{"report_id":"801f214a-af51-4928-b08d-874bf02ad73f","version":6,"status":"done","tags":[],"date":"2025-11-14T15:03:10Z","url":{"schema":"http","addr":"btc.betacamps.com/afc9787b-55a1-4e23-883c-a7982d800a2c?pubid={%25site%25}\u0026pubadzone={%25cid%25}\u0026CampaignID={%25platform%25}\u0026S1=82643\u0026subid={%25subid%25}\u0026traffsourceid={%25utm_source|url|%25}\u0026maxbid-adv={%25bid_usd%25}\u0026sub-source={%25utm_term|url|%25}\u0026aff_id=14937\u0026cost={%25cost%25}","fqdn":"btc.betacamps.com","domain":"betacamps.com","tld":"com"},"ip":{"addr":"3.164.206.85","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"title":"Kosoglek.com","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"btc.betacamps.com/afc9787b-55a1-4e23-883c-a7982d800a2c?pubid={%25site%25}\u0026pubadzone={%25cid%25}\u0026CampaignID={%25platform%25}\u0026S1=82643\u0026subid={%25subid%25}\u0026traffsourceid={%25utm_source|url|%25}\u0026maxbid-adv={%25bid_usd%25}\u0026sub-source={%25utm_term|url|%25}\u0026aff_id=14937\u0026cost={%25cost%25}","fqdn":"btc.betacamps.com","domain":"betacamps.com","tld":"com"},"ip":{"addr":"3.164.206.85","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-19T15:03:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"franklimydear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"franklimydear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"franklimydear.com","ip":{"addr":"52.223.19.77","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-11-03","domain_rank":0,"first_seen":"2022-03-20T20:38:36Z","last_seen":"2025-11-11T12:30:22.176165Z","alert_count":2,"request_count":1,"received_data":35617,"sent_data":587,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.samlesamtykke.com","ip":{"addr":"34.54.44.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2018-05-22","domain_rank":0,"first_seen":"2018-05-31T09:13:36Z","last_seen":"2025-11-13T11:48:17.503251Z","alert_count":0,"request_count":12,"received_data":18114,"sent_data":6352,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.18","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-09T22:13:15.598397Z","alert_count":0,"request_count":2,"received_data":32566,"sent_data":1054,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sync_events.atsptp.com","ip":{"addr":"66.254.114.220","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"domain_registered":"2020-02-13","domain_rank":0,"first_seen":"2021-04-17T07:57:10Z","last_seen":"2025-11-12T05:47:17.431506Z","alert_count":0,"request_count":1,"received_data":649,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"www.kosoglek.com","ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2022-04-29","domain_rank":2661625,"first_seen":"2022-05-04T14:57:11Z","last_seen":"2025-09-08T16:24:18.386501Z","alert_count":0,"request_count":17,"received_data":1331415,"sent_data":9433,"comment":"","tags":null,"fingerprints":[{"name":"Varnish:6.0","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"PHP:7.2.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"ExoClick","description":"ExoClick is a Barcelona-based online advertising company, which provides online advertising services to both advertisers and publishers.","website":"https://www.exoclick.com","common_platform_enumeration":"","icon":"ExoClick.png","categories":["Advertising"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"ad.twinrdengine.com","ip":{"addr":"34.111.67.216","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2023-06-07","domain_rank":79586,"first_seen":"2024-01-20T17:03:24Z","last_seen":"2025-11-12T16:29:21.062286Z","alert_count":0,"request_count":2,"received_data":583,"sent_data":943,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"samlesamtykke.com","ip":{"addr":"34.54.44.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2018-05-22","domain_rank":5170506,"first_seen":"2018-05-31T09:13:35Z","last_seen":"2025-11-13T11:48:17.507666Z","alert_count":0,"request_count":2,"received_data":196826,"sent_data":974,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.18","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-11-09T22:13:25.255249Z","alert_count":0,"request_count":3,"received_data":83141,"sent_data":1897,"comment":"","tags":null,"fingerprints":null},{"fqdn":"btc.betacamps.com","ip":{"addr":"3.167.2.34","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2020-12-04","domain_rank":0,"first_seen":"2020-12-04T14:35:10Z","last_seen":"2025-10-08T15:25:14.342843Z","alert_count":0,"request_count":1,"received_data":35909,"sent_data":749,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"hw-cdn2.adtng.com","ip":{"addr":"151.101.195.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2018-07-20","domain_rank":157324,"first_seen":"2020-02-20T16:50:17Z","last_seen":"2025-11-11T23:29:56.435328Z","alert_count":0,"request_count":1,"received_data":56130,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"OpenResty:1.19.9.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-11-09T22:13:41.73664Z","alert_count":0,"request_count":2,"received_data":763053,"sent_data":888,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-11-09T22:17:44.096454Z","alert_count":0,"request_count":5,"received_data":2585362,"sent_data":2409,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sync.atsptp.com","ip":{"addr":"66.254.114.220","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"domain_registered":"2020-02-13","domain_rank":369566,"first_seen":"2020-06-17T16:56:18Z","last_seen":"2025-11-12T13:14:38.133679Z","alert_count":0,"request_count":3,"received_data":1843,"sent_data":1551,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"pixel.rtbix.com","ip":{"addr":"104.21.57.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-07-30","domain_rank":4337019,"first_seen":"2021-07-26T09:42:36Z","last_seen":"2025-11-12T05:47:17.550827Z","alert_count":0,"request_count":2,"received_data":1195,"sent_data":896,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tsyndicate.com","ip":{"addr":"136.243.90.144","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2017-03-08","domain_rank":1289,"first_seen":"2017-03-16T09:04:54Z","last_seen":"2025-11-10T19:13:35.220153Z","alert_count":0,"request_count":1,"received_data":917,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise.js?render=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"70baff7a79c2c9345f1a8583e01c0d61","sha1":"e5871097fb37471ac1b86b084209d46d8c615eb7","sha256":"6b1b3a44e8a99d7fbbe689545a80eb5b3f6ae13a2485b7b1e8e94943c82ef339","sha512":"7291505d7523cc29f70906abd90cd49c04194db8aa9be6dcf5816d6779bc91e04a445efa720d36ea71161223846c0c398154fd2fc9c6d592d1e5b025b423943d","ssdeep":"","tlshash":"6c2114b2170aa07b07b209f1e1fec771e851742cb15c49dca506ea850eaeccfce05a95","size":1200,"data":"","first_seen":"2025-11-13T21:46:32.747365Z","last_seen":"2025-12-08T05:31:20.579651Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"be812bf746c8e7a3a66c88d236594975","sha1":"73689320385f35ae31e5f51a999ca9c9eed05943","sha256":"3683bc447c46edd71dc2ae41607055e7e100d0c0a3cbcacabce01a018359de23","sha512":"ff02eca5435a22f1b8139addf9756c1e87f32151b912bdc90003ab238020cb927a9d589c40da1e6dc2e8cda3b628e676eb51c9518d76ca5281719ea7157cc819","ssdeep":"","tlshash":"84c08c0ca92f96a0072b28da79d2e318243484aaf084ca4435be05014f607dc0d0ed04","size":148,"data":"","first_seen":"2025-04-16T01:09:11.68596Z","last_seen":"2026-04-06T02:56:14.704304Z","times_seen":726,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"760b61409b8ea960e48e8648952a289f","sha1":"3cd42c1fbb151df59d2d5b1069bc984b4eae903e","sha256":"8e7d12e405737d9fae890cbddf6423533bd326be6da62198abc199109a7a714b","sha512":"6a03f2d65dee8655302a0ac988fc60b1da461981df5204364f2762a35b89c7df0f32c730dd89793f1c794121601d29cb8bd0fbc16ae09c5445f22bb90b1fc768","ssdeep":"192:EDtNkrxRmux3z4cZGl0eQFEx62CRwLCuTg:2a3zR8