{"report_id":"09cf4384-0857-429b-956b-264cb5830f81","version":6,"status":"done","tags":[],"date":"2025-09-28T04:16:25Z","url":{"schema":"http","addr":"salaedu.com/","fqdn":"salaedu.com","domain":"salaedu.com","tld":"com"},"ip":{"addr":"13.248.148.254","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"salaedu.com/","fqdn":"salaedu.com","domain":"salaedu.com","tld":"com"},"title":"salaedu.com"},"submit":{"url":{"schema":"http","addr":"salaedu.com/","fqdn":"salaedu.com","domain":"salaedu.com","tld":"com"},"ip":{"addr":"13.248.148.254","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-02T04:16:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"salaedu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"salaedu.com","ip":{"addr":"76.223.26.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-09-23","domain_rank":0,"first_seen":"2019-11-30T12:39:35Z","last_seen":"2024-04-14T05:05:13Z","alert_count":5,"request_count":5,"received_data":19598,"sent_data":2655,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"obseu.youseasky.com","ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2022-08-01","domain_rank":340380,"first_seen":"2025-06-17T15:02:15.833324Z","last_seen":"2025-09-23T17:42:31.259132Z","alert_count":0,"request_count":7,"received_data":5487,"sent_data":5364,"comment":"","tags":null,"fingerprints":null},{"fqdn":"d38psrni17bvxu.cloudfront.net","ip":{"addr":"108.157.217.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2022-09-22T18:48:38Z","last_seen":"2025-09-21T22:11:32.004767Z","alert_count":0,"request_count":1,"received_data":11836,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"parking3.parklogic.com","ip":{"addr":"172.232.7.47","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"domain_registered":"2007-02-28","domain_rank":497061,"first_seen":"2023-05-10T10:50:24Z","last_seen":"2025-09-21T22:22:19.063948Z","alert_count":0,"request_count":3,"received_data":51324,"sent_data":1504,"comment":"","tags":null,"fingerprints":null},{"fqdn":"syndicatedsearch.goog","ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2023-04-14","domain_rank":5365,"first_seen":"2023-09-25T09:30:59Z","last_seen":"2025-09-21T22:11:32.391972Z","alert_count":0,"request_count":4,"received_data":179252,"sent_data":3814,"comment":"","tags":null,"fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}]},{"fqdn":"afs.googleusercontent.com","ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":65181,"first_seen":"2013-05-06T19:11:00Z","last_seen":"2025-09-21T22:11:32.709104Z","alert_count":0,"request_count":2,"received_data":2217,"sent_data":1005,"comment":"","tags":null,"fingerprints":null},{"fqdn":"euob.youseasky.com","ip":{"addr":"108.157.214.128","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2022-08-01","domain_rank":394467,"first_seen":"2025-06-17T15:02:15.832689Z","last_seen":"2025-09-23T20:38:19.581576Z","alert_count":0,"request_count":1,"received_data":118227,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-09-21T22:11:30.527953Z","alert_count":0,"request_count":1,"received_data":160603,"sent_data":440,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"salaedu.com/","fqdn":"salaedu.com","domain":"salaedu.com","tld":"com"},"ip":{"addr":"76.223.26.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c77554570ae0fa8e4fb31747dc213058","sha1":"e989fbde07e6a68975c7a31e1d4df76afd90b96f","sha256":"c3f831fe1717c6d76a8950ac5e7dc88ceee7440d079b11584be5c6c5b3269e77","sha512":"130189a67dea3f0d7ba0591ffbff46f37993ae8b07409e84dfb571f6d31f1b20f97cf76b7cd0751450eec5f294906f95fd35f3dfa37d58bc80433f4c9b4064a9","ssdeep":"","tlshash":"171148b58c9b942f6b37592fa69a72816c41a1179c013a18b14cc7302fdc71d6470bf6","size":968,"data":"","first_seen":"2023-03-08T02:24:08Z","last_seen":"2026-01-15T16:13:58.011798Z","times_seen":181951,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salaedu.com/","fqdn":"salaedu.com","domain":"salaedu.com","tld":"com"},"ip":{"addr":"76.223.26.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e5d8c139688b25ef77b263d88ea99150","sha1":"7abc9c61c4966543f66d150c0155bfac575f86a7","sha256":"53e5f34ac520035c7f124076d1e68c70a85c83cf68a339fa713b872b54126148","sha512":"1cd4eb192d987ea1b21f3b553eea3881c807f8bf4a5299982675d57314a0eaa084db1722c38d02eb73178660ecb1ca3667a795a512527f843f2526dc0a99dc20","ssdeep":"","tlshash":"7440000000003000033c0000000000c0000c00000000000000000c00030000000c0000","size":7,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-04-04T01:31:34.597396Z","times_seen":331619,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salaedu.com/","fqdn":"salaedu.com","domain":"salaedu.com","tld":"com"},"ip":{"addr":"76.223.26.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6559111e4eae643ce013ce0821e91a02","sha1":"fa1086c9aa2cb2d14f5c13bceefe21511bcdae5a","sha256":"d72255f7e5ea4dfdf9821df800356367d0bc7df07ecd103bb660018cb1e4f400","sha512":"a6e3e096076dc152b69e95709dad8925c9c2799c23ad226b9ce7b6ee78936bea7300b66c92821ea0728ce7433d4f53787f27f5e7101f97e4d882be0a461fc051","ssdeep":"","tlshash":"407000000380020020c80233a200882af228003c00030200c008888800a808002080c2","size":25,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-04-04T01:31:34.59565Z","times_seen":331519,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salaedu.com/","fqdn":"salaedu.com","domain":"salaedu.com","tld":"com"},"ip":{"addr":"76.223.26.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0a4628f9f206e15543bbfbb93d7cceca","sha1":"3c6b35f79d22321d933ca9f9b6fa80b536af66f3","sha256":"02ddad176f2a268f2ae6da672e6db6ad8242d31646efde3fee080ce116975aa3","sha512":"3d6b8732eef3c57fc1b42beeade03237ee7d58defd482264c0f2e83798b0149e9284303c19141411b5526952479402f290a0bf5a8f6a7417b9684d371d169b3b","ssdeep":"192:+YekzOXi0P88h9CV2V/Hi3DVcqTrIZ9eKD5edWDJT2ekzOXMEVekzOX93pig:90PEM9A2V/HeDVcqTEZ9eKD5qW9T208r","tlshash":"1912a6e2598318374eef610edd36e41af49deb1ba8762876b81bd2443340d0ed5507f9","size":9074,"data":"","first_seen":"2025-09-28T04:16:28.024327Z","last_seen":"2025-09-28T04:16:28.024327Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salaedu.com/","fqdn":"salaedu.com","domain":"salaedu.com","tld":"com"},"ip":{"addr":"76.223.26.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac2de3153737ebc43e94b885e85f8aa4","sha1":"aa11955087dac364b8e58a57da87ba9ce1f07f3b","sha256":"d417db694f3863c1fcc7306ee7177db2f67f357a900fd00158f09494fdbde6a7","sha512":"ae73dc515347d548f9863d6f67e4e0a72850911ba23f7081d026bd8c83247f3d50f1ce6860c04ed9b0a2eaf7c445719587b6c76e03a9b9d721cff63c7ef486da","ssdeep":"","tlshash":"fa01284459e430b1465374b9490fa01eb938a51316098e603a1c62d16fb617ed6eafe9","size":726,"data":"","first_seen":"2025-09-28T04:16:28.029049Z","last_seen":"2025-09-28T04:16:28.029049Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=5837883959\u0026pcsa=false\u0026channel=000001%2Cbucket011%2Cbucket088%2Cbucket077\u0026client=dp-teaminternet09_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Fsalaedu.com%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.BTYZgj6fdsLNhW4_Gi500B2YsQI0c53Go1Hwf8kQMdvMPB_NRjor_Q.swosU81cP2CI6d5Mo40vxw.3X8a6UBDFCQGpKTFz1IJaENPj52xBRQPeiNC2cTZllkyFSXApLrSrQLT20U4oLob0Jf6yK2pBTtKmFnmbGu8IfpcRsoiQxkuZrUF3j7ywEGiwzrBRO5bMODfsno1uQ7miuLtj-Hm95gB3c0jcqlPmS-Bz1v0jPkpQeCNNfiBGrUovDInPbCdSyqAisGQ6w80KTvidD2RsFSlQhCi74gF9AXVELHvP8HxSDOX9pwPx1MT-1dK6wFVnODg-Am5b76uMglLTwh2rU2i5aTda0TT6B4FwPnjdV73AtHooIsL58v4mURtTOhHsLFA64F324VPkgGtsPCkxOVmqbaZjM3jgBedVyP4K988bWZ9RqRF1nrc86Sfl68LJgaWFvvxFSrwz8_8xpe-hz5OKPZUhK254-TVgah0jNXibxaNHAHFd1MVOWOci305j_pRe0Amfs_QM4s9PxLxLEY0ZPAxf5meDxT9D9SHiDsqQWRtpOBHglVC0GHW4WTF7Q6VowD47pSPSdzf3HHf-0pnHb7yaoDk6z_ejfBZyD1Lv-Ayj00bcZd1DNdfPU92gsptrV7uXE3ZsaS7HIm2RO2q9QE40MJnAiWW-1jb6kP2_dDkoB2h-VvZtklOjs3keu5OfchIXz2X.n5-kWZjTm68ZOb7wvIwQOw\u0026type=3\u0026swp=as-drid-2204919519437054\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108\u0026format=r3%7Cs\u0026nocache=9421759032963627\u0026num=0\u0026output=afd_ads\u0026domain_name=salaedu.