{"report_id":"6c3b259d-7284-4a91-b11e-9718ac67c1fe","version":0,"status":"done","tags":[],"date":"2026-06-12T04:39:21Z","url":{"schema":"http","addr":"www.time4date.net/c/1c7da227ef4ea60e?\u0026click_id=jhghm6a2b81e4000bbc69\u0026s1=37553\u0026s2=2170462\u0026s3=the-tube8.cfd\u0026s5=native\u0026lp=MJ\u0026j1=\u0026j2=\u0026j3=\u0026j4=\u0026j5=1","fqdn":"www.time4date.net","domain":"time4date.net","tld":"net"},"ip":{"addr":"52.19.101.114","port":0,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"final":{"url":{"schema":"https","addr":"casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"title":"Spennende chatter med hotte kvinner","dom":{"size":113706,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1997)","md5":"18735782c145a696c085c2e8ceb621cf","sha1":"e576bb0172e66ce0ec43efccbc2f5855f8511b7f","sha256":"e4f9bebc5d72fdfb3e5f54df18558232a1146869e8adfb8140312301d50b0ce7","sha512":"fb77a0cf1209f622b9b9cd6fcfc50f2c45f1753d00a78078869483f302a83e7d9dc7457d312a302539d8d746e4fe8be60688e8043b46ab438c5d0f11c3bf1690","ssdeep":"3072:1nQM5j9zG8s27LmHCma76mtztCTKjQQc/uRLiv:1nQM5j9U27iHl4ztCicsLiv","tlshash":"c3b3d713e4cd053740c716d8b70a4a67bbb9821ed668e0a8bdacd3b51f96d6cc23b1d4","dom_hash":"domhash9065086173563f2abde6d36e545a5ede","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.time4date.net/c/1c7da227ef4ea60e?\u0026click_id=jhghm6a2b81e4000bbc69\u0026s1=37553\u0026s2=2170462\u0026s3=the-tube8.cfd\u0026s5=native\u0026lp=MJ\u0026j1=\u0026j2=\u0026j3=\u0026j4=\u0026j5=1","fqdn":"www.time4date.net","domain":"time4date.net","tld":"net"},"ip":{"addr":"52.19.101.114","port":0,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-17T04:39:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"www.time4date.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"www.time4date.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"r.go2offer-1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"omgtds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"r.gotoof.com","ip":{"addr":"172.67.151.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-26","domain_rank":0,"first_seen":"2025-09-07T02:42:34.745288Z","last_seen":"2026-05-14T07:52:56.050654Z","alert_count":0,"request_count":1,"received_data":1163,"sent_data":548,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-06-08T07:31:13.685477Z","alert_count":0,"request_count":1,"received_data":90779,"sent_data":500,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-06-07T22:29:27.813409Z","alert_count":0,"request_count":1,"received_data":484133,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-07T22:18:26.533791Z","alert_count":0,"request_count":1,"received_data":24412,"sent_data":546,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r.go2offer-1.com","ip":{"addr":"34.141.137.168","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2021-09-23","domain_rank":0,"first_seen":"2021-09-27T07:17:56Z","last_seen":"2026-06-09T17:07:02.490328Z","alert_count":1,"request_count":1,"received_data":903,"sent_data":755,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"echt-verliebt.com","ip":{"addr":"141.94.36.141","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2025-07-22","domain_rank":0,"first_seen":"2026-04-22T13:04:20.627197Z","last_seen":"2026-06-09T17:07:02.346299Z","alert_count":0,"request_count":1,"received_data":364,"sent_data":570,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"omgtds.com","ip":{"addr":"185.162.87.41","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2021-05-25","domain_rank":1593137,"first_seen":"2021-05-25T17:34:53Z","last_seen":"2026-06-09T04:09:34.903716Z","alert_count":1,"request_count":1,"received_data":506,"sent_data":580,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"casual-sle.com","ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-02","domain_rank":0,"first_seen":"2026-05-24T15:33:00.160875Z","last_seen":"2026-06-03T12:34:38.520178Z","alert_count":0,"request_count":24,"received_data":1918907,"sent_data":16644,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery UI:1.13.2","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}]},{"fqdn":"www.time4date.net","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2020-08-03","domain_rank":1328650,"first_seen":"2020-10-04T01:41:41Z","last_seen":"2026-06-02T13:59:43.077754Z","alert_count":4,"request_count":2,"received_data":684,"sent_data":1136,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-07T22:22:03.23237Z","alert_count":0,"request_count":1,"received_data":1502,"sent_data":508,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.eydx08qd.com","ip":{"addr":"136.110.197.162","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-02-03","domain_rank":0,"first_seen":"2026-04-07T01:27:20.507531Z","last_seen":"2026-05-30T16:33:01.503662Z","alert_count":0,"request_count":1,"received_data":843,"sent_data":564,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-1SWENMVWGC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbd38c9ded91df7b1b2a6870b179b87f","sha1":"bfa287444c9323443838789ca1cfd6efb7004db1","sha256":"a67790817030d541a9c0993b13a4f25f5813b39b37bac71ad7915a73e5166e33","sha512":"24388eda7a82f63c2e2997f3f35227cc8c6d78eb179edad64283da7fff20a211ac00a785916bcfe0897b05bd6f9889cd9eda326f25e12c297a1a1ff83eb4337a","ssdeep":"6144:hYcbRknTI8s5XtjLEEQT1TpqBEzVTI1Ce8G3h7Y1MD9f:+nnTsEZXysu","tlshash":"51a4e9ceb3d674225296f478903f01cba57b29e2b448c899f189cce42e7469a4177f7c","size":483529,"data":"","first_seen":"2026-06-12T04:39:26.587894Z","last_seen":"2026-06-12T04:39:26.587894Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"641dd14370106e992d352166f5a07e99","sha1":"eda46747c71d38a880bee44f9a439c3858bb8f99","sha256":"a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af","sha512":"a6e981b23351186aa43f32879dd64c6801be6e2af7ef8b0e472cccdeeba52d5d7894de4bcb292a364f1e11e525524077534338140a72687ada4fae62849843a5","ssdeep":"1536:IjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvg:IeeIygP3fulzhsz8jlvaDioQ47GKH","tlshash":"d193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89795,"data":"","first_seen":"2023-03-26T04:59:07Z","last_seen":"2026-06-20T01:27:59.720961Z","times_seen":25298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/assets/jquery-ui.1.13.2.min.js","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e2047978946a1d271356d0b557a84a3","sha1":"5f29a324c8affb1fdb26ad4564b1e044372beed2","sha256":"9528ca634fecad433d044ddd3e6f9ce1f068d5d932dafdbb19d8e6daea1968bd","sha512":"e7ba19fef5bc00d32347f290e817bdbfffbf87a6eaf7f9777f439ceef9faa8cab286f3ddd5cbca051596a73bb44289de226aabd929263b8312a94f91a47a26dd","ssdeep":"3072:eDPNddBFak8JUaVDpYujVHUc92smVppuzUPFI9fB8NpjJSyACAV:uNdIVWjNS9cdzAV","tlshash":"8944f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","size":255084,"data":"","first_seen":"2023-03-07T18:39:57Z","last_seen":"2026-06-20T01:16:01.817311Z","times_seen":30194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e47daf1954fbff5d37beb278b863d183","sha1":"c48de740e75493f319a1d57fa2cf9e88daadfac1","sha256":"794178372d516bb9580f1bb86ce84e3df93bd602dd60de58c8bd212f16342174","sha512":"e8eec105a026d5b02b3f4335cb380e530f7d7b02cf52eb543414206f27f61e80eb8b793a7f61112b4baaaa0c982cff803ebcd9c1844f0152591e3dea78eb2c60","ssdeep":"","tlshash":"f3c09bb835875c7151ef0b514b1f670565d2b32446900d35041674543a21e579565d55","size":133,"data":"","first_seen":"2026-06-03T12:34:41.511314Z","last_seen":"2026-06-13T09:37:58.955151Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2db8e8f3c227e3aa008aac5d0bac953b","sha1":"1c93a61cd7c6c4ee8738d73ac3b371746e7958d2","sha256":"19e36e6c4a48c68de6ed0e334d9704ed29b79e1ed409f62c85af97d430b5e544","sha512":"ceadf06053ae7c17c4b9b275bb617d9f9f85703c20a6cb46f29b5f01bdbacfdeaf24a4c29224fad24bf1896921ce880e7cb943d749126962aef2470def4879e5","ssdeep":"96:NHvA6NkjjVZHlSZ4/+/idiL4/+yi6iv044F+e8jFMkX4QAwS:lvA6NwjHlSZ0+/idiL0+yi6i8xF+eyFK","tlshash":"4eb12d186ad61033a96f65384faf412e3ab048075709e908bc2cd7e12fa4e7145fdeed","size":5359,"data":"","first_seen":"2026-06-12T04:39:26.596016Z","last_seen":"2026-06-13T09:37:58.956184Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53eec04b5161fba58db255deb63f817d","sha1":"fd063e13fb30484257e83121f4fc365c81c46efb","sha256":"d05b190380c2bbb68046f15fa7bf734231cde1cc38130a9cceb35d1926809d2b","sha512":"63b8d0f45ecfbc23ad8a1f4ced29d355b143ca6cdf93507fd7789ae3e0b8d479ade40b5958ec66d13b189e0a80f4e099d21aab896de03007f48e036baca81682","ssdeep":"","tlshash":"3ee02b0862bd3131927b702ccc6f505c5620c1032a166d30fe8c86c05f1733e3eb66d8","size":324,"data":"","first_seen":"2026-06-12T04:39:26.597195Z","last_seen":"2026-06-13T09:37:58.958Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a768bff3083824e782a5d3b1e7201d51","sha1":"155fe3e8ea58eac939c09f45a95b32f9350aaf68","sha256":"cbea9dc4bb2a98a9ca10e3fd2fbf1ed50d3595c08b78576ad0730435b52f37bf","sha512":"e85e094c0e3528794917de3bedd83818679dd2e1e7b758e650fe2175fc6eba302703797d9988b7feca3199f3d626dc50c36b193d770fa871ec11a5deab7b3936","ssdeep":"96:lLtbI3ttUsG9yEwa44/RfxO4DToOzglgmF9K7T24FHYFPsVT7IluijAjI:XbEtZG8Ewa44/lxOzFfINYOIdAk","tlshash":"36b12c0f31e2287406bbb3be0b6fc28c3b76815b0805c4517d5c95a4af60ea8a5fdac4","size":5189,"data":"","first_seen":"2026-06-12T04:39:26.598161Z","last_seen":"2026-06-13T09:37:58.960114Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-20T02:51:10.83258Z","times_seen":373378,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e47daf1954fbff5d37beb278b863d183","sha1":"c48de740e75493f319a1d57fa2cf9e88daadfac1","sha256":"794178372d516bb9580f1bb86ce84e3df93bd602dd60de58c8bd212f16342174","sha512":"e8eec105a026d5b02b3f4335cb380e530f7d7b02cf52eb543414206f27f61e80eb8b793a7f61112b4baaaa0c982cff803ebcd9c1844f0152591e3dea78eb2c60","ssdeep":"","tlshash":"f3c09bb835875c7151ef0b514b1f670565d2b32446900d35041674543a21e579565d55","size":133,"data":"","first_seen":"2026-06-03T12:34:41.511314Z","last_seen":