{"report_id":"069936e2-6226-4f96-a016-95b9dffa250c","version":0,"status":"done","tags":["meta","facebook","phishing","social"],"date":"2026-09-14T14:16:12Z","url":{"schema":"http","addr":"form.loginco.casa/","fqdn":"form.loginco.casa","domain":"loginco.casa","tld":"casa"},"ip":{"addr":"51.20.127.7","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"Sweden","country_code":"SE"},"final":{"url":{"schema":"https","addr":"form.loginco.casa/","fqdn":"form.loginco.casa","domain":"loginco.casa","tld":"casa"},"title":"Facebook","dom":{"size":428366,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"a2a6dc5332d87b457577245eaa16f2e3","sha1":"f2e0136517b4480d793790d884cfd0b03a4a8e35","sha256":"eb31bfe6955f4078c8bcbf008842446494026a98df47fb3505280953c7085464","sha512":"9f1b35efa7c35e75477e59a2ecf08bcea7360020e1212297309ce8b5666dde5928e20d76cf968ba0e79964f000145d088d010e4c4aa4e001e8a45be5ea902f1c","ssdeep":"6144:A9xpahMHqqijisp5NmzUEEZGnIWnIjiD99jifuAaibKk1kxhznaHDi9nOqRcrn3H:mshmG","tlshash":"bb944c05f908c4761a370fe1d4a67d47ab6c08078ac85de8d1ae7f7974ca6f8231bb16","dom_hash":"domhash8736a31d751a0df4bd20a376118ee272","first_seen":"2026-09-14T14:12:25.591157Z","last_seen":"2026-09-14T19:03:03.42508Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"form.loginco.casa/","fqdn":"form.loginco.casa","domain":"loginco.casa","tld":"casa"},"ip":{"addr":"51.20.127.7","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"Sweden","country_code":"SE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-19T14:16:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"form.loginco.casa","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"summary":[{"fqdn":"form.loginco.casa","ip":{"addr":"51.20.127.7","port":443,"asn":16509,"as":"AMAZON-02","country":"Sweden","country_code":"SE"},"domain_registered":"2026-08-29","domain_rank":0,"first_seen":"2026-09-14T14:12:18.89402Z","last_seen":"2026-09-14T14:12:18.894021Z","alert_count":70,"request_count":14,"received_data":427580,"sent_data":8349,"comment":"","tags":null,"fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"static.xx.fbcdn.net","ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"domain_registered":"2007-05-03","domain_rank":4147,"first_seen":"2012-12-01T13:12:13Z","last_seen":"2026-09-07T16:37:28.486455Z","alert_count":0,"request_count":24,"received_data":8926761,"sent_data":13783,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.instagram.com","ip":{"addr":"157.240.200.174","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"domain_registered":"2004-06-04","domain_rank":1133,"first_seen":"2012-07-24T14:07:05Z","last_seen":"2026-09-14T13:58:19.250115Z","alert_count":0,"request_count":3,"received_data":763599,"sent_data":1578,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4/y4/r/0WLyQz8FLJg.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a9d3fbdb1f144f91a54e81a1856cc3b","sha1":"a84ad789d054676d6e5f5860273f6290e424efe8","sha256":"6016619ce7151b12dd36fc2e026e7df6499566aee5e475c811be0ae0fe07740e","sha512":"23769ff7645b338604d1b054b8fe79cd22bf7640f35c0e63464c10c8ef4ae47f1e8cc38c5f4d17e95d4bb5ef66d026fce94da45abe0532b003a27a2217a2bebd","ssdeep":"","tlshash":"592111ccb3d86b7536da6d6840ff6307767b7033189c80349218dc641a79b915aa3dbe","size":1201,"data":"","first_seen":"2026-05-13T03:37:42.15762Z","last_seen":"2026-09-15T17:27:35.329532Z","times_seen":10832,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,cmVxdWlyZUxhenkoWyJTZXJ2ZXJKU1BheWxvYWRMaXN0ZW5lciJdLGZ1bmN0aW9uKG0pe20ucHJvY2VzcygpO30sbnVsbCwweDEwMCk=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8ac9c2cf83ac8f99a24d7f3d69b538f","sha1":"c9d59c0a74d6f66838e8b147f58a3797a9ee5be9","sha256":"5c37b7510fac99790bc53529a8552a04f730ea16c7c2ed36c3d36282d8a46da8","sha512":"0efdce043d82c555aa9f6c33060f3a0443e2ae9ac2a909e2c3f9ebcfa2547863b044dce4f98a2d353aa3c933ce04424faa56348bf4bd3a74fda0091eb341bdf3","ssdeep":"","tlshash":"eba022000e083ae00b80f0e038cbe0080eaae8833f8030200a0880ae8cf0c822fa0b0c","size":77,"data":"","first_seen":"2025-04-30T09:03:04.161526Z","last_seen":"2026-09-15T17:27:35.32547Z","times_seen":46438,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4/yb/r/pV99Uq47Nuo.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"28fa24580101ccb965246d601efab504","sha1":"987fcebce99a9d1e7ccfeb48cc4a5e52b25a0b5d","sha256":"c21185ddb7b48879e8da385016f250d22641d19675e284455e1dd249b40c6948","sha512":"ce9b7321dbbe9aeda899c85ef77b9bcc2f647409acca53b487f6c71db3c19b04b155efa8d7f655b40bedc79be9c7e9d24ef81609f007d47e4a232ea468523194","ssdeep":"","tlshash":"051104ada73498609cff172f025f760e61dd6216bc55cc1296170d14293cff27240968","size":939,"data":"","first_seen":"2025-11-05T03:18:52.968222Z","last_seen":"2026-09-14T19:03:03.457957Z","times_seen":17642,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4idBq4/yr/l/en_GB-j/EpMMPGObckQ.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"875bd5e69e27c7e47b9b35bf4c8d5322","sha1":"0257c1576a74f7fe546bd9ce03909e8035e2fc01","sha256":"e55ae9cb352b403024e98ca2cfa9ba9be3640f38ba80cc11e0d3c7ae84c63b69","sha512":"519a2f5f2ea0113ae511c89162cb10eeafc873e56386fc9aca2f5bec1bd609ec93bf3fda2492f32a901a971328963dfc2c19db8daae1014394e5d1489a1eb9b9","ssdeep":"384:9IWxVecvjzi7qp2sYf11UmzoEOExnRrogSrUBk1PglSNB8Rp94imOor:9IWxVecZG9OExRrogSrqk1P/NB8pDI","tlshash":"36c2285ab65470161b73b4b650bf020ff63e6486580e80a8f16afcda6c3c68d5627f3d","size":27514,"data":"","first_seen":"2026-07-21T12:38:28.205786Z","last_seen":"2026-09-14T19:03:03.443425Z","times_seen":519,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4iA944/yw/l/en_GB-j/M6Lt4HYr5Iy.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5834521fafa062c1145b6c272877b6d","sha1":"4b1ec249d1a0f07be2df82a8577632b8c8ac725e","sha256":"3927ad212b9d54cb9a44de0ce92a827b9330d522829571ff60d044fa36fa9fdd","sha512":"af32d38f1d76af68d65708a79b8f6d7a9498f064f0d35748d1ef926e0f26a1f4ff7a63fe0bd63a89aef30ce85e8efb8d90bfdf5505bfd8b1a53df776a2559efd","ssdeep":"3072:GVJWqwVr3BvyCjlfs3zkiPMyXmpN9lwcwwgpji0/pLMMXYoLHLNBp2nfeb3e4:Gmj0jMc+9Mi4pLM9oLH/p24","tlshash":"1f343c8db89538591e7714ad90af274bb37d3887240dc568e2b5ef922928d8f1337b1c","size":249418,"data":"","first_seen":"2026-09-14T14:12:25.605592Z","last_seen":"2026-09-14T19:03:03.430919Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4ieWN4/y0/l/en_GB-j/ayyrapzEMKxa5BXqhTg_NQYCPfv43i0iwrruBGGEYFdGhwCEsLVMyJV6uBpr9kvHpcAdF4Q4yS3Q5yLIhLjdtTF59V3TtN2HhP51QCeCZRMWgwI6-NhAsCA5LxvyfVWAYRn5Q5XLynIoHzskHM2TrHr72z775NzKCi2Sch9boWyHYdnzATCB6ghfjDQ.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca7318ff3507248fa995be576a63821d","sha1":"4c345945a65214024c8b46a6c0f56fc364e792a9","sha256":"e856004afd31ba0862eb01202f664b9b5f5d05439c40155dba1d676358e1c8db","sha512":"2b4d1a0a96c952a81dc70bae63216c82bd9b620c53438d739e395195c141426a827d20d2ad5bbec170a0506adf827c40f25c2684c428727d3d0a2307ec09af28","ssdeep":"3072:87quTFCCG4hqKC+P55jztZ00Q6hqWPLwHewsXrcXnObvCxCBvlbzO:87quTFCCDDjztZpNO","tlshash":"92245d8e7994385487fb1b6850af518b73796965240c8a24e96bdcc1bc354cfa233f2f","size":223279,"data":"","first_seen":"2026-08-05T04:37:58.225728Z","last_seen":"2026-09-14T19:03:03.451128Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4/yr/r/-fVaNOZwTxu.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0dd1b5fb487d3f64407dbd615d6639e3","sha1":"9a7b31916695ca865df404653ffea01360953ea0","sha256":"c39a42197e49cef13511f3368da1e4e116951f46b39f2795b012ced336d9b07b","sha512":"7a49f7f578da367832c48a10547f2f55e4b12177753e58698f71a8b7c0884e62e4d870ec7e9ed7ed8745981d6fc5454b41607028fbee23fdaef37b7bbe233b43","ssdeep":"768:NpNPXBRdmI8Qfs0z3T7pojMduh1Ha3ALVUxrz2aWFW:lXBRde0znpojMUrkApUxrz2aWFW","tlshash":"49e2d8dc76d1b42113eb347a51af854bf23928d6b80e9050e4a9dce07878d9e9233f6d","size":32409,"data":"","first_seen":"2026-07-24T00:44:37.634605Z","last_seen":"2026-09-14T19:03:03.441661Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4/yU/r/DcrX2w7W64E.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2fe74efd48b2d569c28c43b185b4c2f","sha1":"2c74f7bd43819e87f3f03fa0b7d71617f4f14e86","sha256":"ffaea25c6413830faf2a8ac1da308ca1b5e26549eb2d62acec4e51b50677644f","sha512":"ed74a9939eb09d29513aa08b8e71754ee1cc3a26e7ca43c73d8bab72193f73f4bc0faf01b52407b3c5a3c5e7bd8f97f6076d7ec0b822c4ca11b608cc32dd71bb","ssdeep":"6144:zTUYUyZ2Wl7ig8IWXDvzqaHOjCdxagjRdWgClEZNQBdo:zTU/fPOjCdxaro","tlshash":"f35439a976a5722592fa1472507f214bb23a9d59780e8534b1e0c8d82dbdf0e5b33f3c","size":295138,"data":"","first_seen":"2026-02-01T20:49:54.663792Z","last_seen":"2026-09-14T19:03:03.440485Z","times_seen":11761,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4/yo/r/8wDk0JreDMJ.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e94f4274b7cb14ac9e690f6acc56d5a5","sha1":"720233cfc8c8148e6313647e9e2a4e90b6591680","sha256":"028a67513a5371e86154b34082468aaaabc9bf9597eac644e3db3f36f4fbb2fd","sha512":"d65750060991265378948ee1dffbb9fdaeec0b2a1c8f07b2d91ddc1af4e05e80539eb7ed8bda1ec4d7b150419ca0db96cb7a125bae860e3c082c691f24f87f1e","ssdeep":"","tlshash":"67d0979eb099b7239601d5b0083f700bb9f3a01a6cda282cc2080b8a183645e3292b08","size":251,"data":"","first_seen":"2025-11-05T03:18:52.98314Z","last_seen":"2026-09-15T16:48:52.560622Z","times_seen":19777,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4i-zr4/yo/l/en_GB-j/k3oBGGzZDFc.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"30d2c58354e9c91447f2e9a0351616c5","sha1":"131659f04136deb81409b2d822b5e60f99b40857","sha256":"5ce3c4bf38d5036d78b279a7cead103575516cff802ae4d5077e17658793d03c","sha512":"3eaf41f5ea29ef02b84841c84648e2c5bc526a3389a5201ca338815d7c82c96e221fbd7e04bf3dd2c0fc4e255b796ca207bfa0f607eddd13181425ce4f20a52b","ssdeep":"6144:d3Jk+h3s2c7fLELSkdyJEP54RHlhziE0l1H3C:d3Jk+h3sLEez8H3C","tlshash":"c8841957b59ab01a57a7a030846f5207b3792942790f80bcf4bee8d59df484e6133bbc","size":404444,"data":"","first_seen":"2026-09-14T14:12:25.621146Z","last_seen":"2026-09-14T19:03:03.439203Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4/yt/r/MOZsV44WqNm.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d37631f651c9c1ba2e41086ce601d22f","sha1":"1ed6e627f74c9257c729ea32da5141ddec2406a6","sha256":"4dc82a65d71e9236d2fe109e4ed33936ccb46ce8d9fff965fe751a9d92033ad5","sha512":"c79ae23976603b562c1dc4208f2570b701dba9e5f953070250d4fbf149f7d67faed8d55cfdf9755a28aac309bd0ba43291d46ea6f6ab492abbd47c2f7e24c661","ssdeep":"","tlshash":"69d0a948a442dd08c3dca882985908a3a1b1f2d937c8048288b88a80b0a000bbabe64a","size":206,"data":"","first_seen":"2026-04-16T06:42:53.722287Z","last_seen":"2026-09-15T17:26:49.729033Z","times_seen":6727,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4i77y4/yF/l/en_GB-j/fc7tNSy7VS_kdSeFP4KssgWJukooR-9NvNR8emwuUeOHRi7mWBMSxEcjMVGcktGGRp72OqDwSuA8Ya7eSNpDNxgKVIPNHOqVL96GSBvj8_FEnWhlOg4ZYKX0hePZ2GqKu-kUqm8HXN6FrYZ.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c35fe2048a9c96d6dbc2340f63c3e3f","sha1":"3d1bbd6fc464cce0533467d6b5b48a37b5c89b80","sha256":"859ed8e09e0ef1ab478cdd2667b97361ae6bd97db918cf47640c0a381be86230","sha512":"e217928d95658bbbceb04ebec5537bc0cf573cc77ddd9ea89bf1f2a6d113fa22394c299103282177679aa7de934951e06f97fff45826e663257e706627c87c21","ssdeep":"3072:aMQekNoJxuYyTwu8rPp2mOELIYqbooqhL6XF7bw0EMp29m79:TQeQNkPDSbxtEMp29w9","tlshash":"38744bdc7844b4a467f764b9c0bf114bb33d3849181dc5a0f4a2ede578a48de6133aae","size":345628,"data":"","first_seen":"2026-09-14T14:12:25.596959Z","last_seen":"2026-09-14T19:03:03.434102Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4/yA/r/W1yZmaIs231.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e6803be924fc905efe8c11433ebe013","sha1":"a8e96b2ed9731a9bb9732ca12fcb0898224b310b","sha256":"eade51916ced92952c7379f68b7d7646d6b6a6a08e4f01313745c28e0d4a6a1b","sha512":"7c4a7a82b833ee620be95c43eeda6da6984820c2a8b03c7bc1603bd6aaad62ec0c9080ad838dc011be6f37794e1ce9adead6ce9b419722fd04fde215f48452da","ssdeep":"3072:he54IT2iO31EjmluaATi5JEAiI8qRP3yZLmsqkzWxI:iTOCjmluaAToiI3P3yZLmsdR","tlshash":"946409cdb6d5b42113f375b6807f920bf2396a56684d8164e5a8d8e16cb884e8333f3d","size":319579,"data":"","first_seen":"2026-07-25T01:19:29.925538Z","last_seen":"2026-09-14T19:03:03.429264Z","times_seen":370,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4i_054/ya/l/en_GB-j/E4naZXWX8HX.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"919e45eb643d7a14f8c389bbaaae04cc","sha1":"c4c7720460269ffb6dcfb8f937ba74ee3e18d4e7","sha256":"4d70cd6be7d3e81824a9b3d5fc1ea2e95fa72c80e1f8fbf7e06104675d12f236","sha512":"26fda682c731f1c5ba70415f23e950f843dd7eaa2f2267fde9a0d9ac5d3609d1a3726360531bd3f511ad1b0d0504b6866d29de0420096a110c0d4164b2d190a8","ssdeep":"6144:hZDASdO+3kTo+tv9ibUkRtcY8Ym/JCBPN18hs/T2WEGVNFeURg+YUW+SO:rkAzcY8Ym+Os/T2WE2GgvY1O","tlshash":"c3153b8df98830612bb751b780bf524b733d6886240ec0a4b9b1edd56a685cd6233f7d","size":905933,"data":"","first_seen":"2026-07-25T04:23:11.364009Z","last_seen":"2026-09-14T19:03:03.448021Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4iZ9D4/y1/l/en_GB-j/MO-LV0vwdp-.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c821f00dca3b68de06fdc206d128e65","sha1":"d72639fe48c4b2c09aab17e6a62be7cf5aeb2a0a","sha256":"7138acb87d6253bd8bda2d3d91fc12945e31b4462dc77d7487386034a90bf086","sha512":"ad4b29439f57488a8fb6f24874c1e4ab11d1f14a097e99bd2e7d542b532bf15baf45c3152c4a12402c6a98c60098165703095285c888f968910aa8657cb2bee4","ssdeep":"3072:I15h+1wUqE42oSPV0trf+Ra4uL5Gb4ge2iyoNy/0sJ5NSAbVY+UlJc1UHz3k39+9:4WwbsoQV0c4RLPn21/9NfdUlBA6","tlshash":"08845ccdf995742617b724b780bf024773792846280ed064f9b2eda5ad3848f6237b6c","size":399828,"data":"","first_seen":"2026-09-14T14:12:25.622751Z","last_seen":"2026-09-14T19:03:03.433042Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4idc84/yw/l/en_GB-j/aEbdLbpCnrv.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a841f9c0585d410fcfc175716b478ec6","sha1":"1ade209ed9a1d6fe0a0c8383bf8d58e84930db50","sha256":"51f0d735c6cbc4d03fc6a7b0954548e93fe828ed6577f38db7c8c2f0f02d10e1","sha512":"961acfb30677a25af6c5fdc607c2a591a878a3ca3e5a70657340e1defc99f8e518dcd9c8d0140310ce71bdaea1ffef13309d91a6c8742b54a2b7c54249605bd4","ssdeep":"1536:a8ka6OVYtfzYf8hbACJ/A7uOpljqWOdIUbg7WAFYKODuuAIyNlDhTuolFeunY2wW:4NRbL8MWAIUbg7WAFYKOD/AIa9FV","tlshash":"8e64cbaf5d42251f2016b52662b7558993ada80ce34e5dd3f6c0d420dba8bd80273fef","size":306619,"data":"","first_seen":"2026-08-05T04:37:58.235827Z","last_seen":"2026-09-14T19:03:03.426198Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4iFbC4/y6/l/en_GB-j/xrQkuqfQtzCt-5tX1QB8UwOYZUPRLvvnPYNi9EVfG7gVEapavcLqcH9v_kkAv_-wGQgXdYivvCwsHHKy1uKLQ_0jfAozIMNFBkkw1JtOGoHMq0nyQSP3ZLAfTu4yAsukPWHD6rXnoXAjey-sVjQqltBeBhusk2amyJhKMh2otzgdunJl3g9q4pR78qL69VqNNp4Gm1BHl-lElGzTH4Lah-t55E7mOl6Gkjq0OVeavkZc4HIHnCJZCcc2ZP1Mq8wypiAW_bfk-AMUuK2ufRhAdmh5DEndjkC1LYw5WWi7IP1HIUYBqZ4h.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ee7313eccd06926b59c340f62296b29","sha1":"da772e666fad52a97f5776086fc1242933f5d5b5","sha256":"3a6ad11b61ebd1f7ff2bcfb02ba5eb8fd800aa002ac1ac7382ddff0b0f1e02e4","sha512":"299fef9929bf94a0e84c4016579e6aeb3ee72a49a70bd2cbcb04de82f0cfa08c92dcaad1c2e3ae67478993d398d53e903b410a414e9cbf40b0d2a170767300b8","ssdeep":"12288:AkkIf3MQxnSK3Dx0GAK/tuw6lU340xqoHB:AOf3MQxnRzx0GFuw6hC","tlshash":"bf455cdd399934155ab711b690bf020bb33c2817280dc160f566fe9a697cc8e613bfad","size":1275383,"data":"","first_seen":"2026-09-14T14:12:25.629756Z","last_seen":"2026-09-14T19:03:03.45546Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4igzN4/yx/l/en_GB-j/RmGKhot_XkD.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"303304e837e5a3124a3580f4c4c3e615","sha1":"1cc8d179889cc749fee9ffff93edf06bc6d7a677","sha256":"f7e860e5395ce0c060a236ec8a16b97499cfccad828aba6975ec14aba50b4242","sha512":"1b36893f05b979588fcbd16432752d9a04eb6d1d16564353d1ba78ca20e1d19f340eb712dea5a11e1f00aa9e5c486d5dfffa1cc824e545ccd8a615fd476c73a6","ssdeep":"6144:VSi/iIT8ndB0DxAxF4CAe80KDEOuHXk+1OuHXk+cTm3gDCA36yDZx:v/xAxFMH6gH36yDZx","tlshash":"0eb4ae66f64d36e85a7705fd20bf69cb337c002866184e51f1a2f87422c4ee9673762b","size":505132,"data":"","first_seen":"2026-09-14T14:12:25.593803Z","last_seen":"2026-09-14T19:03:03.446836Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4/yK/r/nOapcPsRwpZ.