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1759032963628\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=760\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=810396895\u0026rurl=https%3A%2F%2Fsalaedu.com%2F","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"744e6db09d1617961cb6980b6fd9c4e6","sha1":"b941bfa8ca598b69b694859e35e9b3eca553aa8d","sha256":"9c18c0dba6016a4f76eb9553dd695147fdb275e8ae92641dc513969bae99db33","sha512":"21c9e0857e84e144cacad8473ba48e1601c6f62e077efb2c49717fe3ea6c4306c45bf0828bc1eede9c55002a47570e6aaaa39029c242631d704119ef205b7777","ssdeep":"","tlshash":"3911009508290922c4a351a5091a36d3a82c5a3223cf6285d02aa09a34bde8f995c5ae","size":871,"data":"","first_seen":"2025-09-28T04:16:28.033402Z","last_seen":"2025-09-28T04:16:28.033402Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/adsense/domains/caf.js","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"473d8171bc6f86a24ebeddca8baa7b5e","sha1":"d2122becdeb6c620066138629a6ae991b91f0a68","sha256":"8f3ab17a178028d918fbdd3af6a4bdebf1f84b29f2710ccc9a0a18befb028e9b","sha512":"f0b431f4ce297bd29e124197b388fd58ad9c6b19091e1c306e4c73f160b22d88735b26dde609d521e99ce12151e06489e4f0da49292b5a491c854f9923f56344","ssdeep":"3072:NAAVx4i6AmLY+0F9PmIPiD7+MAcaNUg56v2rZ:NpdmcF8A2yMATyurZ","tlshash":"c8f33bcd77a1302253a3a4b4607f018fb139f865a84c88a4f199d8e47db4da94277fbd","size":159903,"data":"","first_seen":"2025-09-25T14:24:08.513755Z","last_seen":"2025-10-02T13:43:03.624195Z","times_seen":1279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salaedu.com/","fqdn":"salaedu.com","domain":"salaedu.com","tld":"com"},"ip":{"addr":"76.223.26.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b326b5062b2f0e69046810717534cb09","sha1":"5ffe533b830f08a0326348a9160afafc8ada44db","sha256":"b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b","sha512":"9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de","ssdeep":"","tlshash":"5430000000000000000000000000300c00000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-04-04T01:31:34.596938Z","times_seen":352206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salaedu.com/","fqdn":"salaedu.com","domain":"salaedu.com","tld":"com"},"ip":{"addr":"76.223.26.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"65c8369b3607f59089ddd9f23b11f98c","sha1":"5a305680d67d825d8186fe1a52cb65e530301204","sha256":"e2508bc8b6eda959a5e887150cd18744f2aacb6eb98042b690f26443fc5b6d15","sha512":"7ce30bc944e8afd9c817174107ac9345a01537d5c76144f50040acc7d65a47d68276f7e9afe458e478cd1d088d19f0713c5d0f8196c04eb475cfbf82b4e0421b","ssdeep":"","tlshash":"c69004501411035735471404dc0d10c5cc14d1571350413d0353cc740141435fc01405","size":40,"data":"","first_seen":"2025-02-04T20:34:58.349606Z","last_seen":"2026-01-15T16:13:58.019084Z","times_seen":146939,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salaedu.com/","fqdn":"salaedu.com","domain":"salaedu.com","tld":"com"},"ip":{"addr":"76.223.26.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"18f2edc58d8a7b9e6b82454e8658c157","sha1":"e5dfdd0fa61b3a5ef68dab382a0ba93e9e7b67fb","sha256":"2d9b07a0704d92dda4deae88bc582aeb659923c8d44d0e7362e13cb28d88d250","sha512":"21505594429d2550843f79a1b5aa1555f5f9cac9ae8c281ab5cf48bb5831e39075e826ce61837ad3d6a7ad9a1fb227963eae6e2186b388c9af611e35a0f46f92","ssdeep":"","tlshash":"88f0659805f622d326aa60584df6eb0375a09023a20555c4fa7ca3119f5bc5702ddb8a","size":483,"data":"","first_seen":"2024-01-04T10:26:15Z","last_seen":"2026-01-15T16:13:58.022487Z","times_seen":185093,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salaedu.com/","fqdn":"salaedu.com","domain":"salaedu.com","tld":"com"},"ip":{"addr":"76.223.26.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b334e0123cf0cb113092022fb726782","sha1":"45abb42a6680499daa10d83d2859329de1843de2","sha256":"42591f96b9a41a7e2e5ecd0240dd7fecdcf03ef8454b57c68f08697474a4b579","sha512":"867e061d0f593815a87259d55d960e2000b776954b080157deabbf46850d7530b770d3d31abf6b901aee50bed5fa395be2ce4a6a075b703d07ff7c7c7b7d5cf6","ssdeep":"","tlshash":"6290040115134057505d05134375c101d5504c3f5005d531751c07435f1045f170075c","size":50,"data":"","first_seen":"2024-01-04T10:26:15Z","last_seen":"2026-01-15T16:13:58.023216Z","times_seen":184974,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js?abp=1\u0026adsdeli=true","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"60c01c17840a071fd61fb6f21a41337e","sha1":"fdc3ecd08e5c635236eabf5a81115afb6b7a5058","sha256":"d04b657b659d48513bed9d659cca81d04cc1bd3af07fe1ed64bf6fc729c31212","sha512":"6391368153bb922681b044054981f26c50a6bad621624dfd8b107ea720301ad998f176a410cfa882701148b01ab6d48a7201ca36127a399f449ccb0f41d95fa1","ssdeep":"3072:yAAVx4i6AmLY+0F9PmIPiD7+MAcaNUg56v2rZ:ypdmcF8A2yMATyurZ","tlshash":"b9f33bcd77a1302253a3a4b4607f018fb139f865a84c88a4f199d8e47db4da94277fbd","size":159887,"data":"","first_seen":"2025-09-25T14:28:44.606323Z","last_seen":"2025-10-02T13:48:11.955895Z","times_seen":3057,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"euob.youseasky.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js","fqdn":"euob.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"108.157.214.128","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6435a99b96721932e5d9217b545770c3","sha1":"d1fea437e5bce4bb29428c089bcf8d6bc68ac9b7","sha256":"9e2d72207f0dbd75ac2763b6365239c80032a404b9a8036fc1d83e8d97882a2f","sha512":"3b7c154d7b87c02720f64a7e081dcdb643111c4901b42d16e638d4b539ea0801cda624ef21ad3fadd75486c64dd3cb4099b0ddfc42976adbad55bf5eb4c7335b","ssdeep":"1536:9Ojcob5rkwwMy65IckUSQLon22pDxoEfexrcTYYtCHlgx63V3qO3D8Wm7PxExybC:9OoxM557EfY8xO3+7P4AMAbHc","tlshash":"43b3d7adb2e27025439334a5157f410ae27b5e503c4b8294d17ee9d4ac7ce8e817bfac","size":117701,"data":"","first_seen":"2025-09-16T17:03:48.947199Z","last_seen":"2025-10-17T13:09:43.711417Z","times_seen":42889,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salaedu.com/","fqdn":"salaedu.com","domain":"salaedu.com","tld":"com"},"ip":{"addr":"76.223.26.