FcES0u","tlshash":"680252ae79e7516542e7703e97afa1187133c4032844ec00be4c8a105fa631da7b6fde","size":8405,"data":"","first_seen":"2025-11-14T15:03:19.750278Z","last_seen":"2025-11-14T15:03:19.750278Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-QXFHHE16V3\u0026cx=c\u0026gtm=4e5bc1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"06b6da83c7c9323ea67378bae7c87ce2","sha1":"2c1a6058bd7b5de3ef06db8df981572e0355dfa9","sha256":"fdb7df655f777c75dfb00c1a83896149ff36d127ed28d80b6e42035ba847b969","sha512":"bd2b2ea460c11ff04bebfc55294eccc75c76ec9402535a23708ac50094ceecc702bb0e40f6b240f0cce64382c5075cf20e51e5e554ea102157f568362daacc56","ssdeep":"6144:Ujo7CyGOsjtxj31bC2sUOJdR+rVmIQZOBBKv3kLUz:p7ZGOytV1bjsmQZOGT","tlshash":"568418ce73d674265396e478503f018ba57b28a2f44cc895f18acde52e70a9a0277f7c","size":406725,"data":"","first_seen":"2025-11-14T15:03:19.707102Z","last_seen":"2025-11-14T15:03:19.707102Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KBRH6NB","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3eed198fc451a2a15eea183acebe5cbb","sha1":"954d8c42896e837014e07aa238e5f8fdd513d971","sha256":"40ef08a61164f5b8735a94fe028f6413021789c4c045b574f329b167d81b8b01","sha512":"e23fe1aa2fa9204162573ed9e02b6eb11d9ef8eaa3b122bd0832284421a1e6aef339957b3482a9ecf0d8672ed778f365b08fa372036f690aeca861e74458c170","ssdeep":"6144:AXovCYhsjtxj3Hj2sUOJdR+rVm+QZVGC1a:jvNhytVHSsYQZV0","tlshash":"797408cdb3d6b42283a3a474503f018ba57b68e2b44cc895f185ccd42e74aaa5277f7d","size":355140,"data":"","first_seen":"2025-11-14T15:03:19.724632Z","last_seen":"2025-11-14T22:34:34.899984Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"samlesamtykke.com/cc.js?wId=7NAbiKFF1VQ7gWk99P3mAj\u0026domain=kosoglek.com\u0026languageCode=nb\u0026languageTerritory=NO\u0026sessionId=b3d3b68a450b4845ac17f17375f9a368","fqdn":"samlesamtykke.com","domain":"samlesamtykke.com","tld":"com"},"ip":{"addr":"34.54.44.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f39daef98c914bbcea238d767d83d216","sha1":"542905b73619fed872073286a4fc8b8c045fc333","sha256":"4fa3b7d05b35225dc2116a6e504c3c0baf621a2b4e12f702d1a1a8172aebd01d","sha512":"66332a9ba090b81d5a8370665206fe33083582d719a8bd734abcc9bdd9f619dff0900f2524851c556de9d26b6e462f3a9c014566f177497e5eea3c0488ff4d5a","ssdeep":"1536:kDA9AN2ksb7jGaxkGCNMPWiaDQnNJ/rsdNJOTfn5aLNTiTeVdT0k1WfEV1mBHRMo:0Abksb7jGa1bH510wj","tlshash":"8bf32e4a35e7563242df707e5e4f609cb134852714099800bcac97d88fb5f2866fafea","size":159182,"data":"","first_seen":"2025-11-14T15:03:19.704873Z","last_seen":"2025-11-14T15:03:19.704873Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hw-cdn2.adtng.com/delivery/idsync/idsync.min.js","fqdn":"hw-cdn2.adtng.com","domain":"adtng.com","tld":"com"},"ip":{"addr":"151.101.195.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"314cda749bceaf674446b0b6e294595a","sha1":"691325db17552447e53fb6a090a736955edaebc5","sha256":"875c9225e41341067eee9916c855e4e636ce8554784aecddcddee14a4467098e","sha512":"4dbef550be549df2aa5640cf8f91611d7e42d4551516863f293ba08c6d10ae37cc5441cc763440949d5cf4f4686e93ad1b67fc827c3b0766ff2bac41178ac640","ssdeep":"768:66VT558z8h4yo3pc9NwlJWDNEqLcgOKq8wOElg+:6qZxo3peNMJWZEqLcBZ","tlshash":"874318c9b2c3b06852a338b9443f200ab23e7e56641d8851e562d5d1bc79e5f9233fbd","size":55335,"data":"","first_seen":"2025-09-03T22:43:19.182619Z","last_seen":"2026-03-28T10:16:01.915212Z","times_seen":949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d82d546643b96e426269c2ef03a4e2fe","sha1":"c19893d3ab388738209d55854936e2a8c80aabf1","sha256":"4d86f50fe878fbeb5c08a11fcd4f08173dbe440ec2addbda297813b83361c2d4","sha512":"fd2bcb480212ee521b033d716ed35537cde949e684ca93628f6d62cd2a31f89d7227b7690387e60e05c717582424f93048d105f09abf2f1b3903d08e8d7a89d8","ssdeep":"","tlshash":"a7d02b9de281b26b33b5002d534eb353b0523e825b0f38137c9fe3513d2200388eaa5b","size":288,"data":"","first_seen":"2025-10-09T12:05:11.046285Z","last_seen":"2025-11-21T10:09:24.483353Z","times_seen":204,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s\u0026co=aHR0cHM6Ly93d3cua29zb2dsZWsuY29tOjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=6w5bmynbjcx6","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dca9d53787fff314e5bd1a123b28906a","sha1":"1350c858f60bbb03d1b53b05cbad6cea82ff29d1","sha256":"2475d902b4182bac667d464a44c89ee405e5cfd64156b30f811557cf2b347e2f","sha512":"4f123c356eec731b4f3653afdc258b385c8a0040ea14831893fa850c1275efe1fd49c51d4acb5f7541e01f2b9e46bbac0266e5893a6987b568f6aa2e0b0d492a","ssdeep":"","tlshash":"41a002f3187682224e93c660d963fb88d952515dfd4985cc60259e5ae7e29dbc010e90","size":75,"data":"","first_seen":"2023-03-07T01:15:59Z","last_seen":"2026-04-06T08:04:49.642731Z","times_seen":78283,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s\u0026co=aHR0cHM6Ly93d3cua29zb2dsZWsuY29tOjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=6w5bmynbjcx6","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d13d78519c8c44c0f64f45d7909818ce","sha1":"9a1a0f2d52081a73a3c7841d888898c466ca8204","sha256":"f07a01d0cd540610dc03b47a780bd96ae198dd446d0ea771b4661f2e168679a1","sha512":"1acacf1ee5496963b964edf61fa51054bfadbbfeef7bd085e09260533afdb8e88be5cfb95a27b2513d2c6ca57c196e025f55678a902d874fb1102e04edb37431","ssdeep":"","tlshash":"daa0025a5dbe6c08341e2966407a61451d7510e8dfd9ce88464dc5681f3124e0253a9f","size":64,"data":"","first_seen":"2025-11-06T10:48:15.577624Z","last_seen":"2025-11-15T07:59:32.682933Z","times_seen":3226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s\u0026co=aHR0cHM6Ly93d3cua29zb2dsZWsuY29tOjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=6w5bmynbjcx6","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"19aa17f0fca4b56a36a5aae2f75fda90","sha1":"2fc22428df98820f45e8c0ee86280e1579cdd82b","sha256":"77761da67e990adcffbb9431bba3a49e4aa3a6db1a9849e7b0b48a49351cdbf7","sha512":"919b08aa90a1ec469a4f33569aa58bcd438c94b5705f580c3efc6a60139d920489fa9cc345ca28335f56355138ebaf1eb042c037ade84d04df49951b38980777","ssdeep":"384:1lv/FWmm8l7fHp9hKhdYSn6Tplu9C4gWGYnaerNGfgydWgVP:XvomtlD0dTn39vgEaerg4ydR","tlshash":"6eb2c5dcf592b4396162b4b1607f1189e9bb5915fc08681cf112c6e13e30b8a816ff6f","size":25633,"data":"","first_seen":"2025-11-14T15:03:19.755738Z","last_seen":"2025-11-14T15:03:19.755738Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d82d546643b96e426269c2ef03a4e2fe","sha1":"c19893d3ab388738209d55854936e2a8c80aabf1","sha256":"4d86f50fe878fbeb5c08a11fcd4f08173dbe440ec2addbda297813b83361c2d4","sha512":"fd2bcb480212ee521b033d716ed35537cde949e684ca93628f6d62cd2a31f89d7227b7690387e60e05c717582424f93048d105f09abf2f1b3903d08e8d7a89d8","ssdeep":"","tlshash":"a7d02b9de281b26b33b5002d534eb353b0523e825b0f38137c9fe3513d2200388eaa5b","size":288,"data":"","first_seen":"2025-10-09T12:05:11.046285Z","last_seen":"2025-11-21T10:09:24.483353Z","times_seen":204,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a7059ff8a74a0f1a0b8265fb0740a86","sha1":"1ed31b1a68886375036b89608b209ab01631b6f4","sha256":"dc5ea5caa8ddf8ff97e6c272fa8f8ea7f6cb39fb9fb5a79525e139f65d098b31","sha512":"10c155c0b69755ab3eae25954fcf120842f8b87dccebcaf5ad5acc498a7cd796e5b075a1949ad61f5dd8cf9c734e5ed8b0c256b65f3351434796e5b1104e5753","ssdeep":"","tlshash":"4571638778c1623a47e51071407f673cf62958964b044464753deaa6eb38fe77923acc","size":3494,"data":"","first_seen":"2025-04-11T13:51:33.914989Z","last_seen":"2026-04-06T02:56:14.705517Z","times_seen":727,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/landers/media-registry.js","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4133b8cff32d300be4e8d76f0921b39b","sha1":"ab0d99d19a57cd5a92bff2fb594bb22d043601e9","sha256":"aedbd6a4fe773dfc421e6a5ea1df626e32f74f71981d899910a124c54f05da30","sha512":"00a1aad99d7f2c8608af85b39ba58f98fbd75835c9da1adfceaab0bd8327ee3a61715940a7849fc1e98df829a3eaba4f838eb02c51a2dee649e3566ac73fb4ed","ssdeep":"3072:ehhbN41I67DLNe867r9EAIhh7