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ea368554ce6925e4d6818507152cf71","sha1":"fb1e11b2720cc0272b98be0ac46b7deedf9b0bc6","sha256":"1eb96bab26c1258c49193ba481491f2f504bd775e03d5061d437366086db8def","sha512":"2c06d77decab07b76cf151a764f90d2caf67a72c7cec424baa1bffdfff54677aec57ed3b4d98f96e8cecd7589256ff6289ea571a0c8be5d15e9b3cff33a508dc","ssdeep":"","tlshash":"7ae0abcef168b2ea02321021073fa0077027f32868eb2000e69d8084fd282026627b1b","size":410,"data":"","first_seen":"2025-11-05T03:18:52.975313Z","last_seen":"2026-09-15T16:48:52.557401Z","times_seen":19777,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4/yD/r/kzGXhN7-usT.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"87a1b6369c7377b97e44332a5dffbf05","sha1":"fddec433afbb0c1ffce5b085238f900005d378d9","sha256":"7390de8dc41aecc87d3771b48c4c181e151e0c3fc42b01a9f5a1c05c39fc615b","sha512":"b2cf1e8023a0d9b096fa8b0121c402ac4c1b7177b2e06ed8f844706a5c8d0824e8e065fa0a7cd5252d2c1a1a8ee6e7c15e885b4cdc16f1b032ea3cf9a1b360f4","ssdeep":"","tlshash":"361102587968ca3987d900eb7c7bf337f46870253905e461695dcfed3c84e0d0531a66","size":1017,"data":"","first_seen":"2025-12-06T00:00:24.63873Z","last_seen":"2026-09-14T19:03:03.453926Z","times_seen":14363,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4iJVq4/ys/l/en_GB-j/Mki7fquN2uo.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f2ee483046fb5130a6e10264cdae7c1","sha1":"107db68d57a9401ab287c69cbfc089af9ff03432","sha256":"3bb312a9356633db763496ab8cbe43b88419fb0ea6d41fe571ca2fd1375d01fa","sha512":"4e3eae4b4a1bde26cc84406fcbea43e63133e13ac75d594a9cd4936b61bff2f7452f53352b71173f9886302de15d2b8aad70b795bf6740e3c8b5e2576b5a86cf","ssdeep":"1536:3FiU9F//JRUkCrsQJRYDBBAFxCBBvT57MAW0kUoypb/PKNHy0PVvt2:339RV8RoBBAFxCT+qTPKNH0","tlshash":"9b047e64bc4d39b8bd6f49fe91af910a736c5408b508ca70f1e2fda5aa448cc532375e","size":174358,"data":"","first_seen":"2026-07-24T17:46:02.460784Z","last_seen":"2026-09-14T19:03:03.435241Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4/yB/r/dHbqtdrFvun.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b99bd546775d489e8c6f7355307c754f","sha1":"714752c3cd349f132b6b3f151a89c7d290fd5bc9","sha256":"b62b9273c89bc3ab845abc75f54b515d2866676be4dbffa30c8dc898fc176ec1","sha512":"60dc12b5e018424fca4048c548b1d66899621500b8ca32576b1ab7b3ae785e76958e955601f4aec032765d12d257ee5acd9cb1ec08a744fcdfa58ad0797bad26","ssdeep":"","tlshash":"6fe02b8e324475702aeffd7e0acf31653056a00954415874940e56ddb4a9b8bb540de2","size":400,"data":"","first_seen":"2025-11-05T03:18:52.970351Z","last_seen":"2026-09-15T16:48:52.563061Z","times_seen":19778,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4imgg4/yQ/l/en_GB-j/V15tj8h63LNXV_vKBEegn763T-omr2qwML2OjEpNOBjYRtKQGwG0ihEa-9ML_Y_MRXHBlvxuIMFsRSR_169Kn2AO-Qx8lcabVTDOwgx-s7CoHn8mudCRXLOfwI3XLoYQF64vO2zT06LS1itQWShO2h-PYdOQEKEXaGJ8DwBsqEPHSH1YTvtL32s_6TN5GUvR7zmf91oXroJ7K59X9C3AwQd1t3qNKef6G-hKocd89O_LiCUWDnXRwDHCkV8R1onn-JtdZ7PJrsOfCedTPWKCFM-z_0Q2ncNh9-DZBIN8jKeHWrECl3_n5Wu6jBGHRQaSS1OrajkDar.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c569adae1c2348a40304ad7fd04a6c77","sha1":"c17a4501131e7043d247ca34757f443c8464e081","sha256":"5f8b58608df0a53980d3f89c6b97a3eaedf38dc48d19ccb3da5df482dce93df9","sha512":"e70223ab8440ffd9e8b0f48dade8f0d1db1c85cd5e360a5e8c0417e0462658667be50139af0a54a18c2ca169565b71b8e965ca3eb2b48282d127631b741b1576","ssdeep":"384:bqXzATMrxfZFA67elh4jEdvdp7yg88E/fvyBvMzEBtANh7lBFyDq/vgHKgl:QzdtxFA6TyygZ+dd1lBEu/Q","tlshash":"21f219886d4d3ca41dbb14eae07f4acf363d18695419cda491b3fe49e1a08ef243366d","size":35649,"data":"","first_seen":"2026-09-14T14:12:25.607988Z","last_seen":"2026-09-14T19:03:03.425618Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4i7M54/yT/l/en_GB-j/vhwZK6TCDMl.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"077ff96e414934025f0d0b9eb37bc307","sha1":"1ed7907727c0bb71ad91e5da440fec4f6b214df1","sha256":"c5d1762ff125e153b081b3700acbb68d113725dac3d5a0e6ed22097f5cb57e3a","sha512":"13561b24994eb1da6118cbeef5345296a7179fb645775e6609d76d7f5ab6523018305379ad4a153b6cd89c31cf3f9af7fe2daa14c122a83270bc368e6a58157b","ssdeep":"768:PC0EirzQ9htN3nfkArzDGB9foOqHUC3xpJo+H2rbiSup2:PCwc9htNPzIQRm9O2","tlshash":"5d23b5cbf785711243a2707189ab4a077336ad10290d81fdb96ce9cb2cbc649a537f39","size":46040,"data":"","first_seen":"2026-08-05T04:37:58.254463Z","last_seen":"2026-09-14T19:03:03.452214Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"ErrorUtils caught an error:\n\nMinified React error #418; visit https://react.dev/errors/418?args[]=text\u0026args[]= for the full message or use the non-minified dev environment for full errors and additional helpful warnings.\n\nSubsequent non-fatal errors won't be logged; see https://fburl.com/debugjs.map[actor:server1.conn0.watcher17.process7//obj151 class:Object extensible:true frozen:false isError:false ownPropertyLength:23 preview:map[kind:Object ownProperties:map[clientTime:map[configurable:true enumerable:true value:1.789395329e+09 writable:true] column:map[configurable:true enumerable:true value:28791 writable:true] componentStackFrames:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj152 class:Array extensible:true frozen:false isError:false ownPropertyLength:116 preview:map[kind:ArrayLike length:115] sealed:false type:object] writable:true] extra:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj153 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] writable:true] guardList:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj154 class:Array extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:ArrayLike length:1] sealed:false type:object] writable:true] hash:map[configurable:true enumerable:true value:yvzosf writable:true] isNormalizedError:map[configurable:true enumerable:true value:true writable:true] line:map[configurable:true enumerable:true value:357 writable:true] loggingSource:map[configurable:true enumerable:true value:ONERROR writable:true] message:map[configurable:true enumerable:true value:Minified React error #418; visit https://react.dev/errors/418?args[]=text\u0026args[]= for the full message or use the non-minified dev environment for full errors and additional helpful warnings. writable:true]] ownPropertiesLength:23] sealed:false type:object]","filename":"https://static.xx.fbcdn.net/rsrc.php/v4/yA/r/W1yZmaIs231.js","line_number":80,"column_number":567}]},"http":[{"url":{"schema":"https","addr":"form.loginco.casa/ajax/qm/?__a=1\u0026__user=0\u0026__comet_req=15\u0026jazoest=22305","fqdn":"form.loginco.casa","domain":"loginco.casa","tld":"casa"},"ip":{"addr":"51.20.127.7","port":443,"asn":16509,"as":"AMAZON-02","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:28.202Z","timestamp":1789395328202,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"form.loginco.casa","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 17:24:55 GMT","end":"Sat, 12 Dec 2026 17:24:54 GMT"},"fingerprint":{"sha1":"98:05:57:24:EF:08:56:FF:FC:A3:8B:0C:C1:9F:AD:7C:5A:F5:2E:E9","sha256":"B3:C1:12:0E:0A:DD:E4:E7:34:54:E5:CA:D4:9C:67:A3:24:78:DF:DD:9C:A0:0E:00:3B:05:B2:A1:96:32:C9:4A"}}},"request":{"raw":"POST /ajax/qm/?__a=1\u0026__user=0\u0026__comet_req=15\u0026jazoest=22305 HTTP/1.1\r\nHost: form.loginco.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 121\r\nOrigin: https://form.loginco.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":121,"data":"event_id=7666384859364527745\u0026marker_page_time=254\u0026script_path=%2F\u0026weight=0\u0026client_start=1\u0026lsd=AdR5sv6Vrq8lSmmEzQw9dE59SN4"}},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Mon, 14 Sep 2026 14:15:28 GMT\r\nServer: Apache/2.4.68 (Debian)\r\nContent-Length: 320\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":320,"size_decoded":536,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"93f9788912e3455bbe8d3655a44f303e","sha1":"5ba786f42e537854a5048c9c0cb363be1819aa06","sha256":"7298897041c829e80be037f5529756cc36fa4ae40f3fef12ebdf741e101813bb","sha512":"14493aab0e29cec487f9ff9c71ba883e636eeae5e3fdaf67e86826ab7f3d1f4ba1bdac7e43ff82cb9633d85040d13720f37448fd8673ba41704aea533ff2d1ba","ssdeep":"","tlshash":"d5e07dde406693870500795039d167d1764d53eb346687992ec5d047510867dcca46cd","first_seen":"2026-09-14T14:12:25.592538Z","last_seen":"2026-09-14T19:03:03.432034Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"form.loginco.casa","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4igzN4/yx/l/en_GB-j/RmGKhot_XkD.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:28.541Z","timestamp":1789395328541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:D5:2A:32:43:06:48:D3:1D:A1:74:4A:6C:D6:B4:EC:DB:7D:B2:B1","sha256":"05:35:85:52:24:6B:02:DF:4A:CA:65:E8:B1:29:CF:A6:C6:6A:62:C2:41:0F:21:47:A9:51:2C:81:3C:13:20:7A"}}},"request":{"raw":"GET /rsrc.php/v4igzN4/yx/l/en_GB-j/RmGKhot_XkD.js HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://form.loginco.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: application/x-javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Mon, 13 Sep 2027 20:31:26 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: 6J71EkyNHnJy4RbugsPO+w==\r\nx-fb-debug: m/0IQzwiU34tIQpGS2hxJunZEd37ml25Fc9FMOUWTz6oyEkFvqolqnLvfII6UBt/TzGULFJsDqhw4sbExoxUvA==\r\ncontent-length: 110659\r\ndate: Mon, 14 Sep 2026 14:15:28 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=11, rtx=0, c=573, mss=1232, tbw=1832139, tp=1510, tpl=0, uplat=14, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":505132,"size_decoded":112658,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40216)","md5":"303304e837e5a3124a3580f4c4c3e615","sha1":"1cc8d179889cc749fee9ffff93edf06bc6d7a677","sha256":"f7e860e5395ce0c060a236ec8a16b97499cfccad828aba6975ec14aba50b4242","sha512":"1b36893f05b979588fcbd16432752d9a04eb6d1d16564353d1ba78ca20e1d19f340eb712dea5a11e1f00aa9e5c486d5dfffa1cc824e545ccd8a615fd476c73a6","ssdeep":"6144:VSi/iIT8ndB0DxAxF4CAe80KDEOuHXk+1OuHXk+cTm3gDCA36yDZx:v/xAxFMH6gH36yDZx","tlshash":"0eb4ae66f64d36e85a7705fd20bf69cb337c002866184e51f1a2f87422c4ee9673762b","first_seen":"2026-09-14T14:12:25.593803Z","last_seen":"2026-09-14T19:03:03.446836Z","times_seen":3,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form.loginco.casa/","fqdn":"form.loginco.casa","domain":"loginco.casa","tld":"casa"},"ip":{"addr":"51.20.127.7","port":443,"asn":16509,"as":"AMAZON-02","country":"Sweden","country_code":"SE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-14T14:15:27.779Z","timestamp":1789395327779,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"form.loginco.casa","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 17:24:55 GMT","end":"Sat, 12 Dec 2026 17:24:54 GMT"},"fingerprint":{"sha1":"98:05:57:24:EF:08:56:FF:FC:A3:8B:0C:C1:9F:AD:7C:5A:F5:2E:E9","sha256":"B3:C1:12:0E:0A:DD:E4:E7:34:54:E5:CA:D4:9C:67:A3:24:78:DF:DD:9C:A0:0E:00:3B:05:B2:A1:96:32:C9:4A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: form.loginco.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 14:15:27 GMT\r\nServer: Apache/2.4.68 (Debian)\r\nLast-Modified: Sat, 25 Jul 2026 09:22:31 GMT\r\nETag: \"669a9-6576c075dfa26-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":420265,"size_decoded":87018,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"22c524b4e7435e5db2b92280eae26e32","sha1":"3250308d04a73e3f02615eb2c14281b9f5b7be7c","sha256":"a1d758b8e2fa6096478af5989f05dea50aa0e5bc46855325cdd1cbb8a0dd8314","sha512":"9781c2fb2f21f8d07a9973823b146f4b6bd1852eff6199920a122c6483573c62c83a9b5825533f0936f8d5a9e010bc9b1ed2e71dfe277e7da418b1e83913ba03","ssdeep":"6144:/LxpWLuHqqijisp5NmzUiEZGnIWnIjiD99jifugaizjss3YBPhzytHDi9nOqRcrb:toLMW","tlshash":"35944c05f908c4771a3b0fb1d0a67d47bb6c08079ac85ee8d1a97f7974c66b8231bb16","first_seen":"2026-09-14T14:12:25.595507Z","last_seen":"2026-09-14T19:03:03.42877Z","times_seen":3,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":4,"connect":11,"send":0,"wait":18,"receive":23,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"form.loginco.casa","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4/yA/r/W1yZmaIs231.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:28.524Z","timestamp":1789395328524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:D5:2A:32:43:06:48:D3:1D:A1:74:4A:6C:D6:B4:EC:DB:7D:B2:B1","sha256":"05:35:85:52:24:6B:02:DF:4A:CA:65:E8:B1:29:CF:A6:C6:6A:62:C2:41:0F:21:47:A9:51:2C:81:3C:13:20:7A"}}},"request":{"raw":"GET /rsrc.php/v4/yA/r/W1yZmaIs231.js HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://form.loginco.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: application/x-javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Sun, 12 Sep 2027 02:41:30 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: 0ay4KbPN+MKo3W21BahvMQ==\r\nx-fb-debug: 3NUsbijL/gZbik5w0Y9LBlI1WkJWc7l42zqazvOiWW588jXaMCfgOlQWo8Ls+CftlscD4qi0Z/Ulc9yILRZFNw==\r\ncontent-length: 82989\r\ndate: Mon, 14 Sep 2026 14:15:28 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=8, rtx=0, c=573, mss=1232, tbw=830923, tp=692, tpl=0, uplat=3, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":319579,"size_decoded":84983,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10931)","md5":"4e6803be924fc905efe8c11433ebe013","sha1":"a8e96b2ed9731a9bb9732ca12fcb0898224b310b","sha256":"eade51916ced92952c7379f68b7d7646d6b6a6a08e4f01313745c28e0d4a6a1b","sha512":"7c4a7a82b833ee620be95c43eeda6da6984820c2a8b03c7bc1603bd6aaad62ec0c9080ad838dc011be6f37794e1ce9adead6ce9b419722fd04fde215f48452da","ssdeep":"3072:he54IT2iO31EjmluaATi5JEAiI8qRP3yZLmsqkzWxI:iTOCjmluaAToiI3P3yZLmsdR","tlshash":"946409cdb6d5b42113f375b6807f920bf2396a56684d8164e5a8d8e16cb884e8333f3d","first_seen":"2026-07-25T01:19:29.925538Z","last_seen":"2026-09-14T19:03:03.429264Z","times_seen":370,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4ieWN4/y0/l/en_GB-j/ayyrapzEMKxa5BXqhTg_NQYCPfv43i0iwrruBGGEYFdGhwCEsLVMyJV6uBpr9kvHpcAdF4Q4yS3Q5yLIhLjdtTF59V3TtN2HhP51QCeCZRMWgwI6-NhAsCA5LxvyfVWAYRn5Q5XLynIoHzskHM2TrHr72z775NzKCi2Sch9boWyHYdnzATCB6ghfjDQ.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:28.544Z","timestamp":1789395328544,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:D5:2A:32:43:06:48:D3:1D:A1:74:4A:6C:D6:B4:EC:DB:7D:B2:B1","sha256":"05:35:85:52:24:6B:02:DF:4A:CA:65:E8:B1:29:CF:A6:C6:6A:62:C2:41:0F:21:47:A9:51:2C:81:3C:13:20:7A"}}},"request":{"raw":"GET /rsrc.php/v4ieWN4/y0/l/en_GB-j/ayyrapzEMKxa5BXqhTg_NQYCPfv43i0iwrruBGGEYFdGhwCEsLVMyJV6uBpr9kvHpcAdF4Q4yS3Q5yLIhLjdtTF59V3TtN2HhP51QCeCZRMWgwI6-NhAsCA5LxvyfVWAYRn5Q5XLynIoHzskHM2TrHr72z775NzKCi2Sch9boWyHYdnzATCB6ghfjDQ.js HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://form.loginco.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: application/x-javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Mon, 13 Sep 2027 20:09:50 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: WO8k9m8KbVx7cPFGKn8y9w==\r\nx-fb-debug: OxQCqPyQMC1dcAgMRfRgU9WjixgPqxjI3oEOZ+AeuWQb9xieuVvyeQWUsef9oXXYYrhn7J2G4TAWauFRcvixIA==\r\ncontent-length: 58692\r\ndate: Mon, 14 Sep 2026 14:15:28 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=10, rtx=0, c=723, mss=1232, tbw=1945659, tp=1603, tpl=0, uplat=12, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":223279,"size_decoded":60690,"mime_type":"application/x-javascript; charset=utf-8","magic":"data","md5":"ca7318ff3507248fa995be576a63821d","sha1":"4c345945a65214024c8b46a6c0f56fc364e792a9","sha256":"e856004afd31ba0862eb01202f664b9b5f5d05439c40155dba1d676358e1c8db","sha512":"2b4d1a0a96c952a81dc70bae63216c82bd9b620c53438d739e395195c141426a827d20d2ad5bbec170a0506adf827c40f25c2684c428727d3d0a2307ec09af28","ssdeep":"3072:87quTFCCG4hqKC+P55jztZ00Q6hqWPLwHewsXrcXnObvCxCBvlbzO:87quTFCCDDjztZpNO","tlshash":"92245d8e7994385487fb1b6850af518b73796965240c8a24e96bdcc1bc354cfa233f2f","first_seen":"2026-08-05T04:37:58.225728Z","last_seen":"2026-09-14T19:03:03.451128Z","times_seen":5,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4idBq4/yr/l/en_GB-j/EpMMPGObckQ.