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"889ca9e2c79a3ce7aaadbcdfd0ce4ef5","sha1":"b05c2c051bae71f80cb8c289e5a42d4f96d323fa","sha256":"6477acf082d26199b6ce8346b93149b1b999233d9fe76b0340ebf43317cf98f8","sha512":"122a494d50a5e8077cdda40e8d6edb442bb9d89fff078852aad7f84fe24f1c58fe693f0388ca6c9453d1b33036da0b9c4e9fb394a18268e254d306ffc2ca57a3","ssdeep":"","tlshash":"46a002d4b4ed8125564583390104d91cf936c934c0d5701873f0466ca6e700a53610b2","size":62,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-04-04T01:31:34.597883Z","times_seen":331565,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parking3.parklogic.com/page/enhance.js?pcId=12\u0026pId=1129\u0026domain=salaedu.com","fqdn":"parking3.parklogic.com","domain":"parklogic.com","tld":"com"},"ip":{"addr":"172.232.7.47","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d20d3dbd2b578a993ca480929005d48c","sha1":"957ae9705bd083ad2e3e6b05bf7fe84e5741910a","sha256":"0adb0df6352cdd3de7e156349a43c642abc77d911b09bfb9c9f3e67426e1e3c1","sha512":"c28afed5e9a9988ad433ae9ad2045c57671e1c8817db83dbaf6d5234d298b2822fca459f551d0bf0b56121924060a543044e8b319f0c56a0682666a93f050bbc","ssdeep":"","tlshash":"1151934e4964093146b3247db103b5443f3bd21a320ad690fe6d89206f4a93b43733dd","size":2657,"data":"","first_seen":"2025-09-28T04:16:27.967854Z","last_seen":"2025-09-28T04:16:27.967854Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"parking3.parklogic.com/page/scribe.php?pcId=12\u0026domain=salaedu.com\u0026aId=292\u0026pId=1129\u0026usid=null\u0026utid=null\u0026query=null\u0026domainJs=salaedu.com\u0026path=/\u0026ss=true\u0026lp=1\u0026tzB=UTC\u0026wd=false\u0026gpu=null","fqdn":"parking3.parklogic.com","domain":"parklogic.com","tld":"com"},"ip":{"addr":"172.232.7.47","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://salaedu.com/","date":"2025-09-28T04:16:03.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enhance-lb01.parklogic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Sep 2025 23:32:37 GMT","end":"Fri, 26 Dec 2025 23:32:36 GMT"},"fingerprint":{"sha1":"E4:B4:52:E3:8A:92:A3:76:06:60:BD:5B:7B:C4:F8:77:5D:4B:AE:6C","sha256":"52:70:EE:88:F9:99:66:53:99:78:C9:63:98:C2:04:D5:41:08:DD:C1:CD:AA:66:0C:3D:DC:AA:5B:B0:DD:2A:74"}}},"request":{"raw":"GET /page/scribe.php?pcId=12\u0026domain=salaedu.com\u0026aId=292\u0026pId=1129\u0026usid=null\u0026utid=null\u0026query=null\u0026domainJs=salaedu.com\u0026path=/\u0026ss=true\u0026lp=1\u0026tzB=UTC\u0026wd=false\u0026gpu=null HTTP/1.1\r\nHost: parking3.parklogic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://salaedu.com/\r\nOrigin: https://salaedu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 04:16:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T01:30:53.33799Z","times_seen":13310387,"resource_available":true,"data":null}},"time_used":533,"timings":{"blocked":214,"dns":0,"connect":105,"send":0,"wait":106,"receive":0,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=5837883959\u0026pcsa=false\u0026channel=000001%2Cbucket011%2Cbucket088%2Cbucket077\u0026client=dp-teaminternet09_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Fsalaedu.com%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.BTYZgj6fdsLNhW4_Gi500B2YsQI0c53Go1Hwf8kQMdvMPB_NRjor_Q.swosU81cP2CI6d5Mo40vxw.3X8a6UBDFCQGpKTFz1IJaENPj52xBRQPeiNC2cTZllkyFSXApLrSrQLT20U4oLob0Jf6yK2pBTtKmFnmbGu8IfpcRsoiQxkuZrUF3j7ywEGiwzrBRO5bMODfsno1uQ7miuLtj-Hm95gB3c0jcqlPmS-Bz1v0jPkpQeCNNfiBGrUovDInPbCdSyqAisGQ6w80KTvidD2RsFSlQhCi74gF9AXVELHvP8HxSDOX9pwPx1MT-1dK6wFVnODg-Am5b76uMglLTwh2rU2i5aTda0TT6B4FwPnjdV73AtHooIsL58v4mURtTOhHsLFA64F324VPkgGtsPCkxOVmqbaZjM3jgBedVyP4K988bWZ9RqRF1nrc86Sfl68LJgaWFvvxFSrwz8_8xpe-hz5OKPZUhK254-TVgah0jNXibxaNHAHFd1MVOWOci305j_pRe0Amfs_QM4s9PxLxLEY0ZPAxf5meDxT9D9SHiDsqQWRtpOBHglVC0GHW4WTF7Q6VowD47pSPSdzf3HHf-0pnHb7yaoDk6z_ejfBZyD1Lv-Ayj00bcZd1DNdfPU92gsptrV7uXE3ZsaS7HIm2RO2q9QE40MJnAiWW-1jb6kP2_dDkoB2h-VvZtklOjs3keu5OfchIXz2X.n5-kWZjTm68ZOb7wvIwQOw\u0026type=3\u0026swp=as-drid-2204919519437054\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108\u0026format=r3%7Cs\u0026nocache=9421759032963627\u0026num=0\u0026output=afd_ads\u0026domain_name=salaedu.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1759032963628\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=760\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=810396895\u0026rurl=https%3A%2F%2Fsalaedu.com%2F","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://salaedu.com/","date":"2025-09-28T04:16:03.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:39:51 GMT","end":"Mon, 01 Dec 2025 08:39:50 GMT"},"fingerprint":{"sha1":"E3:42:EC:EB:70:C3:15:8B:D6:A2:92:24:7F:08:05:88:BD:77:41:20","sha256":"EC:95:8E:C8:A8:0C:B3:DC:DD:90:32:69:E3:C3:66:C9:BE:59:DF:34:E2:99:60:90:A8:52:60:A5:7D:F6:F2:D1"}}},"request":{"raw":"GET /afs/ads?adtest=off\u0026psid=5837883959\u0026pcsa=false\u0026channel=000001%2Cbucket011%2Cbucket088%2Cbucket077\u0026client=dp-teaminternet09_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Fsalaedu.com%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.BTYZgj6fdsLNhW4_Gi500B2YsQI0c53Go1Hwf8kQMdvMPB_NRjor_Q.swosU81cP2CI6d5Mo40vxw.3X8a6UBDFCQGpKTFz1IJaENPj52xBRQPeiNC2cTZllkyFSXApLrSrQLT20U4oLob0Jf6yK2pBTtKmFnmbGu8IfpcRsoiQxkuZrUF3j7ywEGiwzrBRO5bMODfsno1uQ7miuLtj-Hm95gB3c0jcqlPmS-Bz1v0jPkpQeCNNfiBGrUovDInPbCdSyqAisGQ6w80KTvidD2RsFSlQhCi74gF9AXVELHvP8HxSDOX9pwPx1MT-1dK6wFVnODg-Am5b76uMglLTwh2rU2i5aTda0TT6B4FwPnjdV73AtHooIsL58v4mURtTOhHsLFA64F324VPkgGtsPCkxOVmqbaZjM3jgBedVyP4K988bWZ9RqRF1nrc86Sfl68LJgaWFvvxFSrwz8_8xpe-hz5OKPZUhK254-TVgah0jNXibxaNHAHFd1MVOWOci305j_pRe0Amfs_QM4s9PxLxLEY0ZPAxf5meDxT9D9SHiDsqQWRtpOBHglVC0GHW4WTF7Q6VowD47pSPSdzf3HHf-0pnHb7yaoDk6z_ejfBZyD1Lv-Ayj00bcZd1DNdfPU92gsptrV7uXE3ZsaS7HIm2RO2q9QE40MJnAiWW-1jb6kP2_dDkoB2h-VvZtklOjs3keu5OfchIXz2X.n5-kWZjTm68ZOb7wvIwQOw\u0026type=3\u0026swp=as-drid-2204919519437054\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108\u0026format=r3%7Cs\u0026nocache=9421759032963627\u0026num=0\u0026output=afd_ads\u0026domain_name=salaedu.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1759032963628\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=760\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=810396895\u0026rurl=https%3A%2F%2Fsalaedu.com%2F HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salaedu.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-disposition: inline\r\ndate: Sun, 28 Sep 2025 04:16:03 GMT\r\nexpires: Sun, 28 Sep 2025 04:16:03 GMT\r\ncache-control: private, max-age=3600\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-QnTBBLzdkpK7dhDxhmmoBA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ncontent-encoding: br\r\nserver: gws\r\ncontent-length: 3775\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":16529,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15712)","md5":"5e6fdaba4e35ced23b74e71af9a9fe13","sha1":"f6dd316bb372200099bbd1456a5868c179afbe52","sha256":"250d44f2111f57e31d2bca30ea9790a102ab71ff13d0032fd4dc78f5670ccca6","sha512":"67a119717512bc697392a7543d8b973f5602a0d3f9740f4333a2461c31ffd50dbeb8f7e166485f3ee66573d70402b991b59e1d5d88c48964faa911346361ed31","ssdeep":"192:GE12iMpgb4Lgh3VDWh4ekzOXYEJtpekzOXfekzOXWzayfoZk6GkN:Gni023pV0Xfp0P0MfoCVkN","tlshash":"af72983760a2171d45039c541b266f6ed185c53ac4ab36e948b35f25c7ebf828fe22ce","first_seen":"2025-09-28T04:16:27.943151Z","last_seen":"2025-09-28T04:16:27.943151Z","times_seen":1,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":77,"dns":0,"connect":15,"send":0,"wait":165,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salaedu.com/munin/a/tr/answercheck/yes?domain=salaedu.com\u0026caf=1\u0026toggle=answercheck\u0026answer=yes\u0026uid=MTc1OTAzMjk2My4xMTg4OjM5YWQ4ZTNiMzExYWFkYTEyODFmNTA1M2Y3OWQ4MzQyZWU4MWUxODcxNDgyY2JiNDlhYTBmOWMxYTQ0NGU4YWI6NjhkOGI2ODMxZDAwMQ%3D%3D","fqdn":"salaedu.com","domain":"salaedu.com","tld":"com"},"ip":{"addr":"76.223.26.