{"report_id":"3aa49252-a854-4566-ba0c-a96268eff5ae","version":6,"status":"done","tags":[],"date":"2025-08-04T05:18:10Z","url":{"schema":"http","addr":"ggxdkns.debank.no","fqdn":"ggxdkns.debank.no","domain":"debank.no","tld":"no"},"ip":{"addr":"76.223.26.96","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"ggxdkns.debank.no/","fqdn":"ggxdkns.debank.no","domain":"debank.no","tld":"no"},"title":"debank.no"},"submit":{"url":{"schema":"http","addr":"ggxdkns.debank.no","fqdn":"ggxdkns.debank.no","domain":"debank.no","tld":"no"},"ip":{"addr":"76.223.26.96","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-08T05:18:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-04T05:17:50Z","timestamp":1754284670,"ip_dst":{"addr":"172.18.0.23","port":40796,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"34.251.101.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2025-08-04T05:17:50.638068+0000\",\"flow_id\":224342289817283,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"34.251.101.162\",\"src_port\":443,\"dest_ip\":\"172.18.0.23\",\"dest_port\":40796,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.youseasky.com\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"3C:01:31:F7:FB:33:3E:51:29:16:15:05:12:CF:E8:A8\",\"fingerprint\":\"8d:aa:00:e1:90:e8:d3:f6:92:1b:91:14:b1:97:fc:21:e4:51:04:ac\",\"sni\":\"obseu.youseasky.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-07-06T00:00:00\",\"notafter\":\"2025-10-04T23:59:59\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"80d47c47e3ce91bc3bd0a026dbd1664d\",\"string\":\"771,49196,5-65281-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1212,\"bytes_toclient\":3917,\"start\":\"2025-08-04T05:17:50.532163+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"obseu.youseasky.com","ip":{"addr":"34.251.101.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2022-08-01","domain_rank":0,"first_seen":"2025-06-17T15:02:15.833324Z","last_seen":"2025-07-29T17:07:47.547801Z","alert_count":0,"request_count":7,"received_data":5815,"sent_data":10283,"comment":"","tags":null,"fingerprints":null},{"fqdn":"syndicatedsearch.goog","ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2023-04-14","domain_rank":0,"first_seen":"2023-09-25T09:30:59Z","last_seen":"2025-07-30T16:45:17.19674Z","alert_count":0,"request_count":4,"received_data":176108,"sent_data":4024,"comment":"","tags":null,"fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}]},{"fqdn":"euob.youseasky.com","ip":{"addr":"3.167.2.117","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2022-08-01","domain_rank":0,"first_seen":"2025-06-17T15:02:15.832689Z","last_seen":"2025-07-29T17:07:47.249221Z","alert_count":0,"request_count":1,"received_data":116314,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"d38psrni17bvxu.cloudfront.net","ip":{"addr":"3.167.7.13","port":80,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2022-09-22T18:48:38Z","last_seen":"2025-07-30T20:40:50.472948Z","alert_count":0,"request_count":1,"received_data":11842,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.68","port":80,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-07-30T15:13:23.39034Z","alert_count":0,"request_count":1,"received_data":157814,"sent_data":395,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ggxdkns.debank.no","ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-10-04","domain_rank":0,"first_seen":"2025-08-04T05:18:10.83435Z","last_seen":"2025-08-04T05:18:10.83435Z","alert_count":0,"request_count":6,"received_data":20782,"sent_data":2974,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"afs.googleusercontent.com","ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":12123,"first_seen":"2013-05-06T19:11:00Z","last_seen":"2025-07-30T21:30:28.205941Z","alert_count":0,"request_count":2,"received_data":2237,"sent_data":1067,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-04T05:17:50Z","timestamp":1754284670,"ip_dst":{"addr":"172.18.0.23","port":40796,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"34.251.101.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2025-08-04T05:17:50.638068+0000\",\"flow_id\":224342289817283,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"34.251.101.162\",\"src_port\":443,\"dest_ip\":\"172.18.0.23\",\"dest_port\":40796,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.youseasky.com\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"3C:01:31:F7:FB:33:3E:51:29:16:15:05:12:CF:E8:A8\",\"fingerprint\":\"8d:aa:00:e1:90:e8:d3:f6:92:1b:91:14:b1:97:fc:21:e4:51:04:ac\",\"sni\":\"obseu.youseasky.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-07-06T00:00:00\",\"notafter\":\"2025-10-04T23:59:59\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"80d47c47e3ce91bc3bd0a026dbd1664d\",\"string\":\"771,49196,5-65281-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1212,\"bytes_toclient\":3917,\"start\":\"2025-08-04T05:17:50.532163+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"www.google.com/adsense/domains/caf.js?abp=1\u0026adsdeli=true","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":80,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ggxdkns.debank.no/","date":"2025-08-04T05:17:49.730Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /adsense/domains/caf.js?abp=1\u0026adsdeli=true HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ggxdkns.debank.no/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Type: text/javascript; charset=UTF-8\r\nCross-Origin-Resource-Policy: cross-origin\r\nCross-Origin-Opener-Policy: same-origin; report-to=\"ads-afs-ui\"\r\nReport-To: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\nDate: Mon, 04 Aug 2025 05:17:49 GMT\r\nExpires: Mon, 04 Aug 2025 05:17:49 GMT\r\nCache-Control: private, max-age=3600\r\nETag: \"14366980809755569390\"\r\nX-Content-Type-Options: nosniff\r\nLink: \u003chttps://syndicatedsearch.goog\u003e; rel=\"preconnect\"\r\nContent-Encoding: gzip\r\nTransfer-Encoding: chunked\r\nServer: sffe\r\nX-XSS-Protection: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":157144,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2943)","md5":"7b2c1190ed575f5a8b38b316e9c83ed1","sha1":"2bbe3d91a406d369694e56d729cb093a736df767","sha256":"04fa757a60220f8f11c1ad417102057c7b6f24bdcd7bda326f1a8f2ae47c7552","sha512":"7fc0f2066ae4c6d9fb38755adec13b1a7ff0e3615532902249384218e7c649d4cb217b98128574bc9a50f72d639900ce3575241f7a4226a4c25235e0a8758075","ssdeep":"1536:L/bVLXkwIgUIfZ+WJDk6T6p2gbQ1kTgTAU8zaabyiD5fVUp4giswbu+PKJ+ngwFq:hfU6G8+gAdaabx/Up1AyqFTrC1V","tlshash":"2be33bdd77a1702243b394b4603f018fb139f866a84c88a4b199d8e47db4da94277fbd","first_seen":"2025-07-31T14:54:50.834571Z","last_seen":"2025-08-07T12:48:13.714776Z","times_seen":6206,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":20,"dns":5,"connect":20,"send":0,"wait":32,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ggxdkns.debank.no/munin/a/tr/answercheck/yes?domain=debank.no\u0026caf=1\u0026toggle=answercheck\u0026answer=yes\u0026uid=MTc1NDI4NDY2OS40MzY5OjM5YjAzNjg5N2VjYzUzZDliMGM5ZmRkYzRlNTRiZDgwZGI1ZGRiOWQzN2IxZmE4ZTc2MmRkNTk0NzdmNWQ2ODY6Njg5MDQyN2Q2YWFhZA%3D%3D","fqdn":"ggxdkns.debank.no","domain":"debank.no","tld":"no"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ggxdkns.debank.no/","date":"2025-08-04T05:17:50.674Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /munin/a/tr/answercheck/yes?domain=debank.no\u0026caf=1\u0026toggle=answercheck\u0026answer=yes\u0026uid=MTc1NDI4NDY2OS40MzY5OjM5YjAzNjg5N2VjYzUzZDliMGM5ZmRkYzRlNTRiZDgwZGI1ZGRiOWQzN2IxZmE4ZTc2MmRkNTk0NzdmNWQ2ODY6Njg5MDQyN2Q2YWFhZA%3D%3D HTTP/1.1\r\nHost: ggxdkns.debank.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ggxdkns.debank.no/\r\nCookie: _cq_duid=1.1754284670.0zctn201E7ZE0Xnq; _cq_suid=1.1754284670.BXg6xiS3Ys4heLmq\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile\r\nAccept-Ch-Lifetime: 30\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 0\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Mon, 04 Aug 2025 05:17:50 GMT\r\nServer: nginx\r\nVia: 1.1 Caddy, 0.0 Caddy\r\nX-Custom-Track: answercheck\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=5837883959\u0026pcsa=false\u0026channel=000001%2Cbucket102\u0026client=dp-teaminternet09_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=http%3A%2F%2Fggxdkns.debank.no%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.D5mXXaOd7jBWUF5Al3Z2aot0HU5HOGLyS1W63wgaST5PAzrr3rq5kw.LdkXdkAQhc5JiWcxp2XNMA.TcuwY9C5G68IyHQ2WJOJflqs2pmEZCmROnmWOJq8OXG3u-_wweq-Ha7fUj8vS-b3AXv_0y7u2QPzfKrR6YPZ303CIjTyLEA_wmLDrf-iF6s0AZCtWhTf0jMl1bRnm8RnOs01FOwXZEQOT2SNrRgYkO-wL2kELoTnjePb8Mr_8D5R6IFn3HNPtiN8Ax3ubeJDG0_JoYvSZPZ6wU9Q9StXQXJCoYyLzXEf_Z2PpovNQMrIGXj8F8NPuu0vZXOe9ci_YmIjiizwm-uzZRnhWihOizKCd92C7BUK5g49zwsXw_Cob0OtCdmb0RdWBF8HQCDBfwBNrsluxa-CHnxHTgZA5qt2w9XW0p9W62Lsn8ApqfnNpSUQumHPUt7NFfseNcBR2A2y0WGYdfpFcVS2gx6TIJnA8M6NhEYCz8LZ15Lj_sL-IwslU_0dGpnP3mMUQoLOTpfH-HstHiHTzUndp6r4XfY_cFoVZIp9RQYymBRdGWiOonbLQkvCEIbvAV_RbGgI_49sVVI02emI3a8hqrF_JW8FlHhfE1WPVMqUrroPBeCCGSGfzZBxZe8RsgB9d3Dlql8RqN5m2qoz2aaSIqNOH_GXMGn_dsY-dVfR7TE0Yac.LO7RsePNZemZZ6tYdjj9Tw\u0026max_radlink_len=40\u0026type=3\u0026swp=as-drid-2533547612367448\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717107%2C17301544%2C100244472\u0026format=r3%7Cs\u0026nocache=7211754284669968\u0026num=0\u0026output=afd_ads\u0026domain_name=ggxdkns.debank.no\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1754284669969\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=797\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=788436323\u0026rurl=http%3A%2F%2Fggxdkns.debank.no%2F","date":"2025-08-04T05:17:50.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:06 GMT","end":"Mon, 29 Sep 2025 08:35:05 GMT"},"fingerprint":{"sha1":"63:78:72:6F:FA:74:62:BB:8E:62:97:12:1D:27:37:96:37:81:92:E4","sha256":"F3:9B:D5:68:46:33:18:76:62:06:0D:55:5C:13:48:C7:C0:46:24:43:7E:C5:8D:9A:8B:DA:47:44:DA:33:B0:A2"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 174\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 03 Aug 2025 12:11:50 GMT\r\nexpires: Mon, 04 Aug 2025 11:11:50 GMT\r\ncache-control: public, max-age=82800\r\nage: 61560\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":200,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"11b3089d616633ca6b73b57aa877eeb4","sha1":"07632f63e06b30d9b63c97177d3a8122629bda9b","sha256":"809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1","sha512":"079b0e35b479dfdbe64a987661000f4a034b10688e26f2a5fe6aaa807e81ccc5593d40609b731ab3340e687d83dd08de4b8b1e01cdac9d4523a9f6bb3acfcba0","ssdeep":"","tlshash":"d9d02291c2182d28441e82e0c37c312600fab0a2634c00dcfa80e300b20c9abb861669","first_seen":"2023-04-06T23:53:06Z","last_seen":"2026-07-20T09:09:43.675485Z","times_seen":412208,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":85,"dns":3,"connect":7,"send":0,"wait":8,"receive":2,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=5837883959\u0026pcsa=false\u0026channel=000001%2Cbucket102\u0026client=dp-teaminternet09_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=http%3A%2F%2Fggxdkns.debank.no%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.D5mXXaOd7jBWUF5Al3Z2aot0HU5HOGLyS1W63wgaST5PAzrr3rq5kw.LdkXdkAQhc5JiWcxp2XNMA.TcuwY9C5G68IyHQ2WJOJflqs2pmEZCmROnmWOJq8OXG3u-_wweq-Ha7fUj8vS-b3AXv_0y7u2QPzfKrR6YPZ303CIjTyLEA_wmLDrf-iF6s0AZCtWhTf0jMl1bRnm8RnOs01FOwXZEQOT2SNrRgYkO-wL2kELoTnjePb8Mr_8D5R6IFn3HNPtiN8Ax3ubeJDG0_JoYvSZPZ6wU9Q9StXQXJCoYyLzXEf_Z2PpovNQMrIGXj8F8NPuu0vZXOe9ci_YmIjiizwm-uzZRnhWihOizKCd92C7BUK5g49zwsXw_Cob0OtCdmb0RdWBF8HQCDBfwBNrsluxa-CHnxHTgZA5qt2w9XW0p9W62Lsn8ApqfnNpSUQumHPUt7NFfseNcBR2A2y0WGYdfpFcVS2gx6TIJnA8M6NhEYCz8LZ15Lj_sL-IwslU_0dGpnP3mMUQoLOTpfH-HstHiHTzUndp6r4XfY_cFoVZIp9RQYymBRdGWiOonbLQkvCEIbvAV_RbGgI_49sVVI02emI3a8hqrF_JW8FlHhfE1WPVMqUrroPBeCCGSGfzZBxZe8RsgB9d3Dlql8RqN5m2qoz2aaSIqNOH_GXMGn_dsY-dVfR7TE0Yac.LO7RsePNZemZZ6tYdjj9Tw\u0026max_radlink_len=40\u0026type=3\u0026swp=as-drid-2533547612367448\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717107%2C17301544%2C100244472\u0026format=r3%7Cs\u0026nocache=7211754284669968\u0026num=0\u0026output=afd_ads\u0026domain_name=ggxdkns.debank.no\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1754284669969\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=797\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=788436323\u0026rurl=http%3A%2F%2Fggxdkns.debank.no%2F","date":"2025-08-04T05:17:50.