rre4D0DPD3qYot:ehhbN41I67DLNe867r9EAIhh7rreNqYK","tlshash":"bbc3a107ba5cbe2bfb3cfd652d629d0168ec34002447f0a0b2ead85545de5d8178aede","size":126832,"data":"","first_seen":"2025-11-14T15:03:19.713738Z","last_seen":"2025-11-19T11:58:58.783533Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s\u0026co=aHR0cHM6Ly93d3cua29zb2dsZWsuY29tOjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=6w5bmynbjcx6","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6b8595bce3dd9e1716321cf74ac881bb","sha1":"63ba18f709d606474fd5a87213161b9416dae754","sha256":"71a3806abad1cfef5ffa841b477d469de4f0c4eda243662672dd55d47dbfcdbe","sha512":"96b199abb0a290f807d0ed91933148bc6546133f58ca220419afa80b8278f85fa247c70baee0e018096bc16daf365d02c1be578904b951c3b23aea3909d73be2","ssdeep":"1536:7e6swV6iWKWJISBDbtF429rU8eWmHWcnMcHsI/50te9p0GZsB:7eysFHU8nhIMIx0twBZ4","tlshash":"5763bf32f743349bcfbb5b401be65aa4217d958f189205dc26fb08d6097ddda2aa41cc","size":70297,"data":"","first_seen":"2025-11-14T15:03:19.75977Z","last_seen":"2025-11-14T15:03:19.75977Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2506e0d302c7bbd6654b091f44fdda03","sha1":"cddd2822fd20c3a5eaadae592bbe2c1f6d42e430","sha256":"ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e","sha512":"4c5dc8474d796a78832e9607760ad5389576ec4663bf02fd19217902de38fc06423d5bde421b68deed1842ee62d9ccd0eb521aa1fa1626c0f4160a456270a8c3","ssdeep":"12288:b/PieE69kbgh40LMuqHKQn6e8kSCvcFazia7Rbbck:s69mghUD4etS/Fudck","tlshash":"06052ad870527ae47772f8f684973018a33d9479d84c4a2eb1a4d4f42bf084ae276db7","size":831957,"data":"","first_seen":"2025-11-13T16:13:50.046413Z","last_seen":"2026-04-04T05:18:28.342811Z","times_seen":46498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/landers/js/landing110.js","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ec7a559d3d613da6589182a151bf39c","sha1":"3c9a07d94013b24edf321545df185b9573dd23c0","sha256":"a6a710cfc575daa02a538ae7a82599d8deeca0a8113b7460e342b24d3064904d","sha512":"de07fc00b7169278a5baba1b3e916912124b4a4b0374dbc588169e85da736fdfa43cab496209b548d53585286e23c2a8278ee5693e45c1af8fe953819cc1a887","ssdeep":"768:mTt/I4jW1X4/JvVO1izVSofQrB+BIUH2z+I+/QClnGxuIK6e+ZAORMPNhlCJ9hh2:mxg4jWBFwzIR7CFfrkoy4iby","tlshash":"4b63f88cf2a5b1a2039360f8506f110ab237f968680d49a4f714c9d13d7ad4ab677f7e","size":69757,"data":"","first_seen":"2025-10-31T13:00:03.532633Z","last_seen":"2025-11-28T21:43:35.827882Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6fe51bf5bdf9cb4d47a750f9d341ca7a","sha1":"8049673666fecc9b492f92676dfdf905fa8809ef","sha256":"810adf302af0867a0b59481d32b448d138b915c8dc66e5628f9475ec70e27d04","sha512":"6e96744db3c39811d77e6907eeaaa9bbdc6897b23fc85310826c4f3d58703815d1754c4cc0c03b43711d7b492598d7461abd34607ff9c0ca829700cbacf3482b","ssdeep":"","tlshash":"8dd0227e24b233c0e08e30bccf1aea033530a2b3b1918820b9ee0e001f2580b4329a64","size":214,"data":"","first_seen":"2024-06-06T19:28:29Z","last_seen":"2026-04-06T02:56:14.707439Z","times_seen":1010,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b375c74456053411ec5414e21ecf870f","sha1":"00a6b32dd64dbf1470f439ce9fa89c712500eebc","sha256":"a200a9bc6b415237c4571f14eb0eaa8f0f0fcfcd7eeafa8860441a805e4a144f","sha512":"1eac7d01125e86bf9c830911887999c922e321b80d1cfab8b000940dd75b088baa19d8fd2f905c9a68bd5dbbec45882e8c309f8f677f754c2a4a33c342a34ac9","ssdeep":"","tlshash":"dab0121c67b15242a033a07c971bd0e41013501778c1d560bf0c17903f30103d07f95e","size":103,"data":"","first_seen":"2023-03-07T12:09:25Z","last_seen":"2026-04-05T20:53:54.850766Z","times_seen":909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"909426d7f34fa8bb06daf6761e618100","sha1":"c0500ebe7822c34e1077091a8513855e65988e37","sha256":"8ceb26fa784bec10e13dbfc9fab75aa73259695ae27162542095bdc2399b5931","sha512":"f505d7d64919ef80a7f2678c3faf2a4a7e13cf658495b4e956abf210d8143deb6c844590b01f75bcdd5567c0a4f0ba8f10df3543f14cc9622f773ea1d80a7b11","ssdeep":"","tlshash":"e4113a647b308530c3fb30c7575a9b6c0876b3863c024a90bc0c19556caacf5f95e6f0","size":922,"data":"","first_seen":"2024-11-14T14:17:07.220696Z","last_seen":"2026-04-06T02:56:14.711496Z","times_seen":503,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8a81377a647bdea836809865c62d171b","sha1":"dd72dda89aacfe74746d2c73421ea55a23ab313d","sha256":"9c7aa944eeb31b5765d0c1674cdc445dff6dd572a6fe897f6d5137ce181d44a9","sha512":"1fcef0b6d8ed19dbf0bb930941854233c028b6f894cf63955fd49e8e9514c601ed1a328a6c842c8ffbe5eea505e4c10f99e96a933a2f65a4ad484a7bb70946a5","ssdeep":"","tlshash":"89e05e1e56ba0d426667294c8a5fc0027d93635308cdea103f5cab181f9051fbaa929c","size":308,"data":"","first_seen":"2023-03-07T12:09:25Z","last_seen":"2026-04-06T02:56:14.708646Z","times_seen":1475,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2611427ce493b5ca22b8a447174aa250","sha1":"d71376b9cd7f484afd3ecf8e5a95b6372631d6c2","sha256":"b3a9427cc535b8d8ea1fab759fd526120fd0ce297f0d00db771e32209087e1ce","sha512":"610c1b194e6b1ddea9cceabb57b6a201a1b6f724b376e5e0a33ec4521d988589653c78b96dab9b5a874b621d77d42d682d83a670f09daae81bdc1141093f375a","ssdeep":"","tlshash":"024150a477197135a9ff137a432f6345293471aae9002c70ae38e4ca32acd07a992cdc","size":1920,"data":"","first_seen":"2025-10-10T15:27:13.104265Z","last_seen":"2026-04-06T02:56:14.713322Z","times_seen":814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fd2ade1d73ac3b875614763496e6f29b","sha1":"bda8a0fdb4da75712f0e46ad503c1b9b6a6bc03a","sha256":"d43f77a4a46fca0b44747dc6fd5b92ea77873a595841a3eb35414c365171529b","sha512":"aa399597c7c0598105f9a2ed997ce6434ea0fb39bb206f22ed0861915c2f17e45881f6492b2180488851825ec1961cbdfdefa0bd08e71cd4147be5cf1734541e","ssdeep":"","tlshash":"b2a0025872417838422f361633bbf75f751715a01a07150cc20914463630247f9ddbce","size":64,"data":"","first_seen":"2024-10-11T08:45:33.687432Z","last_seen":"2026-04-06T04:55:49.161529Z","times_seen":918,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s\u0026co=aHR0cHM6Ly93d3cua29zb2dsZWsuY29tOjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=6w5bmynbjcx6","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1158d4363340eb9fa152ed317a79a71c","sha1":"fdb585928ce6413de6cf48906a640d8cbb69de30","sha256":"3b708bc2d1bfeff86f8a5366a041168d7744fc5dd8cbe29ff83e0dcadd0b177e","sha512":"6952e1e0cdc118669cb8de8e1201ffc8ce5c653840579f7dbad324fa4bc0bb0506c4a6fba4c9822ba3deb2edd4e46860b2150f29bc3bc79cb4bc74c318c186c0","ssdeep":"384:g6Slv/FWmm8l7vHp9hKhdYSn6Tplu9C4gWGYnaerNGfgydWgV/:Zevomtlz0dTn39vgEaerg4yd9","tlshash":"7182c6dcb693b4386162b4b1617f1149e9bb5955bc08681cf111c6e13e34b8a807ff6f","size":18978,"data":"","first_seen":"2025-11-06T10:48:15.565003Z","last_seen":"2025-11-15T07:59:32.675282Z","times_seen":3216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s\u0026co=aHR0cHM6Ly93d3cua29zb2dsZWsuY29tOjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=6w5bmynbjcx6","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2866a4e8d4af72441ef4584cb1c14632","sha1":"0c9227095d8f3d7f4ebe3f818c60385bfabd666e","sha256":"67ffde88cafb7c24b3d5d8e1fe9380adf3dc3a26eacdcf158a19cbcea14d25df","sha512":"b041ac772499feb644d5ca82931bda5398ebedcacd1e9731b769f8bd753c7d1675dbed27149a359e59c09d69f39e82b59d6f979e9ee97c24e6ace384df693ff6","ssdeep":"","tlshash":"2a7000382c0c200822e23028000b8088c0a2000002820800000020880c32c0a0022c08","size":22,"data":"","first_seen":"2025-11-06T10:48:15.580941Z","last_seen":"2025-11-15T07:59:32.681083Z","times_seen":3226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"407403468961a963270546f9c670e5b1","sha1":"424d65b3e27e0976197b799f16455fe134142321","sha256":"6c674b585b406a37fc2c37ca2a9ef3257e8d8c0b45261d170b28f950a2462ba2","sha512":"1a268b8169e819a5255dac2b7936fb465971926ce2079afc1c130ca904e2b8a60c8f56dd6e015aff56456d6b2f1af73cb9064d90692a32695009f20497b2fd29","ssdeep":"","tlshash":"13e0aba6a2560d304d73bebe8ad7b324282c725f18d980467bce8d80df1a99bb0149c4","size":427,"data":