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://salaedu.com/","date":"2025-09-28T04:16:03.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salaedu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Sep 2025 07:19:05 GMT","end":"Mon, 22 Dec 2025 07:19:04 GMT"},"fingerprint":{"sha1":"64:D3:80:06:A4:42:64:F5:9E:47:6F:02:D3:85:B8:1B:9F:62:FD:B4","sha256":"BA:F3:D4:D1:41:94:4D:B9:98:89:08:7B:D3:41:CE:5F:D1:64:EB:08:83:9F:94:76:BC:CF:3C:E3:6C:9F:E5:68"}}},"request":{"raw":"GET /munin/a/tr/answercheck/yes?domain=salaedu.com\u0026caf=1\u0026toggle=answercheck\u0026answer=yes\u0026uid=MTc1OTAzMjk2My4xMTg4OjM5YWQ4ZTNiMzExYWFkYTEyODFmNTA1M2Y3OWQ4MzQyZWU4MWUxODcxNDgyY2JiNDlhYTBmOWMxYTQ0NGU4YWI6NjhkOGI2ODMxZDAwMQ%3D%3D HTTP/1.1\r\nHost: salaedu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salaedu.com/\r\nCookie: _cq_duid=1.1759032963.byOHaclLcm4tgXVw; _cq_suid=1.1759032963.ek9eUwlW7j0gtU5g\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile\r\naccept-ch-lifetime: 30\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":50944\"; ma=2592000\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 28 Sep 2025 04:16:03 GMT\r\nserver: nginx\r\nvia: 1.1 Caddy, 0.0 Caddy\r\nx-custom-track: answercheck\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T01:30:53.33799Z","times_seen":13310387,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"salaedu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph\u0026output=uds_ads_only\u0026zx=sivg27peaf6j\u0026cd_fexp=72717108\u0026aqid=g7bYaJGNL9qjjuwPpePrgQc\u0026psid=5837883959\u0026pbt=bs\u0026adbx=375\u0026adby=276\u0026adbh=498\u0026adbw=530\u0026adbah=160%2C160%2C160\u0026adbn=master-1\u0026eawp=partner-dp-teaminternet09_3ph\u0026errv=810396895\u0026csala=2%7C0%7C274%7C59%7C76\u0026lle=0\u0026ifv=1\u0026hpt=1","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salaedu.com/","date":"2025-09-28T04:16:05.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:39:51 GMT","end":"Mon, 01 Dec 2025 08:39:50 GMT"},"fingerprint":{"sha1":"E3:42:EC:EB:70:C3:15:8B:D6:A2:92:24:7F:08:05:88:BD:77:41:20","sha256":"EC:95:8E:C8:A8:0C:B3:DC:DD:90:32:69:E3:C3:66:C9:BE:59:DF:34:E2:99:60:90:A8:52:60:A5:7D:F6:F2:D1"}}},"request":{"raw":"GET /afs/gen_204?client=dp-teaminternet09_3ph\u0026output=uds_ads_only\u0026zx=sivg27peaf6j\u0026cd_fexp=72717108\u0026aqid=g7bYaJGNL9qjjuwPpePrgQc\u0026psid=5837883959\u0026pbt=bs\u0026adbx=375\u0026adby=276\u0026adbh=498\u0026adbw=530\u0026adbah=160%2C160%2C160\u0026adbn=master-1\u0026eawp=partner-dp-teaminternet09_3ph\u0026errv=810396895\u0026csala=2%7C0%7C274%7C59%7C76\u0026lle=0\u0026ifv=1\u0026hpt=1 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salaedu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-8qtnI5vIAY698RE7T2HLAQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Sun, 28 Sep 2025 04:16:05 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T01:30:53.33799Z","times_seen":13310387,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youseasky.com/mon","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://salaedu.com/","date":"2025-09-28T04:16:13.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Sun, 23 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D9:9D:44:45:EE:9F:F6:8F:BF:80:2A:14:66:02:83:E7:27:02:24:48","sha256":"E4:0B:DB:19:8B:EA:43:EC:C7:33:DB:59:9C:04:F7:A0:C3:23:F4:EC:B6:B3:DE:14:F1:F6:11:77:D9:22:2F:8E"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1698\r\nOrigin: https://salaedu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salaedu.com/\r\nCookie: cg_uuid=9079b710cbcff41f25624a6c74aac003\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://salaedu.com\r\ncontent-type: application/json\r\ndate: Sun, 28 Sep 2025 04:16:13 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T01:30:53.33799Z","times_seen":13310387,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salaedu.com/","fqdn":"salaedu.com","domain":"salaedu.com","tld":"com"},"ip":{"addr":"76.223.26.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-28T04:16:02.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salaedu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Sep 2025 07:19:05 GMT","end":"Mon, 22 Dec 2025 07:19:04 GMT"},"fingerprint":{"sha1":"64:D3:80:06:A4:42:64:F5:9E:47:6F:02:D3:85:B8:1B:9F:62:FD:B4","sha256":"BA:F3:D4:D1:41:94:4D:B9:98:89:08:7B:D3:41:CE:5F:D1:64:EB:08:83:9F:94:76:BC:CF:3C:E3:6C:9F:E5:68"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: salaedu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile\r\naccept-ch-lifetime: 30\r\nalt-svc: h3=\":50944\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 28 Sep 2025 04:16:03 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy, 0.0 Caddy\r\nx-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_N3r2rqjERxuJICiLQK3YzSHTasBOhgfZ3qtJp28eh6RaVdBWOg0+vt4Orv3ruVmGoydjN0Q+KfTgf2bfR0UU6A==\r\nx-buckets: bucket011,bucket088,bucket077\r\nx-domain: salaedu.com\r\nx-language: norwegian\r\nx-pcrew-blocked-reason: \r\nx-pcrew-ip-organization: OBOS OpenNet\r\nx-subdomain: \r\nx-template: tpl_CleanPeppermintBlack_twoclick\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17255,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (9114)","md5":"198cc9a22bc321889944ecac153f55f3","sha1":"0af84f67addbca0cfbe9401ba8d40995b6f50d96","sha256":"8a394ce19b5f2bfe414c117053a2f15307768680c5e3df61e7b8f0cfeaa29cc7","sha512":"0d73bab4218d84c7c4f40c62f4d8ecf4ab42b46bbb1d4db1ace2faf04a79430978d839bc5a320805dd36d7115a5f3c4f53cf541bf261fe78b4346de9916fc05c","ssdeep":"384:Ti7YoHMfOTaWpW0PEM9A2V/HeDVcqTEZ9eKD5qW9T208A0dpimq6:TiRMf0WQ9B/HSVcqTEZ9eKD57J2mowmT","tlshash":"9f7207a25cd3283b49df504ede76f519b48ce207ca079c69b89d93642f88e0d8561bfc","first_seen":"2025-09-28T04:16:27.961403Z","last_seen":"2025-09-28T04:16:27.961403Z","times_seen":1,"resource_available":false,"data":null}},"time_used":595,"timings":{"blocked":251,"dns":166,"connect":27,"send":0,"wait":93,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"salaedu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parking3.parklogic.com/page/enhance.js?pcId=12\u0026pId=1129\u0026domain=salaedu.com","fqdn":"parking3.parklogic.com","domain":"parklogic.com","tld":"com"},"ip":{"addr":"172.232.7.47","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salaedu.com/","date":"2025-09-28T04:16:03.