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:06 GMT","end":"Mon, 29 Sep 2025 08:35:05 GMT"},"fingerprint":{"sha1":"63:78:72:6F:FA:74:62:BB:8E:62:97:12:1D:27:37:96:37:81:92:E4","sha256":"F3:9B:D5:68:46:33:18:76:62:06:0D:55:5C:13:48:C7:C0:46:24:43:7E:C5:8D:9A:8B:DA:47:44:DA:33:B0:A2"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 270\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 03 Aug 2025 11:59:49 GMT\r\nexpires: Mon, 04 Aug 2025 10:59:49 GMT\r\ncache-control: public, max-age=82800\r\nage: 62282\r\nlast-modified: Thu, 20 Jul 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":391,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8959ddcd9712196961d93f58064ed655","sha1":"62ab1e38e7e9fbf58a04381b76c2d96a9c829f24","sha256":"17c7a89bf169c2ee400e31b042cea68513f06b9cd7d1e8990dbec800f0d771c7","sha512":"5e9effa313c30b351345db963238b4afd0728ca302fd79a853c80c89f042266d44cc1d29492520fb0fa80b47135e54e6963dfc21972f6b236b84c1da2fad809d","ssdeep":"","tlshash":"2ae068fa82846d044a8543b0ee09a7a442fff076535d90bbc1e4e6fcb0489eaacd2745","first_seen":"2023-04-08T10:54:48Z","last_seen":"2026-07-20T09:09:43.668404Z","times_seen":243749,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":295,"dns":6,"connect":21,"send":0,"wait":8,"receive":1,"ssl":269},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youseasky.com/mon","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"34.251.101.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ggxdkns.debank.no/","date":"2025-08-04T05:17:51.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 06 Jul 2025 00:00:00 GMT","end":"Sat, 04 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"8D:AA:00:E1:90:E8:D3:F6:92:1B:91:14:B1:97:FC:21:E4:51:04:AC","sha256":"4C:2C:17:33:00:53:36:67:A5:C9:63:72:87:25:BB:7B:F7:A1:25:65:19:FE:48:96:45:29:51:82:C5:8B:32:3C"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2659\r\nOrigin: http://ggxdkns.debank.no\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ggxdkns.debank.no/\r\nCookie: cg_uuid=11c50d6efd56ce7491cca75e60806145\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: http://ggxdkns.debank.no\r\ncontent-type: application/json\r\ndate: Mon, 04 Aug 2025 05:17:51 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ggxdkns.debank.no/","fqdn":"ggxdkns.debank.no","domain":"debank.no","tld":"no"},"ip":{"addr":"76.223.26.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-04T05:17:49.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ggxdkns.debank.no","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Jul 2025 21:58:27 GMT","end":"Fri, 03 Oct 2025 21:58:26 GMT"},"fingerprint":{"sha1":"D4:7E:6D:27:76:63:F8:44:1E:8B:0B:F0:96:BD:EF:07:23:78:25:4A","sha256":"80:BF:37:D4:49:85:24:32:48:4A:79:50:76:AB:01:FE:37:E7:7B:41:46:00:36:6C:22:BC:D7:03:A1:13:16:BC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ggxdkns.debank.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nalt-svc: h3=\":50944\"; ma=2592000\r\ncontent-type: text/html\r\ndate: Mon, 04 Aug 2025 05:17:49 GMT\r\nserver: nginx\r\nvia: 1.1 Caddy\r\ncontent-length: 548\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":548,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"4b074b0b59693fa9f94fb71b175fb187","sha1":"0004d4f82b546013424b2e0de084395071eef98b","sha256":"25fb23868ebf48348f9e438e00cb9b9d9b3a054f32482a781c762cc4f9cc6393","sha512":"f928e9faa0bc776fc5d8a0326981853709d437b7b1c2e238894bfb2acbb627442c425cbb00d369c52d15876b6c795e67f7580341686696d569a908a6add4b444","ssdeep":"","tlshash":"d2f0909b6f19283f2e238571f4c75168cf680a66ff9925e28748011f7aca04549f2fad","first_seen":"2023-05-21T16:36:58Z","last_seen":"2026-07-24T06:15:04.07695Z","times_seen":2840,"resource_available":true,"data":null}},"time_used":464,"timings":{"blocked":217,"dns":158,"connect":1,"send":0,"wait":28,"receive":1,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ggxdkns.debank.no/","fqdn":"ggxdkns.debank.no","domain":"debank.no","tld":"no"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-04T05:17:49.407Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ggxdkns.debank.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile\r\nAccept-Ch-Lifetime: 30\r\nContent-Encoding: gzip\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Mon, 04 Aug 2025 05:17:49 GMT\r\nServer: nginx\r\nVary: Accept-Encoding\r\nVia: 1.1 Caddy, 0.0 Caddy\r\nX-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_YjPoq6puoQ9ayL7oomKWJie9ulpB80AggIt4JMbWgXX8jz1iExXfDV4h+DZMnfPTOW8MddErHStYGES6VpyVnw==\r\nX-Buckets: bucket102\r\nX-Domain: debank.no\r\nX-Language: norwegian\r\nX-Pcrew-Blocked-Reason: hosting network\r\nX-Pcrew-Ip-Organization: Blix Solutions\r\nX-Subdomain: ggxdkns\r\nX-Template: tpl_CleanPeppermintBlack_twoclick\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17929,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9043)","md5":"e779dad962ab9f75d8c2b17c4d480dd2","sha1":"7d9679b37702b85797756bd6540aa8e511506018","sha256":"a749c456d462f0703c9586a40fbdefa6e0daa0841225dd5cfd794cc7b6d31743","sha512":"1795b3ff3ce4bc066774244f5e259c2ab4262444ad8a5f7937bd3751aa79855841b2f14dfc251d8c5f74490868ec8b9363f8549252e4e07c48c883ab67bb637c","ssdeep":"384:TipYoHMfOTqS7WpU0tLEM9A2V/HeDVcqTEZ9eKD5qW9Tw0tQ0tAgpimr6:TiHMfPS6Uuf9B/HSVcqTEZ9eKD57JwuG","tlshash":"6f8227625cd3183a5ccb501dca7af209f49cf207ca1b9829b99dd3a81f45a1d8171bfc","first_seen":"2025-08-04T05:18:13.976892Z","last_seen":"2025-08-04T05:18:13.976892Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ggxdkns.debank.no/munin/a/tr/browserjs?domain=debank.no\u0026toggle=browserjs\u0026uid=MTc1NDI4NDY2OS40MzY5OjM5YjAzNjg5N2VjYzUzZDliMGM5ZmRkYzRlNTRiZDgwZGI1ZGRiOWQzN2IxZmE4ZTc2MmRkNTk0NzdmNWQ2ODY6Njg5MDQyN2Q2YWFhZA%3D%3D","fqdn":"ggxdkns.debank.no","domain":"debank.no","tld":"no"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ggxdkns.debank.no/","date":"2025-08-04T05:17:49.608Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /munin/a/tr/browserjs?domain=debank.no\u0026toggle=browserjs\u0026uid=MTc1NDI4NDY2OS40MzY5OjM5YjAzNjg5N2VjYzUzZDliMGM5ZmRkYzRlNTRiZDgwZGI1ZGRiOWQzN2IxZmE4ZTc2MmRkNTk0NzdmNWQ2ODY6Njg5MDQyN2Q2YWFhZA%3D%3D HTTP/1.1\r\nHost: ggxdkns.debank.