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:28.815Z","timestamp":1789395328815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:D5:2A:32:43:06:48:D3:1D:A1:74:4A:6C:D6:B4:EC:DB:7D:B2:B1","sha256":"05:35:85:52:24:6B:02:DF:4A:CA:65:E8:B1:29:CF:A6:C6:6A:62:C2:41:0F:21:47:A9:51:2C:81:3C:13:20:7A"}}},"request":{"raw":"GET /rsrc.php/v4idBq4/yr/l/en_GB-j/EpMMPGObckQ.js HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://form.loginco.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: application/x-javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Mon, 13 Sep 2027 20:31:27 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: QKPcIXsxblgBzubpU5iGIA==\r\nx-fb-debug: nIAfNClrr7ECF0VRvrFU8WpMlgcAgqFuXZbfnwYKbKp8smO2u9+arsdCw2gUKmuw7gpaC8Z1SG4xnqgksGXH4Q==\r\ncontent-length: 9039\r\ndate: Mon, 14 Sep 2026 14:15:28 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=9, rtx=0, c=776, mss=1232, tbw=2042187, tp=1688, tpl=0, uplat=4, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27514,"size_decoded":11034,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5779)","md5":"875bd5e69e27c7e47b9b35bf4c8d5322","sha1":"0257c1576a74f7fe546bd9ce03909e8035e2fc01","sha256":"e55ae9cb352b403024e98ca2cfa9ba9be3640f38ba80cc11e0d3c7ae84c63b69","sha512":"519a2f5f2ea0113ae511c89162cb10eeafc873e56386fc9aca2f5bec1bd609ec93bf3fda2492f32a901a971328963dfc2c19db8daae1014394e5d1489a1eb9b9","ssdeep":"384:9IWxVecvjzi7qp2sYf11UmzoEOExnRrogSrUBk1PglSNB8Rp94imOor:9IWxVecZG9OExRrogSrqk1P/NB8pDI","tlshash":"36c2285ab65470161b73b4b650bf020ff63e6486580e80a8f16afcda6c3c68d5627f3d","first_seen":"2026-07-21T12:38:28.205786Z","last_seen":"2026-09-14T19:03:03.443425Z","times_seen":519,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4i-zr4/yo/l/en_GB-j/k3oBGGzZDFc.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:28.817Z","timestamp":1789395328817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:D5:2A:32:43:06:48:D3:1D:A1:74:4A:6C:D6:B4:EC:DB:7D:B2:B1","sha256":"05:35:85:52:24:6B:02:DF:4A:CA:65:E8:B1:29:CF:A6:C6:6A:62:C2:41:0F:21:47:A9:51:2C:81:3C:13:20:7A"}}},"request":{"raw":"GET /rsrc.php/v4i-zr4/yo/l/en_GB-j/k3oBGGzZDFc.js HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://form.loginco.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: application/x-javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Mon, 13 Sep 2027 20:31:27 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: oh1VZK1/+WognvDdZRD44g==\r\nx-fb-debug: iqDW9Bg8J0HetUM/l4YyInrcZKJaYR4nGQoR+pO/UlIa7F2N0DnA8zAnvVBkOCMCNayirfLSGzs0ibFxLq7xcg==\r\ncontent-length: 94666\r\ndate: Mon, 14 Sep 2026 14:15:28 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=9, rtx=0, c=776, mss=1232, tbw=2051771, tp=1697, tpl=0, uplat=10, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":404444,"size_decoded":96663,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (11485)","md5":"30d2c58354e9c91447f2e9a0351616c5","sha1":"131659f04136deb81409b2d822b5e60f99b40857","sha256":"5ce3c4bf38d5036d78b279a7cead103575516cff802ae4d5077e17658793d03c","sha512":"3eaf41f5ea29ef02b84841c84648e2c5bc526a3389a5201ca338815d7c82c96e221fbd7e04bf3dd2c0fc4e255b796ca207bfa0f607eddd13181425ce4f20a52b","ssdeep":"6144:d3Jk+h3s2c7fLELSkdyJEP54RHlhziE0l1H3C:d3Jk+h3sLEez8H3C","tlshash":"c8841957b59ab01a57a7a030846f5207b3792942790f80bcf4bee8d59df484e6133bbc","first_seen":"2026-09-14T14:12:25.621146Z","last_seen":"2026-09-14T19:03:03.439203Z","times_seen":3,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4/yr/r/-fVaNOZwTxu.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:28.835Z","timestamp":1789395328835,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:D5:2A:32:43:06:48:D3:1D:A1:74:4A:6C:D6:B4:EC:DB:7D:B2:B1","sha256":"05:35:85:52:24:6B:02:DF:4A:CA:65:E8:B1:29:CF:A6:C6:6A:62:C2:41:0F:21:47:A9:51:2C:81:3C:13:20:7A"}}},"request":{"raw":"GET /rsrc.php/v4/yr/r/-fVaNOZwTxu.js HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://form.loginco.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: application/x-javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Mon, 13 Sep 2027 20:31:27 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: a4oSVMrWTg79CzWBoluYEQ==\r\nx-fb-debug: pop2h9Y9FFS86dmSj91nead04kfHItzGkMk4cB9u9AlqDhPBEDiiXEqDJ3VJgB9yvTXcYRppcSPSQcoc/Ph44w==\r\ncontent-length: 11137\r\ndate: Mon, 14 Sep 2026 14:15:28 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=10, rtx=0, c=776, mss=1232, tbw=2163195, tp=1791, tpl=0, uplat=5, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32409,"size_decoded":13134,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7645)","md5":"0dd1b5fb487d3f64407dbd615d6639e3","sha1":"9a7b31916695ca865df404653ffea01360953ea0","sha256":"c39a42197e49cef13511f3368da1e4e116951f46b39f2795b012ced336d9b07b","sha512":"7a49f7f578da367832c48a10547f2f55e4b12177753e58698f71a8b7c0884e62e4d870ec7e9ed7ed8745981d6fc5454b41607028fbee23fdaef37b7bbe233b43","ssdeep":"768:NpNPXBRdmI8Qfs0z3T7pojMduh1Ha3ALVUxrz2aWFW:lXBRde0znpojMUrkApUxrz2aWFW","tlshash":"49e2d8dc76d1b42113eb347a51af854bf23928d6b80e9050e4a9dce07878d9e9233f6d","first_seen":"2026-07-24T00:44:37.634605Z","last_seen":"2026-09-14T19:03:03.441661Z","times_seen":175,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4idc84/yw/l/en_GB-j/aEbdLbpCnrv.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:28.542Z","timestamp":1789395328542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:D5:2A:32:43:06:48:D3:1D:A1:74:4A:6C:D6:B4:EC:DB:7D:B2:B1","sha256":"05:35:85:52:24:6B:02:DF:4A:CA:65:E8:B1:29:CF:A6:C6:6A:62:C2:41:0F:21:47:A9:51:2C:81:3C:13:20:7A"}}},"request":{"raw":"GET /rsrc.php/v4idc84/yw/l/en_GB-j/aEbdLbpCnrv.js HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://form.loginco.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: application/x-javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Mon, 13 Sep 2027 20:09:50 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: 7f6plnCMjHM5sGPGnxE8oA==\r\nx-fb-debug: IIbI4KDe1s3++cApdJlIOWZtkFCZjSgenTktmfQDHZgaf1lvRmIDr025cnq7k4GYIbr7vpSxYmcXdUp7UqpSsA==\r\ncontent-length: 45163\r\ndate: Mon, 14 Sep 2026 14:15:28 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=11, rtx=0, c=573, mss=1232, tbw=1774907, tp=1463, tpl=0, uplat=10, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":306619,"size_decoded":47161,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21403)","md5":"a841f9c0585d410fcfc175716b478ec6","sha1":"1ade209ed9a1d6fe0a0c8383bf8d58e84930db50","sha256":"51f0d735c6cbc4d03fc6a7b0954548e93fe828ed6577f38db7c8c2f0f02d10e1","sha512":"961acfb30677a25af6c5fdc607c2a591a878a3ca3e5a70657340e1defc99f8e518dcd9c8d0140310ce71bdaea1ffef13309d91a6c8742b54a2b7c54249605bd4","ssdeep":"1536:a8ka6OVYtfzYf8hbACJ/A7uOpljqWOdIUbg7WAFYKODuuAIyNlDhTuolFeunY2wW:4NRbL8MWAIUbg7WAFYKOD/AIa9FV","tlshash":"8e64cbaf5d42251f2016b52662b7558993ada80ce34e5dd3f6c0d420dba8bd80273fef","first_seen":"2026-08-05T04:37:58.235827Z","last_seen":"2026-09-14T19:03:03.426198Z","times_seen":5,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form.loginco.casa/nw/","fqdn":"form.loginco.casa","domain":"loginco.casa","tld":"casa"},"ip":{"addr":"51.20.127.7","port":443,"asn":16509,"as":"AMAZON-02","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:29.124Z","timestamp":1789395329124,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"form.loginco.casa","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 17:24:55 GMT","end":"Sat, 12 Dec 2026 17:24:54 GMT"},"fingerprint":{"sha1":"98:05:57:24:EF:08:56:FF:FC:A3:8B:0C:C1:9F:AD:7C:5A:F5:2E:E9","sha256":"B3:C1:12:0E:0A:DD:E4:E7:34:54:E5:CA:D4:9C:67:A3:24:78:DF:DD:9C:A0:0E:00:3B:05:B2:A1:96:32:C9:4A"}}},"request":{"raw":"GET /nw/ HTTP/1.1\r\nHost: form.loginco.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Mon, 14 Sep 2026 14:15:29 GMT\r\nServer: Apache/2.4.68 (Debian)\r\nContent-Length: 320\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}],"data":{"size":320,"size_decoded":536,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"93f9788912e3455bbe8d3655a44f303e","sha1":"5ba786f42e537854a5048c9c0cb363be1819aa06","sha256":"7298897041c829e80be037f5529756cc36fa4ae40f3fef12ebdf741e101813bb","sha512":"14493aab0e29cec487f9ff9c71ba883e636eeae5e3fdaf67e86826ab7f3d1f4ba1bdac7e43ff82cb9633d85040d13720f37448fd8673ba41704aea533ff2d1ba","ssdeep":"","tlshash":"d5e07dde406693870500795039d167d1764d53eb346687992ec5d047510867dcca46cd","first_seen":"2026-09-14T14:12:25.592538Z","last_seen":"2026-09-14T19:03:03.432034Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"form.loginco.casa","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4iFbC4/y6/l/en_GB-j/xrQkuqfQtzCt-5tX1QB8UwOYZUPRLvvnPYNi9EVfG7gVEapavcLqcH9v_kkAv_-wGQgXdYivvCwsHHKy1uKLQ_0jfAozIMNFBkkw1JtOGoHMq0nyQSP3ZLAfTu4yAsukPWHD6rXnoXAjey-sVjQqltBeBhusk2amyJhKMh2otzgdunJl3g9q4pR78qL69VqNNp4Gm1BHl-lElGzTH4Lah-t55E7mOl6Gkjq0OVeavkZc4HIHnCJZCcc2ZP1Mq8wypiAW_bfk-AMUuK2ufRhAdmh5DEndjkC1LYw5WWi7IP1HIUYBqZ4h.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:28.525Z","timestamp":1789395328525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:D5:2A:32:43:06:48:D3:1D:A1:74:4A:6C:D6:B4:EC:DB:7D:B2:B1","sha256":"05:35:85:52:24:6B:02:DF:4A:CA:65:E8:B1:29:CF:A6:C6:6A:62:C2:41:0F:21:47:A9:51:2C:81:3C:13:20:7A"}}},"request":{"raw":"GET /rsrc.php/v4iFbC4/y6/l/en_GB-j/xrQkuqfQtzCt-5tX1QB8UwOYZUPRLvvnPYNi9EVfG7gVEapavcLqcH9v_kkAv_-wGQgXdYivvCwsHHKy1uKLQ_0jfAozIMNFBkkw1JtOGoHMq0nyQSP3ZLAfTu4yAsukPWHD6rXnoXAjey-sVjQqltBeBhusk2amyJhKMh2otzgdunJl3g9q4pR78qL69VqNNp4Gm1BHl-lElGzTH4Lah-t55E7mOl6Gkjq0OVeavkZc4HIHnCJZCcc2ZP1Mq8wypiAW_bfk-AMUuK2ufRhAdmh5DEndjkC1LYw5WWi7IP1HIUYBqZ4h.js HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://form.loginco.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: application/x-javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Mon, 13 Sep 2027 20:31:26 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: CgMOCp/s8+Z3aC/9qbcmcw==\r\nx-fb-debug: 37fpCnnb2lKgJWwjm9k1eZVsEiBlWIyXetjGxYj0PCwwBdIVlh4almYAgHaMyn2uX5Lce/n4Qs5IggoQha2lww==\r\ncontent-length: 323493\r\ndate: Mon, 14 Sep 2026 14:15:28 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=8, rtx=0, c=573, mss=1232, tbw=916203, tp=764, tpl=0, uplat=6, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1275383,"size_decoded":325488,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19669)","md5":"797b77dcbb0686d2c4affcf9a75f6ae1","sha1":"1d4b6e1c313a4f32f8fec6e22190bba3035453db","sha256":"3db6e9dac8d6d44a596fac31bd7c45b19fcbe9e851994c0be3dd071786fb6e8f","sha512":"87b870cac4dc435c485d888c8c73c3aa228b3bfdf8f9c60e477aa92411826d70a45d019c402e5312864fe89b7467e11e7527a0cddfc07ac9d2aef8d087d90833","ssdeep":"6144:VYRxkR3U7RIhpj/fX7sJzveX7sJzvwh6QWXenYXeq6oXXJYMAXBaP1r7MgMBMzk1:AkkIf3MQxnSK3Dx0GAK/tuw6lUz","tlshash":"79256cdd799974155bb711b990af020bb33c2807280dc060f566fe95697c88ea13bfed","first_seen":"2026-09-14T14:12:25.611445Z","last_seen":"2026-09-14T19:03:03.445735Z","times_seen":3,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4i77y4/yF/l/en_GB-j/fc7tNSy7VS_kdSeFP4KssgWJukooR-9NvNR8emwuUeOHRi7mWBMSxEcjMVGcktGGRp72OqDwSuA8Ya7eSNpDNxgKVIPNHOqVL96GSBvj8_FEnWhlOg4ZYKX0hePZ2GqKu-kUqm8HXN6FrYZ.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:28.533Z","timestamp":1789395328533,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:D5:2A:32:43:06:48:D3:1D:A1:74:4A:6C:D6:B4:EC:DB:7D:B2:B1","sha256":"05:35:85:52:24:6B:02:DF:4A:CA:65:E8:B1:29:CF:A6:C6:6A:62:C2:41:0F:21:47:A9:51:2C:81:3C:13:20:7A"}}},"request":{"raw":"GET /rsrc.php/v4i77y4/yF/l/en_GB-j/fc7tNSy7VS_kdSeFP4KssgWJukooR-9NvNR8emwuUeOHRi7mWBMSxEcjMVGcktGGRp72OqDwSuA8Ya7eSNpDNxgKVIPNHOqVL96GSBvj8_FEnWhlOg4ZYKX0hePZ2GqKu-kUqm8HXN6FrYZ.js HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://form.loginco.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: application/x-javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Mon, 13 Sep 2027 20:31:25 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: Vgo+Hs15kjcrpaUqF52+fg==\r\nx-fb-debug: oAQxfI7DE8YnvppNGnLyHDgfES+YKQL+pRJmZkL84uojlUUqvmnUCYGx5KhEiTUUanDyXwHiC38xh5iBctBsew==\r\ncontent-length: 96228\r\ndate: Mon, 14 Sep 2026 14:15:28 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=8, rtx=0, c=573, mss=1232, tbw=1432603, tp=1185, tpl=0, uplat=12, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":345628,"size_decoded":98225,"mime_type":"application/x-javascript; charset=utf-8","magic":"data","md5":"2c35fe2048a9c96d6dbc2340f63c3e3f","sha1":"3d1bbd6fc464cce0533467d6b5b48a37b5c89b80","sha256":"859ed8e09e0ef1ab478cdd2667b97361ae6bd97db918cf47640c0a381be86230","sha512":"e217928d95658bbbceb04ebec5537bc0cf573cc77ddd9ea89bf1f2a6d113fa22394c299103282177679aa7de934951e06f97fff45826e663257e706627c87c21","ssdeep":"3072:aMQekNoJxuYyTwu8rPp2mOELIYqbooqhL6XF7bw0EMp29m79:TQeQNkPDSbxtEMp29w9","tlshash":"38744bdc7844b4a467f764b9c0bf114bb33d3849181dc5a0f4a2ede578a48de6133aae","first_seen":"2026-09-14T14:12:25.596959Z","last_seen":"2026-09-14T19:03:03.434102Z","times_seen":3,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/y0/r/U45qBJmWVHU.webp","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:29.584Z","timestamp":1789395329584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:D5:2A:32:43:06:48:D3:1D:A1:74:4A:6C:D6:B4:EC:DB:7D:B2:B1","sha256":"05:35:85:52:24:6B:02:DF:4A:CA:65:E8:B1:29:CF:A6:C6:6A:62:C2:41:0F:21:47:A9:51:2C:81:3C:13:20:7A"}}},"request":{"raw":"GET /rsrc.php/y0/r/U45qBJmWVHU.webp HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\ncontent-md5: XyKYrv0zmdH+Dt7Gzib6WQ==\r\nexpires: Sun, 12 Sep 2027 05:41:45 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\nx-fb-debug: Ngnezrqlawd7Xc0aSlZH1U48wHF9Ios50l5DglzbYJoZGnOOuvFAt12iEJgOyLOo7aLvhkws4cENFgd6dNbp+Q==\r\ncontent-length: 181500\r\ndate: Mon, 14 Sep 2026 14:15:29 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=9, rtx=0, c=776, mss=1232, tbw=2255259, tp=1871, tpl=0, uplat=0, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=6,i\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":181500,"size_decoded":183423,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5f2298aefd3399d1fe0edec6ce26fa59","sha1":"2229ffc5e19703742292b7f6a3942dfd6aabc147","sha256":"141d76714aa87822291262f9ea967f67172cb5f8744fff844edb77bf19986cbe","sha512":"f18e1be7551c569e6a64beaa230d10110937d64ad61c7a3ab004ecab868a877264520f7af0b5c202cbcc477a0470809257255880f718826f7ebd294b0ef69059","ssdeep":"3072:jrQMBmaiTTvz/IS4jRm/DrZWiDEzow9BkwDlwBxUScc/hFaXmDENSMJJ1pSufqG3:jLBma04FUcSEzoOB/cxUSbstNFZ1qHh2","tlshash":"dc042383d32b1d15a39148b6eee707905f7421865fa01b8c241e2a90ecdbd63b7578ef","first_seen":"2026-02-01T20:49:54.671942Z","last_seen":"2026-09-15T16:48:47.085691Z","times_seen":4614,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v5/yZ/l/0,cross/H75y8sTM51i2ihnX__5DVEvBRhtOrwbdeT9DWDYPz6DhfgQe914iiBfD-GevAmvU9KONMKn3YhINqU49pVNahkCkvx2I9b7Pb8K.css","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:28.198Z","timestamp":1789395328198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:D5:2A:32:43:06:48:D3:1D:A1:74:4A:6C:D6:B4:EC:DB:7D:B2:B1","sha256":"05:35:85:52:24:6B:02:DF:4A:CA:65:E8:B1:29:CF:A6:C6:6A:62:C2:41:0F:21:47:A9:51:2C:81:3C:13:20:7A"}}},"request":{"raw":"GET /rsrc.php/v5/yZ/l/0,cross/H75y8sTM51i2ihnX__5DVEvBRhtOrwbdeT9DWDYPz6DhfgQe914iiBfD-GevAmvU9KONMKn3YhINqU49pVNahkCkvx2I9b7Pb8K.css HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://form.loginco.