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enhance-lb01.parklogic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Sep 2025 23:32:37 GMT","end":"Fri, 26 Dec 2025 23:32:36 GMT"},"fingerprint":{"sha1":"E4:B4:52:E3:8A:92:A3:76:06:60:BD:5B:7B:C4:F8:77:5D:4B:AE:6C","sha256":"52:70:EE:88:F9:99:66:53:99:78:C9:63:98:C2:04:D5:41:08:DD:C1:CD:AA:66:0C:3D:DC:AA:5B:B0:DD:2A:74"}}},"request":{"raw":"GET /page/enhance.js?pcId=12\u0026pId=1129\u0026domain=salaedu.com HTTP/1.1\r\nHost: parking3.parklogic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salaedu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 04:16:03 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2657,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (722)","md5":"d20d3dbd2b578a993ca480929005d48c","sha1":"957ae9705bd083ad2e3e6b05bf7fe84e5741910a","sha256":"0adb0df6352cdd3de7e156349a43c642abc77d911b09bfb9c9f3e67426e1e3c1","sha512":"c28afed5e9a9988ad433ae9ad2045c57671e1c8817db83dbaf6d5234d298b2822fca459f551d0bf0b56121924060a543044e8b319f0c56a0682666a93f050bbc","ssdeep":"","tlshash":"1151934e4964093146b3247db103b5443f3bd21a320ad690fe6d89206f4a93b43733dd","first_seen":"2025-09-28T04:16:27.967854Z","last_seen":"2025-09-28T04:16:27.967854Z","times_seen":1,"resource_available":true,"data":null}},"time_used":525,"timings":{"blocked":210,"dns":0,"connect":103,"send":0,"wait":104,"receive":0,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png","fqdn":"d38psrni17bvxu.cloudfront.net","domain":"d38psrni17bvxu.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.217.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salaedu.com/","date":"2025-09-28T04:16:03.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1\r\nHost: d38psrni17bvxu.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salaedu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 11375\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 05:48:11 GMT\r\naccept-ranges: bytes\r\nlast-modified: Thu, 28 Aug 2025 17:42:07 GMT\r\netag: \"dce8vhowlwqm8rz\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 9b9a19a17f71baf11790ad734100cb88.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: yYkgOWNBsoF-_zr20JUnslQbUEmnSrY_HNuxNcxf96pCvWLxG4BiVQ==\r\nage: 80872\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11375,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1500 x 600, 8-bit colormap, non-interlaced","md5":"0cb2e5165dc9324eb462199f04e1ffa9","sha1":"9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8","sha256":"67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865","sha512":"7a285c4a87b9f9093b7ba720d8fe08e0ad7e2ebde9ef8c8d11b70afa08245af8f8a7281c7b3fbe8bad21c3afde4f32634d3bd416822892aa47ba82c12f4b8191","ssdeep":"192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/","tlshash":"94329f86e207c9addc119cb16bd8e9384c673cc3c66925b748987669e4bb80475f049f","first_seen":"2023-04-05T14:20:44Z","last_seen":"2026-04-02T01:33:43.563834Z","times_seen":205145,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":19,"dns":0,"connect":8,"send":0,"wait":9,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parking3.parklogic.com/page/images/pe262/hero_nc.svg","fqdn":"parking3.parklogic.com","domain":"parklogic.com","tld":"com"},"ip":{"addr":"172.232.7.47","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salaedu.com/","date":"2025-09-28T04:16:03.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enhance-lb01.parklogic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Sep 2025 23:32:37 GMT","end":"Fri, 26 Dec 2025 23:32:36 GMT"},"fingerprint":{"sha1":"E4:B4:52:E3:8A:92:A3:76:06:60:BD:5B:7B:C4:F8:77:5D:4B:AE:6C","sha256":"52:70:EE:88:F9:99:66:53:99:78:C9:63:98:C2:04:D5:41:08:DD:C1:CD:AA:66:0C:3D:DC:AA:5B:B0:DD:2A:74"}}},"request":{"raw":"GET /page/images/pe262/hero_nc.svg HTTP/1.1\r\nHost: parking3.parklogic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salaedu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 04:16:04 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 48097\r\nlast-modified: Wed, 17 Sep 2025 01:01:50 GMT\r\netag: \"68ca087e-bbe1\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48097,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5a2c392e7acdf6e9de6e00129500503c","sha1":"c8d0f80381e4ce180b5eb3c4c98539907292a7bb","sha256":"878da09a057ec8f1775cdc522e5f7ec44966df547a87a9c29826ba114833c24b","sha512":"52223b04eb9121f05442dbc48519a95fdabb81c414772ee43dc837b58f797b97314796ef6d77ea6b7a1f3fee5937ec039e617fcdf8b146822792accd2534e141","ssdeep":"768:cfppX5/9YbZIqEGYbGqnq77SdMOsZff7pUbGA+dHeSZKFwj:CKYw3A9+","tlshash":"4123d7e8c3e802f4b6d90ba8deb4294c3a7564fa76106cc8c35dbc58dcb6f553109ad9","first_seen":"2023-05-10T12:50:45Z","last_seen":"2026-04-04T01:25:32.71896Z","times_seen":100007,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":205,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=5837883959\u0026pcsa=false\u0026channel=000001%2Cbucket011%2Cbucket088%2Cbucket077\u0026client=dp-teaminternet09_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Fsalaedu.com%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.BTYZgj6fdsLNhW4_Gi500B2YsQI0c53Go1Hwf8kQMdvMPB_NRjor_Q.swosU81cP2CI6d5Mo40vxw.3X8a6UBDFCQGpKTFz1IJaENPj52xBRQPeiNC2cTZllkyFSXApLrSrQLT20U4oLob0Jf6yK2pBTtKmFnmbGu8IfpcRsoiQxkuZrUF3j7ywEGiwzrBRO5bMODfsno1uQ7miuLtj-Hm95gB3c0jcqlPmS-Bz1v0jPkpQeCNNfiBGrUovDInPbCdSyqAisGQ6w80KTvidD2RsFSlQhCi74gF9AXVELHvP8HxSDOX9pwPx1MT-1dK6wFVnODg-Am5b76uMglLTwh2rU2i5aTda0TT6B4FwPnjdV73AtHooIsL58v4mURtTOhHsLFA64F324VPkgGtsPCkxOVmqbaZjM3jgBedVyP4K988bWZ9RqRF1nrc86Sfl68LJgaWFvvxFSrwz8_8xpe-hz5OKPZUhK254-TVgah0jNXibxaNHAHFd1MVOWOci305j_pRe0Amfs_QM4s9PxLxLEY0ZPAxf5meDxT9D9SHiDsqQWRtpOBHglVC0GHW4WTF7Q6VowD47pSPSdzf3HHf-0pnHb7yaoDk6z_ejfBZyD1Lv-Ayj00bcZd1DNdfPU92gsptrV7uXE3ZsaS7HIm2RO2q9QE40MJnAiWW-1jb6kP2_dDkoB2h-VvZtklOjs3keu5OfchIXz2X.n5-kWZjTm68ZOb7wvIwQOw\u0026type=3\u0026swp=as-drid-2204919519437054\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108\u0026format=r3%7Cs\u0026nocache=9421759032963627\u0026num=0\u0026output=afd_ads\u0026domain_name=salaedu.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1759032963628\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=760\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=810396895\u0026rurl=https%3A%2F%2Fsalaedu.com%2F","date":"2025-09-28T04:16:04.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:32 GMT","end":"Mon, 01 Dec 2025 08:36:31 GMT"},"fingerprint":{"sha1":"48:52:EE:DC:72:47:5A:4C:4B:2B:D6:B2:31:8E:8C:07:6D:DF:F1:AC","sha256":"AA:EC:A1:70:48:D4:6A:B2:67:44:1E:E1:75:D5:00:90:B4:8B:FA:C5:AD:6E:56:06:7D:37:07:5E:F9:E3:0A:51"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 174\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Sep 2025 21:11:38 GMT\r\nexpires: Sun, 28 Sep 2025 20:11:38 GMT\r\ncache-control: public, max-age=82800\r\nage: 25466\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":200,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"11b3089d616633ca6b73b57aa877eeb4","sha1":"07632f63e06b30d9b63c97177d3a8122629bda9b","sha256":"809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1","sha512":"079b0e35b479dfdbe64a987661000f4a034b10688e26f2a5fe6aaa807e81ccc5593d40609b731ab3340e687d83dd08de4b8b1e01cdac9d4523a9f6bb3acfcba0","ssdeep":"","tlshash":"d9d02291c2182d28441e82e0c37c312600fab0a2634c00dcfa80e300b20c9abb861669","first_seen":"2023-04-06T23:53:06Z","last_seen":"2026-04-01T02:57:50.32115Z","times_seen":412182,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":77,"dns":0,"connect":16,"send":0,"wait":15,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=5837883959\u0026pcsa=false\u0026channel=000001%2Cbucket011%2Cbucket088%2Cbucket077\u0026client=dp-teaminternet09_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Fsalaedu.com%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.BTYZgj6fdsLNhW4_Gi500B2YsQI0c53Go1Hwf8kQMdvMPB_NRjor_Q.swosU81cP2CI6d5Mo40vxw.3X8a6UBDFCQGpKTFz1IJaENPj52xBRQPeiNC2cTZllkyFSXApLrSrQLT20U4oLob0Jf6yK2pBTtKmFnmbGu8IfpcRsoiQxkuZrUF3j7ywEGiwzrBRO5bMODfsno1uQ7miuLtj-Hm95gB3c0jcqlPmS-Bz1v0jPkpQeCNNfiBGrUovDInPbCdSyqAisGQ6w80KTvidD2RsFSlQhCi74gF9AXVELHvP8HxSDOX9pwPx1MT-1dK6wFVnODg-Am5b76uMglLTwh2rU2i5aTda0TT6B4FwPnjdV73AtHooIsL58v4mURtTOhHsLFA64F324VPkgGtsPCkxOVmqbaZjM3jgBedVyP4K988bWZ9RqRF1nrc86Sfl68LJgaWFvvxFSrwz8_8xpe-hz5OKPZUhK254-TVgah0jNXibxaNHAHFd1MVOWOci305j_pRe0Amfs_QM4s9PxLxLEY0ZPAxf5meDxT9D9SHiDsqQWRtpOBHglVC0GHW4WTF7Q6VowD47pSPSdzf3HHf-0pnHb7yaoDk6z_ejfBZyD1Lv-Ayj00bcZd1DNdfPU92gsptrV7uXE3ZsaS7HIm2RO2q9QE40MJnAiWW-1jb6kP2_dDkoB2h-VvZtklOjs3keu5OfchIXz2X.n5-kWZjTm68ZOb7wvIwQOw\u0026type=3\u0026swp=as-drid-2204919519437054\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108\u0026format=r3%7Cs\u0026nocache=9421759032963627\u0026num=0\u0026output=afd_ads\u0026domain_name=salaedu.