"2026-06-13T09:37:58.955151Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2db8e8f3c227e3aa008aac5d0bac953b","sha1":"1c93a61cd7c6c4ee8738d73ac3b371746e7958d2","sha256":"19e36e6c4a48c68de6ed0e334d9704ed29b79e1ed409f62c85af97d430b5e544","sha512":"ceadf06053ae7c17c4b9b275bb617d9f9f85703c20a6cb46f29b5f01bdbacfdeaf24a4c29224fad24bf1896921ce880e7cb943d749126962aef2470def4879e5","ssdeep":"96:NHvA6NkjjVZHlSZ4/+/idiL4/+yi6iv044F+e8jFMkX4QAwS:lvA6NwjHlSZ0+/idiL0+yi6i8xF+eyFK","tlshash":"4eb12d186ad61033a96f65384faf412e3ab048075709e908bc2cd7e12fa4e7145fdeed","size":5359,"data":"","first_seen":"2026-06-12T04:39:26.596016Z","last_seen":"2026-06-13T09:37:58.956184Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53eec04b5161fba58db255deb63f817d","sha1":"fd063e13fb30484257e83121f4fc365c81c46efb","sha256":"d05b190380c2bbb68046f15fa7bf734231cde1cc38130a9cceb35d1926809d2b","sha512":"63b8d0f45ecfbc23ad8a1f4ced29d355b143ca6cdf93507fd7789ae3e0b8d479ade40b5958ec66d13b189e0a80f4e099d21aab896de03007f48e036baca81682","ssdeep":"","tlshash":"3ee02b0862bd3131927b702ccc6f505c5620c1032a166d30fe8c86c05f1733e3eb66d8","size":324,"data":"","first_seen":"2026-06-12T04:39:26.597195Z","last_seen":"2026-06-13T09:37:58.958Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a768bff3083824e782a5d3b1e7201d51","sha1":"155fe3e8ea58eac939c09f45a95b32f9350aaf68","sha256":"cbea9dc4bb2a98a9ca10e3fd2fbf1ed50d3595c08b78576ad0730435b52f37bf","sha512":"e85e094c0e3528794917de3bedd83818679dd2e1e7b758e650fe2175fc6eba302703797d9988b7feca3199f3d626dc50c36b193d770fa871ec11a5deab7b3936","ssdeep":"96:lLtbI3ttUsG9yEwa44/RfxO4DToOzglgmF9K7T24FHYFPsVT7IluijAjI:XbEtZG8Ewa44/lxOzFfINYOIdAk","tlshash":"36b12c0f31e2287406bbb3be0b6fc28c3b76815b0805c4517d5c95a4af60ea8a5fdac4","size":5189,"data":"","first_seen":"2026-06-12T04:39:26.598161Z","last_seen":"2026-06-13T09:37:58.960114Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e47daf1954fbff5d37beb278b863d183","sha1":"c48de740e75493f319a1d57fa2cf9e88daadfac1","sha256":"794178372d516bb9580f1bb86ce84e3df93bd602dd60de58c8bd212f16342174","sha512":"e8eec105a026d5b02b3f4335cb380e530f7d7b02cf52eb543414206f27f61e80eb8b793a7f61112b4baaaa0c982cff803ebcd9c1844f0152591e3dea78eb2c60","ssdeep":"","tlshash":"f3c09bb835875c7151ef0b514b1f670565d2b32446900d35041674543a21e579565d55","size":133,"data":"","first_seen":"2026-06-03T12:34:41.511314Z","last_seen":"2026-06-13T09:37:58.955151Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2db8e8f3c227e3aa008aac5d0bac953b","sha1":"1c93a61cd7c6c4ee8738d73ac3b371746e7958d2","sha256":"19e36e6c4a48c68de6ed0e334d9704ed29b79e1ed409f62c85af97d430b5e544","sha512":"ceadf06053ae7c17c4b9b275bb617d9f9f85703c20a6cb46f29b5f01bdbacfdeaf24a4c29224fad24bf1896921ce880e7cb943d749126962aef2470def4879e5","ssdeep":"96:NHvA6NkjjVZHlSZ4/+/idiL4/+yi6iv044F+e8jFMkX4QAwS:lvA6NwjHlSZ0+/idiL0+yi6i8xF+eyFK","tlshash":"4eb12d186ad61033a96f65384faf412e3ab048075709e908bc2cd7e12fa4e7145fdeed","size":5359,"data":"","first_seen":"2026-06-12T04:39:26.596016Z","last_seen":"2026-06-13T09:37:58.956184Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53eec04b5161fba58db255deb63f817d","sha1":"fd063e13fb30484257e83121f4fc365c81c46efb","sha256":"d05b190380c2bbb68046f15fa7bf734231cde1cc38130a9cceb35d1926809d2b","sha512":"63b8d0f45ecfbc23ad8a1f4ced29d355b143ca6cdf93507fd7789ae3e0b8d479ade40b5958ec66d13b189e0a80f4e099d21aab896de03007f48e036baca81682","ssdeep":"","tlshash":"3ee02b0862bd3131927b702ccc6f505c5620c1032a166d30fe8c86c05f1733e3eb66d8","size":324,"data":"","first_seen":"2026-06-12T04:39:26.597195Z","last_seen":"2026-06-13T09:37:58.958Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a768bff3083824e782a5d3b1e7201d51","sha1":"155fe3e8ea58eac939c09f45a95b32f9350aaf68","sha256":"cbea9dc4bb2a98a9ca10e3fd2fbf1ed50d3595c08b78576ad0730435b52f37bf","sha512":"e85e094c0e3528794917de3bedd83818679dd2e1e7b758e650fe2175fc6eba302703797d9988b7feca3199f3d626dc50c36b193d770fa871ec11a5deab7b3936","ssdeep":"96:lLtbI3ttUsG9yEwa44/RfxO4DToOzglgmF9K7T24FHYFPsVT7IluijAjI:XbEtZG8Ewa44/lxOzFfINYOIdAk","tlshash":"36b12c0f31e2287406bbb3be0b6fc28c3b76815b0805c4517d5c95a4af60ea8a5fdac4","size":5189,"data":"","first_seen":"2026-06-12T04:39:26.598161Z","last_seen":"2026-06-13T09:37:58.960114Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e47daf1954fbff5d37beb278b863d183","sha1":"c48de740e75493f319a1d57fa2cf9e88daadfac1","sha256":"794178372d516bb9580f1bb86ce84e3df93bd602dd60de58c8bd212f16342174","sha512":"e8eec105a026d5b02b3f4335cb380e530f7d7b02cf52eb543414206f27f61e80eb8b793a7f61112b4baaaa0c982cff803ebcd9c1844f0152591e3dea78eb2c60","ssdeep":"","tlshash":"f3c09bb835875c7151ef0b514b1f670565d2b32446900d35041674543a21e579565d55","size":133,"data":"","first_seen":"2026-06-03T12:34:41.511314Z","last_seen":"2026-06-13T09:37:58.955151Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2db8e8f3c227e3aa008aac5d0bac953b","sha1":"1c93a61cd7c6c4ee8738d73ac3b371746e7958d2","sha256":"19e36e6c4a48c68de6ed0e334d9704ed29b79e1ed409f62c85af97d430b5e544","sha512":"ceadf06053ae7c17c4b9b275bb617d9f9f85703c20a6cb46f29b5f01bdbacfdeaf24a4c29224fad24bf1896921ce880e7cb943d749126962aef2470def4879e5","ssdeep":"96:NHvA6NkjjVZHlSZ4/+/idiL4/+yi6iv044F+e8jFMkX4QAwS:lvA6NwjHlSZ0+/idiL0+yi6i8xF+eyFK","tlshash":"4eb12d186ad61033a96f65384faf412e3ab048075709e908bc2cd7e12fa4e7145fdeed","size":5359,"data":"","first_seen":"2026-06-12T04:39:26.596016Z","last_seen":"2026-06-13T09:37:58.956184Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53eec04b5161fba58db255deb63f817d","sha1":"fd063e13fb30484257e83121f4fc365c81c46efb","sha256":"d05b190380c2bbb68046f15fa7bf734231cde1cc38130a9cceb35d1926809d2b","sha512":"63b8d0f45ecfbc23ad8a1f4ced29d355b143ca6cdf93507fd7789ae3e0b8d479ade40b5958ec66d13b189e0a80f4e099d21aab896de03007f48e036baca81682","ssdeep":"","tlshash":"3ee02b0862bd3131927b702ccc6f505c5620c1032a166d30fe8c86c05f1733e3eb66d8","size":324,"data":"","first_seen":"2026-06-12T04:39:26.597195Z","last_seen":"2026-06-13T09:37:58.958Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a768bff3083824e782a5d3b1e7201d51","sha1":"155fe3e8ea58eac939c09f45a95b32f9350aaf68","sha256":"cbea9dc4bb2a98a9ca10e3fd2fbf1ed50d3595c08b78576ad0730435b52f37bf","sha512":"e85e094c0e3528794917de3bedd83818679dd2e1e7b758e650fe2175fc6eba302703797d9988b7feca3199f3d626dc50c36b193d770fa871ec11a5deab7b3936","ssdeep":"96:lLtbI3ttUsG9yEwa44/RfxO4DToOzglgmF9K7T24FHYFPsVT7IluijAjI:XbEtZG8Ewa44/lxOzFfINYOIdAk","tlshash":"36b12c0f31e2287406bbb3be0b6fc28c3b76815b0805c4517d5c95a4af60ea8a5fdac4","size":5189,"data":"","first_seen":"2026-06-12T04:39:26.598161Z","last_seen":"2026-06-13T09:37:58.960114Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dbc1af4f505da5ecdb799acefee268e5","sha1":"27d30928de9290ebfbf47d8dc886747426ab31a5","sha256":"d660dbcf3cc4dfd3c1616cbcf9c4abd423ed0ed3f28d8a1dda26c9295fb851cc","sha512":"862767680f2a2ebb6e6a3198a2bb251a4bd52883a231c426939c83e8bcba85568522fad1f02bf2cc5c5b4b594dafbbd2643f5cb9f7d2a05e62cf3818c8c61d8a","ssdeep":"","tlshash":"c3019e682b831230ce4b483c171f6a7d257794177e08e208703cc760aff69a493299d8","size":842,"data":"","first_seen":"2026-06-12T04:39:26.59902Z","last_seen":"2026-06-13T09:37:58.96273Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"6","filename":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","line_number":0,"column_number":0},{"level":"log","text":"1","filename":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","line_number":0,"column_number":0},{"level":"log","text":"16.666666666666668","filename":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"casual-sle.com/4049__/media/png/image_06.png","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","date":"2026-06-12T04:39:03.023Z","timestamp":1781239143023,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casual-sle.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 09:55:50 GMT","end":"Wed, 02 Sep 2026 09:55:49 GMT"},"fingerprint":{"sha1":"9E:41:E3:FD:5D:3F:E7:C1:7B:14:9F:9B:F8:B9:18:82:EA:56:0A:06","sha256":"07:01:FB:E7:77:C9:E9:F3:E9:B3:92:54:21:12:10:6B:39:B1:85:06:9F:0B:02:99:DD:9C:F9:64:06:74:E6:5C"}}},"request":{"raw":"GET /4049__/media/png/image_06.png HTTP/1.1\r\nHost: casual-sle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=63072000\r\ncontent-type: image/png\r\ndate: Fri, 12 Jun 2026 04:39:03 GMT\r\netag: \"9b6c-652c794aa1698\"\r\nexpires: Sat, 10 Jun 2028 12:38:11 GMT\r\nlast-modified: Wed, 27 May 2026 07:30:06 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vi4tvLcKG0gXKQYzd%2F2I0h6jwWWBZmZGttFa%2FauybIzb0h0qJ3MRiH4xJ6uFwGV61aQ4OK5oqulImcB227PeibQHFTfhVsElHtSopPeRfRtK4ywuhLRPh3Ntaao8bX0Isg%3D%3D\"}]}\r\nage: 57651\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 39788\r\ncf-ray: a0a62b63ddefb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39788,"size_decoded":40742,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit colormap, non-interlaced","md5":"51ad4075d8218729c838dfc30e6bd4b7","sha1":"377a5784375eb6fcf2eae6bddb48ad193756c81a","sha256":"3d10a7768165970ccc88e9dd09fc6004e8c58a6d2d10290fba8ae4169ac416e3","sha512":"3cc028d364402e5748860a92b6d67af8f35a21fa3ee3416a8c3411db32c2f3b09b3ff26173da7e3397449fa68712e84042f2588afbce142c0f4cfed56b8c3527","ssdeep":"768:iwylQMDmO/OZy2NVYaBIGPe1XvLt0Fh3xryT7cj+WB1cO9cLXJCkx:iwvRO/b2TBIGPEXvp0Fhhr+a1BCXJt","tlshash":"2403e118f0d5fefe0750cea73dd8a5262076aad24e95a932b9dca50f502c370cda67d0","first_seen":"2026-06-12T04:39:26.529264Z","last_seen":"2026-06-13T09:37:58.912972Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/media/png/image_12.png","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","date":"2026-06-12T04:39:03.036Z","timestamp":1781239143036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casual-sle.