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Mon, 13 Sep 2027 20:09:35 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: 9jrObo75cWCjancSTJlBWA==\r\nx-fb-debug: jpaPG09Jgkr3v5NMrdHuP+Nd9UMc3H1FwDAG9zi7Rm6++M/ti9sziUihbzZ7WTU6T45HEbIW2+Mu5AFGR1apjg==\r\ncontent-length: 285430\r\ndate: Mon, 14 Sep 2026 14:15:28 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=10, rtx=0, c=23, mss=1232, tbw=25035, tp=26, tpl=0, uplat=7, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1371065,"size_decoded":287407,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c84e1338d7127577d357059322192d25","sha1":"c21a7a1bf5f49fa7dae6580b82e5350e180e9f31","sha256":"7ae1ce3921a1542a372823fa3bbe43602a5d0c886855b25096e3f64f21474a5e","sha512":"f130766c4ff3b1010aecf2f45b2e28404eb9730af6590e5053ed2889c3ae3b4981c9b819ecb706ad1f9dc1256a528549e1fde21e1b9ca2a1e221f32ebc8e1ba5","ssdeep":"6144:x4lK1o+Dol+gvb+GgXkioBPCbw11LWYAKRLCycm6++lQDH/8p15yxQVH5mZUGI3q:iMM+pkMwFAcC7Lh6QdIZUGgq","tlshash":"5425a5a6e751823dbc27d15993adbfac22187e42de161bf2f64271b096c7bf81933104","first_seen":"2026-07-25T01:19:29.943561Z","last_seen":"2026-09-14T19:03:03.429821Z","times_seen":98,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":45,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.instagram.com/accounts/xuserid/","fqdn":"www.instagram.com","domain":"instagram.com","tld":"com"},"ip":{"addr":"157.240.200.174","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:29.774Z","timestamp":1789395329774,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.www.instagram.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"42:F1:3E:38:58:1C:51:42:AF:65:B9:E1:C5:A5:85:A4:20:94:F5:7C","sha256":"FC:38:FE:FE:17:1B:2A:DB:BB:71:90:9F:DA:43:07:CA:5B:90:44:3B:BB:08:44:98:A2:83:D6:83:EB:70:3B:9B"}}},"request":{"raw":"GET /accounts/xuserid/ HTTP/1.1\r\nHost: www.instagram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://form.loginco.casa\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nCookie: csrftoken=RndMUT7KsGT6JCvikH0NJA\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: zstd\r\naccept-ch-lifetime: 4838400\r\naccept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model\r\npragma: no-cache\r\ncache-control: private, no-cache, no-store, must-revalidate\r\nexpires: Sat, 01 Jan 2000 00:00:00 GMT\r\ncontent-security-policy: default-src *.facebook.com *.fbcdn.net *.instagram.com blob:;script-src *.instagram.com static.cdninstagram.com z-p42-static.cdninstagram.com https://instagram.com https://*.www.instagram.com https://*.cdninstagram.com wss://www.instagram.com blob: *.facebook.com *.fbcdn.net 127.0.0.1:* 'nonce-yNEayoIP' 'self' 'wasm-unsafe-eval' https://accounts.google.com;style-src *.instagram.com static.cdninstagram.com z-p42-static.cdninstagram.com https://*.www.instagram.com data: blob: 'unsafe-inline' *.fbcdn.net *.facebook.com https://accounts.google.com;connect-src *.instagram.com wss://edge-chat.instagram.com https://instagram.com https://*.www.instagram.com https://*.graph.instagram.com https://*.i.instagram.com https://*.od.instagram.com https://i.threads.net https://i.threads.com https://*.od.threads.net https://*.od.threads.com wss://www.instagram.com blob: *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* ws://localhost:* *.cdninstagram.com wss://*.instagram.com:* 'self' https://accounts.google.com;font-src *.instagram.com static.cdninstagram.com z-p42-static.cdninstagram.com data: *.fbcdn.net *.intern.facebook.com *.facebook.com https://*.cdninstagram.com;img-src *.instagram.com *.facebook.com *.fbcdn.net data: *.cdninstagram.com *.whatsapp.net blob: https://*.threads.net https://*.threads.com *.fbsbx.com android-webview-video-poster: *.oculuscdn.com;media-src *.facebook.com *.fbcdn.net *.instagram.com *.cdninstagram.com *.fbsbx.com data: blob:;child-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;frame-src https://instagram.com *.instagram.com *.facebook.com *.fbsbx.com fbsbx.com data:;manifest-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;object-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c\u0026minimize=0;\r\ndocument-policy: include-js-call-stacks-in-crash-reports\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nreporting-endpoints: coop_report=\"https://www.facebook.com/browser_reporting/coop/?minimize=0\", default=\"https://www.instagram.com/error/ig_web_error_reports/?device_level=unknown\u0026brsid=7685394419440738911\u0026cpp=C3\u0026cv=1047449974\u0026st=1789395329846\"\r\nreport-to: {\"max_age\":2592000,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/coop\\/?minimize=0\"}],\"group\":\"coop_report\",\"include_subdomains\":true}, {\"max_age\":259200,\"endpoints\":[{\"url\":\"https:\\/\\/www.instagram.com\\/error\\/ig_web_error_reports\\/?device_level=unknown\u0026brsid=7685394419440738911\u0026cpp=C3\u0026cv=1047449974\u0026st=1789395329846\"}]}\r\ncross-origin-opener-policy: same-origin-allow-popups\r\nvary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding\r\norigin-agent-cluster: ?1\r\nstrict-transport-security: max-age=31536000; preload; includeSubDomains\r\nx-stack: www\r\ncontent-type: text/html; charset=\"utf-8\"\r\nx-fb-debug: IaXUOfb1AoY11r6e/prJsvAPRgL3j06zCrGwSzgRRHeZ0eaN7eN6yy0H+uiCyD1turSFYAKKUJU+Rk5h6+1bvg==\r\ndate: Mon, 14 Sep 2026 14:15:29 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=12, rtx=0, c=101, mss=1232, tbw=128828, tp=117, tpl=0, uplat=188, ullat=0\r\npriority: u=3,i\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":9569,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T16:51:39.996945Z","times_seen":18478937,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":202,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form.loginco.casa/nw/","fqdn":"form.loginco.casa","domain":"loginco.casa","tld":"casa"},"ip":{"addr":"51.20.127.7","port":443,"asn":16509,"as":"AMAZON-02","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:37.820Z","timestamp":1789395337820,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"form.loginco.casa","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 17:24:55 GMT","end":"Sat, 12 Dec 2026 17:24:54 GMT"},"fingerprint":{"sha1":"98:05:57:24:EF:08:56:FF:FC:A3:8B:0C:C1:9F:AD:7C:5A:F5:2E:E9","sha256":"B3:C1:12:0E:0A:DD:E4:E7:34:54:E5:CA:D4:9C:67:A3:24:78:DF:DD:9C:A0:0E:00:3B:05:B2:A1:96:32:C9:4A"}}},"request":{"raw":"GET /nw/ HTTP/1.1\r\nHost: form.loginco.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Mon, 14 Sep 2026 14:15:37 GMT\r\nServer: Apache/2.4.68 (Debian)\r\nContent-Length: 320\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}],"data":{"size":320,"size_decoded":536,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"93f9788912e3455bbe8d3655a44f303e","sha1":"5ba786f42e537854a5048c9c0cb363be1819aa06","sha256":"7298897041c829e80be037f5529756cc36fa4ae40f3fef12ebdf741e101813bb","sha512":"14493aab0e29cec487f9ff9c71ba883e636eeae5e3fdaf67e86826ab7f3d1f4ba1bdac7e43ff82cb9633d85040d13720f37448fd8673ba41704aea533ff2d1ba","ssdeep":"","tlshash":"d5e07dde406693870500795039d167d1764d53eb346687992ec5d047510867dcca46cd","first_seen":"2026-09-14T14:12:25.592538Z","last_seen":"2026-09-14T19:03:03.432034Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"form.loginco.casa","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"form.loginco.casa/nw/","fqdn":"form.loginco.casa","domain":"loginco.casa","tld":"casa"},"ip":{"addr":"51.20.127.7","port":443,"asn":16509,"as":"AMAZON-02","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:39.614Z","timestamp":1789395339614,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"form.loginco.casa","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 17:24:55 GMT","end":"Sat, 12 Dec 2026 17:24:54 GMT"},"fingerprint":{"sha1":"98:05:57:24:EF:08:56:FF:FC:A3:8B:0C:C1:9F:AD:7C:5A:F5:2E:E9","sha256":"B3:C1:12:0E:0A:DD:E4:E7:34:54:E5:CA:D4:9C:67:A3:24:78:DF:DD:9C:A0:0E:00:3B:05:B2:A1:96:32:C9:4A"}}},"request":{"raw":"GET /nw/ HTTP/1.1\r\nHost: form.loginco.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Mon, 14 Sep 2026 14:15:39 GMT\r\nServer: Apache/2.4.68 (Debian)\r\nContent-Length: 320\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}],"data":{"size":320,"size_decoded":536,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"93f9788912e3455bbe8d3655a44f303e","sha1":"5ba786f42e537854a5048c9c0cb363be1819aa06","sha256":"7298897041c829e80be037f5529756cc36fa4ae40f3fef12ebdf741e101813bb","sha512":"14493aab0e29cec487f9ff9c71ba883e636eeae5e3fdaf67e86826ab7f3d1f4ba1bdac7e43ff82cb9633d85040d13720f37448fd8673ba41704aea533ff2d1ba","ssdeep":"","tlshash":"d5e07dde406693870500795039d167d1764d53eb346687992ec5d047510867dcca46cd","first_seen":"2026-09-14T14:12:25.592538Z","last_seen":"2026-09-14T19:03:03.432034Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"form.loginco.casa","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4i_054/ya/l/en_GB-j/E4naZXWX8HX.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:28.529Z","timestamp":1789395328529,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:D5:2A:32:43:06:48:D3:1D:A1:74:4A:6C:D6:B4:EC:DB:7D:B2:B1","sha256":"05:35:85:52:24:6B:02:DF:4A:CA:65:E8:B1:29:CF:A6:C6:6A:62:C2:41:0F:21:47:A9:51:2C:81:3C:13:20:7A"}}},"request":{"raw":"GET /rsrc.php/v4i_054/ya/l/en_GB-j/E4naZXWX8HX.js HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://form.loginco.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: application/x-javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Mon, 13 Sep 2027 20:31:26 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: NyZ8Cyfnd+2LP2DY0a9OSw==\r\nx-fb-debug: LKUIjR6zqXjUKlKQUu836dz2RbgW7TuOIlUyNg0EoUw0toRBoecPHcyBR+cWX83zNDsFiyD/FEuYb5eKAfzxBQ==\r\ncontent-length: 207613\r\ndate: Mon, 14 Sep 2026 14:15:28 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=8, rtx=0, c=573, mss=1232, tbw=1247531, tp=1034, tpl=0, uplat=10, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":905933,"size_decoded":209611,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20797)","md5":"919e45eb643d7a14f8c389bbaaae04cc","sha1":"c4c7720460269ffb6dcfb8f937ba74ee3e18d4e7","sha256":"4d70cd6be7d3e81824a9b3d5fc1ea2e95fa72c80e1f8fbf7e06104675d12f236","sha512":"26fda682c731f1c5ba70415f23e950f843dd7eaa2f2267fde9a0d9ac5d3609d1a3726360531bd3f511ad1b0d0504b6866d29de0420096a110c0d4164b2d190a8","ssdeep":"6144:hZDASdO+3kTo+tv9ibUkRtcY8Ym/JCBPN18hs/T2WEGVNFeURg+YUW+SO:rkAzcY8Ym+Os/T2WE2GgvY1O","tlshash":"c3153b8df98830612bb751b780bf524b733d6886240ec0a4b9b1edd56a685cd6233f7d","first_seen":"2026-07-25T04:23:11.364009Z","last_seen":"2026-09-14T19:03:03.448021Z","times_seen":120,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4i7M54/yT/l/en_GB-j/vhwZK6TCDMl.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:28.828Z","timestamp":1789395328828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:D5:2A:32:43:06:48:D3:1D:A1:74:4A:6C:D6:B4:EC:DB:7D:B2:B1","sha256":"05:35:85:52:24:6B:02:DF:4A:CA:65:E8:B1:29:CF:A6:C6:6A:62:C2:41:0F:21:47:A9:51:2C:81:3C:13:20:7A"}}},"request":{"raw":"GET /rsrc.php/v4i7M54/yT/l/en_GB-j/vhwZK6TCDMl.js HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://form.loginco.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: application/x-javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Mon, 13 Sep 2027 20:31:27 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: 0NJ4Xm+R+VfP5qWnWaMUzA==\r\nx-fb-debug: 7XlClhjR0/hphX7f0GLx92XzGyk7TEauaz/mv40tVoF9hxD8LmQSrH4wjGPO4mKrflGUIrlUJ4+S4MdIU1kayg==\r\ncontent-length: 13567\r\ndate: Mon, 14 Sep 2026 14:15:28 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=9, rtx=0, c=776, mss=1232, tbw=2148955, tp=1777, tpl=0, uplat=5, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46040,"size_decoded":15563,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32622)","md5":"077ff96e414934025f0d0b9eb37bc307","sha1":"1ed7907727c0bb71ad91e5da440fec4f6b214df1","sha256":"c5d1762ff125e153b081b3700acbb68d113725dac3d5a0e6ed22097f5cb57e3a","sha512":"13561b24994eb1da6118cbeef5345296a7179fb645775e6609d76d7f5ab6523018305379ad4a153b6cd89c31cf3f9af7fe2daa14c122a83270bc368e6a58157b","ssdeep":"768:PC0EirzQ9htN3nfkArzDGB9foOqHUC3xpJo+H2rbiSup2:PCwc9htNPzIQRm9O2","tlshash":"5d23b5cbf785711243a2707189ab4a077336ad10290d81fdb96ce9cb2cbc649a537f39","first_seen":"2026-08-05T04:37:58.254463Z","last_seen":"2026-09-14T19:03:03.452214Z","times_seen":5,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.instagram.com/accounts/xuserid/","fqdn":"www.instagram.com","domain":"instagram.com","tld":"com"},"ip":{"addr":"157.240.200.174","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:30.237Z","timestamp":1789395330237,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.www.instagram.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"42:F1:3E:38:58:1C:51:42:AF:65:B9:E1:C5:A5:85:A4:20:94:F5:7C","sha256":"FC:38:FE:FE:17:1B:2A:DB:BB:71:90:9F:DA:43:07:CA:5B:90:44:3B:BB:08:44:98:A2:83:D6:83:EB:70:3B:9B"}}},"request":{"raw":"GET /accounts/xuserid/ HTTP/1.1\r\nHost: www.instagram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://form.loginco.casa\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nCookie: csrftoken=RndMUT7KsGT6JCvikH0NJA\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: zstd\r\naccept-ch-lifetime: 4838400\r\naccept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model\r\npragma: no-cache\r\ncache-control: private, no-cache, no-store, must-revalidate\r\nexpires: Sat, 01 Jan 2000 00:00:00 GMT\r\ncontent-security-policy: default-src *.facebook.com *.fbcdn.net *.instagram.com blob:;script-src *.instagram.com static.cdninstagram.com z-p42-static.cdninstagram.com https://instagram.com https://*.www.instagram.com https://*.cdninstagram.com wss://www.instagram.com blob: *.facebook.com *.fbcdn.net 127.0.0.1:* 'nonce-lhFJATuA' 'self' 'wasm-unsafe-eval' https://accounts.google.com;style-src *.instagram.com static.cdninstagram.com z-p42-static.cdninstagram.com https://*.www.instagram.com data: blob: 'unsafe-inline' *.fbcdn.net *.facebook.com https://accounts.google.com;connect-src *.instagram.com wss://edge-chat.instagram.com https://instagram.com https://*.www.instagram.com https://*.graph.instagram.com https://*.i.instagram.com https://*.od.instagram.com https://i.threads.net https://i.threads.com https://*.od.threads.net https://*.od.threads.com wss://www.instagram.com blob: *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* ws://localhost:* *.cdninstagram.com wss://*.instagram.com:* 'self' https://accounts.google.com;font-src *.instagram.com static.cdninstagram.com z-p42-static.cdninstagram.com data: *.fbcdn.net *.intern.facebook.com *.facebook.com https://*.cdninstagram.com;img-src *.instagram.com *.facebook.com *.fbcdn.net data: *.cdninstagram.com *.whatsapp.net blob: https://*.threads.net https://*.threads.com *.fbsbx.com android-webview-video-poster: *.oculuscdn.com;media-src *.facebook.com *.fbcdn.net *.instagram.com *.cdninstagram.com *.fbsbx.com data: blob:;child-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;frame-src https://instagram.com *.instagram.com *.facebook.com *.fbsbx.com fbsbx.com data:;manifest-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;object-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c\u0026minimize=0;\r\ndocument-policy: include-js-call-stacks-in-crash-reports\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nreporting-endpoints: coop_report=\"https://www.facebook.com/browser_reporting/coop/?minimize=0\", default=\"https://www.instagram.com/error/ig_web_error_reports/?device_level=unknown\u0026brsid=7685394423917804911\u0026cpp=C3\u0026cv=1047449974\u0026st=1789395330320\"\r\nreport-to: {\"max_age\":2592000,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/coop\\/?minimize=0\"}],\"group\":\"coop_report\",\"include_subdomains\":true}, {\"max_age\":259200,\"endpoints\":[{\"url\":\"https:\\/\\/www.instagram.com\\/error\\/ig_web_error_reports\\/?device_level=unknown\u0026brsid=7685394423917804911\u0026cpp=C3\u0026cv=1047449974\u0026st=1789395330320\"}]}\r\ncross-origin-opener-policy: same-origin-allow-popups;report-to=\"coop_report\"\r\nvary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding\r\norigin-agent-cluster: ?1\r\nstrict-transport-security: max-age=31536000; preload; includeSubDomains\r\nx-stack: www\r\ncontent-type: text/html; charset=\"utf-8\"\r\nx-fb-debug: EemAC2bUeMzzbj/U5smCshW5M5OnLD6AtKi39bx+bkl1uBHvYBSVgatJ9l+Kt0XCYu/hHSVEGhrBV83pjShXNQ==\r\ndate: Mon, 14 Sep 2026 14:15:30 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=12, rtx=0, c=102, mss=1232, tbw=200108, tp=180, tpl=0, uplat=201, ullat=0\r\npriority: u=3,i\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":131072,"size_decoded":25050,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"559060c36c6381c9938e7b80786c909d","sha1":"7a40000dcbb5ae1b83a01dd3af0995c5297665eb","sha256":"a778752adc6d83f1e16806f4574364df841ab4c3420a894671aeac0821851821","sha512":"0e20f5575a1f204ff7b35ed4b130ce1041c504d22b90c233c974abd53c43ea5699692c8b3bda8bffb57a60a1c810a500bc79e4cd372cd3e27798c3e5b1964b02","ssdeep":"3072:C6SMHLiWxLzUgW6SIHLiWxLzUg56SIHLiWxLzUgRM+CK0j:rHLiWxLoSHLiWxLoDHLiWxLoSo","tlshash":"2ad3e740dc81823aa61b4bb6c0a1bc52e31c5c27a75c1eb9e18b37b5b5cb9f90737752","first_seen":"2026-09-14T14:16:29.835912Z","last_seen":"2026-09-14T14:16:29.835912Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form.loginco.casa/nw/","fqdn":"form.loginco.casa","domain":"loginco.casa","tld":"casa"},"ip":{"addr":"51.20.127.7","port":443,"asn":16509,"as":"AMAZON-02","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:30.461Z","timestamp":1789395330461,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"form.loginco.casa","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 17:24:55 GMT","end":"Sat, 12 Dec 2026 17:24:54 GMT"},"fingerprint":{"sha1":"98:05:57:24:EF:08:56:FF:FC:A3:8B:0C:C1:9F:AD:7C:5A:F5:2E:E9","sha256":"B3:C1:12:0E:0A:DD:E4:E7:34:54:E5:CA:D4:9C:67:A3:24:78:DF:DD:9C:A0:0E:00:3B:05:B2:A1:96:32:C9:4A"}}},"request":{"raw":"GET /nw/ HTTP/1.1\r\nHost: form.loginco.