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ggxdkns.debank.no/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile\r\nAccept-Ch-Lifetime: 30\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 0\r\nContent-Type: text/html; charset=UTF-8\r\nDate: Mon, 04 Aug 2025 05:17:49 GMT\r\nServer: nginx\r\nVia: 1.1 Caddy, 0.0 Caddy\r\nX-Custom-Track: browserjs\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youseasky.com/mon","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"34.251.101.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ggxdkns.debank.no/","date":"2025-08-04T05:17:55.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 06 Jul 2025 00:00:00 GMT","end":"Sat, 04 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"8D:AA:00:E1:90:E8:D3:F6:92:1B:91:14:B1:97:FC:21:E4:51:04:AC","sha256":"4C:2C:17:33:00:53:36:67:A5:C9:63:72:87:25:BB:7B:F7:A1:25:65:19:FE:48:96:45:29:51:82:C5:8B:32:3C"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1867\r\nOrigin: http://ggxdkns.debank.no\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ggxdkns.debank.no/\r\nCookie: cg_uuid=11c50d6efd56ce7491cca75e60806145\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: http://ggxdkns.debank.no\r\ncontent-type: application/json\r\ndate: Mon, 04 Aug 2025 05:17:55 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ggxdkns.debank.no/favicon.ico","fqdn":"ggxdkns.debank.no","domain":"debank.no","tld":"no"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ggxdkns.debank.no/","date":"2025-08-04T05:17:49.742Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ggxdkns.debank.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ggxdkns.debank.no/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nContent-Length: 0\r\nContent-Type: image/x-icon\r\nDate: Mon, 04 Aug 2025 05:17:49 GMT\r\nEtag: \"670f7248-0\"\r\nLast-Modified: Wed, 16 Oct 2024 07:59:04 GMT\r\nServer: nginx\r\nVia: 1.1 Caddy\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/adsense/domains/caf.js?pac=0","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=5837883959\u0026pcsa=false\u0026channel=000001%2Cbucket102\u0026client=dp-teaminternet09_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=http%3A%2F%2Fggxdkns.debank.no%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.D5mXXaOd7jBWUF5Al3Z2aot0HU5HOGLyS1W63wgaST5PAzrr3rq5kw.LdkXdkAQhc5JiWcxp2XNMA.TcuwY9C5G68IyHQ2WJOJflqs2pmEZCmROnmWOJq8OXG3u-_wweq-Ha7fUj8vS-b3AXv_0y7u2QPzfKrR6YPZ303CIjTyLEA_wmLDrf-iF6s0AZCtWhTf0jMl1bRnm8RnOs01FOwXZEQOT2SNrRgYkO-wL2kELoTnjePb8Mr_8D5R6IFn3HNPtiN8Ax3ubeJDG0_JoYvSZPZ6wU9Q9StXQXJCoYyLzXEf_Z2PpovNQMrIGXj8F8NPuu0vZXOe9ci_YmIjiizwm-uzZRnhWihOizKCd92C7BUK5g49zwsXw_Cob0OtCdmb0RdWBF8HQCDBfwBNrsluxa-CHnxHTgZA5qt2w9XW0p9W62Lsn8ApqfnNpSUQumHPUt7NFfseNcBR2A2y0WGYdfpFcVS2gx6TIJnA8M6NhEYCz8LZ15Lj_sL-IwslU_0dGpnP3mMUQoLOTpfH-HstHiHTzUndp6r4XfY_cFoVZIp9RQYymBRdGWiOonbLQkvCEIbvAV_RbGgI_49sVVI02emI3a8hqrF_JW8FlHhfE1WPVMqUrroPBeCCGSGfzZBxZe8RsgB9d3Dlql8RqN5m2qoz2aaSIqNOH_GXMGn_dsY-dVfR7TE0Yac.LO7RsePNZemZZ6tYdjj9Tw\u0026max_radlink_len=40\u0026type=3\u0026swp=as-drid-2533547612367448\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717107%2C17301544%2C100244472\u0026format=r3%7Cs\u0026nocache=7211754284669968\u0026num=0\u0026output=afd_ads\u0026domain_name=ggxdkns.debank.no\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1754284669969\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=797\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=788436323\u0026rurl=http%3A%2F%2Fggxdkns.debank.no%2F","date":"2025-08-04T05:17:50.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:37:07 GMT","end":"Mon, 29 Sep 2025 08:37:06 GMT"},"fingerprint":{"sha1":"22:92:CD:9F:75:6A:23:71:D7:AF:2B:DB:BF:8F:B3:9E:37:15:38:6D","sha256":"0C:34:D1:90:DF:C1:33:F8:55:BD:CD:34:37:8F:85:5C:BD:71:22:28:0C:CA:4E:E2:99:7D:EA:95:3C:98:EA:04"}}},"request":{"raw":"GET /adsense/domains/caf.js?pac=0 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Mon, 04 Aug 2025 05:17:50 GMT\r\nexpires: Mon, 04 Aug 2025 05:17:50 GMT\r\ncache-control: private, max-age=3600\r\netag: \"1710142477429985744\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://syndicatedsearch.goog\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":157151,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2943)","md5":"97a64172026ab2a43bfc3efda0342999","sha1":"0ae8483dbb5a6b30c9824821ddb6fbe5f50759d1","sha256":"b6211b425d90282217b683b915fdc7cf373f34cfa25aa3844c40af846222d3cb","sha512":"9c77e3fb2d11b7ee2c133c7e9c81589901d456679e85646a410f29c9283c431531857d7f8cd6dbacb95f04eb5786ab6f50c1459b3448cba72b030aa69aa70534","ssdeep":"1536:b/bVLXkwIgUIfZ+WJDk6T6p2gbQ1kTgTAU8zaabyiD5fVUp4giswbu+PKJ+ngwFq:xfU6G8+gAdaabx/Up1AyqFTrC1V","tlshash":"cee33bdd77a1702243b394b4603f018fb139f866a84c88a4b199d8e47db4da94277fbd","first_seen":"2025-07-31T15:02:44.744576Z","last_seen":"2025-08-07T13:11:51.356757Z","times_seen":5956,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youseasky.com/ct?id=80705\u0026url=http%3A%2F%2Fggxdkns.debank.no%2F\u0026sf=0\u0026tpi=\u0026ch=AdsDeli%20-%20domain%20-%20landingpage\u0026uvid=f89d72157e8cb864f7fee9651c5c25b118d56148\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1754284670477\u0026hl=2\u0026op=0\u0026ag=637386554\u0026rand=8460000290178216121751288001261819126201019056256261006011886960811069195018793161927915\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=win32\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=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%3D%3D\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=NEgKzWAYLb\u0026pto=1209\u0026ver=65\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1754284670.0zctn201E7ZE0Xnq\u0026suid=1.1754284670.BXg6xiS3Ys4heLmq\u0026tuid=1.1754284670.kS8edJj30f1NoFWy\u0026fbc=-\u0026gtm=-\u0026it=10%2C283%2C62\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=\u0026sck=-\u0026io=aGA2Og%3D%3D","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"34.251.101.