672-639c5ed7-8868f7f70e017f5b;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3972\r\ndate: Thu, 18 Dec 2025 08:59:10 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18034,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1c696a257a1a0a1b3ea824da1896fc8d","sha1":"9f61dc9bb4ca03cb7d02e8aac14633266225a82d","sha256":"d768a8c5fabbef1b079922c539cfa8367b5a2864176ee405f640680d26d2d76a","sha512":"0d1607aae064c6c132c8baa1029ea7d39b1f60f46bdd0e4d541d6009213d8a12c73b5e4e0fe16a9117d6c7dc2bece041f0c812093e4186331ec491c468bcf90e","ssdeep":"192:ZnLQ2yn8ndFvfvGlxr3msENWQ/zr5J5uP/FImzSlWsvZ58+KXZLTv1KSGJOlWK5b:ZnLD8hejD/XFw","tlshash":"f78240519ea3180ab44bc46d7be77342e32c4003a549cd3d7fad76989fca194c1aeb9c","first_seen":"2023-04-06T10:45:02Z","last_seen":"2025-12-18T09:01:51.268158Z","times_seen":10,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vero-update.com/js/cntdjs/jquery.mask.js","fqdn":"vero-update.com","domain":"vero-update.com","tld":"com"},"ip":{"addr":"198.251.89.82","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vero-update.com/personal-details.php","date":"2025-12-18T08:59:10.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vero-update.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 10:30:16 GMT","end":"Sun, 22 Feb 2026 10:30:15 GMT"},"fingerprint":{"sha1":"9A:02:C0:A8:50:6E:F0:59:F9:B0:7B:7C:6D:EB:73:CF:72:0D:72:F2","sha256":"25:E1:96:1B:50:74:86:B5:D0:FF:F5:38:09:6F:3C:49:55:96:6D:36:68:AC:AA:12:21:1E:29:30:1A:4C:E2:88"}}},"request":{"raw":"GET /js/cntdjs/jquery.mask.js HTTP/1.1\r\nHost: vero-update.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vero-update.com/personal-details.php\r\nCookie: PHPSESSID=06gfoag73ue9r2lt1hmcafsi0k\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Thu, 18 Dec 2025 08:59:10 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-05-31T17:26:22.786229Z","times_seen":130957,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vero-update.com/front_end/front_end_files/posti/posti_background_right.svg","fqdn":"vero-update.com","domain":"vero-update.com","tld":"com"},"ip":{"addr":"198.251.89.82","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vero-update.com/personal-details.php","date":"2025-12-18T08:59:10.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vero-update.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 10:30:16 GMT","end":"Sun, 22 Feb 2026 10:30:15 GMT"},"fingerprint":{"sha1":"9A:02:C0:A8:50:6E:F0:59:F9:B0:7B:7C:6D:EB:73:CF:72:0D:72:F2","sha256":"25:E1:96:1B:50:74:86:B5:D0:FF:F5:38:09:6F:3C:49:55:96:6D:36:68:AC:AA:12:21:1E:29:30:1A:4C:E2:88"}}},"request":{"raw":"GET /front_end/front_end_files/posti/posti_background_right.svg HTTP/1.1\r\nHost: vero-update.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vero-update.com/front_end/front_end_files/posti/style.css\r\nCookie: PHPSESSID=06gfoag73ue9r2lt1hmcafsi0k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Dec 2025 08:59:10 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 16 Dec 2022 12:04:15 GMT\r\netag: \"5a05-639c5ebf-b6c47e23dc4d98d5;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 9414\r\ndate: Thu, 18 Dec 2025 08:59:10 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23045,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f17db2b7f8f0f0427b33e12bcb1d0d5c","sha1":"b4726c69a12884f3c769b809310088d6fc3b4ac1","sha256":"15cba496cec1f19d4d41fb36d138a54cc350f9fdb20cbe8ffdfa40e89fe5bdb0","sha512":"d6cfee3c40f57ab350243cb35d3dceb865827d4340c8425736ea6909e0aa7199286ed8c7b129ffb67fc25713725417db62b22ae2196e0695c45081a9db571d89","ssdeep":"384:twoBtZO/mWqS4b9jjUDEe0+Vy90hnY7tKUJ2GWpfln7SiSiGa7FPiIOs+0L:twojQJqpjoEe580hnSeGafsytgw","tlshash":"cfa294ee2fb44ee4e8c9e3fbaf1540d9391694fb66858a24d25c4e58394397ccc42ec1","first_seen":"2023-06-09T09:54:11Z","last_seen":"2025-12-18T09:01:51.26328Z","times_seen":9,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vero-update.com/js/shared/online_status.js","fqdn":"vero-update.com","domain":"vero-update.com","tld":"com"},"ip":{"addr":"198.251.89.82","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vero-update.com/personal-details.php","date":"2025-12-18T08:59:10.