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Mon, 14 Sep 2026 14:15:30 GMT\r\nServer: Apache/2.4.68 (Debian)\r\nContent-Length: 320\r\nKeep-Alive: timeout=5, max=91\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}],"data":{"size":320,"size_decoded":536,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"93f9788912e3455bbe8d3655a44f303e","sha1":"5ba786f42e537854a5048c9c0cb363be1819aa06","sha256":"7298897041c829e80be037f5529756cc36fa4ae40f3fef12ebdf741e101813bb","sha512":"14493aab0e29cec487f9ff9c71ba883e636eeae5e3fdaf67e86826ab7f3d1f4ba1bdac7e43ff82cb9633d85040d13720f37448fd8673ba41704aea533ff2d1ba","ssdeep":"","tlshash":"d5e07dde406693870500795039d167d1764d53eb346687992ec5d047510867dcca46cd","first_seen":"2026-09-14T14:12:25.592538Z","last_seen":"2026-09-14T19:03:03.432034Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"form.loginco.casa","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"form.loginco.casa/ajax/bz?__a=1\u0026__ccg=EXCELLENT\u0026__comet_req=15\u0026__hs=20659.HYP%3Acomet_loggedout_pkg.2.1...0\u0026__hsi=7666384859364527745\u0026__req=3\u0026__rev=1043845430\u0026__s=h44bbe%3Aujbddj%3Ay76914\u0026__spin_b=trunk\u0026__spin_r=1043845430\u0026__spin_t=1784969321\u0026__user=0\u0026dpr=1\u0026jazoest=22305\u0026lsd=AdR5sv6Vrq8lSmmEzQw9dE59SN4\u0026ph=C3\u0026qpl_active_flow_ids=516759801","fqdn":"form.loginco.casa","domain":"loginco.casa","tld":"casa"},"ip":{"addr":"51.20.127.7","port":443,"asn":16509,"as":"AMAZON-02","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:29.811Z","timestamp":1789395329811,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"form.loginco.casa","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 17:24:55 GMT","end":"Sat, 12 Dec 2026 17:24:54 GMT"},"fingerprint":{"sha1":"98:05:57:24:EF:08:56:FF:FC:A3:8B:0C:C1:9F:AD:7C:5A:F5:2E:E9","sha256":"B3:C1:12:0E:0A:DD:E4:E7:34:54:E5:CA:D4:9C:67:A3:24:78:DF:DD:9C:A0:0E:00:3B:05:B2:A1:96:32:C9:4A"}}},"request":{"raw":"POST /ajax/bz?__a=1\u0026__ccg=EXCELLENT\u0026__comet_req=15\u0026__hs=20659.HYP%3Acomet_loggedout_pkg.2.1...0\u0026__hsi=7666384859364527745\u0026__req=3\u0026__rev=1043845430\u0026__s=h44bbe%3Aujbddj%3Ay76914\u0026__spin_b=trunk\u0026__spin_r=1043845430\u0026__spin_t=1784969321\u0026__user=0\u0026dpr=1\u0026jazoest=22305\u0026lsd=AdR5sv6Vrq8lSmmEzQw9dE59SN4\u0026ph=C3\u0026qpl_active_flow_ids=516759801 HTTP/1.1\r\nHost: form.loginco.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-FB-LSD: AdR5sv6Vrq8lSmmEzQw9dE59SN4\r\nX-ASBD-ID: 359341\r\nContent-Type: multipart/form-data; boundary=----geckoformboundary114acf9cda233a5a690b7a6ef5adba4c\r\nContent-Length: 8688\r\nOrigin: https://form.loginco.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12764,"data":"------geckoformboundary114acf9cda233a5a690b7a6ef5adba4c\r\nContent-Disposition: form-data; name=\"ts\"\r\n\r\n1789395329802\r\n------geckoformboundary114acf9cda233a5a690b7a6ef5adba4c\r\nContent-Disposition: form-data; name=\"post_0\"; filename=\"blob\"\r\nContent-Type: application/octet-stream\r\n\r\nxœí}érëH¯Ø«œrªn%eûˆûâT*Wû¾ïš3Åj‰‹$jjÞ=Ý$eɒ(ëØ_n\u0026¹™\u001f32\u001b@£Ñ\u0000\u001a@/óÇ\u001fO*°$÷m§ˆBh؊\u0010xŠ\u0013\n\u000eØ\u001a\u001a\b\r×yzùëIyz{úëד\u0004¢@ùõôöëÉrüëé\u0005~Š‚е\u0005\u0019„@0\u0003×IZÿúõëד¬\u0004¡à\u0001ôó\rý믿ѿ_Κ¶Ä{ãǦÈ7Þ[ô0ô‚·BAu}û§åj†#¹?%\u0010€ÂGœ­\u0011\u0018a°`Èï؋²k+a¹X¬•:\b·\u0001ÿô€¦”]'ô]ËRü·˜exœzÃßp–ãIž\u0026\tî'K³\u001f©ŸÄ!„±§¼Óï\u0015gÍzqRý\bí+ªâûŠŸ3¼ \u0012e×\u0006†óގ\u0006‡þûw\"ÓL\u003c¡ž\bóó!$H!\u000b\u003eØ%(:E‰¢ò\u0016™¢,›Ù\u0000!ñ§—'ÿé\ry’átªòÏâ(äe3´Zk\":˜SP'Íò\u001dn¦ê¬ÊâM_-Güê0\\Y3×àJ\\1ö{ÜZ°ÆÄt?nt8­O-}y\u003eP7ëNä«x1\u0026â\u001eí¯\u0019ØO\u0000{¸Å\u0005l\nŸ¤)žáI\u0002ç9ò'OcÄË\u0013€\u00188F‘?9ŠþI‘ØOìÇEÃ?á_ÿ\r\"ŠOoà/8Áýù÷Ëi®X–zÁ^\u0018šûóå¨Êžâ«gZk\u0003­øH+žÞ\b–åX‚Å¡À€tT–§7\u001a}\b€íY\n\u0014bˆt\u003c\u0001q\u001c7Õ©@0œ\u0010~…äB\u001fHkE\u0016ÎÉþz¢q†¥y\u000eáœ_ÞûLt%¥%¹ŽjhÇ/¿ž\u003cßM-\bN.@æ“R·\u0015Ûõc!€Ý\u0006Y\u0005K€ßáŸNdYˆ¼£„;×_ŸÀþN4 T\u0012;4\u001cÕMq%Ë@ÆìE.x:Ȍ·L¦¦›6ú\n2ÄrOòFä\u0014\u000b‡p³\u0019ug¹\u0012€â:u–~HzP\u001c¡^J:1‚Ѥ\u0003¿aÿý\u000fÔ?\u0002ãˆoê\u001fG³Hÿ0ê¤ê^@“\nM8\bÖJ,([(çàL#áŸpŽ=7Õ)$9h×\u0002ôÀ‰È\u0012pAµÜԘ!\u0011Å\u000f“\u0019@{¨B6u'µñ½fª‡@’Ü\böö\u0013qðSrí\u0004\u000b9ÔÄ1ä;Ól²\u0014\u000bª¿Ü÷\rØ6Ž\u003cÏõáŸ\t.\u001c\u001bÒ\u001f¤\u0019é÷\u0000z Ù@œ\u0001««È\u0006H™|C\u0026\u0012)©\u001d|\u0010\u0001ô¢v¦üÙçtàÐȄàÔ×?QOpšÿ¦žð$òS\u0014æ§$\u00002\tdó™*Š Š‚\u001dhþùÂëúJ:Ñp~• H´C€æ\u0019\u001cEîùŠ`‡‚¨èp¥rý“\")X\u0010*\u001e\\'•€–oE\u003eÓ6\tκ\u0006\u001dÏ\u0019´\u000e×\u0019\u0001-4Ðčð–f¦p6p\"`µ£nRm;R¸§¹ïë\\!՘\u001däćò±ŽžU–DZ\u0012\tù\u0015Ã\u0018ü•bYù\u0015ʚxUe^\u00111LfU€Ÿõî+›\b­Ÿ\u0019¶¢P¼\f\bî\u0015@¸W\ng•W\u000eƒÄd\u0019Φ*R\u0012OpiÇéh\u003cà\u0003;u©ÿD=$¡Ò}K\u000fyœÀ \u001eÒ\u001cýQ\u000fAlëWjx¦Iû™p^¾¯”\tÉ@ò\u0015¸Z\u0004kÃóà¢ê¸\u0002\\\u0018UÃR‚\u003cí„Da»•YN`hÎ\u0007í;ùMHþÿr­üO¥ÿ‘žPŒÂÐýŽC„ڐƏß÷‹ÿGT+OóÿþÏí\tïe\u000e4FÒ\u0018CP\u0017©\u0003â\u0026\u0007\u0006⎤¤_nç\u00120\u001eÓÝtŠ|àÀüOH`\fGKs¾ÈOÓK'H`pŽå±äŸ¤9‰\u0015QË\u001f­÷0\n¥\"Ê8\u0004~º\u003c£ô}\fCºã'D\u0006Òåí\u001c+\b|A5\u000e‡Óº~\u0013\u0011g.\u0011\u001bŠïNP—(ï¸×'s…ÚEA©à»î\u001d,–ÊïPqä\\D\u000eç/\u0011Oéú]é`—xª\u0012Jú}^õ•¦ò\u001d×]GÞ]Tòª»sÔjþ\bÉ+ÁÀdÒQ¤ð~wyXwzbØ+eQ¤ÈGµ\u0006„ù™\u003c©«yϜÓ]¬ëN}%ð`Î}_µÙ«™8¢Ý\u0019 ~m\u000ep\u0012:Ðû\u001f\rñæœßš¹æq\u0011Ø*¹,2·zC…\u001bès;ɒSE\u003eüþ8\u001f$rgÔ,{51\t\tä£Â\\îqŒ¦/ÑÐ:ù9Ëw1ïÎÎ5\u001e4åÚ\u0017¬\u001299\u001fz\rè¾Q²)`wñ³$à.;|\u001f—ÔSü\u0018„~¢Pè· ÀT÷T\u0017\u0015ã\u0010\u0006·¨ò\u0007\u0017uŽyyÿ†æ\u0003ªp ¤åK†ç¸¿Q\u0010xÍ×}Ǎ\u0011·Æ\"*0éW\u0004\u000b$µÅø½€{›\u0004y[\u001c’\u0002µ]þ(—ߥ\u0002Th7ßâã\u001c÷÷û7\u001c\u0013º2åN¯\u0004~í\u0005“Z˜„*±\u0003\u0018¸\u0012\u0001ü†“É\b„†â÷|‹#®|ö\u0019âdçæ\"^\u001bø9¢\u000es¬Üeâ†ê§¨zh[w­†»¶º\u0014\u0013ªq\u0012P'=\u00039øÄYä1\u0000câÁ‘ÒoÓxç^h:0ÊRšwl†CKÐïÛ/\f29œÍ5`œä0þ†\u0005Ÿ8ë@E\u001e)\u001bùŸ„q,{µ\u0002¨\u001c)TÜ|͂|æ\u0013¨¸;\u0007Iù.\u000b\u0004}¥b™6?\"`–üŠ€y†aòåK0\u0018OސǥË\\)ò‘ÆC²½V¾\f½”øܱ¤+rdA…þ\\Püµ\u0007Èh5ÀÿE´àRö\u0010þÕbœ¹¡‡™¯Ì8Ìëèü\u0019§X\u000e˙pÄÕwÌéHã‹Æ”¡eÂóh}eÂóh=:á·ñÑòñ\u0010ú—¢ 8ã8•;å4Ì»ó¦\u003cáëáI‡iéÕº~\"óȼã0Gͧð\u0017…LÜV=Dâ+ÚsÓõ$Ô¾¢?ùÔ\u001eÕ ›ëpÍB\u001bŸ£\u0013ô­ˆmFz\u001d#€\u0019â?º¨óô—Ô\u0011§1œÌ\u000fÊ9ŽÎ\tÊ=lçåf6øãÜÀŒÙ°Ñ\u003eÜ\u0000ќ@rIçÉ\u000eܽÞï\u0005Ãÿ\u001bûW\r?\b\u0007w‡ã¿1\u0019v”nºOÎOZ\u001c?\u0016e9;)qÉFm\u001fWÓW¦¿5‚\b\u0006˜ñ§Yðo\u0005‡ºbhz˜\u0006/\u0018ö’;\u001aÃÖPêþ~.$\u0004Z\u000fاöf·~j»@|oØ\u0019r¨§^\u0012OûÚ§*L¤Khœü•¶ r3\u001cæ;¤\u0014w[Ž[in„º\u001b…MûX£Î-»}A.8AæËåb–oʦҜݖ\rLÏ\u003c辝ð†„p‚;\u0017\u0011v\u0026 \u001eÃWD(\u0003íf¬¦^{Vþúä¬|¿\u0016z\u0003e+ñÜ}\u001d½‚§\u0013ž{|Þ¯ûú*îdR+=^⫕sœ¥®Â]ËÕîÍ\u000b{½ÚxŠ\"7an¿¿3„ëT[JÎaÉ÷úº\u0016x'(\u0010\u003c/µV€oÅézz·\bÿ\b;EõÜÔ^Sœjm\u0014øÒýî¯gî\nÿ^ï7ÊÐ\u001f\u000b\u000bŸî@|JàގBnE\u0002­´\u0012€!ÕgýNàKýCéM²Ìô\u0013\u0006îÈÿHá\u001e\u0007Äu\rñx\u001cl\u0013\u0019hCÀW\u0006É!ÄÌå\u0006_e(Ÿà]\tÝ\u0019_C\u0001ò7ē µï’+Çßè;A¿×7~•=œÓ¢ä؃‹“\u003eΎU|™“\u001bľÊW¦oMó3\u001dyÈ7ùhËh³ýÛ¬dt¾ÉÍ8ø̗=Hä›|4|ï3\u003e\u003ewJˆÈ—¼JV—:U{?áånü#¡»üä‘Ɇ„\nB_däŒÂ=\u000eØ«\u0012ÛǂÿÃ\u0012!¯c™\u003cBw÷Òóø¹Ú\u000eû„\u001f6o\t¿\u0026t‡\u001f2w+æŒÌ'ŒÜ[Š3\n_âà8ÃIñç.\u000f\u000fÒ¸Ëŧû;jJþ~Ï-RwyÊ#t܇¿Ï\bý)ú§ÿùry|\u001exžeHéI\u001aà\u0000+\u000e\réxŽ\u003e¹Ü‚È\b\u001bÏ\u0012l\u0017•Å²­Ô7ŽMδÿ?|úþåÖ¥\u0004Õ\u0002Zðëê²Ã¯÷‹\u000eÊÀ…òL\u0013ù\u0007/¢ˆ~\u001dEc\u0019†,s4O2\u0014M°,•f¤º\u001b¤³xu\f=iF†‰\u000eå¡óà‚\u0016¡C~im6Á‘\\wm(ï€FR\u0007L¦\"JON5{­jyR­ü¸„\u0012—ÖÙÉÂ\u0004\u0012{‡HÑ/÷µ‘JFÉ)Ã\u0004p§ˆ\u0001üý~òëxÏ杊âû®\u000fu%\b’\u001c\u0018\u0002t¡z©†\"ÿ\u0018)@\n$\u0000?þ\u000b…sÿýGr_éÇñ@¾ÚÊʶÀ\u0004\u0005\bó?¯\u0005üù?Be\u001fþ[öû\u0007\u0014ُPW~¨P\u0017d]ý€ß¢@I¾;®ój\u001f{…ô~(ÎÖð]dž£N\u0013Ä´“\u001fÀ‘\u0000ùx†ÿ‡®X\u001elþ±\u0003¾c8Zðóbdïõ\u0015h‡Ò:\u0019à¯_ŽòïÇA )\u001aÒÏýþ§*J²ó\u0013ÚIÁ‡©ÞOO÷\n[ʨ‰eª\u00103\u0005«hè«YØûÃu´Q‡á¡\u001c¾Òá\u0002\u001f–¸é®¿\\M\u0007£Îvë\f–=ƒ¯ÎÔ:«ÍªÀ\u0003[©³‘\u001aüVX¯‹[áuW\u001fj\u000byil·å]Ðh´c\u003cjw†\u0002fªE÷Ðìöj¥õz‡·Â~Ýmt7˜\u0013\u000fÇ\u0003rÕ)ª“ˆŠ‹A´\u001eÌ\u001b\u0015Æ_8î¢h*ñk03‡\u001b+,)%=\nÖ\u0004°ã–Þîê„\u001b\u001e49rZ\u0016©ñ\u001bÊ\u001b±Ü¦Ãð³M¯çQu\u001b/5¬W«jÕ\u000f“\u0006Õ\u0001úkHÓUÖî[L}mn°þL\u0001ÛõJ¢\u001a͆Sn­Ê’D¬\u0006xwÃíbÏ(Î\u0005Q]¿\u0016»Ó¨MDêH/ʶNWªŽl®Ëxg¹£çsƒm\u000eðFsº,mV”þÓ\fÞ(’yãq(üÀ\u0003οGÎÚqwÎ\u001bö†ÁOöÃó!`4œ\u000fp6\u001fUÊ\u0001«Å|Á5\u0016¨\u001bh³o$ÏC¢Þ\r¢©‡9\u001d…Ín ¨¬(±2à^U†Ã^)\u0002\u0017_È\u0013¯4\u0006D\tãi\u0012ˆÌ%j\u0019¦\u0019AfÞN\buOÉjÉÞZƒj§»™Ûo,\u0007oÉ!\ftZXSd7‚îu­9ÔÑÉaþz:¹ÌT“\u0013Ÿz\u000f\u0002¹êÁ¥§F#\u001fønèJ®•š=üPÀ¦\u0005õÓQÃÉñjWöI9ë4‰6в\u0003\u0017¨£÷ \b\u0002#y\u0018 p\u0004†q\u003cq\u000e¾Ýå{¾¿_rn¦9‘ø\u0019è§m#\u003csq¡1:ˆçd”ðk?›VJӘ–î۳\u0002nRZ¢™÷öã)\u001cH\u003cÊî\tˆ\u001bÁÙa›SKèúÐi\r#7Y´!=\u0012ã1\u001a#\u0019î¼}úîDSnk–K1:\u0012z*ٟ\u0011…‘\u0001Ú¨€?lï\u0018ù¥\u0007}Y6ÛûH\u0017ÓsÁè†,+΅¤\u0010©¾ª\u0006Ê9¤¯È†¯ ÙFÎùwٕ\"ä[+ýnÕRЯ\u0013\u0004É2\u0019뒋˜‡ÉýØ8¤ls\fæ3.+×­\u0014\u0011LV¾õ\u0013¨0\u0015?aò\u0019fR°Fҗ ¢$U¥Kî®!F Tò\u0000nq‚Ó\u0014Ã`ì5ð­A‘mŠ¿†M‚¨\u0013o7¸¿\u001a%$Å]’2?\u001b¥ùÉ ÍÛc¤á\u0018ÉLGÎao\r\u0011‡€\u003cÆ\\Á^\f\u0011¿\u0001q9DHŠa3R:ðe¸ì¢XJŠ|\u0018‡d1\u0017wî\u0014 =I\u003eØY™;A;«‚ëX1ŠeÏÇ{\u0002—ÑEädØÙæ´\u0000\u00194,\u0001\u001d?—Ò\u0013¤ïW\u001fN¶tòXjR'Þ¥¥ý$AÀ!µÛ°§Òªt²€K ,Â\nݤ{\u0000Ã2ÿššêCö€!\u0000Mù0ÏÇsi\u0000\u0004\u0002\u0014–\u001dyɍõ´'ê\nDò\"\bfY' œào:Ù-°¢#DæüÒU\u0006\u0006O™\u0015d³\u0014TÑ­‰ãaî)÷8\u000e\u0001\u0026\u0010¦!\u0018¶v[U/š/\u0014õÔzKM/an©ç%̅Z^5_êdf0ÈÛ!·=ö|#\u0004\"J4òFt\u000föÒ\u000eoƒæ5\u0007!à9\b7¥\u0007û‰H¦0æz\\(7¡óÄr\tü€`.Q\u001e\u0010Í%Ê}á\\Aß\u0016Opô\u0026¹\"¹†¸\u0010Ã\u0007€ü¡\u0000Ë\u001fî\u0007°›Cü\b‘3¬Ï§úóù}tR\u001fÉ\u0007¦ï¡9‹œß±óûÐ\u0017CÎ\u0005Î\u001f}.J¾ rQnÊ$\u001fúSñ\u003cdóŸÁç‹èq»¿ƒô˜\u001e²ý{ðy¢zH\u003e\båqI\u003c\u003eü‡Æü˜›Kë?0;@\u0015¥qR5º²½ÀOûHïŠ*iVp\u001e\u0014eiÁñ¬ËÈuϒ\u0006üÔ¦ÈW)EŠ™ž]*ëÀAW\u0011$ח/!’ã`7ð³8æ”Ìá\u0018‘FN·\u0012Àä\\Ãòllªá\u0000k|õ\u0019\u0015Q[\ry\u0011{N þ@Ìý@\bŸ\u001b\u0016„ç¦QyÙS^\u001eÄ`(ÿ\u000er‹a\u0002\u0026þÇ\fðFŠDž\u001a.9f0†ÎˆçÚZž}Ý·”û\u0016wÃvðSÃUþ–]\\M\u001a¬¬Rq“×kˆ\u000b¦?\u0000äsÿ\u0001,\u0018\u001fÀnú‚\u0010·\u001de'XÕ½w*o|h™:Êu\u001bt\r\u001d8¶ãɱò±\u000eþ®M%íÊbÏÚ\u0026†m8ڇ¦ËZìFb²\u000bpÚ~x/\bªë\u000bî±°q*p\u0018÷ò\u000eí€íqÛæíC\u0005%-Ž¤,\b\u001f¯užÓ¹\u000bÀ\u000f79Ï!Ï·9Î\u000e%˜Ìž³\"‰\u0013ÜE¿èªÀ“¬l\rI\u0019\u0018{Å\u001a!)üJ·3¶R\u0019XR”Îc\u001f\"ë\n8Þ×\u003ezށï¢ê\u003edô\f\u0000?Š{,sD,!ŠR¾\nLù:®¦A\u003c4i®žö9A\n•µáR—ó$ºI-ñ/”SÊãñh¢ìî\u0011Ø ”\u0013F\u000fè¼\u001cÛª¨ø~ú\bÓzÛ\u0015d–“\u0013¹Ùšƒ\u000e\u0014\n\u000eÔúä)´T\u000b2”d‹#9Êq|oÇ9 ºÉç:IU?«¦\u001dÉy ;ϋÔf¤¼?\u0002tbë\\ÏŒàHà\u0002âƒ1¤§ˆ/ä‘\u001e\u001d\u0015€ïƒ8•K²Ù4I·§þ8æã\u0000@v\r\u0007®¾ÞÛé=¢´íTÓç×d!L¯Ÿ½a·Á\f$“ø\u001d*õfèhç8Ñ6Øy¢’ÙUÁ´â,¸QZ™ÞÀ¥\u001d\u000eÊ7¹¾©è½'UDo8Áî}#X£áX r$]ØâG\fÍw#ï-T‚”F »‘%\u000bQ \b\"4T *IuåÏôu•[ï…ý\u0013_bàèï¾ÄÀø\u000bö‚3,E ·\u00186Ê\u001e=Â`Aj­¿Ü²‚y\u001a©~f›ˆé«YÚ:є?\u0013AÿÊ6kŸ®_ŠcñÿßÅ¿ \u000b,¯\u000f\u0001íè S–²ˆ÷7ºäXÔev\"\u0010U\bedcn\u0010¡‹Ë©SEÌ\u0018249´Ã\t-á©\bhP\u001cS1\u0019`BÔcÃ\u0011«¿îú]\u001f¬\u0003©?\u0005½î\"’Å\u0010\u0007mnÙ`©p4¬½z\rZ¬D®Î”¹`Ùí1-~Ñ×7b§J\u0003!lÕÄêèµKÏ×kŒ\u001fÕ\t_\"Wãi»ìtmlZå,¡\u00178ýƁ,Õëî”}\u0015\u001a\u000bú ›=ܱ‡Ñ\u003c\u003cð½íó\u003cŽ{F›,6ízMïR\u001fFËQ\u0004Òwîì͸B$%çl¸gDŽž·Q2ùZF¨\b‘\u001f¤—‘…\r*·ÊÙkI\u0010ôý\u001d˜Ó‡Ì…Љc÷4g®\u0007þg‡hÀuàøê\u000bÚuù'º\u0019Œa¿ûT\u001f\u0014;þ\u0002|IËzŒ)m\u001aýVkj{øt¹¯š\u0026×fÇûú~»\u000bĪFïœê¬L‘¯#ïÀšµÕÔ°é\u001a§ìU\u0010¾F=3\"íY{'Y›å^÷fÅædɈi¹Ý•Ér(L¤J[mÑ\f¿\u0018¶9Zè\u0026c‡¾°\u001bö‹K3ÂI§³ôùâÖ\u0016çì¬\u0007\u0026\u0007lÒ6ønu\u001b•ñÃr\u001e×Fk‹±h\u0015/÷WM‹¥\u00266è\u001b=n\u0015ͧëgè\bŒ¾gܽ…¾\u0006¾è\u0006ãݾ¶m\u000fAuÎõ@—͵ù÷ÝØ\u0007Í=å\u0002O¹øí™\u0018ÖM¶„OØæ\u003e ֍2C\ré5¥.åµÈ†Õ.³ßM«u\u0001\u0017K¥V™L‰Qy#ú½`¼Þ\u0007‡C¯ªãM}ï:\u000b·è€\u0000Äv°_Pj•h:£ýÒÇÜé¡ÓŽ-\u001e¨ìbîùÎÖ\u001e:cµ\u0015¶G£yh·jü븩oZ•ø@4K˜V*\u0006Ë͜\u0014\u0026n¥Ssǝ±§cóN‹ân\r7µ÷ß\u001d.¥9¾Ù®¶úñ¤¿eƒzE\u000fÇF¥=ÝؓZ-z¥ùƒ\u0015”z­aö» ¯\u00045¼ºg›ê¶QŒª“bqd´™ÁÂ\u0005ƒñªÆ7½`¸\u001eovÅé«\u001bL–£Þ 6hô\u0019\u001b\u000bÜ6Ù²\u000e= O;Si†ôº\u00127ÙE»2¬¹–4\u0017ãÀ—\u0017±º›”™ùf\\\u0002QÄq\u0015UØ5úQ£'jë¢Ý™˜Xg¶ï\u0007+\u001bÓ»Þ¡\u0013ä+ÞéÕ¯ãK\u001f\u001e›;=òuz¸ë/wžízìY͏/týúg¾½ö¯z…’¤ÎV\u001e3\b-Á64ÿòµçĨÑò’\u0004¢ï§ôæŠXòÝ\u001d”^\u0005ž¨\u001e\u0016t\u0012Ðr\u0002™ÕŸ²—=’ÇôPn\u0026øgÉY–…ì\u001d/f\u001d¿$™\u0014–\u003c²u¼±q…ü~\u0026á\fýýÛ\u0019\u0001´ÿ‡4)x¯½¡Üôàºö\u0007rÇ\u001d|˜y\"\u0015x/\f1^z\tH\u0010\\ïìT\\ª)ٖâ)„ý‰1ô?ó‰[8éß\fÏ1\u0006)\ró'¥\u0011eÁ“¥ìõÅó§mÁñðŸJˆèº\u0017õÊb\u0004x¥dE~åd\t¼\u00128C“2§J”,¥iYV\u0017È^„F3o¦$¤\u0018(%º¹nω}¸Yj\u000b¨^Þ\u0006¬ë:X7ÍnˆÇuÑfû¡?\u001c\u001eæ­\u001a1ŠçE¶B®Ëñ¨½í”Çó¶fbfU\u0018q_îÕ§­Ã¡9àbro˜-Ü(\u001aÍNµ¤Núƒý,v¬±¹ Ù®¡u\u0003×f°Ñ4¤ÜõT{¦\u0002\"lL\u000bϛöºÇšUC_D«-®‡;¬–æpÉx_ñäÔóß|]\u001bN=\u0007C\u0026ŠÁ¿²r±­áh´š÷\u0016\u00155-¦ß1¬\u0006ۧǭ\u0026Ãö(½F»Á¢Éê,\u001dÄ\u0003Æ\u001cqãÃ|½T›U0j–êC®8ÛÛ-R\u001co„á€*{~ґÅb\u0026ú»…hMð^[‹»\u000b~·Ÿi³î~»¤µº\\6Õhµ‰˜]Pqâ×ÆÆ*«ýfWrJÕI§\u003e\u0018\u000eÖlcgXj}Þ\fÆmªÖ\u003e\fÏ\u0017)žâÉËÀü?DÓ;sÏ\n\u0007¸³˜\u001aíI‹\u0004‡\"gÌÌh;iâԈ\u001eѵ}a3T›{Žñw\u0012n‘z—ÆŸSØÕמ5YÕ\u001cÑ\u000bV\u000b\n1#/jåÖ@\t\u001b]°ÂF\u0003~J·J\u001aQ\u001dµ§\u001d× ùjÙãÕþR\tÖ\u0000gªÜ¬½qå*3^‚¨Z+\u0007s|kNõ\u0005Þì”K\u00189\rË^ïÙiõ\u000eÓÀ•‹m­Þõc\u001a'Ÿ{›^¹\u000eÂi\r]¦=™³†¿\u0017×ø3Õq+5lÄ[Ë]Õ\u000b[íÞÜ\u0018ÔirM¬ª6cóÞdÕTâ穲Ù3Û/¹³X#k\u0006kóÐ'©\nÏ9SI\u001b-»ë®Ë(bÛ2\u0007łÕ\u001d6\fIy.6©¥÷¬j ?ÆÁ|Ó4|6pL\u0015”\u000eõIX\u001a¶ÍÁY\u0018{¢UˆÜZ½:d\u001aÞ¤¤ICRôI¯G5èNaRWõZµ0\u000b\u0014Ï/tGÍÑtg6\bu¦Çýº¸(\u00183ÒÛ\u003c›öˆÑæÏõ_\fKøŠé¹dq8™\r;\\¯.\u0007˜Ç‚°æ\u0019} ǪZ‘BVq0íP\u001e–h¸À´A'VŒ]uÚ­mƒRÙÚÍú3ý¹Wi\fÆr\u000f¬JSÆë\r¸Ô*\u001fp·«Wb£pX.w%·ÁÅ\tÓ(öw5e]\u0018l\u0007Ő\u001e®Š*0)m\u001e\u0015\u0003•öå\rntÛATh\u0019Ò¸\u001dhCã™W‹ö¸]’ÔÚ¢Øè\u0019#‘/\u000f*’S\u001e™Õi,ãF_Ué\u0015fU›\\q57¼\u0026Ý7\u001d¨\u0000“}·;\u000b¥˜'kϝ­6í\u0016ƶ\u0018H\u003cfôž×ÀV{l‡.ìöÍgs\\Y,ž‡\u0007nÕ'Û¼4\\—ƒ8ÚZý…\u003ehGÀ\\LÉö¾0âك\b¤gW\u003e°“²´ØÛ£©YŸ¯bº\u003e#\u0001…a’æ5ۄܙbóÕlÁ+J¼[,p7ª\u0016¨©EU†!7†IC*òøªÐ¨\u000e˜ýÌ­k\u0015ט\u001cÆ8aEs\f\f›ý\u0002YäZSz@\u0014±©…+8Ë\u0014zx‡\r0fƐֲڪ˜òv¹!ª4Cùpsðb®Ö\u00127ýpY(ª!·áŠ•†­qšïه™[³­!