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 09:55:50 GMT","end":"Wed, 02 Sep 2026 09:55:49 GMT"},"fingerprint":{"sha1":"9E:41:E3:FD:5D:3F:E7:C1:7B:14:9F:9B:F8:B9:18:82:EA:56:0A:06","sha256":"07:01:FB:E7:77:C9:E9:F3:E9:B3:92:54:21:12:10:6B:39:B1:85:06:9F:0B:02:99:DD:9C:F9:64:06:74:E6:5C"}}},"request":{"raw":"GET /4049__/media/png/image_12.png HTTP/1.1\r\nHost: casual-sle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=63072000\r\ncontent-type: image/png\r\ndate: Fri, 12 Jun 2026 04:39:03 GMT\r\netag: \"5911d-652c794967d77\"\r\nexpires: Fri, 09 Jun 2028 20:15:54 GMT\r\nlast-modified: Wed, 27 May 2026 07:30:05 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2F00pPTYSA1b%2Fag1Z8qQBSGbSosEe2omI27AHWwCOfhTeE1jigeF0RW3Uhd6f1ZppkiCdCCQHuuGDmtQ4JRSkjvBVcF2h8VOyfafNKtvjSn6CyRZj71UrdEtWRRmz%2FPPgw%3D%3D\"}]}\r\nage: 116588\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 364829\r\ncf-ray: a0a62b63fdf9b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":364829,"size_decoded":365788,"mime_type":"image/png","magic":"PNG image data, 600 x 800, 8-bit/color RGB, non-interlaced","md5":"b249f2886ba5a35d1c3bef832a4c092a","sha1":"9afd20ee1ecfaec85b128e3124e4c3cada9047ab","sha256":"aa662564ca58a43673e0d2d1a1c69c3e43b39727443c0554d56a9de96acacc8c","sha512":"8120ff5750796777893e50b8cce01ba5ac140a310e749f0da1c6464779c39a3d500e75614531e114933a4e10f205edd9026164007d4a40bfa97909bd2f717565","ssdeep":"6144:9nDqWjhshCyzJbYxdBV70WBX6M+jwpysvKdLU4vVin6meNa+CUgwg8L0JjWyYA:pjlLxdBVDBX66nidLU4En6mTUbg6KjWo","tlshash":"4e7423089af4a5891ca44c91fe4e07119d6785e7c7d4a4a7183f8eabd4b7132f1eeb02","first_seen":"2026-06-12T04:39:26.530994Z","last_seen":"2026-06-13T09:37:58.942166Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/assets/jquery-ui.1.13.2.min.css","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","date":"2026-06-12T04:39:02.996Z","timestamp":1781239142996,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casual-sle.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 09:55:50 GMT","end":"Wed, 02 Sep 2026 09:55:49 GMT"},"fingerprint":{"sha1":"9E:41:E3:FD:5D:3F:E7:C1:7B:14:9F:9B:F8:B9:18:82:EA:56:0A:06","sha256":"07:01:FB:E7:77:C9:E9:F3:E9:B3:92:54:21:12:10:6B:39:B1:85:06:9F:0B:02:99:DD:9C:F9:64:06:74:E6:5C"}}},"request":{"raw":"GET /assets/jquery-ui.1.13.2.min.css HTTP/1.1\r\nHost: casual-sle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=63072000\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Fri, 12 Jun 2026 04:39:02 GMT\r\netag: \"783a-652c794b06663-gzip\"\r\nexpires: Thu, 08 Jun 2028 12:43:05 GMT\r\nlast-modified: Wed, 27 May 2026 07:30:06 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GAqHtDZ27p5UN8cBv%2BkzIgmAj3z%2FzflX3trzgAtF8oKBiVRL%2FSFojLBhJlRepBMhZCTnvFUfbCoe7uJNPqUYPB4D3oEQ9gLWdf%2F6go6LPsram%2Fzv78TrfBbs%2FZtMOxhoTw%3D%3D\"}]}\r\nage: 230157\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-length: 7592\r\ncf-ray: a0a62b63bde0b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30778,"size_decoded":8608,"mime_type":"text/css","magic":"ASCII text, with very long lines (29189)","md5":"938109d2b5f9778c8d9eec5884ed0a64","sha1":"7f6c4397d33a9a268d80e26b9336c7d6a35c99ab","sha256":"54dc71796bfbf1f069559ddc33c2e8992efec541f621797a849d442a69822696","sha512":"10b57ec728bc221100a4f4bfa528faebe262c3eb0e4f532a933961f04c578a17b8cdfa9b5a4c4f462f30a6d5c83bd83bdc54a5866aae16550eb8c4a85f3e4847","ssdeep":"384:kM9cR8lOXHc11exBMzymUz8YC6G/zDMSc7nfZBhVrQ:kDXHceBMznUvC6G/zDMBha","tlshash":"08d24130a4c2253dfe33d23061e11ef4523bc242eda25fbda09ab65953e98e4c57b971","first_seen":"2023-04-18T18:43:56Z","last_seen":"2026-06-20T01:16:01.86436Z","times_seen":1234,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/media/favicon.ico","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","date":"2026-06-12T04:39:03.449Z","timestamp":1781239143449,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casual-sle.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 09:55:50 GMT","end":"Wed, 02 Sep 2026 09:55:49 GMT"},"fingerprint":{"sha1":"9E:41:E3:FD:5D:3F:E7:C1:7B:14:9F:9B:F8:B9:18:82:EA:56:0A:06","sha256":"07:01:FB:E7:77:C9:E9:F3:E9:B3:92:54:21:12:10:6B:39:B1:85:06:9F:0B:02:99:DD:9C:F9:64:06:74:E6:5C"}}},"request":{"raw":"GET /4049__/media/favicon.ico HTTP/1.1\r\nHost: casual-sle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Fri, 12 Jun 2026 04:39:03 GMT\r\netag: \"47e-652c794aa12af-gzip\"\r\nexpires: Thu, 18 Jun 2026 12:38:11 GMT\r\nlast-modified: Wed, 27 May 2026 07:30:06 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=50Ywzml2Dx3lIC0S8UTkUMP1dtK2mj596bkQJjo6w9HEYnP3UMcgIdLpsei0n%2Fh2yUDkNwTre5y9fMiup7hKTa87HRsoDr9Ip%2FOyGZ5y6%2BLNhLrBPwz1Pidu1MFuQJbgWA%3D%3D\"}]}\r\nage: 57651\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncontent-length: 167\r\ncf-ray: a0a62b668e11b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1150,"size_decoded":1188,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"18c8ba52db1ac2d3ccc020ba3c4a45bd","sha1":"8820194d2f624ca833b1e1a35dc9def09c168a10","sha256":"8faeb3f7a932e056b5d3939667c8209c4d8eea833e8d3997e6244493537615ed","sha512":"cb2ab729c97756277ad416014c5fae6f4d4fbdfb00c881971eb8349338523331477f49d97146d5ab881850a702c4552a68658302ea645583533a686968eb134e","ssdeep":"","tlshash":"aa2192c0b280cc08c2800233c0d3eaf20148fcc24760320330c03f4f3daa3142752e18","first_seen":"2023-05-05T20:19:29Z","last_seen":"2026-06-18T06:14:47.425731Z","times_seen":543,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.time4date.net/c/1c7da227ef4ea60e?\u0026click_id=jhghm6a2b81e4000bbc69\u0026s1=37553\u0026s2=2170462\u0026s3=the-tube8.cfd\u0026s5=native\u0026lp=MJ\u0026j1=\u0026j2=\u0026j3=\u0026j4=\u0026j5=1","fqdn":"www.time4date.net","domain":"time4date.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T04:38:52.982Z","timestamp":1781239132982,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /c/1c7da227ef4ea60e?\u0026click_id=jhghm6a2b81e4000bbc69\u0026s1=37553\u0026s2=2170462\u0026s3=the-tube8.cfd\u0026s5=native\u0026lp=MJ\u0026j1=\u0026j2=\u0026j3=\u0026j4=\u0026j5=1 HTTP/1.1\r\nHost: www.time4date.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T02:50:12.204522Z","times_seen":16565994,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"www.time4date.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"www.time4date.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Lato\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","date":"2026-06-12T04:39:02.981Z","timestamp":1781239142981,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Lato\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casual-sle.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 12 Jun 2026 04:39:03 GMT\r\ndate: Fri, 12 Jun 2026 04:39:03 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":818,"size_decoded":1059,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"865f3a35d6595dbcba51302b78e308fe","sha1":"f0e3142cc81d8baa44e03cf12f342c0e4d23325a","sha256":"6a8d638c251dcb0772527e914f642d1b80f85fa7c1dff46253bcb45378ca2267","sha512":"eb8221fb16627675fbed77f7fbc81573d765c04af3b39f74ab0aad62733fe664fa44725e1a672c170d4e0978a055dd24e6b918df767ddc4e130f803cdaacfcba","ssdeep":"","tlshash":"9401ce91056ba108db870cc213cd7e32ff1e625064499934eefe14d8bca7c698351b0d","first_seen":"2025-09-17T02:19:04.265486Z","last_seen":"2026-06-20T02:25:57.037938Z","times_seen":4821,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":36,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/media/png/sfondo.png","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","date":"2026-06-12T04:39:03.245Z","timestamp":1781239143245,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casual-sle.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 09:55:50 GMT","end":"Wed, 02 Sep 2026 09:55:49 GMT"},"fingerprint":{"sha1":"9E:41:E3:FD:5D:3F:E7:C1:7B:14:9F:9B:F8:B9:18:82:EA:56:0A:06","sha256":"07:01:FB:E7:77:C9:E9:F3:E9:B3:92:54:21:12:10:6B:39:B1:85:06:9F:0B:02:99:DD:9C:F9:64:06:74:E6:5C"}}},"request":{"raw":"GET /4049__/media/png/sfondo.png HTTP/1.1\r\nHost: casual-sle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casual-sle.com/4049__/css/style.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=63072000\r\ncontent-type: image/png\r\ndate: Fri, 12 Jun 2026 04:39:03 GMT\r\netag: \"c07f8-652c794968547\"\r\nexpires: Sat, 10 Jun 2028 17:07:41 GMT\r\nlast-modified: Wed, 27 May 2026 07:30:05 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i\r\nage: 41481\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FMYQbAG%2FSeGl4%2FINgA2kQsr07VGkW5Ka268lLlUuGho5ypmNA4uFJNYeBMoG%2FN7j0lSMYuuyQ2K5OrKuNpJeVvq9y4XwFGc2zNvYlnE6v%2BJPIFx6ltqkCfyS7b3Sn7t2gA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 788472\r\ncf-ray: a0a62b654e03b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":788472,"size_decoded":789434,"mime_type":"image/png","magic":"PNG image data, 800 x 1153, 8-bit/color RGB, non-interlaced","md5":"529e78fdb7566f1d44a9cb9a9b0f4eb2","sha1":"48e4ea07f1d71d8134019690a7edbe4eed65b464","sha256":"41db28a03310037fdb216ac1f4c570cf14fe1f958aa8bba77e7d6f4c2c24dacd","sha512":"0f84dd7e049066641289dde72e00248dc1f9b7ccec3f2d6b8c3a7f6435c9559dd9c0c0ed18e1778238d3c296141bf0164fa116fc8f858c83e22265e4ea7ee22f","ssdeep":"24576:LIbjtjNd7mytg2MuC0IFSsNLcI4h4nqUkti+o1Sn62aC/1:sb1Ndyyt8ukXNLYh4n4tYcqC/1","tlshash":"96f433f2cd3c76c6fc1bb110b2e888c7e223af6455e0d5792d9c5c54232a5b5c269ee0","first_seen":"2026-06-12T04:39:26.534259Z","last_seen":"2026-06-13T09:37:58.946775Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","date":"2026-06-12T04:39:03.266Z","timestamp":1781239143266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://casual-sle.