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ggxdkns.debank.no/","date":"2025-08-04T05:17:50.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 06 Jul 2025 00:00:00 GMT","end":"Sat, 04 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"8D:AA:00:E1:90:E8:D3:F6:92:1B:91:14:B1:97:FC:21:E4:51:04:AC","sha256":"4C:2C:17:33:00:53:36:67:A5:C9:63:72:87:25:BB:7B:F7:A1:25:65:19:FE:48:96:45:29:51:82:C5:8B:32:3C"}}},"request":{"raw":"GET /ct?id=80705\u0026url=http%3A%2F%2Fggxdkns.debank.no%2F\u0026sf=0\u0026tpi=\u0026ch=AdsDeli%20-%20domain%20-%20landingpage\u0026uvid=f89d72157e8cb864f7fee9651c5c25b118d56148\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1754284670477\u0026hl=2\u0026op=0\u0026ag=637386554\u0026rand=8460000290178216121751288001261819126201019056256261006011886960811069195018793161927915\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=win32\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=W1siZWYiLDE2ODJdLFsiYWJuY2giLDE0XSxbLTcsIi0iXSxbLTgsIi0iXSxbLTEwLCItIl0sWy0xMSwie1widFwiOlwiXCIsXCJtXCI6W1wiZGVzY3JpcHRpb25cIl19Il0sWy0yMCwiLSJdLFstMjIsIltcIm5cIixcIm5cIl0iXSxbLTMzLCItIl0sWzEyLCJ7XCJjdHhcIjpcIndlYmdsXCIsXCJ2XCI6XCJtZXNhXCIsXCJyXCI6XCJsbHZtcGlwZVwiLFwic2x2XCI6XCJ3ZWJnbCBnbHNsIGVzIDEuMFwiLFwiZ3ZlclwiOlwid2ViZ2wgMS4wXCIsXCJndmVuXCI6XCJtb3ppbGxhXCIsXCJiZW5cIjoxMTEsXCJ3Z2xcIjoxLFwiZ3JlblwiOlwibGx2bXBpcGVcIixcInNlZlwiOjQ5NDE5NTA0MyxcInNlY1wiOlwiXCJ9Il0sWy00MSwiLSJdLFstNTIsIi0iXSxbLTU2LCJsYW5kc2NhcGUtcHJpbWFyeSJdLFstNTksIi0iXSxbLTYyLCI1OCJdLFstNSwiLSJdLFstMTcsIjQ4Il0sWy0zMCwiW1widlwiLDBdIl0sWy0zNCwiLSJdLFstNTAsIi0iXSxbLTUzLCIwMDEiXSxbLTY4LCItIl0sWy0yNywiLSJdLFstMzYsIltcIjUvNFwiLFwiNS80XCJdIl0sWy01OCwiLSJdLFstMSwiTGludXggeDg2XzY0Il0sWy02LCJ7XCJ3XCI6W1wiMFwiLFwidGNibG9ja1wiLFwic2VhcmNoYm94QmxvY2tcIixcImdldFhNTGh0dHBcIixcImFqYXhRdWVyeVwiLFwiYWpheEJhY2tmaWxsXCIsXCJsb2FkRmVlZFwiLFwieG1sSHR0cFwiLFwibHNcIixcImdldExvYWRGZWVkQXJndW1lbnRzXCIsXCJfX2N0Y2dfY3RfODA3MDVfZXhlY1wiLFwiTm90aWZ5UGFpbnRFdmVudFwiLFwiZ29vZ2xlTkRUX1wiLFwiZ29vZ2xlQWx0TG9hZGVyXCIsXCJnb29nbGVcIixcIl9fc2FzQ29va2llXCJdLFwiblwiOltdLFwiZFwiOltdfSJdLFstOSwiLSJdLFstMTMsIi0iXSxbLTIzLCIrIl0sWy0yNSwiLSJdLFstMjgsImVuLVVTLGVuIl0sWy0zMiwiMCJdLFstNDIsIjg4MzM5OTAxNiJdLFstNTEsIi0iXSxbLTMsIltcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIl0iXSxbLTEyLCJcIjFcIiJdLFstMjQsIltdIl0sWy0yOSwiLSJdLFstMzksIltcIjIwMTAwMTAxXCIsMixcIkdlY2tvXCIsXCJOZXRzY2FwZVwiLFwiTW96aWxsYVwiLFwiMjAxODEwMDEwMDAwMDBcIixudWxsLGZhbHNlLG51bGwsZmFsc2UsbnVsbCw1LHRydWUsZmFsc2UsbnVsbCwwLGZhbHNlLGZhbHNlLGZhbHNlLGZhbHNlXSJdLFstNDUsIjc1MiwwLDAsNzE5LDAsMCw3NjEsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCJdLFstNDYsIjAiXSxbLTQ5LCItIl0sWy02OSwiV2luMzJ8fHw0OHwtfC0iXSxbLTQsIi0iXSxbLTQ0LCIwLDUsMCw1Il0sWy01NywiUzNsUlRVMUpTZ01XRmx4TVZsc1hRRlpNU2x4WVNsSkFGMXBXVkJaS1FVa1dVQllMQ3cxZkFRd0tDUXRZV0F0YkQxeGFDZ2xZV0ZvQVdBRU1YVmdMV2x0ZkFCZFRTZ01JQXc4TUNRa0tGUTRJQUJaTkYxeEJTVlpMVFVvV0JYbFJUVTFKU2dNV0ZseE1WbHNYUUZaTVNseFlTbEpBRjFwV1ZCWktRVWtXVUJZTEN3MWZBUXdLQ1F0WVdBdGJEMXhhQ2dsWVdGb0FXQUVNWFZnTFdsdGZBQmRUU2dNSUF3OE1DQUFBRlVwY1RXMVFWRnhXVEUwWlVWaFhYVlZjU3hNT0NBQVdUUmRjUVVsV1MwMUtGZ1Y1VVUxTlNVb0RGaFpjVEZaYkYwQldURXBjV0VwU1FCZGFWbFFXU2tGSkZsQVdDd3NOWHdFTUNna0xXRmdMV3c5Y1dnPT0iXSxbLTY3LCItIl0sWy03MywiRWhRPSJdLFstMiwiOSxJc045bkduV2JBWUFJeE5mUWFPcUdFMENGQVFzY0cwMEluaE9iWUJBS1lVT3pRTzZFWDAyMEltR0xjdTYydXJkUC9jMmQycE5tVlpBd2YzLy84ejc5R3JIYTFXdTNPbVhQUHZlIl0sWy0xNSwiLSJdLFstMzUsIlsxNzU0Mjg0NjcwMzAwLDBdIl0sWy0zOCwiaSwtMSwtMSwwLDAsMTI3LDAsMSwxLDczLC0xLDAsLDQxNiwxMDMwLDEwMzAiXSxbLTQwLCIzNyJdLFstNDMsIjAwMDAwMDAxMDAwMDAwMDAwMDExMTAwMTAwMDAwMTAwMDAwMDAwMDAwIl0sWy00NywiVVRDLGVuLVVTLGxhdG4sZ3JlZ29yeSJdLFstNDgsIltcIi1cIixcIi1cIixcIi1cIixcIi1cIixcIi1cIl0iXSxbLTU0LCJ7XCJoXCI6W1wiMzI5OTcyODQ1MlwiLFwiODIyODIzMTE5XCIsXCJfM1wiLFwiMjYzOTIyMjQ2OFwiXSxcImRcIjpbXSxcImJcIjpbXCJfMFwiLFwiMjY0NjAzODgyXCJdLFwic1wiOjF9Il0sWy02MywiLSJdLFstNjUsIi0iXSxbLTcwLCItIl0sWy03MiwiRXhVPSJdLFstMTQsIi0iXSxbLTI2LCItIl0sWy01NSwiMCJdLFstNjEsIi0iXSxbLTIxLCItIl0sWy0zMSwiZmFsc2UiXSxbLTYwLCItIl0sWy02NiwiLSJdLFstNzEsImEwMTAwMTAxMTAwMTAwMTAxMDAwMTAxMDAxMTAxMTAwMDAwMDEwIl0sWy03NCwiLSJdLFsiYm5jaCIsNzQyXSxbLTM3LCItIl0sWy02NCwiLSJdLFstMTYsIjAiXSxbLTE4LCJbMSwwLDAsMF0iXSxbLTE5LCJbMCwwLDAsMCwwLDAsMSwyNCwyNCxcIi1cIiwxMjgwLDEwMjQsMTI4MCwxMDI0LDEyODAsMTAyNCwxMjgwLDEwMjQsMCwwLDAsMCxcIi1cIixcIi1cIiwxMjgwLDEwMjQsbnVsbF0iXSxbImRkYiIsIjAsOSwwLDAsMSw0LDAsMCwwLDEsMCwwLDAsMCwxLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDEsMCwwLDMsMywwLDAsMCwzLDAsMSwwLDAsMCwxLDAsNCw0OCwwLDI1LDAsMSwwLDAsMCwxLDEsMCwwLDEsMiwwLDAsMCwwLDAsMCwwLDAsMCwwLDEsMSwwLDAsMCwwIl0sWyJjYiIsIjAsMCwwLDAsMCwwLDAsMCwwLDQsOCwxLDExNiwwLDEsMiwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMSwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDIsMCwxLDMsMCwwLDAsMSwwLDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwyLDAsMCwwLDEsMCJdXQ%3D%3D\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=NEgKzWAYLb\u0026pto=1209\u0026ver=65\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1754284670.0zctn201E7ZE0Xnq\u0026suid=1.1754284670.BXg6xiS3Ys4heLmq\u0026tuid=1.1754284670.kS8edJj30f1NoFWy\u0026fbc=-\u0026gtm=-\u0026it=10%2C283%2C62\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=\u0026sck=-\u0026io=aGA2Og%3D%3D HTTP/1.1\r\nHost: obseu.