"","first_seen":"2025-09-10T13:05:02.205071Z","last_seen":"2026-04-06T02:56:14.712174Z","times_seen":526,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/landers/js/vendor.js","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a83ff659eaee246f89328e0e69c1705","sha1":"e85aba65e7bfa6080f1505c0a618668990d3925e","sha256":"88eafe7963c0e06e533c355d66639266062ff7093d3cb32d3ed810bf1650607c","sha512":"54f72daa339127352ec2a8947f41122129d25a8fbd085fcfa55dcb72e005f8025c4928a6d5dacd82531d2e5a27ee335cc5dd3f121ed90d82e768f298292f44b9","ssdeep":"1536:LRLiB3wGnUL6oXHUbxmyBWpsbm1Tmu9dnI9ETHCRlNzDnXEYsSBuPTn8GlDKUQTX:BlmKi6TCtErPTnoL0MZ","tlshash":"66c329ce72c6706247ab31ba046f550bf23a5959384d8840f169e4e5bc71b8e8277f3e","size":123566,"data":"","first_seen":"2025-10-15T11:38:47.014116Z","last_seen":"2026-01-08T01:37:16.541086Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2506e0d302c7bbd6654b091f44fdda03","sha1":"cddd2822fd20c3a5eaadae592bbe2c1f6d42e430","sha256":"ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e","sha512":"4c5dc8474d796a78832e9607760ad5389576ec4663bf02fd19217902de38fc06423d5bde421b68deed1842ee62d9ccd0eb521aa1fa1626c0f4160a456270a8c3","ssdeep":"12288:b/PieE69kbgh40LMuqHKQn6e8kSCvcFazia7Rbbck:s69mghUD4etS/Fudck","tlshash":"06052ad870527ae47772f8f684973018a33d9479d84c4a2eb1a4d4f42bf084ae276db7","size":831957,"data":"","first_seen":"2025-11-13T16:13:50.046413Z","last_seen":"2026-04-04T05:18:28.342811Z","times_seen":46498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s\u0026co=aHR0cHM6Ly93d3cua29zb2dsZWsuY29tOjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=6w5bmynbjcx6","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"aaaed1f2fa2d95a8479beadbd2b6b2ac","sha1":"eae45921f2e4b00cd320305bb92f4bf3717105b8","sha256":"ec37b9644d403fd39b1eb3ecd015ac09662e53fb2a420126bb22a0e5f32d2c37","sha512":"382e1d604b58cb831ea109ed43dd158c7345d25b2a19f1af5b44723e51e3f7e05e207c48154d2a890fa867c961a55cb69f96beb3a48c425451c68a5d380cc74a","ssdeep":"","tlshash":"a07000382c0c200822e23028002b808880a2000002820800000020880c30c3a002ac08","size":22,"data":"","first_seen":"2025-11-06T10:48:15.57837Z","last_seen":"2025-11-15T07:59:32.726263Z","times_seen":3220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.kosoglek.com/landers/images/landing110/default/default/slide01.webp?geo=no","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:48.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kosoglek.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 00:07:12 GMT","end":"Tue, 23 Dec 2025 01:00:45 GMT"},"fingerprint":{"sha1":"4A:AE:4D:B1:98:6F:C0:A8:9C:49:77:34:48:CC:8C:98:B7:0B:9F:EB","sha256":"1D:CB:76:99:14:5F:4C:2B:5D:F2:EC:F9:60:76:A6:54:4A:76:A8:1C:BF:B2:96:DD:74:85:A1:88:87:CA:76:CD"}}},"request":{"raw":"GET /landers/images/landing110/default/default/slide01.webp?geo=no HTTP/1.1\r\nHost: www.kosoglek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Nov 2025 15:02:48 GMT\r\nserver: nginx/1.14.2\r\ncontent-type: image/webp\r\ncontent-length: 69718\r\nlast-modified: Fri, 14 Nov 2025 13:01:29 GMT\r\netag: \"69172829-11056\"\r\nx-cacheable: YES\r\ncache-control: max-age=300\r\nxkey: lander\r\nx-varnish: 23506821\r\nage: 0\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000, h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nvia: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish:6.0","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69718,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1678x1049, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b62477b97394721323c67e508de81b86","sha1":"8b68a455c9160d50c5c3d73db4c2b4b46b35a85b","sha256":"a598b1c6fc5d15424aa161a55861b23543b9f18dca2c875ad5bf7c26621b0a30","sha512":"d8ec589f7dc075d205745974e0f9ceb5cad81d72a2c388987248e2e01801f0d0bced03717b84054b57ae3c35d6f7a80d9eea1c11d691fdc5688b6f54466de09b","ssdeep":"1536:xosJSYDfwBnlrVct0AiDaFFUYcK+abh3656R7UKeFhSm1Xa:PXDfenV62AMa7UY19q56x5+4Ca","tlshash":"d0630236595294e2d6bace69f94e00f657cfc0def2bc110688af3d926f84d18c342d99","first_seen":"2025-02-03T23:09:43.855807Z","last_seen":"2026-04-05T04:48:04.210493Z","times_seen":26,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":85,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.samlesamtykke.com/consent/loadSegment","fqdn":"api.samlesamtykke.com","domain":"samlesamtykke.com","tld":"com"},"ip":{"addr":"34.54.44.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:50.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samlesamtykke.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 21:21:36 GMT","end":"Wed, 31 Dec 2025 22:17:31 GMT"},"fingerprint":{"sha1":"50:01:17:8A:98:F9:7F:1F:84:04:31:24:CD:75:75:3A:67:D7:DA:C9","sha256":"31:BF:AC:74:BE:3A:AD:00:0E:89:F4:75:91:C5:8F:86:53:7F:77:6B:EE:9E:DF:54:BD:BB:BC:4E:9E:AC:E3:22"}}},"request":{"raw":"POST /consent/loadSegment HTTP/1.1\r\nHost: api.samlesamtykke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 225\r\nOrigin: https://www.kosoglek.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kosoglek.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Nov 2025 15:02:50 GMT\r\nserver: Apache/2.4.18 (Ubuntu)\r\naccess-control-allow-origin: https://www.kosoglek.com\r\naccess-control-allow-credentials: true\r\ncontent-length: 360\r\ncontent-type: application/vnd.api+json\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.18","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":360,"size_decoded":0,"mime_type":"application/vnd.api+json","magic":"JSON text data","md5":"c8609b141cf0533da2605b1ac1537c6c","sha1":"ed8b101e71286c3e582b8f6ed4162c2077b3fd88","sha256":"99eccbc41e04b151073613276ac5248e10ff2dcd4c9b3049df4c6ebd8b4de5aa","sha512":"10b68994046570ca339099c30f2e40fc96bcf80e9aa3201fd4165c3b9e13ab7a090f6ac289f88721601a7cb7e2b2a1645bf77a8f5b29fef27d738c3bb8209617","ssdeep":"","tlshash":"90e0c0f656aee3b25d4283c3251ef742338553a44a58025884a98c0a10e0664654e6c1","first_seen":"2025-04-11T13:51:33.911951Z","last_seen":"2026-04-06T02:56:14.685156Z","times_seen":493,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btc.betacamps.com/afc9787b-55a1-4e23-883c-a7982d800a2c?pubid={%25site%25}\u0026pubadzone={%25cid%25}\u0026CampaignID={%25platform%25}\u0026S1=82643\u0026subid={%25subid%25}\u0026traffsourceid={%25utm_source|url|%25}\u0026maxbid-adv={%25bid_usd%25}\u0026sub-source={%25utm_term|url|%25}\u0026aff_id=14937\u0026cost={%25cost%25}","fqdn":"btc.betacamps.com","domain":"betacamps.com","tld":"com"},"ip":{"addr":"3.167.2.34","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-14T15:02:46.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btc.betacamps.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 22 Apr 2025 00:00:00 GMT","end":"Fri, 22 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:91:30:9D:BA:F2:8E:34:0A:C1:0A:60:C8:66:10:F4:67:B2:53:8C","sha256":"EA:17:71:23:C3:61:BE:FC:5E:C9:23:E6:75:62:35:71:58:FE:4D:63:41:96:A9:06:FC:00:0C:FD:98:06:CE:BE"}}},"request":{"raw":"GET /afc9787b-55a1-4e23-883c-a7982d800a2c?pubid={%25site%25}\u0026pubadzone={%25cid%25}\u0026CampaignID={%25platform%25}\u0026S1=82643\u0026subid={%25subid%25}\u0026traffsourceid={%25utm_source|url|%25}\u0026maxbid-adv={%25bid_usd%25}\u0026sub-source={%25utm_term|url|%25}\u0026aff_id=14937\u0026cost={%25cost%25} HTTP/1.1\r\nHost: btc.betacamps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-length: 0\r\nlocation: https://franklimydear.com/?a=14937\u0026c=98164\u0026s2=%7B%25site%25%7D\u0026s3=%7B%25platform%25%7D\u0026s1=82643\u0026s4=VLS-wkdvdauuq57dpf5ej4esuup8\r\ndate: Fri, 14 Nov 2025 15:02:46 GMT\r\nserver: nginx\r\ncache-control: no-store, no-cache, pre-check=0, post-check=0\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nset-cookie: afc9787b-55a1-4e23-883c-a7982d800a2c-v4=LbwleeelIhUcqAJlSmIq-b_WnD42tG6lQRu89pVVvYU; Max-Age=86400; Expires=Sat, 15 Nov 2025 15:02:46 GMT; Domain=btc.betacamps.com; Path=/; Secure; HttpOnly; SameSite=None\ncc-v4=BpiJnGrxILw%2FUzGHzdlg8fJfKcmYhX2UpXISozYBUfowlSFyIPxHSNbRCaQ6wCyV0wVFkVou%2F%2FUzkkQ23d3kYNhXdWbJVaprf919%2BOia3J1rjTNi3EhhD12hNDLs14J5Ru07rt09HtUiBiOWx%2B64nA%3D%3D; Max-Age=31536000; Expires=Sat, 14 Nov 2026 15:02:46 GMT; Domain=btc.betacamps.com; Path=/; Secure; HttpOnly; SameSite=None\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 cacd53f5d16dfeabed02976311650672.