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Jun 2026 02:01:57 GMT\r\nexpires: Fri, 11 Jun 2027 02:01:57 GMT\r\ncache-control: public, max-age=31536000\r\nage: 95826\r\nlast-modified: Mon, 15 Sep 2025 17:09:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":23580,"size_decoded":24412,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-06-20T02:49:41.636921Z","times_seen":235345,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":17,"receive":12,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eydx08qd.com/KBRN7PP/5HCCZ8/?uid=3487\u0026source_id=3_1180\u0026sub5=d6a591787dfe25b86376c6757a4f1fe1","fqdn":"www.eydx08qd.com","domain":"eydx08qd.com","tld":"com"},"ip":{"addr":"136.110.197.162","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T04:39:02.194Z","timestamp":1781239142194,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.eydx08qd.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 May 2026 20:10:15 GMT","end":"Thu, 20 Aug 2026 21:06:11 GMT"},"fingerprint":{"sha1":"2A:33:2A:A9:8E:23:1A:53:E2:F7:B2:15:BC:BD:AE:1D:6D:DC:47:9F","sha256":"A8:48:A9:62:09:77:7A:5A:C2:6B:B0:1B:FD:81:31:19:4C:8D:6F:3C:B0:C1:07:E0:8C:A4:1C:48:9F:AF:2C:15"}}},"request":{"raw":"GET /KBRN7PP/5HCCZ8/?uid=3487\u0026source_id=3_1180\u0026sub5=d6a591787dfe25b86376c6757a4f1fe1 HTTP/1.1\r\nHost: www.eydx08qd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Fri, 12 Jun 2026 04:39:02 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 285\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model\r\nlocation: https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1\r\nset-cookie: uniqueClick_5HCCZ8=77139b38-e802-4a65-a329-e22fd7065316:1781239142; Path=/; Expires=Fri, 19 Jun 2026 04:39:02 GMT; Secure; SameSite=None\ntransaction_id=738ff19fc2d84e1a9c7e41d5801911be; Path=/; Expires=Thu, 10 Sep 2026 04:39:02 GMT; Secure; SameSite=None\r\nvary: Origin\r\nx-eflow-request-id: 89bcd2b6-d92d-43a3-81fb-fbc0498e1aa1\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T02:50:12.204522Z","times_seen":16565994,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":34,"connect":13,"send":0,"wait":142,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T04:39:02.425Z","timestamp":1781239142425,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casual-sle.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 09:55:50 GMT","end":"Wed, 02 Sep 2026 09:55:49 GMT"},"fingerprint":{"sha1":"9E:41:E3:FD:5D:3F:E7:C1:7B:14:9F:9B:F8:B9:18:82:EA:56:0A:06","sha256":"07:01:FB:E7:77:C9:E9:F3:E9:B3:92:54:21:12:10:6B:39:B1:85:06:9F:0B:02:99:DD:9C:F9:64:06:74:E6:5C"}}},"request":{"raw":"GET /4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1 HTTP/1.1\r\nHost: casual-sle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 12 Jun 2026 04:39:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M804EemaSDIQuYUxVTCTi%2FEZZCGpQ6ofv6KJlhyVr0WHTry4GODZ5%2BRcYI8bOHXhKE4t1%2B%2FKmXpWjFEo%2FjF%2FA1O3njg3ImKUeCplX%2F%2BBqe6nzkcWtYfSi078HD2ItYzM9Q%3D%3D\"}]}\r\nexpires: Fri, 12 Jun 2026 04:39:02 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a0a62b605e2956c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery UI:1.13.2","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}],"data":{"size":114433,"size_decoded":32964,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1997)","md5":"f680c0597b73c8651a65a9807cdd718a","sha1":"5cc33ec3853ecb4174c38a7ab29300e761ea6d83","sha256":"b4d3e5b82628e617b4cb384a25d8af101131a0c88fc5596502aed8c0577b1e45","sha512":"4ed6554588ba8cb1b46544c8bd706d4bc8080ebda4dfa779d87cb297d346b3a30491f9e1cb518e1045593866e0b379e2b8decca5aaa5593d715f4b586073850e","ssdeep":"3072:1nQM5jjvufBznxjma76mzpZTKjQQc/uRLp:1nQM5jjkzxcEpZicsLp","tlshash":"edb3d713e4dd013740c716d8b70a4a67bbb9821dd668e0a8bdacd3b51f96d6cc23b1d8","first_seen":"2026-06-12T04:39:26.536324Z","last_seen":"2026-06-12T04:39:26.536324Z","times_seen":1,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":12,"connect":3,"send":0,"wait":198,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/media/png/logo.png","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","date":"2026-06-12T04:39:03.008Z","timestamp":1781239143008,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casual-sle.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 09:55:50 GMT","end":"Wed, 02 Sep 2026 09:55:49 GMT"},"fingerprint":{"sha1":"9E:41:E3:FD:5D:3F:E7:C1:7B:14:9F:9B:F8:B9:18:82:EA:56:0A:06","sha256":"07:01:FB:E7:77:C9:E9:F3:E9:B3:92:54:21:12:10:6B:39:B1:85:06:9F:0B:02:99:DD:9C:F9:64:06:74:E6:5C"}}},"request":{"raw":"GET /4049__/media/png/logo.png HTTP/1.1\r\nHost: casual-sle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=63072000\r\ncontent-type: image/png\r\ndate: Fri, 12 Jun 2026 04:39:03 GMT\r\netag: \"1aa2-652c794aa1e68\"\r\nexpires: Sat, 10 Jun 2028 12:38:10 GMT\r\nlast-modified: Wed, 27 May 2026 07:30:06 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nage: 57652\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kdu1WDS5bdbvBubiSU5sy7I34uCZJlloNhHvlqojzperNrMkQLE3JPK%2BODSBYBSVUrYvYKi3hbuXH03b%2B%2FOZCyYUDzY4F1v1RyZUKX6x7Dwv5CY29phWQ6fN4s1jGg9i6g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 6818\r\ncf-ray: a0a62b63cde9b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6818,"size_decoded":7773,"mime_type":"image/png","magic":"PNG image data, 547 x 111, 8-bit colormap, non-interlaced","md5":"bf0b0e3537e1a6c5ec3a72fa8b6b5377","sha1":"0f6c82890c78c530423018006a490883c751a6fd","sha256":"b9da0a90076a606b1da618ccbeeb3868a5b93078c1acedf8711bb52bf40e9d08","sha512":"021c279bab0d545c6ee8f06c76029f4ac31a187025a5b117bcfb85ea95c6a328d2e24ef0b448723ef8bd0167a6862aaa6683cb6a06081a3dc063efb5a4c169b9","ssdeep":"192:OxESOknk5gJzSy9rDtOXtg2/0ICuExO/NU3grCZ:O1lnk5gJzSy9/MXf09uEsNU3g6","tlshash":"66e19fc1df35dd64db58ed9268e03062ef1749c451d981a03eb88e2b28790bb45af9c7","first_seen":"2026-06-12T04:39:26.54142Z","last_seen":"2026-06-13T09:37:58.95094Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/media/png/image_08.png","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","date":"2026-06-12T04:39:03.026Z","timestamp":1781239143026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casual-sle.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 09:55:50 GMT","end":"Wed, 02 Sep 2026 09:55:49 GMT"},"fingerprint":{"sha1":"9E:41:E3:FD:5D:3F:E7:C1:7B:14:9F:9B:F8:B9:18:82:EA:56:0A:06","sha256":"07:01:FB:E7:77:C9:E9:F3:E9:B3:92:54:21:12:10:6B:39:B1:85:06:9F:0B:02:99:DD:9C:F9:64:06:74:E6:5C"}}},"request":{"raw":"GET /4049__/media/png/image_08.png HTTP/1.1\r\nHost: casual-sle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=63072000\r\ncontent-type: image/png\r\ndate: Fri, 12 Jun 2026 04:39:03 GMT\r\netag: \"9513-652c794aa1a80\"\r\nexpires: Sat, 10 Jun 2028 12:38:11 GMT\r\nlast-modified: Wed, 27 May 2026 07:30:06 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fuFiaAkMMuY%2BOqVDpcQTqf1yyHA9l8BGtv%2FFv5iMMIaAkW64eJh1PaZp6gvO55ytWC9NDcbh%2Bv5Xyj%2F7rM5FHLcsEJWyuTFaaYrsCCarlk1wKP3OEZUFemE0LvU8HkHA3Q%3D%3D\"}]}\r\nage: 57651\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 38163\r\ncf-ray: a0a62b63edf1b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38163,"size_decoded":39121,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit colormap, non-interlaced","md5":"ac2e285be3cb97e70d1512babd68ec5f","sha1":"eae0a4fde3174b628aabd596068380c7aeea4bc9","sha256":"b8959f5687b7d359e0723b6af67bb6ea8b93d6b5c232a262f66a79543fe62c8c","sha512":"13fd11ab36cfcb16ef47284addf1153c09a46f869e4a51a1e8799cd54d7d209f9b35bfdaf9a41845a4406155a1b686a718b62527cbce5689e34d50aaca7747c3","ssdeep":"768:IIqMyOeg+/CnaPXg6OEnCrbKXTiuQzP0btml25ITl6Fm2C4XC4:vqMyOeHaWhOEUbK+uQzsbA2+TlSXC4","tlshash":"190302925ae30efdf18bb76a5fd28924dc0733747ce0d05192dfb9043a349e6981e1a5","first_seen":"2026-06-12T04:39:26.548301Z","last_seen":"2026-06-13T09:37:58.936187Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/css/jquery-ui.css","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","date":"2026-06-12T04:39:02.987Z","timestamp":1781239142987,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casual-sle.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 09:55:50 GMT","end":"Wed, 02 Sep 2026 09:55:49 GMT"},"fingerprint":{"sha1":"9E:41:E3:FD:5D:3F:E7:C1:7B:14:9F:9B:F8:B9:18:82:EA:56:0A:06","sha256":"07:01:FB:E7:77:C9:E9:F3:E9:B3:92:54:21:12:10:6B:39:B1:85:06:9F:0B:02:99:DD:9C:F9:64:06:74:E6:5C"}}},"request":{"raw":"GET /4049__/css/jquery-ui.css HTTP/1.1\r\nHost: casual-sle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=63072000\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Fri, 12 Jun 2026 04:39:02 GMT\r\netag: \"8d02-652c7949675a7-gzip\"\r\nexpires: Fri, 09 Jun 2028 20:15:53 GMT\r\nlast-modified: Wed, 27 May 2026 07:30:05 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\npriority: u=2,i=?0\r\nage: 116589\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=psFucMdso5jeRQC0WhFfgVhFCkU6k14dJGFF2AWEZP2i9dNo52kt4peRe19yh%2FCqneg0ef3qzRYmR6peGUNpGK5dc5Lp0OpQneo1M6Co2Tz4eP44kTECqltNk5%2BQg2dWEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 8405\r\ncf-ray: a0a62b63adddb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36098,"size_decoded":9413,"mime_type":"text/css","magic":"ASCII text, with very long lines (2363)","md5":"c74bce544d78a1e0308d3c40c0377b15","sha1":"4d28bca1a7e84161423c592a94393bd8ff22341e","sha256":"f5df60cf9176d6ee6b4e4ac4dd90e4da8251015aa1be6f9ad388faf73a035ccd","sha512":"a0be4c7932c477d268def88f2c0d54e09386b47c4e235af66948cb584eaa73495ff6b29476f6b4a4ba468f3b0405c3e035191c6c74395d61a6d010d6be296962","ssdeep":"192:W0OW02ANbMD6l2n+brGtUQnSMfps3+eYQY+h572hk/xrAY5Y6BjSmMErEURHllP5:kMD/+vaW1eyH/PiF5fydQt/DS25gL","tlshash":"91f20c316b432919ba1bd1a465a11bf7e32e1342ee2b6e7f609a345cc3d54e0c0bf5b4","first_seen":"2023-04-06T19:58:55Z","last_seen":"2026-06-17T14:56:35.10863Z","times_seen":276,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","date":"2026-06-12T04:39:03.001Z","timestamp":1781239143001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casual-sle.