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ggxdkns.debank.no/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Mon, 04 Aug 2025 05:17:50 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\nset-cookie: cg_uuid=11c50d6efd56ce7491cca75e60806145; Max-Age=29030400; Path=/; Expires=Mon, 06 Jul 2026 05:17:50 GMT; HttpOnly; Secure; SameSite=None\r\ntiming-allow-origin: http://ggxdkns.debank.no\r\ncontent-length: 1255\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3673,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3673), with no line terminators","md5":"18e37acf1c432d4ce21aa862ad5a2fc3","sha1":"3959e09560c6485fa31c0eb8932627e6e5378cac","sha256":"f7e97d55d7ba0eab53add4a65909724fad72db4ae1a539645f14807a6a2fd34d","sha512":"cdf3fe43a1962060fece8cc714bcfe48f097e07a5f5201226a1d46ec9917cf241ac5e706261efd7230ae8cd345e5d25ee768e4b3e46b32b635b78eb9f5947d29","ssdeep":"","tlshash":"e871287d1d199e32b7d0273bde28babd53565b236d4f18aa5273ff9e8cd60640d08042","first_seen":"2025-08-04T05:18:13.982811Z","last_seen":"2025-08-04T05:18:13.982811Z","times_seen":1,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":97,"dns":2,"connect":33,"send":0,"wait":60,"receive":1,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youseasky.com/tracker/tc_imp.gif?e=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\u0026cri=NEgKzWAYLb\u0026ts=286\u0026cb=1754284670763","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"34.251.101.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ggxdkns.debank.no/","date":"2025-08-04T05:17:50.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 06 Jul 2025 00:00:00 GMT","end":"Sat, 04 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"8D:AA:00:E1:90:E8:D3:F6:92:1B:91:14:B1:97:FC:21:E4:51:04:AC","sha256":"4C:2C:17:33:00:53:36:67:A5:C9:63:72:87:25:BB:7B:F7:A1:25:65:19:FE:48:96:45:29:51:82:C5:8B:32:3C"}}},"request":{"raw":"GET /tracker/tc_imp.gif?e=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\u0026cri=NEgKzWAYLb\u0026ts=286\u0026cb=1754284670763 HTTP/1.1\r\nHost: obseu.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ggxdkns.debank.no/\r\nCookie: cg_uuid=11c50d6efd56ce7491cca75e60806145\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ndate: Mon, 04 Aug 2025 05:17:50 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-length: 43\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"db04c7b378cb2db912c3ba8a5a774ee3","sha1":"dee34bd86c3484d31002182aa2b7caa4699126b8","sha256":"98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a","sha512":"826225fc21717d8861a05b9d2f959539aad2d2b131b2afed75d88fbca535e1b0d5a0da8ac69713a0876a0d467848a37a0a7f926aeafad8cf28201382d16466ab","ssdeep":"","tlshash":"6490000bca888002caa2c0302b8883022b88b0320228832e80bc30a8ee3b3a20c02000","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-26T11:13:38.837011Z","times_seen":411681,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youseasky.com/mon","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"34.251.101.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ggxdkns.debank.no/","date":"2025-08-04T05:17:53.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 06 Jul 2025 00:00:00 GMT","end":"Sat, 04 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"8D:AA:00:E1:90:E8:D3:F6:92:1B:91:14:B1:97:FC:21:E4:51:04:AC","sha256":"4C:2C:17:33:00:53:36:67:A5:C9:63:72:87:25:BB:7B:F7:A1:25:65:19:FE:48:96:45:29:51:82:C5:8B:32:3C"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1867\r\nOrigin: http://ggxdkns.debank.no\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ggxdkns.debank.no/\r\nCookie: cg_uuid=11c50d6efd56ce7491cca75e60806145\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: http://ggxdkns.debank.no\r\ncontent-type: application/json\r\ndate: Mon, 04 Aug 2025 05:17:53 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youseasky.com/mon","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"34.251.101.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ggxdkns.debank.no/","date":"2025-08-04T05:18:05.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 06 Jul 2025 00:00:00 GMT","end":"Sat, 04 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"8D:AA:00:E1:90:E8:D3:F6:92:1B:91:14:B1:97:FC:21:E4:51:04:AC","sha256":"4C:2C:17:33:00:53:36:67:A5:C9:63:72:87:25:BB:7B:F7:A1:25:65:19:FE:48:96:45:29:51:82:C5:8B:32:3C"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1870\r\nOrigin: http://ggxdkns.debank.no\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ggxdkns.debank.no/\r\nCookie: cg_uuid=11c50d6efd56ce7491cca75e60806145\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: http://ggxdkns.debank.no\r\ncontent-type: application/json\r\ndate: Mon, 04 Aug 2025 05:18:05 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"euob.youseasky.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js","fqdn":"euob.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"3.167.2.117","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ggxdkns.debank.no/","date":"2025-08-04T05:17:49.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Sun, 18 May 2025 00:00:00 GMT","end":"Tue, 16 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:E4:C6:70:2D:8F:86:68:CF:5D:7A:6C:62:4B:B8:0B:CC:F2:4A:30","sha256":"81:A7:F9:EB:A5:70:77:98:6A:07:25:32:18:5D:46:26:72:12:36:ED:D3:73:60:A7:01:F6:86:8A:27:08:78:56"}}},"request":{"raw":"GET /sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js HTTP/1.1\r\nHost: euob.