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: uMtIJKfMunB4G1p-IbotIK-RHj8E1fLPWPSLPVcB-_Tah_FuzNq6mw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34797,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":811,"timings":{"blocked":343,"dns":68,"connect":1,"send":0,"wait":124,"receive":0,"ssl":272},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hw-cdn2.adtng.com/delivery/idsync/idsync.min.js","fqdn":"hw-cdn2.adtng.com","domain":"adtng.com","tld":"com"},"ip":{"addr":"151.101.195.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:47.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adtng.com","organization":"AYLO Premium Ltd"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 30 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:67:8C:D2:F3:88:16:3D:99:D4:20:FD:1B:49:11:66:D1:6A:9F:43","sha256":"1A:A3:49:5D:8F:EA:EA:8E:F5:2F:82:5F:FF:33:C6:FF:50:0C:CF:FF:CA:65:5C:0A:74:2F:DB:27:1B:12:CF:EA"}}},"request":{"raw":"GET /delivery/idsync/idsync.min.js HTTP/1.1\r\nHost: hw-cdn2.adtng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kosoglek.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.19.9.1\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Sep 2025 18:59:06 GMT\r\netag: \"d827-63dea32e8ecb5\"\r\nexpires: Mon, 05 Jan 2026 04:16:56 GMT\r\ncache-control: max-age=10660606, stale-while-revalidate=86400, stale-if-error=86400\r\nvia: 1.1 varnish, 1.1 varnish\r\nlei-timing: fetch=29451,misspass=106,do_stream=0\r\nlei-origin: shield=AMS,alternate_path=0,port=80,name=shield_cache_ams2100142_AMS,reason=OK,method=GET,host=hw-cdn2.adtng.com\r\nbackend_is_origin: 0\r\naccept-ranges: bytes\r\ndate: Fri, 14 Nov 2025 15:02:47 GMT\r\nage: 920648\r\nx-served-by: cache-ams2100142-AMS, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 67, 4544\r\nx-timer: S1763132568.695028,VS0,VE0\r\naccess-control-allow-origin: *\r\ncontent-length: 55335\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"OpenResty:1.19.9.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":55335,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55328), with no line terminators","md5":"314cda749bceaf674446b0b6e294595a","sha1":"691325db17552447e53fb6a090a736955edaebc5","sha256":"875c9225e41341067eee9916c855e4e636ce8554784aecddcddee14a4467098e","sha512":"4dbef550be549df2aa5640cf8f91611d7e42d4551516863f293ba08c6d10ae37cc5441cc763440949d5cf4f4686e93ad1b67fc827c3b0766ff2bac41178ac640","ssdeep":"768:66VT558z8h4yo3pc9NwlJWDNEqLcgOKq8wOElg+:6qZxo3peNMJWZEqLcBZ","tlshash":"874318c9b2c3b06852a338b9443f200ab23e7e56641d8851e562d5d1bc79e5f9233fbd","first_seen":"2025-09-03T22:43:19.182619Z","last_seen":"2026-03-28T10:16:01.915212Z","times_seen":949,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":16,"dns":1,"connect":17,"send":0,"wait":18,"receive":16,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/landers/images/general/rotate.webp","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:47.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kosoglek.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 00:07:12 GMT","end":"Tue, 23 Dec 2025 01:00:45 GMT"},"fingerprint":{"sha1":"4A:AE:4D:B1:98:6F:C0:A8:9C:49:77:34:48:CC:8C:98:B7:0B:9F:EB","sha256":"1D:CB:76:99:14:5F:4C:2B:5D:F2:EC:F9:60:76:A6:54:4A:76:A8:1C:BF:B2:96:DD:74:85:A1:88:87:CA:76:CD"}}},"request":{"raw":"GET /landers/images/general/rotate.webp HTTP/1.1\r\nHost: www.kosoglek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 14 Nov 2025 15:02:47 GMT\r\nserver: nginx/1.14.2\r\ncontent-type: image/webp\r\ncontent-length: 5878\r\nlast-modified: Fri, 14 Nov 2025 13:01:29 GMT\r\netag: \"69172829-16f6\"\r\nx-cacheable: YES\r\ncache-control: max-age=300\r\nxkey: lander\r\nx-varnish: 5770789\r\nage: 0\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000, h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nvia: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish:6.0","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5878,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9582c3b7e1ebb38ab1b07c922b08b640","sha1":"4fe27b10652b9cae783ae82ba5756ece0f774893","sha256":"3cac0de3a00899092c360f3e40dfdd51306af87923201db4df5f1218d373279e","sha512":"a9715a6b243f52a3d9cd57235ab18647bff05720ca9213ff7bf32e1ccfae192642af4b2cbec7cfe18201fcf7e70d9d6bf783bab3ddc50cdef8e6f40f09fafdb3","ssdeep":"96:WKeoum0n2hzX5+gkVpDDVjiIZOjYjKWDZIGN+Ww/8+7Hh+MoazELZzhsx9v2fIv:kouf2Vmf/V+InJDZZNu9HcM7kZzhQR","tlshash":"1cc18d00d504fa2a1c85e91668fea2256411c0a066f890e4afbfe853f535235de890df","first_seen":"2025-04-16T01:09:11.664137Z","last_seen":"2026-04-06T02:56:14.701051Z","times_seen":729,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.samlesamtykke.com/consent/collector","fqdn":"api.samlesamtykke.com","domain":"samlesamtykke.com","tld":"com"},"ip":{"addr":"34.54.44.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:48.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samlesamtykke.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 21:21:36 GMT","end":"Wed, 31 Dec 2025 22:17:31 GMT"},"fingerprint":{"sha1":"50:01:17:8A:98:F9:7F:1F:84:04:31:24:CD:75:75:3A:67:D7:DA:C9","sha256":"31:BF:AC:74:BE:3A:AD:00:0E:89:F4:75:91:C5:8F:86:53:7F:77:6B:EE:9E:DF:54:BD:BB:BC:4E:9E:AC:E3:22"}}},"request":{"raw":"OPTIONS /consent/collector HTTP/1.1\r\nHost: api.samlesamtykke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.kosoglek.com/\r\nOrigin: https://www.kosoglek.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 14 Nov 2025 15:02:48 GMT\r\nserver: Apache/2.4.18 (Ubuntu)\r\naccess-control-allow-origin: https://www.kosoglek.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type\r\ncontent-length: 0\r\ncontent-type: application/vnd.api+json\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.18","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/vnd.api+json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":56,"dns":6,"connect":12,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/favicon/favicon.ico","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:48.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kosoglek.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 00:07:12 GMT","end":"Tue, 23 Dec 2025 01:00:45 GMT"},"fingerprint":{"sha1":"4A:AE:4D:B1:98:6F:C0:A8:9C:49:77:34:48:CC:8C:98:B7:0B:9F:EB","sha256":"1D:CB:76:99:14:5F:4C:2B:5D:F2:EC:F9:60:76:A6:54:4A:76:A8:1C:BF:B2:96:DD:74:85:A1:88:87:CA:76:CD"}}},"request":{"raw":"GET /favicon/favicon.ico HTTP/1.1\r\nHost: www.kosoglek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 14 Nov 2025 15:02:48 GMT\r\nserver: Apache/2.4.58 (Ubuntu)\r\ncontent-length: 278\r\ncontent-type: text/html; charset=iso-8859-1\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":278,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"758b3880763b237ce4d114c0c920bf83","sha1":"311d0bde7cdfedfb7f627fc9d26df8e9fe85b699","sha256":"f910e941d2d8bf6667df01900bcc691a83c4b3b21b6f4f137e6bf5ae076ff876","sha512":"ca9153f49eaa7b7e9603f512b07909475bd5887969a213aa4dc2296899b9292c585f91d32d090f4f55662400a45e528d13bbf7f23da4eabd05e816c448912c4e","ssdeep":"","tlshash":"19d0eb9e5043a38b0862007039c121c2268c13f6a03a81e86d82d483229853ecd8a6cc","first_seen":"2023-11-27T20:25:31Z","last_seen":"2026-01-03T16:01:32.465051Z","times_seen":20,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.samlesamtykke.com/consent/load","fqdn":"api.samlesamtykke.com","domain":"samlesamtykke.com","tld":"com"},"ip":{"addr":"34.54.44.