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 09:55:50 GMT","end":"Wed, 02 Sep 2026 09:55:49 GMT"},"fingerprint":{"sha1":"9E:41:E3:FD:5D:3F:E7:C1:7B:14:9F:9B:F8:B9:18:82:EA:56:0A:06","sha256":"07:01:FB:E7:77:C9:E9:F3:E9:B3:92:54:21:12:10:6B:39:B1:85:06:9F:0B:02:99:DD:9C:F9:64:06:74:E6:5C"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: casual-sle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Sun, 14 Jun 2026 04:39:02 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N1%2FVRLl%2FzXrDtBXYp8v9E9Ghk%2Fmkbras%2FnIOLcrwVwH7g41hxuNFZUYUO2SNQaQ94GXzPLn4Q9CW5xDT%2BCT0DmylihoQ1wnvXtERxxNQ%2FFpYMTNIChStFM361W0RMGHSqg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Fri, 12 Jun 2026 04:39:02 GMT\r\nserver: cloudflare\r\ncf-ray: a0a62b63bde3b28a-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1298,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-20T02:51:10.83258Z","times_seen":373378,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/media/png/image_09.png","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","date":"2026-06-12T04:39:03.028Z","timestamp":1781239143028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casual-sle.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 09:55:50 GMT","end":"Wed, 02 Sep 2026 09:55:49 GMT"},"fingerprint":{"sha1":"9E:41:E3:FD:5D:3F:E7:C1:7B:14:9F:9B:F8:B9:18:82:EA:56:0A:06","sha256":"07:01:FB:E7:77:C9:E9:F3:E9:B3:92:54:21:12:10:6B:39:B1:85:06:9F:0B:02:99:DD:9C:F9:64:06:74:E6:5C"}}},"request":{"raw":"GET /4049__/media/png/image_09.png HTTP/1.1\r\nHost: casual-sle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=63072000\r\ncontent-type: image/png\r\ndate: Fri, 12 Jun 2026 04:39:03 GMT\r\netag: \"82e9-652c794967d77\"\r\nexpires: Fri, 09 Jun 2028 20:15:54 GMT\r\nlast-modified: Wed, 27 May 2026 07:30:05 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6TuNOLLPF2cV1v5O7oQCwHfr1Zh2%2B32A3yEUDo5tkTarrVrGIWGgEBE3%2F35K46HdYBjNGWDB0TGJN1ypxhhpfTs7UySGNNtgM%2FEX%2BgdBFR8v%2FGdaCFIYB59uofPW6rz0YA%3D%3D\"}]}\r\nage: 116588\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 33513\r\ncf-ray: a0a62b63edf4b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33513,"size_decoded":34474,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit colormap, non-interlaced","md5":"c384f67fcc2991642097fcc869b9392d","sha1":"a6ea3411140f7b37ee2d50442509fd479c17db14","sha256":"8ea5b5ac182488810db074b9c146640435432d2911a76fbcb4f23513db8f8149","sha512":"c31d8c21f2efc389beaa0b49f19daee03a48a07069ba1eed8235d5e542290d89f8e4cb9be47df1080bebcf38f81db42936ca5656179290c118b41b40e1580fa5","ssdeep":"768:OYXXE905AaxV6JvZtARN6al3RxvXjSHgeXMReYQmwCm:3kTa76/A3lBljSgNeYQD","tlshash":"20e2e084c9767992d410b0e438e6a55f6782bee4da81fe10dbf0be10035ef7bb997184","first_seen":"2026-06-12T04:39:26.569769Z","last_seen":"2026-06-13T09:37:58.927701Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r.gotoof.com/click?pid=1180\u0026offer_id=5290\u0026sub1=dfmlr6a2b8d63000bb84a\u0026sub2=201120","fqdn":"r.gotoof.com","domain":"gotoof.com","tld":"com"},"ip":{"addr":"172.67.151.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T04:38:59.622Z","timestamp":1781239139622,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gotoof.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 23:01:13 GMT","end":"Sat, 18 Jul 2026 23:58:37 GMT"},"fingerprint":{"sha1":"19:DE:9B:2E:34:A1:5C:28:F8:E8:62:D0:11:BB:E7:AC:07:7D:BA:FE","sha256":"39:BF:B2:65:21:C5:01:D5:03:68:AA:DB:40:A7:3B:BB:DC:40:86:41:A0:33:E0:3B:FE:CE:8B:03:EC:D8:EA:47"}}},"request":{"raw":"GET /click?pid=1180\u0026offer_id=5290\u0026sub1=dfmlr6a2b8d63000bb84a\u0026sub2=201120 HTTP/1.1\r\nHost: r.gotoof.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 12 Jun 2026 04:38:59 GMT\r\ncontent-length: 0\r\nlocation: https://omgtds.com/c1/b30bdb65-5c08-49a9-8082-5c8ea9af818f?aff=1180\u0026source=201120\u0026externalId=\u0026sub2=201120\u0026sub3=1180\u0026pp=1\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64\r\nvary: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\nreferer: \r\nreferrer-policy: no-referrer\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ajgeljK5M%2B8Bwx6mj8sONn1Xjn15iYJi02AtykbsqPFADawhg%2F0hQ9ofV39QXdpE88DTBsCTZNbwHAW8tSiACeKi2jO80RCxD2%2BGBCWvs3Jne7h6E8ogPz5D%2Fx8Yds%3D\"}]}\r\ncf-ray: a0a62b4ec905b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T02:50:12.204522Z","times_seen":16565994,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":11,"connect":1,"send":0,"wait":80,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/css/style.css","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","date":"2026-06-12T04:39:02.979Z","timestamp":1781239142979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casual-sle.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 09:55:50 GMT","end":"Wed, 02 Sep 2026 09:55:49 GMT"},"fingerprint":{"sha1":"9E:41:E3:FD:5D:3F:E7:C1:7B:14:9F:9B:F8:B9:18:82:EA:56:0A:06","sha256":"07:01:FB:E7:77:C9:E9:F3:E9:B3:92:54:21:12:10:6B:39:B1:85:06:9F:0B:02:99:DD:9C:F9:64:06:74:E6:5C"}}},"request":{"raw":"GET /4049__/css/style.css HTTP/1.1\r\nHost: casual-sle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=63072000\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Fri, 12 Jun 2026 04:39:03 GMT\r\netag: \"249c-652c7949675a7-gzip\"\r\nexpires: Fri, 09 Jun 2028 20:15:53 GMT\r\nlast-modified: Wed, 27 May 2026 07:30:05 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\npriority: u=2,i=?0\r\nage: 116589\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9RrNaU5HnzBuLxagJUsgjMSCs%2B0yGkAJkI9aBLbrBI0%2BUEJVSskyQq6XwGuNbEJ4p7Bgx3Q%2BDeoLZs7vOerQEKNk9HzWoS73iCWLRbRQLsiPz5j96juNuKFx%2BHEVdH%2F7dw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 2343\r\ncf-ray: a0a62b639ddcb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9372,"size_decoded":3357,"mime_type":"text/css","magic":"ASCII text, with very long lines (9371)","md5":"a6e61d4f385f0b8b8f9eba4adc94f20e","sha1":"debdd6f6017a057a442e6ce473541588c436f560","sha256":"140e5051bdbf81537f2f44813c9b0854dcdcf7f445a56a9067088f518604b0a0","sha512":"c8695eebe0200053164e1bfc5743cfec6347717f11f8ed52fe1d431bdb3e1b24013038168d338e8321e3d47beb1a4d762384031393006c04db930fdd065ffc16","ssdeep":"96:BGkLsAeGgRnnGy3XeiBwx85CdcWUtyGoVULM40:JBeGqnlX2xJdcy8Z0","tlshash":"6412671269942018b4138925efd41bf9521cc412d1335efeb713ba1acfc63ab23d6b8b","first_seen":"2026-06-12T04:39:26.578874Z","last_seen":"2026-06-13T09:37:58.915577Z","times_seen":2,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/media/png/image_04.png","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","date":"2026-06-12T04:39:03.020Z","timestamp":1781239143020,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casual-sle.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 09:55:50 GMT","end":"Wed, 02 Sep 2026 09:55:49 GMT"},"fingerprint":{"sha1":"9E:41:E3:FD:5D:3F:E7:C1:7B:14:9F:9B:F8:B9:18:82:EA:56:0A:06","sha256":"07:01:FB:E7:77:C9:E9:F3:E9:B3:92:54:21:12:10:6B:39:B1:85:06:9F:0B:02:99:DD:9C:F9:64:06:74:E6:5C"}}},"request":{"raw":"GET /4049__/media/png/image_04.png HTTP/1.1\r\nHost: casual-sle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=63072000\r\ncontent-type: image/png\r\ndate: Fri, 12 Jun 2026 04:39:03 GMT\r\netag: \"88a0-652c79496798f\"\r\nexpires: Sat, 10 Jun 2028 17:07:41 GMT\r\nlast-modified: Wed, 27 May 2026 07:30:05 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nage: 41481\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NJhDA1yuXX90o1X284%2BnlWZJBeuMocNKmLMLksxab0BYorJwnBqz6dLmC2kWogoWiVM2XAPhQ5t%2FWkQkQPlC7XEU9cjACO5pek4JvLnzFK37iyVsk7TnzGX70QLg%2BQbf0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 34976\r\ncf-ray: a0a62b63ddedb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34976,"size_decoded":35932,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit colormap, non-interlaced","md5":"253604faf6729ef5768959ef7f6b8d21","sha1":"109dcb4b768d2d726b7b6c114065a733cd1dff18","sha256":"bb627ee7c18dd3a3a4922716ac4088a93de5a5d8d5987669221b9d47877b582f","sha512":"bf498a23a20df9c28f7f518961245fc15d664c08d6b66617142c21aa7428fd35e4102507de3695ccdc59436cb99e3652f387bc85ec6e718a268731ad148edd05","ssdeep":"768:pdfOkOOFC0NjaNfav7Hblp+PD8bBpUOw1Ok3W/Ld8LeSDhPX+UzxS:rfdCGaJG77K8NOO6G/LdeDhvVS","tlshash":"aef2d0dda5135461f1e60ab10acae93e1034e7cb50b1f2557f1241e32efa2f369a350b","first_seen":"2026-06-12T04:39:26.580169Z","last_seen":"2026-06-13T09:37:58.90539Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/media/png/emoji.png","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","date":"2026-06-12T04:39:03.037Z","timestamp":1781239143037,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casual-sle.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 09:55:50 GMT","end":"Wed, 02 Sep 2026 09:55:49 GMT"},"fingerprint":{"sha1":"9E:41:E3:FD:5D:3F:E7:C1:7B:14:9F:9B:F8:B9:18:82:EA:56:0A:06","sha256":"07:01:FB:E7:77:C9:E9:F3:E9:B3:92:54:21:12:10:6B:39:B1:85:06:9F:0B:02:99:DD:9C:F9:64:06:74:E6:5C"}}},"request":{"raw":"GET /4049__/media/png/emoji.png HTTP/1.1\r\nHost: casual-sle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=63072000\r\ncontent-type: image/png\r\ndate: Fri, 12 Jun 2026 04:39:03 GMT\r\netag: \"9a4-652c79496798f\"\r\nexpires: Fri, 09 Jun 2028 20:15:54 GMT\r\nlast-modified: Wed, 27 May 2026 07:30:05 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nage: 116588\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BNiYXFOidUX34h4F7JGr7Y%2BEMwa8j13O45l8UTMpHREwjjE5uNYfIbUikLXk%2B86jk7WVALtMrBPb8o77RB0t0tlDELMM6f7t1dFg7QThGpJjUA6j7nMLj%2BXSjGaDdA1dkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 2468\r\ncf-ray: a0a62b63fdfab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2468,"size_decoded":3425,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"58d7cd4d0f96deb538b103d2d18e14ba","sha1":"932efd0bcc0840b8a19df04867f0ea73283619a2","sha256":"18ab1b4f231eea7d4ba13e60309d23aec98eb846efcac914f8d5d0b7989859ed","sha512":"d2bafd70ba28ab11aa051b42e09487931284f802d12a13c26238269a02382a34c515bb493a5de698a3feed1adaaff3f8d519fdcdc0e368f1d3f2c3c1af5ab6ce","ssdeep":"","tlshash":"08514ccacd2797c26b57f5695ed5430df19b7d8522be6409960de0bc02079800ac50f6","first_seen":"2023-05-18T11:30:25Z","last_seen":"2026-06-18T08:37:04.398166Z","times_seen":74,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","date":"2026-06-12T04:39:02.989Z","timestamp":1781239142989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /ajax/libs/jquery/3.6.4/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casual-sle.