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vero-update.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 10:30:16 GMT","end":"Sun, 22 Feb 2026 10:30:15 GMT"},"fingerprint":{"sha1":"9A:02:C0:A8:50:6E:F0:59:F9:B0:7B:7C:6D:EB:73:CF:72:0D:72:F2","sha256":"25:E1:96:1B:50:74:86:B5:D0:FF:F5:38:09:6F:3C:49:55:96:6D:36:68:AC:AA:12:21:1E:29:30:1A:4C:E2:88"}}},"request":{"raw":"GET /js/shared/online_status.js HTTP/1.1\r\nHost: vero-update.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vero-update.com/personal-details.php\r\nCookie: PHPSESSID=06gfoag73ue9r2lt1hmcafsi0k\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Thu, 18 Dec 2025 08:59:10 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-05-31T17:26:22.786229Z","times_seen":130957,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vero-update.com/front_end/front_end_files/posti/logo","fqdn":"vero-update.com","domain":"vero-update.com","tld":"com"},"ip":{"addr":"198.251.89.82","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vero-update.com/personal-details.php","date":"2025-12-18T08:59:10.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vero-update.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 10:30:16 GMT","end":"Sun, 22 Feb 2026 10:30:15 GMT"},"fingerprint":{"sha1":"9A:02:C0:A8:50:6E:F0:59:F9:B0:7B:7C:6D:EB:73:CF:72:0D:72:F2","sha256":"25:E1:96:1B:50:74:86:B5:D0:FF:F5:38:09:6F:3C:49:55:96:6D:36:68:AC:AA:12:21:1E:29:30:1A:4C:E2:88"}}},"request":{"raw":"GET /front_end/front_end_files/posti/logo HTTP/1.1\r\nHost: vero-update.com\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vero-update.com/personal-details.php\r\nCookie: PHPSESSID=06gfoag73ue9r2lt1hmcafsi0k\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 16 Dec 2022 12:00:44 GMT\r\netag: \"df7-639c5dec-e092ea28d3ddf37a;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 3575\r\ndate: Thu, 18 Dec 2025 08:59:10 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3575,"size_decoded":0,"mime_type":"text/plain","magic":"SVG Scalable Vector Graphics image","md5":"9958dd9411c1a027e8816bf31896eb3d","sha1":"9c17322837437f3ecd120840af085f0db7c91e45","sha256":"d47958fd26ce03af9e7c0dfb4dc15c713041a9aa50f8ed91d59a8bdb4d8254cf","sha512":"45c3140596f234806402bcf233d347949c7227e570d32463be0d62f5d4da71b1c711001290d8010262c63c22b7717a0e88bc818908c7e2a30a58ef80f34a4ad8","ssdeep":"","tlshash":"ba7163e7336c62d8a806b7bcc8338af479473ce33db305ced5066f60a2115994d5a885","first_seen":"2023-04-06T10:45:02Z","last_seen":"2025-12-18T09:01:51.273342Z","times_seen":9,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.vero.fi/static/img/logos/logo-vero-v2023.svg","fqdn":"www.vero.fi","domain":"vero.fi","tld":"fi"},"ip":{"addr":"20.73.147.28","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vero-update.com/personal-details.php","date":"2025-12-18T08:59:10.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.vero.fi","organization":"Verohallinto"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 12 Mar 2025 00:00:00 GMT","end":"Wed, 11 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"85:0B:2F:64:FF:58:9D:68:51:6A:EE:08:3B:1C:A9:D4:52:2D:EE:3F","sha256":"83:A6:A5:68:78:83:75:76:CC:60:E4:44:B5:42:08:69:DD:D7:DA:02:C1:32:DE:DF:79:E2:8D:5F:21:E7:90:EB"}}},"request":{"raw":"GET /static/img/logos/logo-vero-v2023.svg HTTP/1.1\r\nHost: www.vero.fi\r\nUser-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vero-update.