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:50.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samlesamtykke.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 21:21:36 GMT","end":"Wed, 31 Dec 2025 22:17:31 GMT"},"fingerprint":{"sha1":"50:01:17:8A:98:F9:7F:1F:84:04:31:24:CD:75:75:3A:67:D7:DA:C9","sha256":"31:BF:AC:74:BE:3A:AD:00:0E:89:F4:75:91:C5:8F:86:53:7F:77:6B:EE:9E:DF:54:BD:BB:BC:4E:9E:AC:E3:22"}}},"request":{"raw":"POST /consent/load HTTP/1.1\r\nHost: api.samlesamtykke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 190\r\nOrigin: https://www.kosoglek.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kosoglek.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Nov 2025 15:02:50 GMT\r\nserver: Apache/2.4.18 (Ubuntu)\r\naccess-control-allow-origin: https://www.kosoglek.com\r\naccess-control-allow-credentials: true\r\ncontent-length: 736\r\ncontent-type: application/vnd.api+json\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.18","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":736,"size_decoded":0,"mime_type":"application/vnd.api+json","magic":"JSON text data","md5":"58e83cd9d459bbdf182f3352d3ba12c9","sha1":"36c34fa9ff68da624bdcf597e903cd5883b7d7ac","sha256":"0c20c370c27736f4ef840f0c53481365f8aa804893b3009c5a5e605af84f82d7","sha512":"44e0fc3178335b3b7850e33ac5ae270e2ad4ac39b077c89d10bc9909babd6d74d951067b4f8c81cc3ca992d602bcfd3e92433d423da8af59cf3bbd99b72d5ceb","ssdeep":"","tlshash":"84019011b2bff53be05c56977021a59a8e087375e59012ed0864fd7644c2f63a80d3c3","first_seen":"2024-06-25T05:45:48Z","last_seen":"2026-04-06T02:56:14.685713Z","times_seen":632,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"samlesamtykke.com/cc.js?wId=7NAbiKFF1VQ7gWk99P3mAj\u0026domain=kosoglek.com\u0026languageCode=nb\u0026languageTerritory=NO\u0026sessionId=b3d3b68a450b4845ac17f17375f9a368","fqdn":"samlesamtykke.com","domain":"samlesamtykke.com","tld":"com"},"ip":{"addr":"34.54.44.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:48.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samlesamtykke.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 21:21:36 GMT","end":"Wed, 31 Dec 2025 22:17:31 GMT"},"fingerprint":{"sha1":"50:01:17:8A:98:F9:7F:1F:84:04:31:24:CD:75:75:3A:67:D7:DA:C9","sha256":"31:BF:AC:74:BE:3A:AD:00:0E:89:F4:75:91:C5:8F:86:53:7F:77:6B:EE:9E:DF:54:BD:BB:BC:4E:9E:AC:E3:22"}}},"request":{"raw":"GET /cc.js?wId=7NAbiKFF1VQ7gWk99P3mAj\u0026domain=kosoglek.com\u0026languageCode=nb\u0026languageTerritory=NO\u0026sessionId=b3d3b68a450b4845ac17f17375f9a368 HTTP/1.1\r\nHost: samlesamtykke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kosoglek.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 14 Nov 2025 15:02:48 GMT\r\nserver: Apache/2.4.18 (Ubuntu)\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 20687\r\ncontent-type: application/javascript\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.18","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":159182,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f39daef98c914bbcea238d767d83d216","sha1":"542905b73619fed872073286a4fc8b8c045fc333","sha256":"4fa3b7d05b35225dc2116a6e504c3c0baf621a2b4e12f702d1a1a8172aebd01d","sha512":"66332a9ba090b81d5a8370665206fe33083582d719a8bd734abcc9bdd9f619dff0900f2524851c556de9d26b6e462f3a9c014566f177497e5eea3c0488ff4d5a","ssdeep":"1536:kDA9AN2ksb7jGaxkGCNMPWiaDQnNJ/rsdNJOTfn5aLNTiTeVdT0k1WfEV1mBHRMo:0Abksb7jGa1bH510wj","tlshash":"8bf32e4a35e7563242df707e5e4f609cb134852714099800bcac97d88fb5f2866fafea","first_seen":"2025-11-14T15:03:19.704873Z","last_seen":"2025-11-14T15:03:19.704873Z","times_seen":1,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":102,"dns":3,"connect":12,"send":0,"wait":65,"receive":4,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-QXFHHE16V3\u0026cx=c\u0026gtm=4e5bc1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:48.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtag/js?id=G-QXFHHE16V3\u0026cx=c\u0026gtm=4e5bc1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kosoglek.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 14 Nov 2025 15:02:48 GMT\r\nexpires: Fri, 14 Nov 2025 15:02:48 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 137303\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":406725,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"06b6da83c7c9323ea67378bae7c87ce2","sha1":"2c1a6058bd7b5de3ef06db8df981572e0355dfa9","sha256":"fdb7df655f777c75dfb00c1a83896149ff36d127ed28d80b6e42035ba847b969","sha512":"bd2b2ea460c11ff04bebfc55294eccc75c76ec9402535a23708ac50094ceecc702bb0e40f6b240f0cce64382c5075cf20e51e5e554ea102157f568362daacc56","ssdeep":"6144:Ujo7CyGOsjtxj31bC2sUOJdR+rVmIQZOBBKv3kLUz:p7ZGOytV1bjsmQZOGT","tlshash":"568418ce73d674265396e478503f018ba57b28a2f44cc895f18acde52e70a9a0277f7c","first_seen":"2025-11-14T15:03:19.707102Z","last_seen":"2025-11-14T15:03:19.707102Z","times_seen":1,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s\u0026co=aHR0cHM6Ly93d3cua29zb2dsZWsuY29tOjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=6w5bmynbjcx6","date":"2025-11-14T15:02:49.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 355016\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Nov 2025 11:18:14 GMT\r\nexpires: Thu, 12 Nov 2026 11:18:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 10 Nov 2025 14:52:55 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 186275\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":831957,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"2506e0d302c7bbd6654b091f44fdda03","sha1":"cddd2822fd20c3a5eaadae592bbe2c1f6d42e430","sha256":"ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e","sha512":"4c5dc8474d796a78832e9607760ad5389576ec4663bf02fd19217902de38fc06423d5bde421b68deed1842ee62d9ccd0eb521aa1fa1626c0f4160a456270a8c3","ssdeep":"12288:b/PieE69kbgh40LMuqHKQn6e8kSCvcFazia7Rbbck:s69mghUD4etS/Fudck","tlshash":"06052ad870527ae47772f8f684973018a33d9479d84c4a2eb1a4d4f42bf084ae276db7","first_seen":"2025-11-13T16:13:50.046413Z","last_seen":"2026-04-04T05:18:28.342811Z","times_seen":46498,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s\u0026co=aHR0cHM6Ly93d3cua29zb2dsZWsuY29tOjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=6w5bmynbjcx6","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:49.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"BD:40:9A:DB:26:FC:C1:FF:4D:85:05:A9:F0:E9:24:BD:05:29:25:7B","sha256":"C7:A3:E4:68:D6:D8:86:E7:C6:E2:D6:E3:1D:DA:60:9A:35:7E:71:9E:F1:91:26:57:47:43:91:7C:CE:BB:07:17"}}},"request":{"raw":"GET /recaptcha/enterprise/anchor?ar=1\u0026k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s\u0026co=aHR0cHM6Ly93d3cua29zb2dsZWsuY29tOjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=6w5bmynbjcx6 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kosoglek.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 14 Nov 2025 15:02:49 GMT\r\ncontent-security-policy: script-src 'nonce-KxN3J8bdZtM-kY1L2c2zjQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":79237,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (56618)","md5":"79d214e19a1bffa93281b5c9f868bfef","sha1":"0251c6cd8d04a0772d2818b0f8dc00447bf9b903","sha256":"0ebcd0b215005ea0213576a319c588b0ec1af58e3df5b6d64be5801331849348","sha512":"fb991becf0682997c2b76ffbff78d78c5383786253258d1744d50c888623c23a83f06e74acf0cf2b7dd57070cf4c98c4c37521acc3c473ba75e5b4e2920a5988","ssdeep":"1536:WUCDwje6swV6iWKWJISBDbtF429rU8eWmHWcnMcHsI/50te9p0GZsY:WzoeysFHU8nhIMIx0twBZH","tlshash":"ed73af71aa07705acfb70f8127da6e75217e918a248344dc2bff08d94d7ed9762a438c","first_seen":"2025-11-14T15:03:19.710008Z","last_seen":"2025-11-14T15:03:19.710008Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"samlesamtykke.com/cc.css?v=1.0.0","fqdn":"samlesamtykke.com","domain":"samlesamtykke.com","tld":"com"},"ip":{"addr":"34.54.44.