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31154\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 10 Jun 2026 21:18:00 GMT\r\nexpires: Thu, 10 Jun 2027 21:18:00 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 112863\r\nlast-modified: Tue, 04 Apr 2023 03:27:01 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":89795,"size_decoded":32138,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"641dd14370106e992d352166f5a07e99","sha1":"eda46747c71d38a880bee44f9a439c3858bb8f99","sha256":"a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af","sha512":"a6e981b23351186aa43f32879dd64c6801be6e2af7ef8b0e472cccdeeba52d5d7894de4bcb292a364f1e11e525524077534338140a72687ada4fae62849843a5","ssdeep":"1536:IjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvg:IeeIygP3fulzhsz8jlvaDioQ47GKH","tlshash":"d193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-26T04:59:07Z","last_seen":"2026-06-20T01:27:59.720961Z","times_seen":25298,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":17,"receive":18,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/assets/jquery-ui.1.13.2.min.js","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","date":"2026-06-12T04:39:02.992Z","timestamp":1781239142992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casual-sle.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 09:55:50 GMT","end":"Wed, 02 Sep 2026 09:55:49 GMT"},"fingerprint":{"sha1":"9E:41:E3:FD:5D:3F:E7:C1:7B:14:9F:9B:F8:B9:18:82:EA:56:0A:06","sha256":"07:01:FB:E7:77:C9:E9:F3:E9:B3:92:54:21:12:10:6B:39:B1:85:06:9F:0B:02:99:DD:9C:F9:64:06:74:E6:5C"}}},"request":{"raw":"GET /assets/jquery-ui.1.13.2.min.js HTTP/1.1\r\nHost: casual-sle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=63072000\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Fri, 12 Jun 2026 04:39:03 GMT\r\netag: \"3e46c-652c794b06e33-gzip\"\r\nexpires: Sun, 11 Jun 2028 04:39:03 GMT\r\nlast-modified: Wed, 27 May 2026 07:30:06 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PeUZIJPckN83SF9DPNLGJzhoA0gfFVsndYQaVLlA%2F%2Bbm4QmlLEdY78y41E%2B9gNwXcqitjmND47rK4PNm8Gu9SYPuMT5YqrvMQSUCiQWs99dHCo55iTKXvJaecyWkDp3vrA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a0a62b63addfb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":255084,"size_decoded":68913,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64399)","md5":"1e2047978946a1d271356d0b557a84a3","sha1":"5f29a324c8affb1fdb26ad4564b1e044372beed2","sha256":"9528ca634fecad433d044ddd3e6f9ce1f068d5d932dafdbb19d8e6daea1968bd","sha512":"e7ba19fef5bc00d32347f290e817bdbfffbf87a6eaf7f9777f439ceef9faa8cab286f3ddd5cbca051596a73bb44289de226aabd929263b8312a94f91a47a26dd","ssdeep":"3072:eDPNddBFak8JUaVDpYujVHUc92smVppuzUPFI9fB8NpjJSyACAV:uNdIVWjNS9cdzAV","tlshash":"8944f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","first_seen":"2023-03-07T18:39:57Z","last_seen":"2026-06-20T01:16:01.817311Z","times_seen":30194,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/media/png/image_10.png","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","date":"2026-06-12T04:39:03.019Z","timestamp":1781239143019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casual-sle.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 09:55:50 GMT","end":"Wed, 02 Sep 2026 09:55:49 GMT"},"fingerprint":{"sha1":"9E:41:E3:FD:5D:3F:E7:C1:7B:14:9F:9B:F8:B9:18:82:EA:56:0A:06","sha256":"07:01:FB:E7:77:C9:E9:F3:E9:B3:92:54:21:12:10:6B:39:B1:85:06:9F:0B:02:99:DD:9C:F9:64:06:74:E6:5C"}}},"request":{"raw":"GET /4049__/media/png/image_10.png HTTP/1.1\r\nHost: casual-sle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=63072000\r\ncontent-type: image/png\r\ndate: Fri, 12 Jun 2026 04:39:03 GMT\r\netag: \"1c01-652c794967d77\"\r\nexpires: Fri, 09 Jun 2028 20:15:54 GMT\r\nlast-modified: Wed, 27 May 2026 07:30:05 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nage: 116588\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6f1CRNEwfr%2BU05aDLxsEtqCK5gWoabe87%2BqP4brknGyOgzoSFm%2BR7dqBui5UUk9cGV2PBoK%2Bg9L9YS0EGRuc%2B7Dc6pZEK8yuELnG7lWt%2B1HbXMtafxl2H3Qtr9vljmyHQg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 7169\r\ncf-ray: a0a62b63ddecb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7169,"size_decoded":8131,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"69aacff0cada1ea796a70f0c8cd77a10","sha1":"e5d3755f9d04c754f7d287028ce6fc1d2f19d8c4","sha256":"c3a9f3483fd72b709656bc64c322b33d7b76b1175a1543e3cc2dcabd5e6055e0","sha512":"5284668d453cac89a7092acbd7969aa01646caaa59b4c01dc9b5a48310333239ecd2076b9645f23a63231e9985329366b101a79208d7a7479b71ef10c4981ebc","ssdeep":"192:yqfSDSOknR0c9YOQTn8rOW1tElgxdtMTPs8zy3w:d62lnR0c9Yz8iCtBZQl","tlshash":"7fe19d6b5e50dd85170ca69cfdfd761bc93aa7d8948fdea23445dc03cb602b8cea1902","first_seen":"2026-06-12T04:39:26.58286Z","last_seen":"2026-06-13T09:37:58.940416Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/media/png/image_07.png","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","date":"2026-06-12T04:39:03.024Z","timestamp":1781239143024,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casual-sle.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 09:55:50 GMT","end":"Wed, 02 Sep 2026 09:55:49 GMT"},"fingerprint":{"sha1":"9E:41:E3:FD:5D:3F:E7:C1:7B:14:9F:9B:F8:B9:18:82:EA:56:0A:06","sha256":"07:01:FB:E7:77:C9:E9:F3:E9:B3:92:54:21:12:10:6B:39:B1:85:06:9F:0B:02:99:DD:9C:F9:64:06:74:E6:5C"}}},"request":{"raw":"GET /4049__/media/png/image_07.png HTTP/1.1\r\nHost: casual-sle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=63072000\r\ncontent-type: image/png\r\ndate: Fri, 12 Jun 2026 04:39:03 GMT\r\netag: \"a548-652c79496798f\"\r\nexpires: Sat, 10 Jun 2028 17:07:41 GMT\r\nlast-modified: Wed, 27 May 2026 07:30:05 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c5E%2FkN5w2u%2B70aTojJS0G8C%2Bw3%2FiPYQt18StqvQlKcw1L%2FJf8Ok0nOdIST%2BZxrVxMir1j%2FtM%2BESOubci0jwcyTildwwD%2BtCxUq%2FWRETAijp5TcXD9ml6eCEplAka1S1W9A%3D%3D\"}]}\r\nage: 41481\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 42312\r\ncf-ray: a0a62b63edf2b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42312,"size_decoded":43282,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit colormap, non-interlaced","md5":"06433386793eff148377b31883cf8af2","sha1":"e2689947027dca6f99628066c38ca3d0c8176377","sha256":"af404ad08fa9339aad53e71a7924ca94f48af5327565677599e003d37f5e0aea","sha512":"1a790816051261d1572bfde88ddd219d3ea512d83180e10b0f548c89fbb9756cebc706a48456719d9fe26e38821b9aeb685ff21e1fd134ee71d056e28c90ada4","ssdeep":"768:Mc1HeiG5Kay8itf/uSq/2vYnGkcliEKRubGMDvG+Tn4TOVR:h96hy8eeSq/DGtiEKmr++sTOVR","tlshash":"1313f1019bf214118024ebc6be327ac7fbb9b6c0ffe5980e1d4e079664282d509f71a2","first_seen":"2026-06-12T04:39:26.584019Z","last_seen":"2026-06-13T09:37:58.922992Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/media/png/image_11.png","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","date":"2026-06-12T04:39:03.029Z","timestamp":1781239143029,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casual-sle.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 09:55:50 GMT","end":"Wed, 02 Sep 2026 09:55:49 GMT"},"fingerprint":{"sha1":"9E:41:E3:FD:5D:3F:E7:C1:7B:14:9F:9B:F8:B9:18:82:EA:56:0A:06","sha256":"07:01:FB:E7:77:C9:E9:F3:E9:B3:92:54:21:12:10:6B:39:B1:85:06:9F:0B:02:99:DD:9C:F9:64:06:74:E6:5C"}}},"request":{"raw":"GET /4049__/media/png/image_11.png HTTP/1.1\r\nHost: casual-sle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=63072000\r\ncontent-type: image/png\r\ndate: Fri, 12 Jun 2026 04:39:03 GMT\r\netag: \"4460-652c794967d77\"\r\nexpires: Fri, 09 Jun 2028 20:15:54 GMT\r\nlast-modified: Wed, 27 May 2026 07:30:05 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nage: 116588\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A1186oG8ua67ALpCTYDJFiC5m6PyIzKWl19FBJAiExfAqXx4Wo0sG2aDsW0OS%2BilCd1L4tXl5HI6wY9rFcu7kEj5Ogiinw49d4f9Ci6wmV8%2BDEwppX40MTqAxVQjwLx17g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 17504\r\ncf-ray: a0a62b63edf5b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17504,"size_decoded":18459,"mime_type":"image/png","magic":"PNG image data, 568 x 108, 8-bit/color RGB, non-interlaced","md5":"de0d768e6871852af2ca64f2ba5002dc","sha1":"fffd36aa18f38d7395004e9a8318e15d25b75a31","sha256":"e667571bbe29f0f5358fd4acb9847b278f45bd26b092e6565022f92b128cf474","sha512":"7062d912b0d84c81555c252c10c2a080f6e95031b990e371086d800d229acf5d916be1e4de6df9aab87d0067e327b0c8e7e30e890933e1aaccfbd7c16a8c1e96","ssdeep":"384:LMnZCJcept+REjiLSgAOiyQVadYCQDXsYsFVN5XKU/XEAarT4:woptVj/cQLD4FV3X5Y0","tlshash":"1c72d00ad0a59e2315166b0e1cade9bf87991fd28543a8608ffcff9b19364bb15c5180","first_seen":"2026-06-12T04:39:26.58486Z","last_seen":"2026-06-13T09:37:58.931526Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/media/png/check.png","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","date":"2026-06-12T04:39:03.034Z","timestamp":1781239143034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casual-sle.