\u0018¬™­HÅ\f\\(†ÊFš[õMÓ\u0001ó†|°·û\u001aÓìi;ÑkëzP+\u0010ÄÁiöÜEcZ‰\u000ezíó‡\u0015±Åý V\u001aҐ'±O\u001cš\\ß\\ÕÜYqØÀÁV\\ƒ’7ï6Ë~·/ê^\\\u003eÔ\u0018®£ê*¨`û‘/YšÀ©Â [ãØrk6 Vë¡DùÔþ¹\u001e\u00045§ÅÛjy˛4\u0016aØ¡GUÔz¸t\u00017\ty¶jáõÚÛ\u000f\u001b;×Ádk\u001eï;;‡c•çCuZ߸ûÁ!\u0018µ,qԗpf¹0\u0016ÞxŒ\u001bm)®š›qό\b¨¿#sgrXK{\u0016Áó^-ô¦dgºó풾v(¹\u0017\u0005€§ªãÞRä\u001a\u0012A±Kï@D\u0005ú¹\"ËÓqy²÷\u000f¶ÝæuLU°¹;ÒÜr\u001f/ћ\u003eÙ[ï6D\u0013›T]³Á/\rë ֕u{׬\u001elmüü\u001cðQP7äæZ­÷ÙñÒöÇ\u000e£…ͦª»ÚsiÞ2õh¥âê@TµŠÓ\\0ÅÂö\u0010WGTÃVõâȵvƒV8\\ØÝCÐ%äÃÁ\u0006sL\u0006”8Ž\u0007ËrÙÜ\u0014¨z—d6ó:n5ÇÀ\u0000†áx{¾»5Dmd-úæPd\u0014£ ñ¼f‘CÙ·(oFWË¥ºZ6©\f‚òóvߍ¶MµbNÙV\\%(*äµv¥‡u\u0019¼ê`\u001e~عc¿§²%Û«Owш«Ž**fmc\"ԇE³Z%ìv£ÊL\f{+ò\u0005\".\u003c×{ ˜hì¢Åw,¬@\rh+ÚèK൩\u001d\u0007\u0006‘©2\u000e54|^µ­ý²L\r‹àP\u003e\u0010í¦È•0ªèO­¢OY¤#\u0011ÕÃ|_סƂm³V\u000fð‰lø“u¯ßq·­Z§OÏÀ0\nq¶Eˆrk§6×\rFÃAƒ´\u001b‘ïWË\u0016[¤zä~iUVMZ챤Ô2šÏ\u0015c¢ÂˆhG”—ôz;\u001eKN\u001bo\r4©¶ê©“Ù\u001e\u000fF\\¡ÄÏWƒzëPvôHѼ©\u0004—@h¸q¯\u001bJó¡ß‘0Кs\u001d§¥56“\u0005Ç(DX­Œútí¹æîú“9\u001dIó9Û,t GuM\"\u00184VËõº2\u001d*‡¢ØPöô|æû*Ý|^L\nìžw¥Ñt1ßîŠKV,…N‡/ÅôÜn7™ªÙ\\•!\u001esì¸\u000eŒåîP\u0019°…À]„ñ²®,\u0017e½(;ϓ­û|ˆ:\"¹÷Ÿ\u001bñTjAÁ”Gí¢;ÃÇìÐ\u0011w@Ö6\u0005mÌ;CÅÝDZIÇ\u0013³;ßGõ\u0003¾dŠ\u003eÁVvê~[\u001b¯Ç}K\u0012ÇD¯ß\u001c\u0013\u0026;\u001fˆf°\u0007*.Í\u0018©ë–,ϊƒ¹cÖ°B'XVŸûº28\f7œYŽ¡£Û\u001f*þ~3šêõþ–¨L˜‚XÂësµC”jqqÍì7¥Úš*”ØŠmu¸Qm·‘\u000bÅý|^tš*\u0010\u000f»xþŒï×ÔÔ[\u0018³I]›wëp¹kÉå~gÃûÓ¸Ó\b½’?\u0013«Ñ$ÖÃB©å\u0001¢WèÖëfGå{®¢··Õ®W†V\u0017õ:\u0003§±éq‘ÙY0“E1´C½\bWPÙv|°ÖwºF6V[2(\u0016÷JÍüÇGº,þÍâ`\u0016ú\u00114v–å Ý\u001cô$´î1\u0026·­P¼{^ª8\u0026™Yz™ÖWQÅ\u000b\u0015Â`czâ5;æjY[Û3\u003cå\u0005]Ù\t\fÛ°@zi\nAÂÄRvS¸®‚îBý\u0013\u0005ÍQßü\u001f¦ð\fΡ\u0012\u0004Fýùçÿ\u0002S§9\r\n------geckoformboundary114acf9cda233a5a690b7a6ef5adba4c\r\nContent-Disposition: form-data; name=\"q\"\r\n\r\n[{\"app_id\":\"2220391788200892\",\"posts\":\"0\",\"user\":\"0\",\"webSessionId\":\"h44bbe:ujbddj:y76914\",\"trigger\":\"falco:web_time_spent_navigation\",\"send_method\":\"ajax\",\"compression\":\"deflate\",\"snappy_ms\":14}]\r\n------geckoformboundary114acf9cda233a5a690b7a6ef5adba4c--\r\n"}},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Mon, 14 Sep 2026 14:15:29 GMT\r\nServer: Apache/2.4.68 (Debian)\r\nContent-Length: 320\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}],"data":{"size":320,"size_decoded":536,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"93f9788912e3455bbe8d3655a44f303e","sha1":"5ba786f42e537854a5048c9c0cb363be1819aa06","sha256":"7298897041c829e80be037f5529756cc36fa4ae40f3fef12ebdf741e101813bb","sha512":"14493aab0e29cec487f9ff9c71ba883e636eeae5e3fdaf67e86826ab7f3d1f4ba1bdac7e43ff82cb9633d85040d13720f37448fd8673ba41704aea533ff2d1ba","ssdeep":"","tlshash":"d5e07dde406693870500795039d167d1764d53eb346687992ec5d047510867dcca46cd","first_seen":"2026-09-14T14:12:25.592538Z","last_seen":"2026-09-14T19:03:03.432034Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"form.loginco.casa","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v5/yZ/l/0,cross/H75y8sTM51i2ihnX__5DVEvBRhtOrwbdeT9DWDYPz6DhfgQe914iiBfD-GevAmvU9KONMKn3YhINqU49pVNahkCkvx2I9b7Pb8K.css","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:28.190Z","timestamp":1789395328190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:D5:2A:32:43:06:48:D3:1D:A1:74:4A:6C:D6:B4:EC:DB:7D:B2:B1","sha256":"05:35:85:52:24:6B:02:DF:4A:CA:65:E8:B1:29:CF:A6:C6:6A:62:C2:41:0F:21:47:A9:51:2C:81:3C:13:20:7A"}}},"request":{"raw":"GET /rsrc.php/v5/yZ/l/0,cross/H75y8sTM51i2ihnX__5DVEvBRhtOrwbdeT9DWDYPz6DhfgQe914iiBfD-GevAmvU9KONMKn3YhINqU49pVNahkCkvx2I9b7Pb8K.css HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://form.loginco.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Mon, 13 Sep 2027 20:09:35 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: 9jrObo75cWCjancSTJlBWA==\r\nx-fb-debug: jpaPG09Jgkr3v5NMrdHuP+Nd9UMc3H1FwDAG9zi7Rm6++M/ti9sziUihbzZ7WTU6T45HEbIW2+Mu5AFGR1apjg==\r\ncontent-length: 285430\r\ndate: Mon, 14 Sep 2026 14:15:28 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=10, rtx=0, c=23, mss=1232, tbw=5083, tp=9, tpl=0, uplat=6, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1371065,"size_decoded":287405,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c84e1338d7127577d357059322192d25","sha1":"c21a7a1bf5f49fa7dae6580b82e5350e180e9f31","sha256":"7ae1ce3921a1542a372823fa3bbe43602a5d0c886855b25096e3f64f21474a5e","sha512":"f130766c4ff3b1010aecf2f45b2e28404eb9730af6590e5053ed2889c3ae3b4981c9b819ecb706ad1f9dc1256a528549e1fde21e1b9ca2a1e221f32ebc8e1ba5","ssdeep":"6144:x4lK1o+Dol+gvb+GgXkioBPCbw11LWYAKRLCycm6++lQDH/8p15yxQVH5mZUGI3q:iMM+pkMwFAcC7Lh6QdIZUGgq","tlshash":"5425a5a6e751823dbc27d15993adbfac22187e42de161bf2f64271b096c7bf81933104","first_seen":"2026-07-25T01:19:29.943561Z","last_seen":"2026-09-14T19:03:03.429821Z","times_seen":98,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":8,"connect":16,"send":0,"wait":16,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.instagram.com/accounts/xuserid/","fqdn":"www.instagram.com","domain":"instagram.com","tld":"com"},"ip":{"addr":"157.240.200.174","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:28.860Z","timestamp":1789395328860,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.www.instagram.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"42:F1:3E:38:58:1C:51:42:AF:65:B9:E1:C5:A5:85:A4:20:94:F5:7C","sha256":"FC:38:FE:FE:17:1B:2A:DB:BB:71:90:9F:DA:43:07:CA:5B:90:44:3B:BB:08:44:98:A2:83:D6:83:EB:70:3B:9B"}}},"request":{"raw":"GET /accounts/xuserid/ HTTP/1.1\r\nHost: www.instagram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://form.loginco.casa\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: zstd\r\nset-cookie: csrftoken=RndMUT7KsGT6JCvikH0NJA; expires=Tue, 19-Oct-2027 14:15:28 GMT; Max-Age=34560000; path=/; domain=.instagram.com; secure; SameSite=None\r\naccept-ch-lifetime: 4838400\r\naccept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model\r\npragma: no-cache\r\ncache-control: private, no-cache, no-store, must-revalidate\r\nexpires: Sat, 01 Jan 2000 00:00:00 GMT\r\ncontent-security-policy: default-src *.facebook.com *.fbcdn.net *.instagram.com blob:;script-src *.instagram.com static.cdninstagram.com z-p42-static.cdninstagram.com https://instagram.com https://*.www.instagram.com https://*.cdninstagram.com wss://www.instagram.com blob: *.facebook.com *.fbcdn.net 127.0.0.1:* 'nonce-dYUuTeFH' 'self' 'wasm-unsafe-eval' https://accounts.google.com;style-src *.instagram.com static.cdninstagram.com z-p42-static.cdninstagram.com https://*.www.instagram.com data: blob: 'unsafe-inline' *.fbcdn.net *.facebook.com https://accounts.google.com;connect-src *.instagram.com wss://edge-chat.instagram.com https://instagram.com https://*.www.instagram.com https://*.graph.instagram.com https://*.i.instagram.com https://*.od.instagram.com https://i.threads.net https://i.threads.com https://*.od.threads.net https://*.od.threads.com wss://www.instagram.com blob: *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* ws://localhost:* *.cdninstagram.com wss://*.instagram.com:* 'self' https://accounts.google.com;font-src *.instagram.com static.cdninstagram.com z-p42-static.cdninstagram.com data: *.fbcdn.net *.intern.facebook.com *.facebook.com https://*.cdninstagram.com;img-src *.instagram.com *.facebook.com *.fbcdn.net data: *.cdninstagram.com *.whatsapp.net blob: https://*.threads.net https://*.threads.com *.fbsbx.com android-webview-video-poster: *.oculuscdn.com;media-src *.facebook.com *.fbcdn.net *.instagram.com *.cdninstagram.com *.fbsbx.com data: blob:;child-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;frame-src https://instagram.com *.instagram.com *.facebook.com *.fbsbx.com fbsbx.com data:;manifest-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;object-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c\u0026minimize=0;\r\ndocument-policy: include-js-call-stacks-in-crash-reports\r\ncross-origin-embedder-policy-report-only: require-corp;report-to=\"coep_report\"\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nreporting-endpoints: coop_report=\"https://www.facebook.com/browser_reporting/coop/?minimize=0\", coep_report=\"https://www.facebook.com/browser_reporting/coep/?minimize=0\", default=\"https://www.instagram.com/error/ig_web_error_reports/?device_level=unknown\u0026brsid=7685394413649340318\u0026cpp=C3\u0026cv=1047449974\u0026st=1789395328968\"\r\nreport-to: {\"max_age\":2592000,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/coop\\/?minimize=0\"}],\"group\":\"coop_report\",\"include_subdomains\":true}, {\"max_age\":86400,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/coep\\/?minimize=0\"}],\"group\":\"coep_report\"}, {\"max_age\":259200,\"endpoints\":[{\"url\":\"https:\\/\\/www.instagram.com\\/error\\/ig_web_error_reports\\/?device_level=unknown\u0026brsid=7685394413649340318\u0026cpp=C3\u0026cv=1047449974\u0026st=1789395328968\"}]}\r\ncross-origin-opener-policy: same-origin-allow-popups\r\nvary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding\r\norigin-agent-cluster: ?1\r\nstrict-transport-security: max-age=31536000; preload; includeSubDomains\r\nx-stack: www\r\ncontent-type: text/html; charset=\"utf-8\"\r\nx-fb-debug: LfIaIdJPol0Hno6XmgFWJ1Z3vT6lBSi2gFtvIHZghV/EB1g5gK9W/L9prxsXW88f+avj5R5lMU33veztBVZlOw==\r\ndate: Mon, 14 Sep 2026 14:15:29 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=14, rtx=0, c=34, mss=1232, tbw=5387, tp=9, tpl=0, uplat=209, ullat=0\r\npriority: u=3,i\r\n\r\n","headers":null,"cookies":[{"name":"csrftoken","value":"RndMUT7KsGT6JCvikH0NJA","quoted":false,"path":"/","domain":".instagram.com","expires":"2027-10-19T14:15:28Z","raw_expires":"Tue, 19-Oct-2027 14:15:28 GMT","max_age":34560000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"csrftoken=RndMUT7KsGT6JCvikH0NJA; expires=Tue, 19-Oct-2027 14:15:28 GMT; Max-Age=34560000; path=/; domain=.instagram.com; secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":621449,"size_decoded":121342,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"f0425983d3129717799e964a20abc12d","sha1":"0dcecbf87c9ca6a4a794e9567928b8046d5825e9","sha256":"9ca91933e149b494b3c710fd9ce0a1ab79ceda83c00a374ba1d27b3e4b248aee","sha512":"8cd2d26c5c1c6f39989eb725cc3288163c59e010a4dc5b02f1efde5adc0609f6bcfae3fee08208e0644c961fda06afa056004505aaaba3bd9447571e3f274748","ssdeep":"6144:EHLiWxLoSHLiWxLoDHLiWxLopNmdLsiCx4nyBmTD4:SNAPnOP","tlshash":"11d43b427408d97b99230bd3e49a3edbba6c140b75c8a8e9f0dd2f2957c58f83217b15","first_seen":"2026-09-14T14:16:29.83741Z","last_seen":"2026-09-14T14:16:29.83741Z","times_seen":1,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":16,"connect":21,"send":0,"wait":225,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/yl/r/9AJbVCy4-G1.woff2","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:28.497Z","timestamp":1789395328497,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:D5:2A:32:43:06:48:D3:1D:A1:74:4A:6C:D6:B4:EC:DB:7D:B2:B1","sha256":"05:35:85:52:24:6B:02:DF:4A:CA:65:E8:B1:29:CF:A6:C6:6A:62:C2:41:0F:21:47:A9:51:2C:81:3C:13:20:7A"}}},"request":{"raw":"GET /rsrc.php/yl/r/9AJbVCy4-G1.woff2 HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://form.loginco.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://static.xx.fbcdn.net/rsrc.php/v5/yZ/l/0,cross/H75y8sTM51i2ihnX__5DVEvBRhtOrwbdeT9DWDYPz6DhfgQe914iiBfD-GevAmvU9KONMKn3YhINqU49pVNahkCkvx2I9b7Pb8K.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\ncontent-md5: LlACe50urNNOyzraFVz2dg==\r\nexpires: Tue, 14 Sep 2027 00:19:39 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\nx-fb-debug: Tg1+veLjSQLXbl93vk2pGz7tdG78H0XtFeMaRbkAmnnXjrY+SoATKS/M6qouKnt+mFFLHRcjkSqVzkpsUx9CGQ==\r\ncontent-length: 29936\r\ndate: Mon, 14 Sep 2026 14:15:28 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=7, rtx=0, c=479, mss=1232, tbw=590891, tp=488, tpl=0, uplat=0, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29936,"size_decoded":31854,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29936, version 1.66","md5":"2e50027b9d2eacd34ecb3ada155cf676","sha1":"e05cb612e5693158714748172435a32c6e948f21","sha256":"42109946daec246a5eec3ce0bccf85a9e9e7532585cfe10659d1b2cc559b6411","sha512":"3a3b71b8348119a5bf640882100cd94dabf8a3fd1b10df45d78d3878a1bc9b91f6d98ec2c5d464b4c662f621560c02ca53886b5fd6009d3ba71251a00ba08714","ssdeep":"384:37Ytb64ACIhtdTh2gp3HWlYYEEBgoeZJHokLfG8v640BVQFXlvGw8fRgOPQ5An9/:0cko2lFg0k79vgrQFVOwjOYM9Zc9qp","tlshash":"66d2f159cf48f79ade5d8b8c40aecf6ae6c50e15f3b82830cda11a03190c2dbc95e795","first_seen":"2024-08-19T15:02:33.083112Z","last_seen":"2026-09-15T16:54:59.114533Z","times_seen":14590,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/yQ/r/-pkMfchyeAZ.woff2","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:28.500Z","timestamp":1789395328500,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:D5:2A:32:43:06:48:D3:1D:A1:74:4A:6C:D6:B4:EC:DB:7D:B2:B1","sha256":"05:35:85:52:24:6B:02:DF:4A:CA:65:E8:B1:29:CF:A6:C6:6A:62:C2:41:0F:21:47:A9:51:2C:81:3C:13:20:7A"}}},"request":{"raw":"GET /rsrc.php/yQ/r/-pkMfchyeAZ.woff2 HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://form.loginco.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://static.xx.fbcdn.net/rsrc.php/v5/yZ/l/0,cross/H75y8sTM51i2ihnX__5DVEvBRhtOrwbdeT9DWDYPz6DhfgQe914iiBfD-GevAmvU9KONMKn3YhINqU49pVNahkCkvx2I9b7Pb8K.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\ncontent-md5: wCVBGOPr4SN4Aiv++ZmRLw==\r\nexpires: Mon, 13 Sep 2027 00:11:28 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\nx-fb-debug: AI7dIeXc2+nKIqDBXNSYTZvNARayDLw+ree0OoDxXRSTjP7E/YEOo5kmM0bhv06TCxEhiK2bFj/kcc7kMDS4IA==\r\ncontent-length: 183220\r\ndate: Mon, 14 Sep 2026 14:15:28 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=7, rtx=0, c=479, mss=1232, tbw=621851, tp=515, tpl=0, uplat=0, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":183220,"size_decoded":185139,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 183220, version 5.0","md5":"c0254118e3ebe12378022bfef999912f","sha1":"8ac9051c56091acd2b31036d8cd37bcf2f36aad7","sha256":"0dce730051c3b1526526743fc0079505bdf5454b79f6ec1c1fb2a7cb26350694","sha512":"2014dd6332c3b1e6e4691533e88e66651d227cc8091274beb7aead5766bee626d7332b90328b46c7a19a5874ce9d2db52436799af9ab1448e9aab7ae4139d636","ssdeep":"3072:f6pPcK94Pdr1Il6r0/2TDx3rIYZ5gX5GaShNqIXIzmp3YuYb8:fdK6Pxx0/2TDx3sYTgpGX5IzmpIud","tlshash":"a20412816bd0a4c5342cf6c5caaa33fc845955e4b2de4c4dba3abbc90670da7950ee43","first_seen":"2024-12-03T17:14:56.617992Z","last_seen":"2026-09-15T17:03:47.899213Z","times_seen":27646,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/y1/r/ay1hV6OlegS.ico","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:28.522Z","timestamp":1789395328522,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:D5:2A:32:43:06:48:D3:1D:A1:74:4A:6C:D6:B4:EC:DB:7D:B2:B1","sha256":"05:35:85:52:24:6B:02:DF:4A:CA:65:E8:B1:29:CF:A6:C6:6A:62:C2:41:0F:21:47:A9:51:2C:81:3C:13:20:7A"}}},"request":{"raw":"GET /rsrc.php/y1/r/ay1hV6OlegS.ico HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/x-icon\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\ncontent-md5: to9qU1coA/wIRYVuZbprEQ==\r\nexpires: Sun, 12 Sep 2027 23:56:16 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\nx-fb-debug: SA34flc1mCR1+C8lVaZE18J31iOl7kMYha1TAoX7q/7HOvnA9D7k6NlC0tC6FuM1EkfRg3o/7HjrSHfHxKsD6Q==\r\ncontent-length: 20366\r\ndate: Mon, 14 Sep 2026 14:15:28 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=8, rtx=0, c=573, mss=1232, tbw=809707, tp=672, tpl=0, uplat=0, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20366,"size_decoded":22286,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"b68f6a53572803fc0845856e65ba6b11","sha1":"4b8ae79b4874c5aa89acacf8667e94fce89dec65","sha256":"8924f44d76426a340b105cbdc5b93678c6b772e847b393f2568d94847c0d8d80","sha512":"9d194cba9e8225a66a520b614be53ab6e7020fd4a6ca7ceadd5d4f5b2a98ae8aa52af45a497633e2a59e57ca541a5f030d46db60f43cbe23e63bdc302e68e20e","ssdeep":"48:Xfq3OqXAzh4jaJV9HxG8LaSmO6IgbExw1Xw8JomVn+jwn7:CcwaJViU6IgbEy1AO+jwn7","tlshash":"5692245132430308f45d06b0c647b15a7bed7c832c675e67e9ab3a4e6ff825890275e3","first_seen":"2025-02-20T18:41:00.089582Z","last_seen":"2026-09-15T16:48:26.24401Z","times_seen":22518,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form.loginco.casa/ajax/bz?