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1759032963628\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=760\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=810396895\u0026rurl=https%3A%2F%2Fsalaedu.com%2F","date":"2025-09-28T04:16:04.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:32 GMT","end":"Mon, 01 Dec 2025 08:36:31 GMT"},"fingerprint":{"sha1":"48:52:EE:DC:72:47:5A:4C:4B:2B:D6:B2:31:8E:8C:07:6D:DF:F1:AC","sha256":"AA:EC:A1:70:48:D4:6A:B2:67:44:1E:E1:75:D5:00:90:B4:8B:FA:C5:AD:6E:56:06:7D:37:07:5E:F9:E3:0A:51"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 270\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Sep 2025 21:17:29 GMT\r\nexpires: Sun, 28 Sep 2025 20:17:29 GMT\r\ncache-control: public, max-age=82800\r\nage: 25115\r\nlast-modified: Thu, 20 Jul 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":391,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8959ddcd9712196961d93f58064ed655","sha1":"62ab1e38e7e9fbf58a04381b76c2d96a9c829f24","sha256":"17c7a89bf169c2ee400e31b042cea68513f06b9cd7d1e8990dbec800f0d771c7","sha512":"5e9effa313c30b351345db963238b4afd0728ca302fd79a853c80c89f042266d44cc1d29492520fb0fa80b47135e54e6963dfc21972f6b236b84c1da2fad809d","ssdeep":"","tlshash":"2ae068fa82846d044a8543b0ee09a7a442fff076535d90bbc1e4e6fcb0489eaacd2745","first_seen":"2023-04-08T10:54:48Z","last_seen":"2026-01-21T15:14:27.461955Z","times_seen":243741,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":166,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":148},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youseasky.com/mon","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://salaedu.com/","date":"2025-09-28T04:16:04.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Sun, 23 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D9:9D:44:45:EE:9F:F6:8F:BF:80:2A:14:66:02:83:E7:27:02:24:48","sha256":"E4:0B:DB:19:8B:EA:43:EC:C7:33:DB:59:9C:04:F7:A0:C3:23:F4:EC:B6:B3:DE:14:F1:F6:11:77:D9:22:2F:8E"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2453\r\nOrigin: https://salaedu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salaedu.com/\r\nCookie: cg_uuid=9079b710cbcff41f25624a6c74aac003\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://salaedu.com\r\ncontent-type: application/json\r\ndate: Sun, 28 Sep 2025 04:16:04 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T01:30:53.33799Z","times_seen":13310387,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"euob.youseasky.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js","fqdn":"euob.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"108.157.214.128","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salaedu.com/","date":"2025-09-28T04:16:03.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Sun, 18 May 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:E4:C6:70:2D:8F:86:68:CF:5D:7A:6C:62:4B:B8:0B:CC:F2:4A:30","sha256":"81:A7:F9:EB:A5:70:77:98:6A:07:25:32:18:5D:46:26:72:12:36:ED:D3:73:60:A7:01:F6:86:8A:27:08:78:56"}}},"request":{"raw":"GET /sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js HTTP/1.1\r\nHost: euob.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salaedu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 43411\r\ncontent-encoding: gzip\r\nserver: Caddy\r\ndate: Sun, 28 Sep 2025 01:04:43 GMT\r\ncache-control: max-age=43200\r\nexpires: Sun, 28 Sep 2025 13:04:42 GMT\r\netag: \"1cbc5-0f6kN+W85LspQowIm8+Na8aKybc\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b34d5d8e5954d0b7b46d5f0eb534c166.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: TaMbqftZhBoPNC9gT9EnM7lTnnlmRFqHyne-C-wd0VQdOEnzBH1ltw==\r\nage: 11481\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":117701,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"data","md5":"6435a99b96721932e5d9217b545770c3","sha1":"d1fea437e5bce4bb29428c089bcf8d6bc68ac9b7","sha256":"9e2d72207f0dbd75ac2763b6365239c80032a404b9a8036fc1d83e8d97882a2f","sha512":"3b7c154d7b87c02720f64a7e081dcdb643111c4901b42d16e638d4b539ea0801cda624ef21ad3fadd75486c64dd3cb4099b0ddfc42976adbad55bf5eb4c7335b","ssdeep":"1536:9Ojcob5rkwwMy65IckUSQLon22pDxoEfexrcTYYtCHlgx63V3qO3D8Wm7PxExybC:9OoxM557EfY8xO3+7P4AMAbHc","tlshash":"43b3d7adb2e27025439334a5157f410ae27b5e503c4b8294d17ee9d4ac7ce8e817bfac","first_seen":"2025-09-16T17:03:48.947199Z","last_seen":"2025-10-17T13:09:43.711417Z","times_seen":42889,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":17,"dns":0,"connect":8,"send":0,"wait":9,"receive":7,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js?abp=1\u0026adsdeli=true","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salaedu.com/","date":"2025-09-28T04:16:03.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:37:54 GMT","end":"Mon, 01 Dec 2025 08:37:53 GMT"},"fingerprint":{"sha1":"28:1C:E7:95:EC:8D:32:9E:63:9A:72:B2:8D:47:E5:13:F7:CA:5E:18","sha256":"52:99:CC:AA:BC:C4:15:12:9C:2B:FA:D7:97:2A:C4:D3:7D:B0:5C:E0:02:26:3C:8D:B2:4B:BE:89:1A:70:D6:31"}}},"request":{"raw":"GET /adsense/domains/caf.js?abp=1\u0026adsdeli=true HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salaedu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Sun, 28 Sep 2025 04:16:03 GMT\r\nexpires: Sun, 28 Sep 2025 04:16:03 GMT\r\ncache-control: private, max-age=3600\r\netag: \"5615395694154346523\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://syndicatedsearch.goog\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":159887,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2840)","md5":"60c01c17840a071fd61fb6f21a41337e","sha1":"fdc3ecd08e5c635236eabf5a81115afb6b7a5058","sha256":"d04b657b659d48513bed9d659cca81d04cc1bd3af07fe1ed64bf6fc729c31212","sha512":"6391368153bb922681b044054981f26c50a6bad621624dfd8b107ea720301ad998f176a410cfa882701148b01ab6d48a7201ca36127a399f449ccb0f41d95fa1","ssdeep":"3072:yAAVx4i6AmLY+0F9PmIPiD7+MAcaNUg56v2rZ:ypdmcF8A2yMATyurZ","tlshash":"b9f33bcd77a1302253a3a4b4607f018fb139f865a84c88a4f199d8e47db4da94277fbd","first_seen":"2025-09-25T14:28:44.606323Z","last_seen":"2025-10-02T13:48:11.955895Z","times_seen":3057,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":106,"dns":1,"connect":15,"send":0,"wait":28,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph\u0026output=uds_ads_only\u0026zx=phg8pbnl2j1d\u0026cd_fexp=72717108\u0026aqid=g7bYaJGNL9qjjuwPpePrgQc\u0026psid=5837883959\u0026pbt=bv\u0026adbx=375\u0026adby=276\u0026adbh=498\u0026adbw=530\u0026adbah=160%2C160%2C160\u0026adbn=master-1\u0026eawp=partner-dp-teaminternet09_3ph\u0026errv=810396895\u0026csala=2%7C0%7C274%7C59%7C76\u0026lle=0\u0026ifv=1\u0026hpt=1","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salaedu.com/","date":"2025-09-28T04:16:05.