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 09:55:50 GMT","end":"Wed, 02 Sep 2026 09:55:49 GMT"},"fingerprint":{"sha1":"9E:41:E3:FD:5D:3F:E7:C1:7B:14:9F:9B:F8:B9:18:82:EA:56:0A:06","sha256":"07:01:FB:E7:77:C9:E9:F3:E9:B3:92:54:21:12:10:6B:39:B1:85:06:9F:0B:02:99:DD:9C:F9:64:06:74:E6:5C"}}},"request":{"raw":"GET /4049__/media/png/check.png HTTP/1.1\r\nHost: casual-sle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=63072000\r\ncontent-type: image/png\r\ndate: Fri, 12 Jun 2026 04:39:03 GMT\r\netag: \"82c-652c7949675a7\"\r\nexpires: Fri, 09 Jun 2028 20:15:54 GMT\r\nlast-modified: Wed, 27 May 2026 07:30:05 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nage: 116588\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ShM5EooBRnxzmEW1fst7gXNQexQUeG25H4VN4iLxcrYRLlrJqWM9iGUUFu%2Ftg2lgFmgzGRMv3c4f%2FWton4QhjL%2BxMJ7b%2BovfZSvMrUOAhrB1wjQf0r1XF2lSe6Dgh3g3pQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 2092\r\ncf-ray: a0a62b63fdf8b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2092,"size_decoded":3049,"mime_type":"image/png","magic":"PNG image data, 49 x 26, 8-bit/color RGBA, non-interlaced","md5":"aa1afa9d083d478f7979cfb872b1b21d","sha1":"6480390e8a55f147cd1fe96a408f5de7a2337178","sha256":"b953c62e5ec9236003f20fc8657b4507160e5299b7d7789593d44edaafe08871","sha512":"52d0e650b7f0e66cc7657e344fb7e3491709b9c0b30fa69de05f3953d206be2dafcdce5b7e3c23991e98bb651f5b985b11fa7e8c4ca2eaec6b41c2368c25e992","ssdeep":"","tlshash":"b141934eef1278510a09be6a7de5b19b667b47c1da82a881bdc9c81619201f9cc0cbd6","first_seen":"2026-06-12T04:39:26.585854Z","last_seen":"2026-06-13T09:37:58.929629Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/assets/ac.png","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","date":"2026-06-12T04:39:03.039Z","timestamp":1781239143039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casual-sle.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 09:55:50 GMT","end":"Wed, 02 Sep 2026 09:55:49 GMT"},"fingerprint":{"sha1":"9E:41:E3:FD:5D:3F:E7:C1:7B:14:9F:9B:F8:B9:18:82:EA:56:0A:06","sha256":"07:01:FB:E7:77:C9:E9:F3:E9:B3:92:54:21:12:10:6B:39:B1:85:06:9F:0B:02:99:DD:9C:F9:64:06:74:E6:5C"}}},"request":{"raw":"GET /assets/ac.png HTTP/1.1\r\nHost: casual-sle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=63072000\r\ncontent-type: image/png\r\ndate: Fri, 12 Jun 2026 04:39:03 GMT\r\netag: \"668-652c794aa99fd\"\r\nexpires: Sat, 03 Jun 2028 09:45:35 GMT\r\nlast-modified: Wed, 27 May 2026 07:30:06 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MNv%2BIfP0frdKElZkHsE6mvs%2BarimU3XffQ%2Flr%2Fq4oaGRiDYVH1bGeDlninYIb%2Bk%2Fg3eLGM3ci1jXJEl2T54dmuRRTXXUsjbCFQe%2F8nMxGaSAtZ50YkRiQqUxdR3PK0LQMw%3D%3D\"}]}\r\nage: 672807\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 1640\r\ncf-ray: a0a62b63fdfbb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1640,"size_decoded":2603,"mime_type":"image/png","magic":"PNG image data, 178 x 21, 8-bit colormap, non-interlaced","md5":"fbf9d39ae3ef5e1d49efc157feee713f","sha1":"ebc9f015400b1b8fb822ab56955d04cf2070894e","sha256":"e2945ad3ee02e3b69ccf22cd54289e809134b266d9647ede86d859affaf23f3c","sha512":"2039027c4c2ca927e7d00a73bbb0539728e4fb7172e8e76b4b99fd467fb94ebe944bc5bcb348853e8fa4222932b2e7c22c272d6fc5fb46586ca59e35167138d4","ssdeep":"","tlshash":"ea31caced664236b8339677f210ed4e105d7d7de6d024024d19155541a2eb8d839fa92","first_seen":"2026-06-03T12:34:41.481937Z","last_seen":"2026-06-13T09:37:58.938671Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/media/png/image_13.png","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","date":"2026-06-12T04:39:03.031Z","timestamp":1781239143031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casual-sle.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 09:55:50 GMT","end":"Wed, 02 Sep 2026 09:55:49 GMT"},"fingerprint":{"sha1":"9E:41:E3:FD:5D:3F:E7:C1:7B:14:9F:9B:F8:B9:18:82:EA:56:0A:06","sha256":"07:01:FB:E7:77:C9:E9:F3:E9:B3:92:54:21:12:10:6B:39:B1:85:06:9F:0B:02:99:DD:9C:F9:64:06:74:E6:5C"}}},"request":{"raw":"GET /4049__/media/png/image_13.png HTTP/1.1\r\nHost: casual-sle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=63072000\r\ncontent-type: image/png\r\ndate: Fri, 12 Jun 2026 04:39:03 GMT\r\netag: \"49ca-652c794aa1e68\"\r\nexpires: Sat, 10 Jun 2028 12:38:11 GMT\r\nlast-modified: Wed, 27 May 2026 07:30:06 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FhhuijRdRqQPBQ6gF1D4SukYe76EYDHVWdG0x6CLWGzt8qx0YoEWgsNHVpFmiw8zuEIsPrPo5EsIHm9xsEmJxrgRqVXnUcu5zxhMRgoQ7JRyuGlGZ4YHsc43PNixFavb2w%3D%3D\"}]}\r\nage: 57651\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 18890\r\ncf-ray: a0a62b63edf6b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18890,"size_decoded":19840,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 768x1000, components 3","md5":"20064a945ef3c72d0df8107d027a392f","sha1":"2f917d76b10b04aba20d5a7f677bdfaa464f1547","sha256":"af10a1262faf663357679267effb31a78ddb3b70510b466ea990e2bc37017db4","sha512":"6485072713298d21d0a83c1687e4547e27e2832f3cd8c3d190636ec739668645f3706d0fb7edfed0fb70e78e1679a587a767d3ccf99e2ef294b0b4bd8a0bf419","ssdeep":"384:oSk04ciw3u6+eVoXKbjxi80eZj0BHOZJ+b99rLPUJ7C:rk0H+CzV0e90BuLsbL47C","tlshash":"7a82d0db9ea1e9d6ea953e68fb1c77c83d23862b65779f6425071cccb119ef980020c1","first_seen":"2023-05-18T11:30:25Z","last_seen":"2026-06-18T08:37:04.406253Z","times_seen":73,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r.go2offer-1.com/click?pid=14148\u0026offer_id=3952\u0026sub1=d8loqop371koldcp8n9g\u0026sub2=201120\u0026sub3=1180\u0026sub5=\u0026sub7=\u0026sub8=\u0026sub24=\u0026sub25=201120\u0026sub26=1180\u0026sub4=\u0026sub6=\u0026sub9=\u0026sub10=\u0026sub11=\u0026sub12=\u0026sub13=\u0026sub14=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026sub21=\u0026sub22=\u0026sub23=\u0026sub27=\u0026sub28=\u0026sub29=\u0026sub30=","fqdn":"r.go2offer-1.com","domain":"go2offer-1.com","tld":"com"},"ip":{"addr":"34.141.137.168","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T04:38:59.949Z","timestamp":1781239139949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"r.go2offer-1.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Sep 2025 00:00:00 GMT","end":"Sun, 27 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7F:D6:B1:3A:E4:3F:16:DC:08:5D:BD:1C:E9:0B:D3:65:6E:60:52:A1","sha256":"35:CB:B5:F8:83:78:63:06:5F:BE:AD:E5:6A:5B:EF:85:49:BD:F9:48:F2:35:5D:69:4B:A8:D4:17:13:9D:91:F3"}}},"request":{"raw":"GET /click?pid=14148\u0026offer_id=3952\u0026sub1=d8loqop371koldcp8n9g\u0026sub2=201120\u0026sub3=1180\u0026sub5=\u0026sub7=\u0026sub8=\u0026sub24=\u0026sub25=201120\u0026sub26=1180\u0026sub4=\u0026sub6=\u0026sub9=\u0026sub10=\u0026sub11=\u0026sub12=\u0026sub13=\u0026sub14=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026sub21=\u0026sub22=\u0026sub23=\u0026sub27=\u0026sub28=\u0026sub29=\u0026sub30= HTTP/1.1\r\nHost: r.go2offer-1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Fri, 12 Jun 2026 04:39:00 GMT\r\ncontent-length: 0\r\nlocation: https://echt-verliebt.com/s/963916796bb00163e9532d4c889b7fb2/adult?subid=1180\u0026clickid=6a2b8d64cb781400012363f5\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64\r\nvary: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: *\r\nset-cookie: afclick=6a2b8d64cb781400012363f5; expires=Sat, 12 Jun 2027 04:39:00 GMT; secure; SameSite=None\nafoffers={\"3952\":[1781239140,1]}; expires=Sat, 12 Jun 2027 04:39:00 GMT; secure; SameSite=None\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T02:50:12.204522Z","times_seen":16565994,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":133,"connect":26,"send":0,"wait":29,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"r.go2offer-1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echt-verliebt.com/s/963916796bb00163e9532d4c889b7fb2/adult?subid=1180\u0026clickid=6a2b8d64cb781400012363f5","fqdn":"echt-verliebt.com","domain":"echt-verliebt.com","tld":"com"},"ip":{"addr":"141.94.36.141","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T04:39:00.201Z","timestamp":1781239140201,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"echt-verliebt.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 08:01:11 GMT","end":"Tue, 21 Jul 2026 08:01:10 GMT"},"fingerprint":{"sha1":"02:B9:71:CE:0C:7E:BE:36:76:09:11:AF:40:12:15:C5:2C:E6:12:63","sha256":"C8:1C:61:4F:F6:5A:60:09:EF:1A:96:A3:B8:25:58:86:11:C2:C5:CA:94:E4:EB:32:CD:9E:10:87:E6:10:4C:E1"}}},"request":{"raw":"GET /s/963916796bb00163e9532d4c889b7fb2/adult?subid=1180\u0026clickid=6a2b8d64cb781400012363f5 HTTP/1.1\r\nHost: echt-verliebt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Fri, 12 Jun 2026 04:39:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://www.eydx08qd.com/KBRN7PP/5HCCZ8/?uid=3487\u0026source_id=3_1180\u0026sub5=d6a591787dfe25b86376c6757a4f1fe1\r\nset-cookie: _sl_seen=115; expires=Sat, 13 Jun 2026 04:39:02 GMT; Max-Age=86400; path=/; secure; HttpOnly; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T02:50:12.204522Z","times_seen":16565994,"resource_available":true,"data":null}},"time_used":1989,"timings":{"blocked":0,"dns":65,"connect":23,"send":0,"wait":1846,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-1SWENMVWGC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","date":"2026-06-12T04:39:02.994Z","timestamp":1781239142994,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:26 GMT","end":"Mon, 17 Aug 2026 08:36:25 GMT"},"fingerprint":{"sha1":"B1:69:2D:8A:87:48:5C:47:05:41:5B:52:3B:0E:2C:E9:BD:CC:03:75","sha256":"91:1E:26:69:78:6C:F7:F4:05:E8:B1:07:F4:04:FB:66:B9:20:6A:EB:43:9D:02:70:C8:AF:60:8C:BB:58:30:4F"}}},"request":{"raw":"GET /gtag/js?id=G-1SWENMVWGC HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casual-sle.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Fri, 12 Jun 2026 04:39:03 GMT\r\nexpires: Fri, 12 Jun 2026 04:39:03 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 163795\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":483529,"size_decoded":164399,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"bbd38c9ded91df7b1b2a6870b179b87f","sha1":"bfa287444c9323443838789ca1cfd6efb7004db1","sha256":"a67790817030d541a9c0993b13a4f25f5813b39b37bac71ad7915a73e5166e33","sha512":"24388eda7a82f63c2e2997f3f35227cc8c6d78eb179edad64283da7fff20a211ac00a785916bcfe0897b05bd6f9889cd9eda326f25e12c297a1a1ff83eb4337a","ssdeep":"6144:hYcbRknTI8s5XtjLEEQT1TpqBEzVTI1Ce8G3h7Y1MD9f:+nnTsEZXysu","tlshash":"51a4e9ceb3d674225296f478903f01cba57b29e2b448c899f189cce42e7469a4177f7c","first_seen":"2026-06-12T04:39:26.587894Z","last_seen":"2026-06-12T04:39:26.587894Z","times_seen":1,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":41,"receive":47,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/media/png/image_03.png","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","date":"2026-06-12T04:39:03.017Z","timestamp":1781239143017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casual-sle.