__a=1\u0026__ccg=EXCELLENT\u0026__comet_req=15\u0026__hs=20659.HYP%3Acomet_loggedout_pkg.2.1...0\u0026__hsi=7666384859364527745\u0026__req=2\u0026__rev=1043845430\u0026__s=h44bbe%3Aujbddj%3Ay76914\u0026__spin_b=trunk\u0026__spin_r=1043845430\u0026__spin_t=1784969321\u0026__user=0\u0026dpr=1\u0026jazoest=22305\u0026lsd=AdR5sv6Vrq8lSmmEzQw9dE59SN4\u0026ph=C3\u0026qpl_active_flow_ids=516759801","fqdn":"form.loginco.casa","domain":"loginco.casa","tld":"casa"},"ip":{"addr":"51.20.127.7","port":443,"asn":16509,"as":"AMAZON-02","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:29.073Z","timestamp":1789395329073,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"form.loginco.casa","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 17:24:55 GMT","end":"Sat, 12 Dec 2026 17:24:54 GMT"},"fingerprint":{"sha1":"98:05:57:24:EF:08:56:FF:FC:A3:8B:0C:C1:9F:AD:7C:5A:F5:2E:E9","sha256":"B3:C1:12:0E:0A:DD:E4:E7:34:54:E5:CA:D4:9C:67:A3:24:78:DF:DD:9C:A0:0E:00:3B:05:B2:A1:96:32:C9:4A"}}},"request":{"raw":"POST /ajax/bz?__a=1\u0026__ccg=EXCELLENT\u0026__comet_req=15\u0026__hs=20659.HYP%3Acomet_loggedout_pkg.2.1...0\u0026__hsi=7666384859364527745\u0026__req=2\u0026__rev=1043845430\u0026__s=h44bbe%3Aujbddj%3Ay76914\u0026__spin_b=trunk\u0026__spin_r=1043845430\u0026__spin_t=1784969321\u0026__user=0\u0026dpr=1\u0026jazoest=22305\u0026lsd=AdR5sv6Vrq8lSmmEzQw9dE59SN4\u0026ph=C3\u0026qpl_active_flow_ids=516759801 HTTP/1.1\r\nHost: form.loginco.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-FB-LSD: AdR5sv6Vrq8lSmmEzQw9dE59SN4\r\nX-ASBD-ID: 359341\r\nContent-Type: multipart/form-data; boundary=----geckoformboundary5c82e08cea0f06a2dd2c77bdd39c6440\r\nContent-Length: 909\r\nOrigin: https://form.loginco.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":909,"data":"------geckoformboundary5c82e08cea0f06a2dd2c77bdd39c6440\r\nContent-Disposition: form-data; name=\"ts\"\r\n\r\n1789395329069\r\n------geckoformboundary5c82e08cea0f06a2dd2c77bdd39c6440\r\nContent-Disposition: form-data; name=\"q\"\r\n\r\n[{\"app_id\":\"2220391788200892\",\"posts\":[[\"falco:bd_pdc_signals\",{\"e\":\"{\\\"asid\\\":\\\"f2b18194-702a-4ded-8dca-21653d8fc4dc\\\",\\\"ct\\\":1784969321,\\\"sjd\\\":\\\"cyaeB5IkKW2xtqYgXnfipqakGhakIjMt1yGbm7OtrQQzWJF2RyWA7D3kCyRKvLCSWKgj0jEfTiyOdNGUJzzIP8y3xijJ1iAiILEBfTOPxVynlSjX57MigMsom60RUt4okUg+4s2tHU/+qKkN7jHZHhXuZv1htw0F\\\",\\\"sid\\\":-1}\",\"r\":1,\"d\":\"fd.ARt9djtlJk2uzjUaG3jzYKtqUfVE71IrfCu9ZzQZlVoi8B8AyrN8k_lS2UxSHL8gO4YrdWPfqkLurf1Ay2yN5rk6\",\"s\":\"h44bbe:ujbddj:y76914\",\"t\":1784969322293.9502,\"a\":\"1043.845.430.0 (1043845430)\",\"b\":[1,128]},1789395329068,0,461]],\"trigger\":\"falco:bd_pdc_signals\",\"user\":\"0\",\"webSessionId\":\"h44bbe:ujbddj:y76914\"}]\r\n------geckoformboundary5c82e08cea0f06a2dd2c77bdd39c6440--\r\n"}},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Mon, 14 Sep 2026 14:15:29 GMT\r\nServer: Apache/2.4.68 (Debian)\r\nContent-Length: 320\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}],"data":{"size":320,"size_decoded":536,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"93f9788912e3455bbe8d3655a44f303e","sha1":"5ba786f42e537854a5048c9c0cb363be1819aa06","sha256":"7298897041c829e80be037f5529756cc36fa4ae40f3fef12ebdf741e101813bb","sha512":"14493aab0e29cec487f9ff9c71ba883e636eeae5e3fdaf67e86826ab7f3d1f4ba1bdac7e43ff82cb9633d85040d13720f37448fd8673ba41704aea533ff2d1ba","ssdeep":"","tlshash":"d5e07dde406693870500795039d167d1764d53eb346687992ec5d047510867dcca46cd","first_seen":"2026-09-14T14:12:25.592538Z","last_seen":"2026-09-14T19:03:03.432034Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"form.loginco.casa","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4iJVq4/ys/l/en_GB-j/Mki7fquN2uo.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:28.535Z","timestamp":1789395328535,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:D5:2A:32:43:06:48:D3:1D:A1:74:4A:6C:D6:B4:EC:DB:7D:B2:B1","sha256":"05:35:85:52:24:6B:02:DF:4A:CA:65:E8:B1:29:CF:A6:C6:6A:62:C2:41:0F:21:47:A9:51:2C:81:3C:13:20:7A"}}},"request":{"raw":"GET /rsrc.php/v4iJVq4/ys/l/en_GB-j/Mki7fquN2uo.js HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://form.loginco.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: application/x-javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Mon, 13 Sep 2027 20:09:50 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: cYYV+9XuJY6L7hPOjfGByA==\r\nx-fb-debug: QIBj6BzPQoU0cLMdi3l5Kbo/y3kp9L2Xq+2T2P3Oi//n/2DJCbHydzdjZZaE4L75wGpMjgkJ4iQlR0rkHbl0RA==\r\ncontent-length: 44936\r\ndate: Mon, 14 Sep 2026 14:15:28 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=8, rtx=0, c=573, mss=1232, tbw=1469563, tp=1215, tpl=0, uplat=11, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174358,"size_decoded":46933,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21530)","md5":"4f2ee483046fb5130a6e10264cdae7c1","sha1":"107db68d57a9401ab287c69cbfc089af9ff03432","sha256":"3bb312a9356633db763496ab8cbe43b88419fb0ea6d41fe571ca2fd1375d01fa","sha512":"4e3eae4b4a1bde26cc84406fcbea43e63133e13ac75d594a9cd4936b61bff2f7452f53352b71173f9886302de15d2b8aad70b795bf6740e3c8b5e2576b5a86cf","ssdeep":"1536:3FiU9F//JRUkCrsQJRYDBBAFxCBBvT57MAW0kUoypb/PKNHy0PVvt2:339RV8RoBBAFxCT+qTPKNH0","tlshash":"9b047e64bc4d39b8bd6f49fe91af910a736c5408b508ca70f1e2fda5aa448cc532375e","first_seen":"2026-07-24T17:46:02.460784Z","last_seen":"2026-09-14T19:03:03.435241Z","times_seen":46,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4/yU/r/DcrX2w7W64E.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:28.841Z","timestamp":1789395328841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:D5:2A:32:43:06:48:D3:1D:A1:74:4A:6C:D6:B4:EC:DB:7D:B2:B1","sha256":"05:35:85:52:24:6B:02:DF:4A:CA:65:E8:B1:29:CF:A6:C6:6A:62:C2:41:0F:21:47:A9:51:2C:81:3C:13:20:7A"}}},"request":{"raw":"GET /rsrc.php/v4/yU/r/DcrX2w7W64E.js HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://form.loginco.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: application/x-javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Sun, 12 Sep 2027 20:40:49 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: JxM813utIwN9036mJfYpvg==\r\nx-fb-debug: lnfpDwrbUhi4Nu1fT1rwk1g6W6s4yh5g/2okExUdxBMmtmoQnamqsWqpA42mTpz7wCG0QyibK+VSPBw0NAWJzw==\r\ncontent-length: 78087\r\ndate: Mon, 14 Sep 2026 14:15:28 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=10, rtx=0, c=776, mss=1232, tbw=2174971, tp=1803, tpl=0, uplat=5, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":295138,"size_decoded":80084,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (64963)","md5":"f2fe74efd48b2d569c28c43b185b4c2f","sha1":"2c74f7bd43819e87f3f03fa0b7d71617f4f14e86","sha256":"ffaea25c6413830faf2a8ac1da308ca1b5e26549eb2d62acec4e51b50677644f","sha512":"ed74a9939eb09d29513aa08b8e71754ee1cc3a26e7ca43c73d8bab72193f73f4bc0faf01b52407b3c5a3c5e7bd8f97f6076d7ec0b822c4ca11b608cc32dd71bb","ssdeep":"6144:zTUYUyZ2Wl7ig8IWXDvzqaHOjCdxagjRdWgClEZNQBdo:zTU/fPOjCdxaro","tlshash":"f35439a976a5722592fa1472507f214bb23a9d59780e8534b1e0c8d82dbdf0e5b33f3c","first_seen":"2026-02-01T20:49:54.663792Z","last_seen":"2026-09-14T19:03:03.440485Z","times_seen":11761,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4/yt/r/MOZsV44WqNm.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:38.842Z","timestamp":1789395338842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:D5:2A:32:43:06:48:D3:1D:A1:74:4A:6C:D6:B4:EC:DB:7D:B2:B1","sha256":"05:35:85:52:24:6B:02:DF:4A:CA:65:E8:B1:29:CF:A6:C6:6A:62:C2:41:0F:21:47:A9:51:2C:81:3C:13:20:7A"}}},"request":{"raw":"GET /rsrc.php/v4/yt/r/MOZsV44WqNm.js HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://form.loginco.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/x-javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\ncontent-md5: 03Yx9lHJwbouQQhs5gHSLw==\r\nexpires: Sat, 04 Sep 2027 23:52:19 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\nx-fb-debug: 11BbyPCR7Z8UXhjs3rz/uBzpI+45Kru0wjOfUJo4Iq1iQgCrOGGe9RyZC3uwjUaBjFNR+bos3gG177kEpUZ/Cw==\r\ncontent-length: 206\r\ndate: Mon, 14 Sep 2026 14:15:38 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=9, rtx=0, c=776, mss=1232, tbw=2441435, tp=2025, tpl=0, uplat=3, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":206,"size_decoded":2153,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"d37631f651c9c1ba2e41086ce601d22f","sha1":"1ed6e627f74c9257c729ea32da5141ddec2406a6","sha256":"4dc82a65d71e9236d2fe109e4ed33936ccb46ce8d9fff965fe751a9d92033ad5","sha512":"c79ae23976603b562c1dc4208f2570b701dba9e5f953070250d4fbf149f7d67faed8d55cfdf9755a28aac309bd0ba43291d46ea6f6ab492abbd47c2f7e24c661","ssdeep":"","tlshash":"69d0a948a442dd08c3dca882985908a3a1b1f2d937c8048288b88a80b0a000bbabe64a","first_seen":"2026-04-16T06:42:53.722287Z","last_seen":"2026-09-15T17:26:49.729033Z","times_seen":6727,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4imgg4/yQ/l/en_GB-j/V15tj8h63LNXV_vKBEegn763T-omr2qwML2OjEpNOBjYRtKQGwG0ihEa-9ML_Y_MRXHBlvxuIMFsRSR_169Kn2AO-Qx8lcabVTDOwgx-s7CoHn8mudCRXLOfwI3XLoYQF64vO2zT06LS1itQWShO2h-PYdOQEKEXaGJ8DwBsqEPHSH1YTvtL32s_6TN5GUvR7zmf91oXroJ7K59X9C3AwQd1t3qNKef6G-hKocd89O_LiCUWDnXRwDHCkV8R1onn-JtdZ7PJrsOfCedTPWKCFM-z_0Q2ncNh9-DZBIN8jKeHWrECl3_n5Wu6jBGHRQaSS1OrajkDar.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:28.537Z","timestamp":1789395328537,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:D5:2A:32:43:06:48:D3:1D:A1:74:4A:6C:D6:B4:EC:DB:7D:B2:B1","sha256":"05:35:85:52:24:6B:02:DF:4A:CA:65:E8:B1:29:CF:A6:C6:6A:62:C2:41:0F:21:47:A9:51:2C:81:3C:13:20:7A"}}},"request":{"raw":"GET /rsrc.php/v4imgg4/yQ/l/en_GB-j/V15tj8h63LNXV_vKBEegn763T-omr2qwML2OjEpNOBjYRtKQGwG0ihEa-9ML_Y_MRXHBlvxuIMFsRSR_169Kn2AO-Qx8lcabVTDOwgx-s7CoHn8mudCRXLOfwI3XLoYQF64vO2zT06LS1itQWShO2h-PYdOQEKEXaGJ8DwBsqEPHSH1YTvtL32s_6TN5GUvR7zmf91oXroJ7K59X9C3AwQd1t3qNKef6G-hKocd89O_LiCUWDnXRwDHCkV8R1onn-JtdZ7PJrsOfCedTPWKCFM-z_0Q2ncNh9-DZBIN8jKeHWrECl3_n5Wu6jBGHRQaSS1OrajkDar.js HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://form.loginco.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: application/x-javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Mon, 13 Sep 2027 20:09:50 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: osSnQHr8aVGbUR5P8pd4AA==\r\nx-fb-debug: WusoMXWHvQcRXd4Dbd9lHFUAz4x9Qc88wq9rwwYD696+ZF7TldH7/OfczzpTjqI20KD02mWxErN1nL0vZa1hDg==\r\ncontent-length: 10531\r\ndate: Mon, 14 Sep 2026 14:15:28 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=11, rtx=0, c=573, mss=1232, tbw=1691323, tp=1395, tpl=0, uplat=15, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35649,"size_decoded":12529,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2839)","md5":"c569adae1c2348a40304ad7fd04a6c77","sha1":"c17a4501131e7043d247ca34757f443c8464e081","sha256":"5f8b58608df0a53980d3f89c6b97a3eaedf38dc48d19ccb3da5df482dce93df9","sha512":"e70223ab8440ffd9e8b0f48dade8f0d1db1c85cd5e360a5e8c0417e0462658667be50139af0a54a18c2ca169565b71b8e965ca3eb2b48282d127631b741b1576","ssdeep":"384:bqXzATMrxfZFA67elh4jEdvdp7yg88E/fvyBvMzEBtANh7lBFyDq/vgHKgl:QzdtxFA6TyygZ+dd1lBEu/Q","tlshash":"21f219886d4d3ca41dbb14eae07f4acf363d18695419cda491b3fe49e1a08ef243366d","first_seen":"2026-09-14T14:12:25.607988Z","last_seen":"2026-09-14T19:03:03.425618Z","times_seen":3,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form.loginco.casa/nw/","fqdn":"form.loginco.casa","domain":"loginco.casa","tld":"casa"},"ip":{"addr":"51.20.127.7","port":443,"asn":16509,"as":"AMAZON-02","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:29.837Z","timestamp":1789395329837,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"form.loginco.casa","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 17:24:55 GMT","end":"Sat, 12 Dec 2026 17:24:54 GMT"},"fingerprint":{"sha1":"98:05:57:24:EF:08:56:FF:FC:A3:8B:0C:C1:9F:AD:7C:5A:F5:2E:E9","sha256":"B3:C1:12:0E:0A:DD:E4:E7:34:54:E5:CA:D4:9C:67:A3:24:78:DF:DD:9C:A0:0E:00:3B:05:B2:A1:96:32:C9:4A"}}},"request":{"raw":"GET /nw/ HTTP/1.1\r\nHost: form.loginco.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Mon, 14 Sep 2026 14:15:29 GMT\r\nServer: Apache/2.4.68 (Debian)\r\nContent-Length: 320\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":320,"size_decoded":536,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"93f9788912e3455bbe8d3655a44f303e","sha1":"5ba786f42e537854a5048c9c0cb363be1819aa06","sha256":"7298897041c829e80be037f5529756cc36fa4ae40f3fef12ebdf741e101813bb","sha512":"14493aab0e29cec487f9ff9c71ba883e636eeae5e3fdaf67e86826ab7f3d1f4ba1bdac7e43ff82cb9633d85040d13720f37448fd8673ba41704aea533ff2d1ba","ssdeep":"","tlshash":"d5e07dde406693870500795039d167d1764d53eb346687992ec5d047510867dcca46cd","first_seen":"2026-09-14T14:12:25.592538Z","last_seen":"2026-09-14T19:03:03.432034Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"form.loginco.casa","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4iA944/yw/l/en_GB-j/M6Lt4HYr5Iy.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:28.539Z","timestamp":1789395328539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:D5:2A:32:43:06:48:D3:1D:A1:74:4A:6C:D6:B4:EC:DB:7D:B2:B1","sha256":"05:35:85:52:24:6B:02:DF:4A:CA:65:E8:B1:29:CF:A6:C6:6A:62:C2:41:0F:21:47:A9:51:2C:81:3C:13:20:7A"}}},"request":{"raw":"GET /rsrc.php/v4iA944/yw/l/en_GB-j/M6Lt4HYr5Iy.js HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://form.loginco.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: application/x-javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Mon, 13 Sep 2027 20:09:50 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: PFJtmvGAlup4KGyWba37Nw==\r\nx-fb-debug: 9Zz1MoF9b9pgEM+SdQdu3mfFf3FEz9OLFygpqUHfCIYgA7b2LGaTYwPnSGbutl5Bc+LyjYmVWpTxAKN8wyzYuw==\r\ncontent-length: 66543\r\ndate: Mon, 14 Sep 2026 14:15:28 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=11, rtx=0, c=573, mss=1232, tbw=1654363, tp=1365, tpl=0, uplat=14, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":249418,"size_decoded":68541,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6826)","md5":"c5834521fafa062c1145b6c272877b6d","sha1":"4b1ec249d1a0f07be2df82a8577632b8c8ac725e","sha256":"3927ad212b9d54cb9a44de0ce92a827b9330d522829571ff60d044fa36fa9fdd","sha512":"af32d38f1d76af68d65708a79b8f6d7a9498f064f0d35748d1ef926e0f26a1f4ff7a63fe0bd63a89aef30ce85e8efb8d90bfdf5505bfd8b1a53df776a2559efd","ssdeep":"3072:GVJWqwVr3BvyCjlfs3zkiPMyXmpN9lwcwwgpji0/pLMMXYoLHLNBp2nfeb3e4:Gmj0jMc+9Mi4pLM9oLH/p24","tlshash":"1f343c8db89538591e7714ad90af274bb37d3887240dc568e2b5ef922928d8f1337b1c","first_seen":"2026-09-14T14:12:25.605592Z","last_seen":"2026-09-14T19:03:03.430919Z","times_seen":3,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form.loginco.casa/ajax/bz?__a=1\u0026__ccg=EXCELLENT\u0026__comet_req=15\u0026__hs=20659.HYP%3Acomet_loggedout_pkg.2.1...0\u0026__hsi=7666384859364527745\u0026__req=4\u0026__rev=1043845430\u0026__s=h44bbe%3Aujbddj%3Ay76914\u0026__spin_b=trunk\u0026__spin_r=1043845430\u0026__spin_t=1784969321\u0026__user=0\u0026dpr=1\u0026jazoest=22305\u0026lsd=AdR5sv6Vrq8lSmmEzQw9dE59SN4\u0026ph=C3\u0026qpl_active_flow_ids=516759801","fqdn":"form.loginco.casa","domain":"loginco.casa","tld":"casa"},"ip":{"addr":"51.20.127.7","port":443,"asn":16509,"as":"AMAZON-02","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:37.772Z","timestamp":1789395337772,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"form.loginco.casa","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 17:24:55 GMT","end":"Sat, 12 Dec 2026 17:24:54 GMT"},"fingerprint":{"sha1":"98:05:57:24:EF:08:56:FF:FC:A3:8B:0C:C1:9F:AD:7C:5A:F5:2E:E9","sha256":"B3:C1:12:0E:0A:DD:E4:E7:34:54:E5:CA:D4:9C:67:A3:24:78:DF:DD:9C:A0:0E:00:3B:05:B2:A1:96:32:C9:4A"}}},"request":{"raw":"POST /ajax/bz?