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:49.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samlesamtykke.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 21:21:36 GMT","end":"Wed, 31 Dec 2025 22:17:31 GMT"},"fingerprint":{"sha1":"50:01:17:8A:98:F9:7F:1F:84:04:31:24:CD:75:75:3A:67:D7:DA:C9","sha256":"31:BF:AC:74:BE:3A:AD:00:0E:89:F4:75:91:C5:8F:86:53:7F:77:6B:EE:9E:DF:54:BD:BB:BC:4E:9E:AC:E3:22"}}},"request":{"raw":"GET /cc.css?v=1.0.0 HTTP/1.1\r\nHost: samlesamtykke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kosoglek.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Nov 2025 15:02:49 GMT\r\nserver: Apache/2.4.18 (Ubuntu)\r\nlast-modified: Mon, 13 Oct 2025 12:35:57 GMT\r\netag: \"908a-6410982520d0a-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 6443\r\ncontent-type: text/css\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.18","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":37002,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"a42a02e4c42dc1c5d159742686a7c3a4","sha1":"17d3139095fb44e081eef19771b938f0fae6c6d7","sha256":"aa76b8c13bd40cfc80b5381c6b46d8f718f9977215deb39f057141e2f1d1ff27","sha512":"18dca0c2858b56531c7e3e439765ae62f214e3d653ce36e2bab7ee960ad768b5c40ec6220ae9236ee714c1155006e7137c27c218b7d1af9915892bdee0da8502","ssdeep":"768:OFaFB3FxdFy3F1FxFlmUbFaXFOSFsIFaKFOoN+y8Nz5wLM7bbVldi1OqjUBy4ZH2:OYnTd43XDXtybfzjN+y8Nz5wLM7bbVl0","tlshash":"f7f231539e633851253f40ac5f69b206323a5463a78bdd6cf98c641ccfccadc92567ac","first_seen":"2025-10-13T14:39:31.769215Z","last_seen":"2026-04-06T02:56:14.698507Z","times_seen":681,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.samlesamtykke.com/consent/confirmExplicit","fqdn":"api.samlesamtykke.com","domain":"samlesamtykke.com","tld":"com"},"ip":{"addr":"34.54.44.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:50.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samlesamtykke.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 21:21:36 GMT","end":"Wed, 31 Dec 2025 22:17:31 GMT"},"fingerprint":{"sha1":"50:01:17:8A:98:F9:7F:1F:84:04:31:24:CD:75:75:3A:67:D7:DA:C9","sha256":"31:BF:AC:74:BE:3A:AD:00:0E:89:F4:75:91:C5:8F:86:53:7F:77:6B:EE:9E:DF:54:BD:BB:BC:4E:9E:AC:E3:22"}}},"request":{"raw":"POST /consent/confirmExplicit HTTP/1.1\r\nHost: api.samlesamtykke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 538\r\nOrigin: https://www.kosoglek.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kosoglek.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Nov 2025 15:02:50 GMT\r\nserver: Apache/2.4.18 (Ubuntu)\r\naccess-control-allow-origin: https://www.kosoglek.com\r\naccess-control-allow-credentials: true\r\ncontent-length: 0\r\ncontent-type: application/vnd.api+json\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.18","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/vnd.api+json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/landers/media-registry.js","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:48.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kosoglek.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 00:07:12 GMT","end":"Tue, 23 Dec 2025 01:00:45 GMT"},"fingerprint":{"sha1":"4A:AE:4D:B1:98:6F:C0:A8:9C:49:77:34:48:CC:8C:98:B7:0B:9F:EB","sha256":"1D:CB:76:99:14:5F:4C:2B:5D:F2:EC:F9:60:76:A6:54:4A:76:A8:1C:BF:B2:96:DD:74:85:A1:88:87:CA:76:CD"}}},"request":{"raw":"GET /landers/media-registry.js HTTP/1.1\r\nHost: www.kosoglek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Nov 2025 14:20:36 GMT\r\nserver: nginx/1.14.2\r\nx-guploader-uploadid: AOCedOGXNg2_W1adq-PSQKbHy1rKCn3adSjqAeLsM8gk9gs3MnV18hkG13agYWY4aGGB53ZRk5qD2Ko\r\nx-goog-generation: 1763125559113247\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 126832\r\nx-goog-hash: crc32c=0qCmpw==, md5=QTO4z/MtMAvk6NdvCSGzmw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2532\r\nlast-modified: Fri, 14 Nov 2025 13:05:59 GMT\r\netag: \"4133b8cff32d300be4e8d76f0921b39b-gzip\"\r\ncontent-type: application/javascript\r\ncache-control: public,max-age=3600\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000, h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nvia: 1.1 google, 1.1 google\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":126832,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4133b8cff32d300be4e8d76f0921b39b","sha1":"ab0d99d19a57cd5a92bff2fb594bb22d043601e9","sha256":"aedbd6a4fe773dfc421e6a5ea1df626e32f74f71981d899910a124c54f05da30","sha512":"00a1aad99d7f2c8608af85b39ba58f98fbd75835c9da1adfceaab0bd8327ee3a61715940a7849fc1e98df829a3eaba4f838eb02c51a2dee649e3566ac73fb4ed","ssdeep":"3072:ehhbN41I67DLNe867r9EAIhh7rre4D0DPD3qYot:ehhbN41I67DLNe867r9EAIhh7rreNqYK","tlshash":"bbc3a107ba5cbe2bfb3cfd652d629d0168ec34002447f0a0b2ead85545de5d8178aede","first_seen":"2025-11-14T15:03:19.713738Z","last_seen":"2025-11-19T11:58:58.783533Z","times_seen":8,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.samlesamtykke.com/consent/confirmExplicit","fqdn":"api.samlesamtykke.com","domain":"samlesamtykke.com","tld":"com"},"ip":{"addr":"34.54.44.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:50.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samlesamtykke.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 21:21:36 GMT","end":"Wed, 31 Dec 2025 22:17:31 GMT"},"fingerprint":{"sha1":"50:01:17:8A:98:F9:7F:1F:84:04:31:24:CD:75:75:3A:67:D7:DA:C9","sha256":"31:BF:AC:74:BE:3A:AD:00:0E:89:F4:75:91:C5:8F:86:53:7F:77:6B:EE:9E:DF:54:BD:BB:BC:4E:9E:AC:E3:22"}}},"request":{"raw":"OPTIONS /consent/confirmExplicit HTTP/1.1\r\nHost: api.samlesamtykke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.kosoglek.com/\r\nOrigin: https://www.kosoglek.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Nov 2025 15:02:50 GMT\r\nserver: Apache/2.4.18 (Ubuntu)\r\naccess-control-allow-origin: https://www.kosoglek.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type\r\ncontent-length: 0\r\ncontent-type: application/vnd.api+json\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.18","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/vnd.api+json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/landers/images/landing110/default/default/02.webp?geo=no","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:48.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kosoglek.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 00:07:12 GMT","end":"Tue, 23 Dec 2025 01:00:45 GMT"},"fingerprint":{"sha1":"4A:AE:4D:B1:98:6F:C0:A8:9C:49:77:34:48:CC:8C:98:B7:0B:9F:EB","sha256":"1D:CB:76:99:14:5F:4C:2B:5D:F2:EC:F9:60:76:A6:54:4A:76:A8:1C:BF:B2:96:DD:74:85:A1:88:87:CA:76:CD"}}},"request":{"raw":"GET /landers/images/landing110/default/default/02.webp?geo=no HTTP/1.1\r\nHost: www.kosoglek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Nov 2025 15:02:48 GMT\r\nserver: nginx/1.14.2\r\ncontent-type: image/webp\r\ncontent-length: 199128\r\nlast-modified: Fri, 14 Nov 2025 13:01:29 GMT\r\netag: \"69172829-309d8\"\r\nx-cacheable: YES\r\ncache-control: max-age=300\r\nxkey: lander\r\nx-varnish: 10277575\r\nage: 0\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000, h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nvia: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish:6.0","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":199128,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b3722b6b49163222ca80bd539bf54a30","sha1":"fbd5478b3de3c8fb7bce4a35b45fe3c577caaca4","sha256":"e84334c858b52fb05e8c69a0c2b4aab78a15ae725a497bafa8364583ab21f954","sha512":"cf808c23614c532b4815386d2282d6b0d6cd6e4b80bb798b9ed921f0bc525760741e2aafb6f18851222a7f556c7fedd0200f05f82bfcbdbbd0d6623ba171d4d6","ssdeep":"3072:Kay8B/+674FXK3DjORQk/9xEwrlrY1baiseVQioc/mrcNgyTlx1Rxzn5a9ST5JK+:0U+674oTWEg4mb3xUmANxTlnn5acKFtS","tlshash":"9514239bb544e8add714bc33ea0848b4c24f34e6d1d44925686c79e9b6939384eac1ce","first_seen":"2023-08-12T19:34:34Z","last_seen":"2026-04-05T04:48:04.201184Z","times_seen":81,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/landers/css/landing110.css","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:47.