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 09:55:50 GMT","end":"Wed, 02 Sep 2026 09:55:49 GMT"},"fingerprint":{"sha1":"9E:41:E3:FD:5D:3F:E7:C1:7B:14:9F:9B:F8:B9:18:82:EA:56:0A:06","sha256":"07:01:FB:E7:77:C9:E9:F3:E9:B3:92:54:21:12:10:6B:39:B1:85:06:9F:0B:02:99:DD:9C:F9:64:06:74:E6:5C"}}},"request":{"raw":"GET /4049__/media/png/image_03.png HTTP/1.1\r\nHost: casual-sle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=63072000\r\ncontent-type: image/png\r\ndate: Fri, 12 Jun 2026 04:39:03 GMT\r\netag: \"282a-652c79496798f\"\r\nexpires: Sun, 11 Jun 2028 04:39:03 GMT\r\nlast-modified: Wed, 27 May 2026 07:30:05 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jGov7gQtT4SIjCG3v%2BFNTAqlz7%2BRR0PoqdDW%2BH%2BFX0dKfUpFq2IFjBcMy3BS3ANbQWYwIMm6LdX6IgT2nl2CzOv4XLGxpUqT1O0mGfR%2Feo%2FbVP1G1emLDo9JsvEjqf69LQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 10282\r\ncf-ray: a0a62b63ddebb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10282,"size_decoded":11233,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"31d3a691a957bafdbc77d98134b381b3","sha1":"34f1db38953cb2b287ceed6a1f3eea07e64e8e96","sha256":"34f039d8d3d16c668a7fd32a983176293f45e5bbeea017a4f677f9b856bd0f6d","sha512":"3fdaa56a8e73eeae1604167e92f1a2438bc663379afb116365a27bd41f1458416ffd1f2649cf52bdc91801882be528ed97fca900a8a0992d5d7c8921997c6e2b","ssdeep":"192:svhaCQRSOknJ0+7y648wpFWMMnerjT3sZ7fvOAkjEtUp9iM8eCJpkSSx81zvcVe:svZQ4lnJh7NIpgXOjT3sZbUpQM8eCJsq","tlshash":"6622b04ba450c441fb02e70856f8ea2bc2bf56c0c64279829eef5451cf377db25ac5d9","first_seen":"2026-06-12T04:39:26.588739Z","last_seen":"2026-06-13T09:37:58.925681Z","times_seen":2,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":380,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.time4date.net/c/1c7da227ef4ea60e?\u0026click_id=jhghm6a2b81e4000bbc69\u0026s1=37553\u0026s2=2170462\u0026s3=the-tube8.cfd\u0026s5=native\u0026lp=MJ\u0026j1=\u0026j2=\u0026j3=\u0026j4=\u0026j5=1","fqdn":"www.time4date.net","domain":"time4date.net","tld":"net"},"ip":{"addr":"52.19.101.114","port":80,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T04:38:59.531Z","timestamp":1781239139531,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /c/1c7da227ef4ea60e?\u0026click_id=jhghm6a2b81e4000bbc69\u0026s1=37553\u0026s2=2170462\u0026s3=the-tube8.cfd\u0026s5=native\u0026lp=MJ\u0026j1=\u0026j2=\u0026j3=\u0026j4=\u0026j5=1 HTTP/1.1\r\nHost: www.time4date.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Fri, 12 Jun 2026 04:38:59 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 123\r\nConnection: keep-alive\r\nLocation: https://r.gotoof.com/click?pid=1180\u0026offer_id=5290\u0026sub1=dfmlr6a2b8d63000bb84a\u0026sub2=201120\r\nSet-Cookie: unique_id=6a2b8d63000f68aa; Path=/; Expires=Tue, 11 Aug 2026 04:38:59 GMT\nunique_id2=6a2b8d6300010430; Path=/; Expires=Thu, 10 Sep 2026 04:38:59 GMT\n6a2b8d6300010430_c=1; Path=/; Expires=Thu, 10 Sep 2026 04:38:59 GMT\nref_token=37553; Path=/; Expires=Sun, 12 Jul 2026 04:38:59 GMT\nimpression=; Path=/; Expires=Fri, 12 Jun 2026 04:38:59 GMT\ntid=dfmlr6a2b8d63000bb84a; Path=/; Expires=Sat, 17 May 2031 04:38:59 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T02:50:12.204522Z","times_seen":16565994,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":3,"connect":32,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"www.time4date.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"www.time4date.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"omgtds.com/c1/b30bdb65-5c08-49a9-8082-5c8ea9af818f?aff=1180\u0026source=201120\u0026externalId=\u0026sub2=201120\u0026sub3=1180\u0026pp=1","fqdn":"omgtds.com","domain":"omgtds.com","tld":"com"},"ip":{"addr":"185.162.87.41","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T04:38:59.734Z","timestamp":1781239139734,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"omgtds.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 20:52:41 GMT","end":"Thu, 06 Aug 2026 20:52:40 GMT"},"fingerprint":{"sha1":"85:E4:3C:87:BF:95:DE:ED:6E:DB:F7:0F:CD:A5:4F:B9:2F:EE:22:AD","sha256":"CE:30:55:64:8B:90:B0:74:ED:9B:90:B8:4B:4A:CD:32:A5:ED:E3:59:28:AE:08:F6:71:0C:F6:72:A6:9E:9A:CF"}}},"request":{"raw":"GET /c1/b30bdb65-5c08-49a9-8082-5c8ea9af818f?aff=1180\u0026source=201120\u0026externalId=\u0026sub2=201120\u0026sub3=1180\u0026pp=1 HTTP/1.1\r\nHost: omgtds.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.22.1\r\nDate: Fri, 12 Jun 2026 04:38:59 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 442\r\nConnection: keep-alive\r\nLocation: https://r.go2offer-1.com/click?pid=14148\u0026offer_id=3952\u0026sub1=d8loqop371koldcp8n9g\u0026sub2=201120\u0026sub3=1180\u0026sub5=\u0026sub7=\u0026sub8=\u0026sub24=\u0026sub25=201120\u0026sub26=1180\u0026sub4=\u0026sub6=\u0026sub9=\u0026sub10=\u0026sub11=\u0026sub12=\u0026sub13=\u0026sub14=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026sub21=\u0026sub22=\u0026sub23=\u0026sub27=\u0026sub28=\u0026sub29=\u0026sub30=\r\nX-Clickid: d8loqop371koldcp8n9g\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T02:50:12.204522Z","times_seen":16565994,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":0,"dns":116,"connect":18,"send":0,"wait":20,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"omgtds.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/media/png/image_01.png","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","date":"2026-06-12T04:39:03.013Z","timestamp":1781239143013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casual-sle.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 09:55:50 GMT","end":"Wed, 02 Sep 2026 09:55:49 GMT"},"fingerprint":{"sha1":"9E:41:E3:FD:5D:3F:E7:C1:7B:14:9F:9B:F8:B9:18:82:EA:56:0A:06","sha256":"07:01:FB:E7:77:C9:E9:F3:E9:B3:92:54:21:12:10:6B:39:B1:85:06:9F:0B:02:99:DD:9C:F9:64:06:74:E6:5C"}}},"request":{"raw":"GET /4049__/media/png/image_01.png HTTP/1.1\r\nHost: casual-sle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=63072000\r\ncontent-type: image/png\r\ndate: Fri, 12 Jun 2026 04:39:03 GMT\r\netag: \"22b8-652c79496798f\"\r\nexpires: Fri, 09 Jun 2028 20:15:53 GMT\r\nlast-modified: Wed, 27 May 2026 07:30:05 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nage: 116589\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jt%2FnqRkmJQejndKCzMGJ%2BsJHe9GiLFiKRwjvDNE2JNgPctWn5inaLcIvMAlbfesJVyv43cWkFkR%2FT7bACCJZWmXT0SM4ZUMfWC12nPEuDvPuAw5i9dYIRwBAp8ZqLIhXaw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 8888\r\ncf-ray: a0a62b63ddeab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8888,"size_decoded":9844,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"4499f64607e9ffae69340cac3e96ee35","sha1":"947bcf3995d93cbc73f550bcd9a501991c85d9ca","sha256":"830425019d855912341d50623ba21d3cf860b7ef146f35bf268b358f0061ceda","sha512":"2649296c045dc289496d70a2132e2b939f9d91868471aeb5ff8c4c766468ae50d3fcc3889ed3c39ad4b86a6f45f9cdad014726465cf1e70c8699cf3078b29bb3","ssdeep":"192:TuCSOkn68T+k9rpkE5xc3o0vOPON/0Y8a+ojkaF:TilnH9lkE523oIkE/0Yn7jJ","tlshash":"d102ae8aef22ff84c60dd44c09e67197332a6188859c61a49df2cc8ab2b9167da054c7","first_seen":"2026-06-12T04:39:26.593295Z","last_seen":"2026-06-13T09:37:58.953033Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casual-sle.com/4049__/media/png/image_05.png","fqdn":"casual-sle.com","domain":"casual-sle.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1","date":"2026-06-12T04:39:03.021Z","timestamp":1781239143021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casual-sle.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 09:55:50 GMT","end":"Wed, 02 Sep 2026 09:55:49 GMT"},"fingerprint":{"sha1":"9E:41:E3:FD:5D:3F:E7:C1:7B:14:9F:9B:F8:B9:18:82:EA:56:0A:06","sha256":"07:01:FB:E7:77:C9:E9:F3:E9:B3:92:54:21:12:10:6B:39:B1:85:06:9F:0B:02:99:DD:9C:F9:64:06:74:E6:5C"}}},"request":{"raw":"GET /4049__/media/png/image_05.png HTTP/1.1\r\nHost: casual-sle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casual-sle.com/4049__/?type=sle\u0026country=NO\u0026region=Viken\u0026city=Maura\u0026brands=91\u0026clickid=738ff19fc2d84e1a9c7e41d5801911be\u0026pi=10084\u0026campaignId=3_1180\u0026var1=\u0026var2=\u0026var3=\u0026var4=\u0026var5=d6a591787dfe25b86376c6757a4f1fe1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=63072000\r\ncontent-type: image/png\r\ndate: Fri, 12 Jun 2026 04:39:03 GMT\r\netag: \"75a3-652c794aa1698\"\r\nexpires: Sat, 10 Jun 2028 12:38:10 GMT\r\nlast-modified: Wed, 27 May 2026 07:30:06 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\nage: 57652\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cpZ0aJ4o%2Fx3trAIo1mgOO2FqFge3MhK3%2BmIejre9b%2BMqjbJI3vhV68dx1ia1EebtkGt70CtTN2ouXP2AZKh8C1Z1inz9KrCJI1lS1R9QIZxekGBU0sAcmGM6tJdLwAVg4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 30115\r\ncf-ray: a0a62b63ddeeb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30115,"size_decoded":31071,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit colormap, non-interlaced","md5":"d0af0af7e0384d88fb94eb174e53ed69","sha1":"efe6b4f51dd63ee748c2829787dc3f450adf78a4","sha256":"ace3b52695419a2c6c04bf7f6d5961b2c6cd415f454907084cce3987e754dfb3","sha512":"a4c7cc02d27afa13761226d2b7a3240e8110d4b2727dacceb1d46a8d66a1426e1051e2c763b8012f01805512707addd7a540b71e5f024e606c3722db99540ce0","ssdeep":"768:k7r/VfXh2ydf1SKOT691VXYNIYdosLFY6M7Z:k7xJHrS61VEdoi4F","tlshash":"a5d2cfd47d5e6cb059f79b0085b8bcd6c02a83b66621d0fdde9c1a68c2c02744e9d7fa","first_seen":"2026-06-12T04:39:26.594244Z","last_seen":"2026-06-13T09:37:58.919896Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}