__a=1\u0026__ccg=EXCELLENT\u0026__comet_req=15\u0026__hs=20659.HYP%3Acomet_loggedout_pkg.2.1...0\u0026__hsi=7666384859364527745\u0026__req=4\u0026__rev=1043845430\u0026__s=h44bbe%3Aujbddj%3Ay76914\u0026__spin_b=trunk\u0026__spin_r=1043845430\u0026__spin_t=1784969321\u0026__user=0\u0026dpr=1\u0026jazoest=22305\u0026lsd=AdR5sv6Vrq8lSmmEzQw9dE59SN4\u0026ph=C3\u0026qpl_active_flow_ids=516759801 HTTP/1.1\r\nHost: form.loginco.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-FB-LSD: AdR5sv6Vrq8lSmmEzQw9dE59SN4\r\nX-ASBD-ID: 359341\r\nContent-Type: multipart/form-data; boundary=----geckoformboundaryb90a4ddf322e4ba32a12ebd425b5a2d7\r\nContent-Length: 1378\r\nOrigin: https://form.loginco.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Mon, 14 Sep 2026 14:15:37 GMT\r\nServer: Apache/2.4.68 (Debian)\r\nContent-Length: 320\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":320,"size_decoded":537,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"93f9788912e3455bbe8d3655a44f303e","sha1":"5ba786f42e537854a5048c9c0cb363be1819aa06","sha256":"7298897041c829e80be037f5529756cc36fa4ae40f3fef12ebdf741e101813bb","sha512":"14493aab0e29cec487f9ff9c71ba883e636eeae5e3fdaf67e86826ab7f3d1f4ba1bdac7e43ff82cb9633d85040d13720f37448fd8673ba41704aea533ff2d1ba","ssdeep":"","tlshash":"d5e07dde406693870500795039d167d1764d53eb346687992ec5d047510867dcca46cd","first_seen":"2026-09-14T14:12:25.592538Z","last_seen":"2026-09-14T19:03:03.432034Z","times_seen":3,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":12,"send":0,"wait":11,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"form.loginco.casa","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v5/yV/l/0,cross/E4hyG1bv93gwCrB0Y6jo2v.css","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:28.546Z","timestamp":1789395328546,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:D5:2A:32:43:06:48:D3:1D:A1:74:4A:6C:D6:B4:EC:DB:7D:B2:B1","sha256":"05:35:85:52:24:6B:02:DF:4A:CA:65:E8:B1:29:CF:A6:C6:6A:62:C2:41:0F:21:47:A9:51:2C:81:3C:13:20:7A"}}},"request":{"raw":"GET /rsrc.php/v5/yV/l/0,cross/E4hyG1bv93gwCrB0Y6jo2v.css HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://form.loginco.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Mon, 13 Sep 2027 20:09:50 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: JtN8Rhs3gegUtF5j9h8sIA==\r\nx-fb-debug: 0tYDIXCc9AfddzJCnHHZpiC7yH3mmdBuRh1E/fgFUYXInpobrYmksOf3YfLMZNeFxbPliKIPheZwhDgQpfXvjA==\r\ncontent-length: 34819\r\ndate: Mon, 14 Sep 2026 14:15:28 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=9, rtx=0, c=723, mss=1232, tbw=2005979, tp=1653, tpl=0, uplat=8, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":175542,"size_decoded":36799,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (43876)","md5":"4d51adb1f62c31bf4666b0739ed8a9c9","sha1":"78f5ad1d602cfb9c3f67ae1daebc8d67f9f2fb58","sha256":"b517fd09073a4474f25390f7bfdfba2bc6f9d88d278d103832edfba10b3d83e7","sha512":"82aaa1bb50aaff5600218758cab5314dc6c237961318614bda9823df7270235d7b4824b3aebedbdec7b5c66bf01f2d753360a7aa0501081412421316e01450c7","ssdeep":"1536:P+kWrLDH5TmzKmRUjWNX5ztpD50DssvEhH9qD4npQOZDBNt1AcYgeV2fOjIVJ9os:P+komz2wzDODsbYZwOj2","tlshash":"be0420a39741023d641f896a81b7fa48335e7c0afb4f77f1ea426458abcd3941a339c5","first_seen":"2026-07-25T03:01:20.753703Z","last_seen":"2026-09-14T19:03:03.427741Z","times_seen":101,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form.loginco.casa/nw/","fqdn":"form.loginco.casa","domain":"loginco.casa","tld":"casa"},"ip":{"addr":"51.20.127.7","port":443,"asn":16509,"as":"AMAZON-02","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:28.889Z","timestamp":1789395328889,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"form.loginco.casa","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 17:24:55 GMT","end":"Sat, 12 Dec 2026 17:24:54 GMT"},"fingerprint":{"sha1":"98:05:57:24:EF:08:56:FF:FC:A3:8B:0C:C1:9F:AD:7C:5A:F5:2E:E9","sha256":"B3:C1:12:0E:0A:DD:E4:E7:34:54:E5:CA:D4:9C:67:A3:24:78:DF:DD:9C:A0:0E:00:3B:05:B2:A1:96:32:C9:4A"}}},"request":{"raw":"GET /nw/ HTTP/1.1\r\nHost: form.loginco.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Mon, 14 Sep 2026 14:15:28 GMT\r\nServer: Apache/2.4.68 (Debian)\r\nContent-Length: 320\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":320,"size_decoded":536,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"93f9788912e3455bbe8d3655a44f303e","sha1":"5ba786f42e537854a5048c9c0cb363be1819aa06","sha256":"7298897041c829e80be037f5529756cc36fa4ae40f3fef12ebdf741e101813bb","sha512":"14493aab0e29cec487f9ff9c71ba883e636eeae5e3fdaf67e86826ab7f3d1f4ba1bdac7e43ff82cb9633d85040d13720f37448fd8673ba41704aea533ff2d1ba","ssdeep":"","tlshash":"d5e07dde406693870500795039d167d1764d53eb346687992ec5d047510867dcca46cd","first_seen":"2026-09-14T14:12:25.592538Z","last_seen":"2026-09-14T19:03:03.432034Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"form.loginco.casa","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"form.loginco.casa/nw/","fqdn":"form.loginco.casa","domain":"loginco.casa","tld":"casa"},"ip":{"addr":"51.20.127.7","port":443,"asn":16509,"as":"AMAZON-02","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:29.986Z","timestamp":1789395329986,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"form.loginco.casa","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 17:24:55 GMT","end":"Sat, 12 Dec 2026 17:24:54 GMT"},"fingerprint":{"sha1":"98:05:57:24:EF:08:56:FF:FC:A3:8B:0C:C1:9F:AD:7C:5A:F5:2E:E9","sha256":"B3:C1:12:0E:0A:DD:E4:E7:34:54:E5:CA:D4:9C:67:A3:24:78:DF:DD:9C:A0:0E:00:3B:05:B2:A1:96:32:C9:4A"}}},"request":{"raw":"GET /nw/ HTTP/1.1\r\nHost: form.loginco.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Mon, 14 Sep 2026 14:15:29 GMT\r\nServer: Apache/2.4.68 (Debian)\r\nContent-Length: 320\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}],"data":{"size":320,"size_decoded":536,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"93f9788912e3455bbe8d3655a44f303e","sha1":"5ba786f42e537854a5048c9c0cb363be1819aa06","sha256":"7298897041c829e80be037f5529756cc36fa4ae40f3fef12ebdf741e101813bb","sha512":"14493aab0e29cec487f9ff9c71ba883e636eeae5e3fdaf67e86826ab7f3d1f4ba1bdac7e43ff82cb9633d85040d13720f37448fd8673ba41704aea533ff2d1ba","ssdeep":"","tlshash":"d5e07dde406693870500795039d167d1764d53eb346687992ec5d047510867dcca46cd","first_seen":"2026-09-14T14:12:25.592538Z","last_seen":"2026-09-14T19:03:03.432034Z","times_seen":3,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"form.loginco.casa","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4iZ9D4/y1/l/en_GB-j/MO-LV0vwdp-.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:28.531Z","timestamp":1789395328531,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:D5:2A:32:43:06:48:D3:1D:A1:74:4A:6C:D6:B4:EC:DB:7D:B2:B1","sha256":"05:35:85:52:24:6B:02:DF:4A:CA:65:E8:B1:29:CF:A6:C6:6A:62:C2:41:0F:21:47:A9:51:2C:81:3C:13:20:7A"}}},"request":{"raw":"GET /rsrc.php/v4iZ9D4/y1/l/en_GB-j/MO-LV0vwdp-.js HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://form.loginco.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: application/x-javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Mon, 13 Sep 2027 20:31:25 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: Tm/9XC51Pnjq7Ci+oiVEbw==\r\nx-fb-debug: 0PQ16esvw1ZNplSXnXIqx7c6PahjQnejeel5JiaLxIWJTCITgLYTRa64coz98bROulbIABWzSwAK1aNN/0OgmA==\r\ncontent-length: 98563\r\ndate: Mon, 14 Sep 2026 14:15:28 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=8, rtx=0, c=573, mss=1232, tbw=1358683, tp=1125, tpl=0, uplat=11, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":399828,"size_decoded":100560,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5879)","md5":"4c821f00dca3b68de06fdc206d128e65","sha1":"d72639fe48c4b2c09aab17e6a62be7cf5aeb2a0a","sha256":"7138acb87d6253bd8bda2d3d91fc12945e31b4462dc77d7487386034a90bf086","sha512":"ad4b29439f57488a8fb6f24874c1e4ab11d1f14a097e99bd2e7d542b532bf15baf45c3152c4a12402c6a98c60098165703095285c888f968910aa8657cb2bee4","ssdeep":"3072:I15h+1wUqE42oSPV0trf+Ra4uL5Gb4ge2iyoNy/0sJ5NSAbVY+UlJc1UHz3k39+9:4WwbsoQV0c4RLPn21/9NfdUlBA6","tlshash":"08845ccdf995742617b724b780bf024773792846280ed064f9b2eda5ad3848f6237b6c","first_seen":"2026-09-14T14:12:25.622751Z","last_seen":"2026-09-14T19:03:03.433042Z","times_seen":3,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form.loginco.casa/ajax/bz?__a=1\u0026__ccg=EXCELLENT\u0026__comet_req=15\u0026__hs=20659.HYP%3Acomet_loggedout_pkg.2.1...0\u0026__hsi=7666384859364527745\u0026__req=1\u0026__rev=1043845430\u0026__s=h44bbe%3Aujbddj%3Ay76914\u0026__spin_b=trunk\u0026__spin_r=1043845430\u0026__spin_t=1784969321\u0026__user=0\u0026dpr=1\u0026jazoest=22305\u0026lsd=AdR5sv6Vrq8lSmmEzQw9dE59SN4\u0026ph=C3","fqdn":"form.loginco.casa","domain":"loginco.casa","tld":"casa"},"ip":{"addr":"51.20.127.7","port":443,"asn":16509,"as":"AMAZON-02","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:28.858Z","timestamp":1789395328858,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"form.loginco.casa","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 17:24:55 GMT","end":"Sat, 12 Dec 2026 17:24:54 GMT"},"fingerprint":{"sha1":"98:05:57:24:EF:08:56:FF:FC:A3:8B:0C:C1:9F:AD:7C:5A:F5:2E:E9","sha256":"B3:C1:12:0E:0A:DD:E4:E7:34:54:E5:CA:D4:9C:67:A3:24:78:DF:DD:9C:A0:0E:00:3B:05:B2:A1:96:32:C9:4A"}}},"request":{"raw":"POST /ajax/bz?__a=1\u0026__ccg=EXCELLENT\u0026__comet_req=15\u0026__hs=20659.HYP%3Acomet_loggedout_pkg.2.1...0\u0026__hsi=7666384859364527745\u0026__req=1\u0026__rev=1043845430\u0026__s=h44bbe%3Aujbddj%3Ay76914\u0026__spin_b=trunk\u0026__spin_r=1043845430\u0026__spin_t=1784969321\u0026__user=0\u0026dpr=1\u0026jazoest=22305\u0026lsd=AdR5sv6Vrq8lSmmEzQw9dE59SN4\u0026ph=C3 HTTP/1.1\r\nHost: form.loginco.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-FB-LSD: AdR5sv6Vrq8lSmmEzQw9dE59SN4\r\nX-ASBD-ID: 359341\r\nContent-Type: multipart/form-data; boundary=----geckoformboundaryaabd2173b181702b388ff57d5ca39b4f\r\nContent-Length: 778\r\nOrigin: https://form.loginco.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":778,"data":"------geckoformboundaryaabd2173b181702b388ff57d5ca39b4f\r\nContent-Disposition: form-data; name=\"ts\"\r\n\r\n1789395328843\r\n------geckoformboundaryaabd2173b181702b388ff57d5ca39b4f\r\nContent-Disposition: form-data; name=\"q\"\r\n\r\n[{\"app_id\":\"2220391788200892\",\"posts\":[[\"falco:qe2_js_exposure\",{\"e\":\"{\\\"universe\\\":\\\"fblite_urs_comet_qr_codes\\\",\\\"unit_id\\\":\\\"\\\",\\\"unit_type\\\":5,\\\"param\\\":\\\"should_show_qr_on_login_page\\\"}\",\"r\":1,\"d\":\"fd.ARt9djtlJk2uzjUaG3jzYKtqUfVE71IrfCu9ZzQZlVoi8B8AyrN8k_lS2UxSHL8gO4YrdWPfqkLurf1Ay2yN5rk6\",\"s\":\"h44bbe:ujbddj:y76914\",\"t\":1784969322067.9502,\"a\":\"1043.845.430.0 (1043845430)\",\"b\":[1,128]},1789395328842,0,328]],\"trigger\":\"falco:qe2_js_exposure\",\"user\":\"0\",\"webSessionId\":\"h44bbe:ujbddj:y76914\"}]\r\n------geckoformboundaryaabd2173b181702b388ff57d5ca39b4f--\r\n"}},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Mon, 14 Sep 2026 14:15:28 GMT\r\nServer: Apache/2.4.68 (Debian)\r\nContent-Length: 320\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":320,"size_decoded":536,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"93f9788912e3455bbe8d3655a44f303e","sha1":"5ba786f42e537854a5048c9c0cb363be1819aa06","sha256":"7298897041c829e80be037f5529756cc36fa4ae40f3fef12ebdf741e101813bb","sha512":"14493aab0e29cec487f9ff9c71ba883e636eeae5e3fdaf67e86826ab7f3d1f4ba1bdac7e43ff82cb9633d85040d13720f37448fd8673ba41704aea533ff2d1ba","ssdeep":"","tlshash":"d5e07dde406693870500795039d167d1764d53eb346687992ec5d047510867dcca46cd","first_seen":"2026-09-14T14:12:25.592538Z","last_seen":"2026-09-14T19:03:03.432034Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"form.loginco.casa","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"form.loginco.casa/ajax/webstorage/process_keys/?state=1","fqdn":"form.loginco.casa","domain":"loginco.casa","tld":"casa"},"ip":{"addr":"51.20.127.7","port":443,"asn":16509,"as":"AMAZON-02","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://form.loginco.casa/","date":"2026-09-14T14:15:39.594Z","timestamp":1789395339594,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"form.loginco.casa","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 17:24:55 GMT","end":"Sat, 12 Dec 2026 17:24:54 GMT"},"fingerprint":{"sha1":"98:05:57:24:EF:08:56:FF:FC:A3:8B:0C:C1:9F:AD:7C:5A:F5:2E:E9","sha256":"B3:C1:12:0E:0A:DD:E4:E7:34:54:E5:CA:D4:9C:67:A3:24:78:DF:DD:9C:A0:0E:00:3B:05:B2:A1:96:32:C9:4A"}}},"request":{"raw":"POST /ajax/webstorage/process_keys/?state=1 HTTP/1.1\r\nHost: form.loginco.casa\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nX-FB-LSD: AdR5sv6Vrq8lSmmEzQw9dE59SN4\r\nX-ASBD-ID: 359341\r\nContent-Length: 1476\r\nOrigin: https://form.loginco.casa\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://form.loginco.casa/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1476,"data":"local_storage[hb_timestamp]=13\u0026local_storage[bz%3Ah44bbe%3Aujbddj%3Ay76914.1789395329836]=29107\u0026local_storage[bz%3Ah44bbe%3Aujbddj%3Ay76914.1789395337817]=4272\u0026local_storage[bz%3Ah44bbe%3Aujbddj%3Ay76914.1789395337816]=4272\u0026local_storage[signal_flush_timestamp]=13\u0026local_storage[bz%3Ah44bbe%3Aujbddj%3Ay76914.1789395329835]=29107\u0026local_storage[banzai%3Alast_storage_flush]=13\u0026local_storage[Session]=20\u0026local_storage[bz%3Ah44bbe%3Aujbddj%3Ay76914.1789395329833]=29107\u0026session_storage[TabId]=6\u0026logtime=1\u0026__user=0\u0026__a=1\u0026__req=6\u0026__hs=20659.HYP%3Acomet_loggedout_pkg.2.1...0\u0026dpr=1\u0026__ccg=EXCELLENT\u0026__rev=1043845430\u0026__s=h44bbe%3Aujbddj%3Ay76914\u0026__hsi=7666384859364527745\u0026__dyn=7xeUmwlE7ibwKBAg5S1Dxu13w8CewSwMwNw9G2S0lW4o0B-q1ew6ywaq0yE7i0n24oaEd86a3a1YwBgao6C0Mo2swaO4U2zxe2GewbS361qw8Xxm16wa-0raazo7u0zE2ZwrU6qE15E6O1FwlA1HGp1yU5Oi2K1Tw4-x60ma0oq0D8doS\u0026__csr=hIT10wN6sn4Rtlt4R9sCCQLCyt2F8jAryojAGWAKHDub-bypE-tk4FbHGe-AAWWq49ojGFmh5p9qjhe3GawqUdojxKQhxuu2CbwIxOexqqu78W2SaxS5oaFUF0G-E-2Gdxa2y0Fqu0jG0y8b41lw4HwiE0W20ve2e3mUgVyBw24Emw0Arw0Org25Q8y403AShDxO2901_y0fw84U5ui09jw084C01LKwcRa6k07dE0aDExw0Bqz8W0nqew0Bsw1Q10bZw0DKg0bFU1dk07pp80l5xpwdK2608Jw3Kk1rAw2RU0iiytxR02do0Axwjo2dV8\u0026__hsdp=gdbY254Dg0itw3fU3ZwtU04jW0cNw28E\u0026__hblp=0by08Mw6Uwc20c_wfS221mwu82sw0L4wBwc60d9wNw3co0ya3ufwzw_zo5G0y80yu15w4gw7TwoE7q0gW0oW0_o\u0026__sjsp=gdbYcn1b4Dg\u0026__comet_req=15\u0026lsd=AdR5sv6Vrq8lSmmEzQw9dE59SN4\u0026jazoest=22305\u0026__spin_r=1043845430\u0026__spin_b=trunk\u0026__spin_t=1784969321\u0026qpl_active_flow_ids=516759801"}},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Mon, 14 Sep 2026 14:15:39 GMT\r\nServer: Apache/2.4.68 (Debian)\r\nContent-Length: 320\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}],"data":{"size":320,"size_decoded":536,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"93f9788912e3455bbe8d3655a44f303e","sha1":"5ba786f42e537854a5048c9c0cb363be1819aa06","sha256":"7298897041c829e80be037f5529756cc36fa4ae40f3fef12ebdf741e101813bb","sha512":"14493aab0e29cec487f9ff9c71ba883e636eeae5e3fdaf67e86826ab7f3d1f4ba1bdac7e43ff82cb9633d85040d13720f37448fd8673ba41704aea533ff2d1ba","ssdeep":"","tlshash":"d5e07dde406693870500795039d167d1764d53eb346687992ec5d047510867dcca46cd","first_seen":"2026-09-14T14:12:25.592538Z","last_seen":"2026-09-14T19:03:03.432034Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"form.loginco.casa","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"form.loginco.casa","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}}]}