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ggxdkns.debank.no/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 42496\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ndate: Sun, 03 Aug 2025 17:27:38 GMT\r\netag: \"1c463-a58KpXdeaJHjsjAtkPOrxOllwUk\"\r\nexpires: Mon, 04 Aug 2025 05:27:38 GMT\r\nserver: Caddy\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: KRn0OAun2xI08bxY93jpWUsuKs0b9k0nINzFL3gY7iPbfL7GpaugOQ==\r\nage: 42611\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":115811,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"data","md5":"a12a860d91016923a22175688d1609dc","sha1":"6b9f0aa5775e6891e3b2302d90f3abc4e965c149","sha256":"ab89c74340c8bcbad0098552d3ec484f387ed562e3d9158d1aaaec8d9535bae6","sha512":"e56cbc125e8df4d3a254309c6d08c38a0dcd2da0cb3a827583f40c9d692e841d1484478c6d93f1d8708f4bc273fece073f2e13b5f4e847fe1a574a961601a3c3","ssdeep":"1536:IecWyLFYv8Wt3O3+uduthXmDTx1chYtMwlQyoWipSdNUPjLoniR6OW/l3b5SywlF:vmLFY/WduDmDzUcipSjOWdoQOjEK","tlshash":"d3b3c6adf2e67025039335a5047f410ae27b5e543c4b8194d2bae9d4ac7ce8e513bfac","first_seen":"2025-08-03T17:28:30.378749Z","last_seen":"2025-08-10T14:20:52.212382Z","times_seen":20502,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":11,"dns":1,"connect":1,"send":0,"wait":1,"receive":2,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ggxdkns.debank.no/munin/a/ls?t=6890427d\u0026token=f89d72157e8cb864f7fee9651c5c25b118d56148","fqdn":"ggxdkns.debank.no","domain":"debank.no","tld":"no"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ggxdkns.debank.no/","date":"2025-08-04T05:17:49.695Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /munin/a/ls?t=6890427d\u0026token=f89d72157e8cb864f7fee9651c5c25b118d56148 HTTP/1.1\r\nHost: ggxdkns.debank.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ggxdkns.debank.no/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 201 Created\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Max-Age: 86400\r\nContent-Length: 0\r\nDate: Mon, 04 Aug 2025 05:17:49 GMT\r\nServer: nginx\r\nVia: 1.1 Caddy\r\nX-Log-Success: 6890427d6da95cbc72673c58\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph\u0026output=uds_ads_only\u0026zx=tcnqf05yg9p4\u0026cd_fexp=72717107%2C17301544%2C100244472\u0026aqid=fkKQaJjaDIKFjuwP3ffYgAU\u0026psid=5837883959\u0026pbt=bv\u0026adbx=375\u0026adby=169\u0026adbh=498\u0026adbw=530\u0026adbah=160%2C160%2C160\u0026adbn=master-1\u0026eawp=partner-dp-teaminternet09_3ph\u0026errv=788436323\u0026csala=10%7C0%7C433%7C116%7C248\u0026lle=0\u0026ifv=1\u0026hpt=1","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ggxdkns.debank.no/","date":"2025-08-04T05:17:52.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:37:07 GMT","end":"Mon, 29 Sep 2025 08:37:06 GMT"},"fingerprint":{"sha1":"22:92:CD:9F:75:6A:23:71:D7:AF:2B:DB:BF:8F:B3:9E:37:15:38:6D","sha256":"0C:34:D1:90:DF:C1:33:F8:55:BD:CD:34:37:8F:85:5C:BD:71:22:28:0C:CA:4E:E2:99:7D:EA:95:3C:98:EA:04"}}},"request":{"raw":"GET /afs/gen_204?client=dp-teaminternet09_3ph\u0026output=uds_ads_only\u0026zx=tcnqf05yg9p4\u0026cd_fexp=72717107%2C17301544%2C100244472\u0026aqid=fkKQaJjaDIKFjuwP3ffYgAU\u0026psid=5837883959\u0026pbt=bv\u0026adbx=375\u0026adby=169\u0026adbh=498\u0026adbw=530\u0026adbah=160%2C160%2C160\u0026adbn=master-1\u0026eawp=partner-dp-teaminternet09_3ph\u0026errv=788436323\u0026csala=10%7C0%7C433%7C116%7C248\u0026lle=0\u0026ifv=1\u0026hpt=1 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ggxdkns.debank.no/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-7VBaXNYspPHK4ivWXYZfhg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\npermissions-policy: unload=()\r\ndate: Mon, 04 Aug 2025 05:17:52 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.youseasky.com/mon","fqdn":"obseu.youseasky.com","domain":"youseasky.com","tld":"com"},"ip":{"addr":"34.251.101.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ggxdkns.debank.no/","date":"2025-08-04T05:18:00.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.youseasky.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 06 Jul 2025 00:00:00 GMT","end":"Sat, 04 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"8D:AA:00:E1:90:E8:D3:F6:92:1B:91:14:B1:97:FC:21:E4:51:04:AC","sha256":"4C:2C:17:33:00:53:36:67:A5:C9:63:72:87:25:BB:7B:F7:A1:25:65:19:FE:48:96:45:29:51:82:C5:8B:32:3C"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.youseasky.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1870\r\nOrigin: http://ggxdkns.debank.no\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ggxdkns.debank.no/\r\nCookie: cg_uuid=11c50d6efd56ce7491cca75e60806145\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: http://ggxdkns.debank.no\r\ncontent-type: application/json\r\ndate: Mon, 04 Aug 2025 05:18:00 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png","fqdn":"d38psrni17bvxu.cloudfront.net","domain":"d38psrni17bvxu.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.13","port":80,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ggxdkns.debank.no/","date":"2025-08-04T05:17:49.732Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1\r\nHost: d38psrni17bvxu.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ggxdkns.debank.no/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nContent-Length: 11375\r\nConnection: keep-alive\r\nServer: nginx\r\nDate: Sun, 03 Aug 2025 05:29:31 GMT\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 21 Mar 2024 11:48:11 GMT\r\nETag: \"czzekhpxmtxd8rz\"\r\nVary: Accept-Encoding\r\nX-Cache: Hit from cloudfront\r\nVia: 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-P2\r\nX-Amz-Cf-Id: uWDnu0dJjGEaI93RY8t-xCGcr7vKRzuepihfzL0HOVa_KEuf4OCMrg==\r\nAge: 85698\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":11375,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1500 x 600, 8-bit colormap, non-interlaced","md5":"0cb2e5165dc9324eb462199f04e1ffa9","sha1":"9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8","sha256":"67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865","sha512":"7a285c4a87b9f9093b7ba720d8fe08e0ad7e2ebde9ef8c8d11b70afa08245af8f8a7281c7b3fbe8bad21c3afde4f32634d3bd416822892aa47ba82c12f4b8191","ssdeep":"192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/","tlshash":"94329f86e207c9addc119cb16bd8e9384c673cc3c66925b748987669e4bb80475f049f","first_seen":"2023-04-05T14:20:44Z","last_seen":"2026-07-02T13:07:03.383583Z","times_seen":205350,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=5837883959\u0026pcsa=false\u0026channel=000001%2Cbucket102\u0026client=dp-teaminternet09_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=http%3A%2F%2Fggxdkns.debank.no%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.D5mXXaOd7jBWUF5Al3Z2aot0HU5HOGLyS1W63wgaST5PAzrr3rq5kw.LdkXdkAQhc5JiWcxp2XNMA.TcuwY9C5G68IyHQ2WJOJflqs2pmEZCmROnmWOJq8OXG3u-_wweq-Ha7fUj8vS-b3AXv_0y7u2QPzfKrR6YPZ303CIjTyLEA_wmLDrf-iF6s0AZCtWhTf0jMl1bRnm8RnOs01FOwXZEQOT2SNrRgYkO-wL2kELoTnjePb8Mr_8D5R6IFn3HNPtiN8Ax3ubeJDG0_JoYvSZPZ6wU9Q9StXQXJCoYyLzXEf_Z2PpovNQMrIGXj8F8NPuu0vZXOe9ci_YmIjiizwm-uzZRnhWihOizKCd92C7BUK5g49zwsXw_Cob0OtCdmb0RdWBF8HQCDBfwBNrsluxa-CHnxHTgZA5qt2w9XW0p9W62Lsn8ApqfnNpSUQumHPUt7NFfseNcBR2A2y0WGYdfpFcVS2gx6TIJnA8M6NhEYCz8LZ15Lj_sL-IwslU_0dGpnP3mMUQoLOTpfH-HstHiHTzUndp6r4XfY_cFoVZIp9RQYymBRdGWiOonbLQkvCEIbvAV_RbGgI_49sVVI02emI3a8hqrF_JW8FlHhfE1WPVMqUrroPBeCCGSGfzZBxZe8RsgB9d3Dlql8RqN5m2qoz2aaSIqNOH_GXMGn_dsY-dVfR7TE0Yac.LO7RsePNZemZZ6tYdjj9Tw\u0026max_radlink_len=40\u0026type=3\u0026swp=as-drid-2533547612367448\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717107%2C17301544%2C100244472\u0026format=r3%7Cs\u0026nocache=7211754284669968\u0026num=0\u0026output=afd_ads\u0026domain_name=ggxdkns.debank.no\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1754284669969\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=797\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=788436323\u0026rurl=http%3A%2F%2Fggxdkns.debank.no%2F","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ggxdkns.debank.no/","date":"2025-08-04T05:17:49.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:37:07 GMT","end":"Mon, 29 Sep 2025 08:37:06 GMT"},"fingerprint":{"sha1":"22:92:CD:9F:75:6A:23:71:D7:AF:2B:DB:BF:8F:B3:9E:37:15:38:6D","sha256":"0C:34:D1:90:DF:C1:33:F8:55:BD:CD:34:37:8F:85:5C:BD:71:22:28:0C:CA:4E:E2:99:7D:EA:95:3C:98:EA:04"}}},"request":{"raw":"GET /afs/ads?adtest=off\u0026psid=5837883959\u0026pcsa=false\u0026channel=000001%2Cbucket102\u0026client=dp-teaminternet09_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=http%3A%2F%2Fggxdkns.debank.no%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.D5mXXaOd7jBWUF5Al3Z2aot0HU5HOGLyS1W63wgaST5PAzrr3rq5kw.LdkXdkAQhc5JiWcxp2XNMA.TcuwY9C5G68IyHQ2WJOJflqs2pmEZCmROnmWOJq8OXG3u-_wweq-Ha7fUj8vS-b3AXv_0y7u2QPzfKrR6YPZ303CIjTyLEA_wmLDrf-iF6s0AZCtWhTf0jMl1bRnm8RnOs01FOwXZEQOT2SNrRgYkO-wL2kELoTnjePb8Mr_8D5R6IFn3HNPtiN8Ax3ubeJDG0_JoYvSZPZ6wU9Q9StXQXJCoYyLzXEf_Z2PpovNQMrIGXj8F8NPuu0vZXOe9ci_YmIjiizwm-uzZRnhWihOizKCd92C7BUK5g49zwsXw_Cob0OtCdmb0RdWBF8HQCDBfwBNrsluxa-CHnxHTgZA5qt2w9XW0p9W62Lsn8ApqfnNpSUQumHPUt7NFfseNcBR2A2y0WGYdfpFcVS2gx6TIJnA8M6NhEYCz8LZ15Lj_sL-IwslU_0dGpnP3mMUQoLOTpfH-HstHiHTzUndp6r4XfY_cFoVZIp9RQYymBRdGWiOonbLQkvCEIbvAV_RbGgI_49sVVI02emI3a8hqrF_JW8FlHhfE1WPVMqUrroPBeCCGSGfzZBxZe8RsgB9d3Dlql8RqN5m2qoz2aaSIqNOH_GXMGn_dsY-dVfR7TE0Yac.LO7RsePNZemZZ6tYdjj9Tw\u0026max_radlink_len=40\u0026type=3\u0026swp=as-drid-2533547612367448\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717107%2C17301544%2C100244472\u0026format=r3%7Cs\u0026nocache=7211754284669968\u0026num=0\u0026output=afd_ads\u0026domain_name=ggxdkns.debank.no\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1754284669969\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=797\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=788436323\u0026rurl=http%3A%2F%2Fggxdkns.debank.no%2F HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ggxdkns.debank.no/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-disposition: inline\r\ndate: Mon, 04 Aug 2025 05:17:50 GMT\r\nexpires: Mon, 04 Aug 2025 05:17:50 GMT\r\ncache-control: private, max-age=3600\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-kCk2s7Z248DQrJG8X9dslg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\naccept-ch: Downlink, RTT\r\ncontent-encoding: br\r\nserver: gws\r\ncontent-length: 3503\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":16049,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15317)","md5":"ad5407f2c8349f54371b6b0530d9620e","sha1":"177de91ea451953ac9a04cf2b73922a77fe7bdff","sha256":"9329ccd489ba5f4846004b08d02e14f78c1367e3718d9fd36015613b9b501103","sha512":"e94dc4b506980de5a6977f0b6799b46f5c8826916d00db02b804460fd5fe4916bd9ca138e1d587e965e72450324fc3f6569297f4049ef2412bdb1d86fd2fbfa2","ssdeep":"192:GE12iMpgbLLgh3VDWrpheuvstBheuvst/Iheuvst4DOCSHJOXJ:Gni0d3ps0tH0t00t4DOCGOXJ","tlshash":"2b72553764a2172d09039c54072aaf5dd285d42ac46f36e948f35f25c7e7f828be62ce","first_seen":"2025-08-04T05:18:13.987858Z","last_seen":"2025-08-04T05:18:13.987858Z","times_seen":1,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":144,"dns":1,"connect":20,"send":0,"wait":154,"receive":1,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph\u0026output=uds_ads_only\u0026zx=sek2s8f6kihk\u0026cd_fexp=72717107%2C17301544%2C100244472\u0026aqid=fkKQaJjaDIKFjuwP3ffYgAU\u0026psid=5837883959\u0026pbt=bs\u0026adbx=375\u0026adby=169\u0026adbh=498\u0026adbw=530\u0026adbah=160%2C160%2C160\u0026adbn=master-1\u0026eawp=partner-dp-teaminternet09_3ph\u0026errv=788436323\u0026csala=10%7C0%7C433%7C116%7C248\u0026lle=0\u0026ifv=1\u0026hpt=1","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ggxdkns.debank.no/","date":"2025-08-04T05:17:52.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:37:07 GMT","end":"Mon, 29 Sep 2025 08:37:06 GMT"},"fingerprint":{"sha1":"22:92:CD:9F:75:6A:23:71:D7:AF:2B:DB:BF:8F:B3:9E:37:15:38:6D","sha256":"0C:34:D1:90:DF:C1:33:F8:55:BD:CD:34:37:8F:85:5C:BD:71:22:28:0C:CA:4E:E2:99:7D:EA:95:3C:98:EA:04"}}},"request":{"raw":"GET /afs/gen_204?client=dp-teaminternet09_3ph\u0026output=uds_ads_only\u0026zx=sek2s8f6kihk\u0026cd_fexp=72717107%2C17301544%2C100244472\u0026aqid=fkKQaJjaDIKFjuwP3ffYgAU\u0026psid=5837883959\u0026pbt=bs\u0026adbx=375\u0026adby=169\u0026adbh=498\u0026adbw=530\u0026adbah=160%2C160%2C160\u0026adbn=master-1\u0026eawp=partner-dp-teaminternet09_3ph\u0026errv=788436323\u0026csala=10%7C0%7C433%7C116%7C248\u0026lle=0\u0026ifv=1\u0026hpt=1 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ggxdkns.debank.no/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-EwYn13Oi-oha0JxqR-3mSw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\npermissions-policy: unload=()\r\ndate: Mon, 04 Aug 2025 05:17:52 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T12:24:06.790852Z","times_seen":17544719,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}