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 18 Dec 2025 08:59:10 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 14785\r\nConnection: keep-alive\r\nSet-Cookie: ApplicationGatewayAffinityCORS=3348266fe6022f9b71d2a818efb17cff; Path=/; SameSite=None; Secure\nApplicationGatewayAffinity=3348266fe6022f9b71d2a818efb17cff; Path=/\r\nLast-Modified: Tue, 16 Dec 2025 08:02:38 GMT\r\nAccept-Ranges: bytes\r\nETag: \"1dc6e6258351ac1\"\r\nRequest-Context: appId=cid-v1:acd6aabc-eb0a-47bb-ba8a-91404dbcd89b\r\nContent-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' occhat.elisa.fi cdn.askem.com customer.cludo.com; img-src 'self' data: occhat.elisa.fi vero.piwik.pro https://analytiikka.ahtp.fi/ master.boost.ai boost-files-general-eu-west-1-test.s3-eu-west-1.amazonaws.com boost-files-general-eu-west-1-prod.s3-eu-west-1.amazonaws.com cdn.askem.com; media-src 'self'; font-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' occhat.elisa.fi vero.piwik.pro vero.containers.piwik.pro https://analytiikka.ahtp.fi/ *.boost.ai cdn.askem.com *.monitor.azure.com *.cdn.applicationinsights.io customer.cludo.com; connect-src 'self' occhat.elisa.fi wss://occhat.elisa.fi vero.piwik.pro https://analytiikka.ahtp.fi/ *.boost.ai youtube.com feedback.askem.com *.in.applicationinsights.azure.com js.monitor.azure.com api.cludo.com; frame-src 'self' hkp.maanmittauslaitos.fi https://www.youtube.com https://app.powerbi.com; frame-ancestors 'self' yritys.tunnistus.fi htesti.katso.tunnistus.fi;\r\nX-Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' occhat.elisa.fi cdn.askem.com customer.cludo.com; img-src 'self' data: occhat.elisa.fi vero.piwik.pro https://analytiikka.ahtp.fi/ master.boost.ai boost-files-general-eu-west-1-test.s3-eu-west-1.amazonaws.com boost-files-general-eu-west-1-prod.s3-eu-west-1.amazonaws.com cdn.askem.com; media-src 'self'; font-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' occhat.elisa.fi vero.piwik.pro vero.containers.piwik.pro https://analytiikka.ahtp.fi/ *.boost.ai cdn.askem.com *.monitor.azure.com *.cdn.applicationinsights.io customer.cludo.com; connect-src 'self' occhat.elisa.fi wss://occhat.elisa.fi vero.piwik.pro https://analytiikka.ahtp.fi/ *.boost.ai youtube.com feedback.askem.com *.in.applicationinsights.azure.com js.monitor.azure.com api.cludo.com; frame-src 'self' hkp.maanmittauslaitos.fi https://www.youtube.com https://app.powerbi.com; frame-ancestors 'self' yritys.tunnistus.fi htesti.katso.tunnistus.fi;\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1\r\nStrict-Transport-Security: max-age=15768000\r\nX-Server: 02\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Monitor","description":"Azure Monitor collects monitoring telemetry from a variety of on-premises and Azure sources. Azure Monitor helps you maximise the availability and performance of your applications and services.","website":"https://azure.microsoft.com/en-us/services/monitor","common_platform_enumeration":"","icon":"Azure.svg","categories":["Analytics","Performance"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Microsoft Power BI","description":"Microsoft Power BI is a data analytics platform that transforms company data into rich visuals for insights and decision-making.","website":"https://www.microsoft.com/en-us/power-platform/products/power-bi","common_platform_enumeration":"","icon":"MicrosoftPowerBI.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14785,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7b722675b14097c1a122e4db2c25fb23","sha1":"60a9345d19f1bb055e5a9ca9a9e1b1e0b2d41f74","sha256":"d1f5fe7979d443d7f005d6de72eb2906aed3f96a365d096a8bc6f939f7a9bf86","sha512":"72e912bdcea1c6e3d75c8080e777c185469b34b27c5f48395874b5278cc46526b53abf2a5fbb4fdf33576277bba4c0f28761b6595cb14cad11dd41185800499b","ssdeep":"384:f8Wxht8vFjpEpZyuufRFn6+dKrHQ8SQlV4:Pxr87fBK9/4","tlshash":"d662c7e463e8d3f4e605e7f8893aa8307e2b2cf66e62c08943e55c15a5a149c8d95cd3","first_seen":"2025-12-04T22:17:14.575937Z","last_seen":"2026-05-03T20:23:27.032924Z","times_seen":45,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":28,"dns":0,"connect":18,"send":0,"wait":36,"receive":3,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}