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:39:51 GMT","end":"Mon, 01 Dec 2025 08:39:50 GMT"},"fingerprint":{"sha1":"E3:42:EC:EB:70:C3:15:8B:D6:A2:92:24:7F:08:05:88:BD:77:41:20","sha256":"EC:95:8E:C8:A8:0C:B3:DC:DD:90:32:69:E3:C3:66:C9:BE:59:DF:34:E2:99:60:90:A8:52:60:A5:7D:F6:F2:D1"}}},"request":{"raw":"GET /afs/gen_204?client=dp-teaminternet09_3ph\u0026output=uds_ads_only\u0026zx=phg8pbnl2j1d\u0026cd_fexp=72717108\u0026aqid=g7bYaJGNL9qjjuwPpePrgQc\u0026psid=5837883959\u0026pbt=bv\u0026adbx=375\u0026adby=276\u0026adbh=498\u0026adbw=530\u0026adbah=160%2C160%2C160\u0026adbn=master-1\u0026eawp=partner-dp-teaminternet09_3ph\u0026errv=810396895\u0026csala=2%7C0%7C274%7C59%7C76\u0026lle=0\u0026ifv=1\u0026hpt=1 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salaedu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-i9_lD-cL7SCqHhfL2jCZRA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Sun, 28 Sep 2025 04:16:05 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T01:30:53.33799Z","times_seen":13310387,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/adsense/domains/caf.js","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=5837883959\u0026pcsa=false\u0026channel=000001%2Cbucket011%2Cbucket088%2Cbucket077\u0026client=dp-teaminternet09_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Fsalaedu.com%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.BTYZgj6fdsLNhW4_Gi500B2YsQI0c53Go1Hwf8kQMdvMPB_NRjor_Q.swosU81cP2CI6d5Mo40vxw.3X8a6UBDFCQGpKTFz1IJaENPj52xBRQPeiNC2cTZllkyFSXApLrSrQLT20U4oLob0Jf6yK2pBTtKmFnmbGu8IfpcRsoiQxkuZrUF3j7ywEGiwzrBRO5bMODfsno1uQ7miuLtj-Hm95gB3c0jcqlPmS-Bz1v0jPkpQeCNNfiBGrUovDInPbCdSyqAisGQ6w80KTvidD2RsFSlQhCi74gF9AXVELHvP8HxSDOX9pwPx1MT-1dK6wFVnODg-Am5b76uMglLTwh2rU2i5aTda0TT6B4FwPnjdV73AtHooIsL58v4mURtTOhHsLFA64F324VPkgGtsPCkxOVmqbaZjM3jgBedVyP4K988bWZ9RqRF1nrc86Sfl68LJgaWFvvxFSrwz8_8xpe-hz5OKPZUhK254-TVgah0jNXibxaNHAHFd1MVOWOci305j_pRe0Amfs_QM4s9PxLxLEY0ZPAxf5meDxT9D9SHiDsqQWRtpOBHglVC0GHW4WTF7Q6VowD47pSPSdzf3HHf-0pnHb7yaoDk6z_ejfBZyD1Lv-Ayj00bcZd1DNdfPU92gsptrV7uXE3ZsaS7HIm2RO2q9QE40MJnAiWW-1jb6kP2_dDkoB2h-VvZtklOjs3keu5OfchIXz2X.n5-kWZjTm68ZOb7wvIwQOw\u0026type=3\u0026swp=as-drid-2204919519437054\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108\u0026format=r3%7Cs\u0026nocache=9421759032963627\u0026num=0\u0026output=afd_ads\u0026domain_name=salaedu.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1759032963628\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=760\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=810396895\u0026rurl=https%3A%2F%2Fsalaedu.com%2F","date":"2025-09-28T04:16:03.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:39:51 GMT","end":"Mon, 01 Dec 2025 08:39:50 GMT"},"fingerprint":{"sha1":"E3:42:EC:EB:70:C3:15:8B:D6:A2:92:24:7F:08:05:88:BD:77:41:20","sha256":"EC:95:8E:C8:A8:0C:B3:DC:DD:90:32:69:E3:C3:66:C9:BE:59:DF:34:E2:99:60:90:A8:52:60:A5:7D:F6:F2:D1"}}},"request":{"raw":"GET /adsense/domains/caf.js HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Sun, 28 Sep 2025 04:16:03 GMT\r\nexpires: Sun, 28 Sep 2025 04:16:03 GMT\r\ncache-control: private, max-age=3600\r\netag: \"7929814855976364283\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://syndicatedsearch.goog\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":159903,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2840)","md5":"473d8171bc6f86a24ebeddca8baa7b5e","sha1":"d2122becdeb6c620066138629a6ae991b91f0a68","sha256":"8f3ab17a178028d918fbdd3af6a4bdebf1f84b29f2710ccc9a0a18befb028e9b","sha512":"f0b431f4ce297bd29e124197b388fd58ad9c6b19091e1c306e4c73f160b22d88735b26dde609d521e99ce12151e06489e4f0da49292b5a491c854f9923f56344","ssdeep":"3072:NAAVx4i6AmLY+0F9PmIPiD7+MAcaNUg56v2rZ:NpdmcF8A2yMATyurZ","tlshash":"c8f33bcd77a1302253a3a4b4607f018fb139f865a84c88a4f199d8e47db4da94277fbd","first_seen":"2025-09-25T14:24:08.513755Z","last_seen":"2025-10-02T13:43:03.624195Z","times_seen":1279,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youseasky.com/tracker/tc_imp.gif?e=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\u0026cri=pumt5RH8Jr\u0026ts=470\u0026cb=1759032963971","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salaedu.com/","date":"2025-09-28T04:16:03.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Sun, 23 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D9:9D:44:45:EE:9F:F6:8F:BF:80:2A:14:66:02:83:E7:27:02:24:48","sha256":"E4:0B:DB:19:8B:EA:43:EC:C7:33:DB:59:9C:04:F7:A0:C3:23:F4:EC:B6:B3:DE:14:F1:F6:11:77:D9:22:2F:8E"}}},"request":{"raw":"GET /tracker/tc_imp.gif?e=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\u0026cri=pumt5RH8Jr\u0026ts=470\u0026cb=1759032963971 HTTP/1.1\r\nHost: obseu.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salaedu.com/\r\nCookie: cg_uuid=9079b710cbcff41f25624a6c74aac003\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ndate: Sun, 28 Sep 2025 04:16:03 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-length: 43\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"db04c7b378cb2db912c3ba8a5a774ee3","sha1":"dee34bd86c3484d31002182aa2b7caa4699126b8","sha256":"98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a","sha512":"826225fc21717d8861a05b9d2f959539aad2d2b131b2afed75d88fbca535e1b0d5a0da8ac69713a0876a0d467848a37a0a7f926aeafad8cf28201382d16466ab","ssdeep":"","tlshash":"6490000bca888002caa2c0302b8883022b88b0320228832e80bc30a8ee3b3a20c02000","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T01:31:34.591188Z","times_seen":355171,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youseasky.com/mon","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://salaedu.com/","date":"2025-09-28T04:16:09.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Sun, 23 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D9:9D:44:45:EE:9F:F6:8F:BF:80:2A:14:66:02:83:E7:27:02:24:48","sha256":"E4:0B:DB:19:8B:EA:43:EC:C7:33:DB:59:9C:04:F7:A0:C3:23:F4:EC:B6:B3:DE:14:F1:F6:11:77:D9:22:2F:8E"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1695\r\nOrigin: https://salaedu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salaedu.com/\r\nCookie: cg_uuid=9079b710cbcff41f25624a6c74aac003\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://salaedu.com\r\ncontent-type: application/json\r\ndate: Sun, 28 Sep 2025 04:16:09 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T01:30:53.33799Z","times_seen":13310387,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salaedu.com/munin/a/ls?t=68d8b683\u0026token=13a2dd965d61cf4367914b0872d0ff3d24ce0ec9","fqdn":"salaedu.com","domain":"salaedu.com","tld":"com"},"ip":{"addr":"76.223.26.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://salaedu.com/","date":"2025-09-28T04:16:03.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salaedu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Sep 2025 07:19:05 GMT","end":"Mon, 22 Dec 2025 07:19:04 GMT"},"fingerprint":{"sha1":"64:D3:80:06:A4:42:64:F5:9E:47:6F:02:D3:85:B8:1B:9F:62:FD:B4","sha256":"BA:F3:D4:D1:41:94:4D:B9:98:89:08:7B:D3:41:CE:5F:D1:64:EB:08:83:9F:94:76:BC:CF:3C:E3:6C:9F:E5:68"}}},"request":{"raw":"GET /munin/a/ls?t=68d8b683\u0026token=13a2dd965d61cf4367914b0872d0ff3d24ce0ec9 HTTP/1.1\r\nHost: salaedu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salaedu.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 201 Created\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nalt-svc: h3=\":50944\"; ma=2592000\r\ndate: Sun, 28 Sep 2025 04:16:03 GMT\r\nserver: nginx\r\nvia: 1.1 Caddy\r\nx-log-success: 68d8b6834f7a96b24cf4ab92\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T01:30:53.33799Z","times_seen":13310387,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"salaedu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youseasky.com/ct","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://salaedu.com/","date":"2025-09-28T04:16:03.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Sun, 23 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D9:9D:44:45:EE:9F:F6:8F:BF:80:2A:14:66:02:83:E7:27:02:24:48","sha256":"E4:0B:DB:19:8B:EA:43:EC:C7:33:DB:59:9C:04:F7:A0:C3:23:F4:EC:B6:B3:DE:14:F1:F6:11:77:D9:22:2F:8E"}}},"request":{"raw":"POST /ct HTTP/1.1\r\nHost: obseu.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 4459\r\nOrigin: https://salaedu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salaedu.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://salaedu.com\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Sun, 28 Sep 2025 04:16:03 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\nset-cookie: cg_uuid=9079b710cbcff41f25624a6c74aac003; Max-Age=29030400; Path=/; Expires=Sun, 30 Aug 2026 04:16:03 GMT; HttpOnly; Secure; SameSite=None\r\ntiming-allow-origin: https://salaedu.com\r\ncontent-length: 1082\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3222,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"024feddaff8635344984b1eb0777ea71","sha1":"0f7dba58abb78db880618e14eca25ebc448b3120","sha256":"3ac216043e86b3e62baa1c764fc72b0fa40a92ccb38f6b28ff14d1efd0f4d9cf","sha512":"23f2c4e53e3b0df7c957f7ff0f15989dfe8d53d7e23a2d4b0602c10ef446d52a1c0761eede1673868142380e2b9bced17eee44cecab8419512f6c7ac87f5cfb2","ssdeep":"","tlshash":"6561ea5e1138cd3547bd4375a9b29bcb13d36eb881d76c228475b68a119b3b28f01171","first_seen":"2025-09-28T04:16:27.995356Z","last_seen":"2025-09-28T04:16:27.995356Z","times_seen":1,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":118,"dns":0,"connect":39,"send":0,"wait":54,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youseasky.com/mon","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://salaedu.com/","date":"2025-09-28T04:16:06.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Sun, 23 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D9:9D:44:45:EE:9F:F6:8F:BF:80:2A:14:66:02:83:E7:27:02:24:48","sha256":"E4:0B:DB:19:8B:EA:43:EC:C7:33:DB:59:9C:04:F7:A0:C3:23:F4:EC:B6:B3:DE:14:F1:F6:11:77:D9:22:2F:8E"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1695\r\nOrigin: https://salaedu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salaedu.com/\r\nCookie: cg_uuid=9079b710cbcff41f25624a6c74aac003\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://salaedu.com\r\ncontent-type: application/json\r\ndate: Sun, 28 Sep 2025 04:16:06 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T01:30:53.33799Z","times_seen":13310387,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youseasky.com/mon","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://salaedu.com/","date":"2025-09-28T04:16:18.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Sun, 23 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D9:9D:44:45:EE:9F:F6:8F:BF:80:2A:14:66:02:83:E7:27:02:24:48","sha256":"E4:0B:DB:19:8B:EA:43:EC:C7:33:DB:59:9C:04:F7:A0:C3:23:F4:EC:B6:B3:DE:14:F1:F6:11:77:D9:22:2F:8E"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1698\r\nOrigin: https://salaedu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salaedu.com/\r\nCookie: cg_uuid=9079b710cbcff41f25624a6c74aac003\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://salaedu.com\r\ncontent-type: application/json\r\ndate: Sun, 28 Sep 2025 04:16:19 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T01:30:53.33799Z","times_seen":13310387,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salaedu.com/munin/a/tr/browserjs?domain=salaedu.com\u0026toggle=browserjs\u0026uid=MTc1OTAzMjk2My4xMTg4OjM5YWQ4ZTNiMzExYWFkYTEyODFmNTA1M2Y3OWQ4MzQyZWU4MWUxODcxNDgyY2JiNDlhYTBmOWMxYTQ0NGU4YWI6NjhkOGI2ODMxZDAwMQ%3D%3D","fqdn":"salaedu.com","domain":"salaedu.com","tld":"com"},"ip":{"addr":"76.223.26.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://salaedu.com/","date":"2025-09-28T04:16:03.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salaedu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Sep 2025 07:19:05 GMT","end":"Mon, 22 Dec 2025 07:19:04 GMT"},"fingerprint":{"sha1":"64:D3:80:06:A4:42:64:F5:9E:47:6F:02:D3:85:B8:1B:9F:62:FD:B4","sha256":"BA:F3:D4:D1:41:94:4D:B9:98:89:08:7B:D3:41:CE:5F:D1:64:EB:08:83:9F:94:76:BC:CF:3C:E3:6C:9F:E5:68"}}},"request":{"raw":"GET /munin/a/tr/browserjs?domain=salaedu.com\u0026toggle=browserjs\u0026uid=MTc1OTAzMjk2My4xMTg4OjM5YWQ4ZTNiMzExYWFkYTEyODFmNTA1M2Y3OWQ4MzQyZWU4MWUxODcxNDgyY2JiNDlhYTBmOWMxYTQ0NGU4YWI6NjhkOGI2ODMxZDAwMQ%3D%3D HTTP/1.1\r\nHost: salaedu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salaedu.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile\r\naccept-ch-lifetime: 30\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":50944\"; ma=2592000\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 28 Sep 2025 04:16:03 GMT\r\nserver: nginx\r\nvia: 1.1 Caddy, 0.0 Caddy\r\nx-custom-track: browserjs\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T01:30:53.33799Z","times_seen":13310387,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"salaedu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salaedu.com/favicon.ico","fqdn":"salaedu.com","domain":"salaedu.com","tld":"com"},"ip":{"addr":"76.223.26.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salaedu.com/","date":"2025-09-28T04:16:03.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salaedu.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Sep 2025 07:19:05 GMT","end":"Mon, 22 Dec 2025 07:19:04 GMT"},"fingerprint":{"sha1":"64:D3:80:06:A4:42:64:F5:9E:47:6F:02:D3:85:B8:1B:9F:62:FD:B4","sha256":"BA:F3:D4:D1:41:94:4D:B9:98:89:08:7B:D3:41:CE:5F:D1:64:EB:08:83:9F:94:76:BC:CF:3C:E3:6C:9F:E5:68"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: salaedu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salaedu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":50944\"; ma=2592000\r\ncontent-type: image/x-icon\r\ndate: Sun, 28 Sep 2025 04:16:03 GMT\r\netag: \"670f7248-0\"\r\nlast-modified: Wed, 16 Oct 2024 07:59:04 GMT\r\nserver: nginx\r\nvia: 1.1 Caddy\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T01:30:53.33799Z","times_seen":13310387,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"salaedu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}