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kosoglek.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 00:07:12 GMT","end":"Tue, 23 Dec 2025 01:00:45 GMT"},"fingerprint":{"sha1":"4A:AE:4D:B1:98:6F:C0:A8:9C:49:77:34:48:CC:8C:98:B7:0B:9F:EB","sha256":"1D:CB:76:99:14:5F:4C:2B:5D:F2:EC:F9:60:76:A6:54:4A:76:A8:1C:BF:B2:96:DD:74:85:A1:88:87:CA:76:CD"}}},"request":{"raw":"GET /landers/css/landing110.css HTTP/1.1\r\nHost: www.kosoglek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 14 Nov 2025 15:02:47 GMT\r\nserver: nginx/1.14.2\r\ncontent-type: text/css;charset=UTF-8\r\nx-powered-by: PHP/7.2.34\r\nx-host: kosoglek.com\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\ncache-control: max-age=300\r\nxkey: lander\r\nvary: Accept-Encoding\r\nx-varnish: 7138703\r\nage: 0\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000, h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nvia: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.2.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Varnish:6.0","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33334,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"52cda074feb742e838a103b01b25bc61","sha1":"3a9cc49135e155e96234da1a5eb6fb78a6fc9884","sha256":"d8471587a99536fd7446990f7cab9dcc2f179bb570a07889af27eeefa1bde64b","sha512":"7799b74679b1de1c6babbd466bcbebd58d308c2ca92e8e1eb616cc278e39d58bf0a0e0a280ed1e64f364a30c0a26fd282d889ca4ac5e34ef9bf353df36044fa3","ssdeep":"768:GeCZmqjUFKRFGFeFMBoCSJe6t9ReFMXFFwDraiHFweB+:EZM0RIEuBoCSY6vReCVKDraiHK3","tlshash":"64e221ae2af41108616b89582bde2b64332cc453661fecfaf1d1249dcfc5b9c56c634b","first_seen":"2025-10-25T00:43:30.230385Z","last_seen":"2026-01-07T07:06:03.32785Z","times_seen":6,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.samlesamtykke.com/consent/load","fqdn":"api.samlesamtykke.com","domain":"samlesamtykke.com","tld":"com"},"ip":{"addr":"34.54.44.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:50.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samlesamtykke.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 21:21:36 GMT","end":"Wed, 31 Dec 2025 22:17:31 GMT"},"fingerprint":{"sha1":"50:01:17:8A:98:F9:7F:1F:84:04:31:24:CD:75:75:3A:67:D7:DA:C9","sha256":"31:BF:AC:74:BE:3A:AD:00:0E:89:F4:75:91:C5:8F:86:53:7F:77:6B:EE:9E:DF:54:BD:BB:BC:4E:9E:AC:E3:22"}}},"request":{"raw":"OPTIONS /consent/load HTTP/1.1\r\nHost: api.samlesamtykke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.kosoglek.com/\r\nOrigin: https://www.kosoglek.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Nov 2025 15:02:50 GMT\r\nserver: Apache/2.4.18 (Ubuntu)\r\naccess-control-allow-origin: https://www.kosoglek.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type\r\ncontent-length: 0\r\ncontent-type: application/vnd.api+json\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.18","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/vnd.api+json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/landers/translations/nb-no2.json","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:48.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kosoglek.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 00:07:12 GMT","end":"Tue, 23 Dec 2025 01:00:45 GMT"},"fingerprint":{"sha1":"4A:AE:4D:B1:98:6F:C0:A8:9C:49:77:34:48:CC:8C:98:B7:0B:9F:EB","sha256":"1D:CB:76:99:14:5F:4C:2B:5D:F2:EC:F9:60:76:A6:54:4A:76:A8:1C:BF:B2:96:DD:74:85:A1:88:87:CA:76:CD"}}},"request":{"raw":"GET /landers/translations/nb-no2.json HTTP/1.1\r\nHost: www.kosoglek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Nov 2025 14:44:36 GMT\r\nserver: nginx/1.14.2\r\ncontent-length: 128525\r\nx-guploader-uploadid: AOCedOHmSJVFOARx9QQ0X6G02OMhlEodM22pKtmFPoibaNgRbBQQLW5D7gaica3X0st7f8MJALTI-aU\r\nx-goog-generation: 1762445468063278\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 128525\r\nx-goog-hash: crc32c=x6IZNA==, md5=LW4Lp0lX8Jn/KccTF8GUeA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1092\r\nlast-modified: Thu, 06 Nov 2025 16:11:08 GMT\r\netag: \"2d6e0ba74957f099ff29c71317c19478\"\r\ncontent-type: application/json\r\ncache-control: public,max-age=3600\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000, h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nvia: 1.1 google, 1.1 google\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":128525,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (940)","md5":"addcf7323d9bc30cfa096f4e84c4138e","sha1":"7777603dad3a3a3011c68925c2e89f00aa40ddda","sha256":"081c66e6e21c950311bc1bd7c86916a59aae720bfbba15354486ff8243e270bf","sha512":"1852442f735352005a9e728936ea85efb40886916c5bb6d76bf684c6bf107b5373c02a16e4c1736f9ea5903a8f3dd22d9de337681f3e2dd1e9081374036b4343","ssdeep":"1536:VvgrpWSiUPlfNqd7R8BP6uDryT04BCpXllYZnLmje1vqiv4sDEv6WiI:xgNRfPtw3MPNDryI4yagepqGu","tlshash":"4bc360b1e4929f2350d01674f8a56503953c856b9f84b0e5b78c876e0fcf96f38ba24e","first_seen":"2025-11-07T13:31:56.564949Z","last_seen":"2025-12-01T19:59:06.039938Z","times_seen":44,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.twinrdengine.com/aud/aHlxTtBjlhQNk8MNH6Oy7YuVwvm4T2wg?noscript=1\u0026cb=813945","fqdn":"ad.twinrdengine.com","domain":"twinrdengine.com","tld":"com"},"ip":{"addr":"34.111.67.216","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:49.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad.twinrdengine.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Oct 2025 07:02:38 GMT","end":"Tue, 27 Jan 2026 07:58:33 GMT"},"fingerprint":{"sha1":"A3:C5:7D:BF:34:21:56:DD:4A:F8:AB:96:25:73:E4:21:3D:11:7D:02","sha256":"F5:BA:6C:98:1F:F1:3E:55:D6:05:39:C5:69:26:0C:A8:52:4D:B3:61:E0:D5:5B:19:07:60:38:0E:89:75:4C:F0"}}},"request":{"raw":"GET /aud/aHlxTtBjlhQNk8MNH6Oy7YuVwvm4T2wg?noscript=1\u0026cb=813945 HTTP/1.1\r\nHost: ad.twinrdengine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kosoglek.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Thu, 13 Nov 2025 15:02:49 GMT\r\netag: fcc2bc2f-c16a-11f0-98fb-df19c4ab7aa5\r\nlast-modified: Fri, 14 Nov 2025 15:02:49 GMT\r\npragma: no-cache\r\nvary: *\r\ncontent-length: 0\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ndate: Fri, 14 Nov 2025 15:02:49 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.samlesamtykke.com/consent/loadSegment","fqdn":"api.samlesamtykke.com","domain":"samlesamtykke.com","tld":"com"},"ip":{"addr":"34.54.44.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:50.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samlesamtykke.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 21:21:36 GMT","end":"Wed, 31 Dec 2025 22:17:31 GMT"},"fingerprint":{"sha1":"50:01:17:8A:98:F9:7F:1F:84:04:31:24:CD:75:75:3A:67:D7:DA:C9","sha256":"31:BF:AC:74:BE:3A:AD:00:0E:89:F4:75:91:C5:8F:86:53:7F:77:6B:EE:9E:DF:54:BD:BB:BC:4E:9E:AC:E3:22"}}},"request":{"raw":"POST /consent/loadSegment HTTP/1.1\r\nHost: api.samlesamtykke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 224\r\nOrigin: https://www.kosoglek.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kosoglek.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Nov 2025 15:02:50 GMT\r\nserver: Apache/2.4.18 (Ubuntu)\r\naccess-control-allow-origin: https://www.kosoglek.com\r\naccess-control-allow-credentials: true\r\ncontent-length: 2887\r\ncontent-type: application/vnd.api+json\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.18","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2887,"size_decoded":0,"mime_type":"application/vnd.api+json","magic":"JSON text data","md5":"397ce7f381805a7bf164b74a6872f2bd","sha1":"5bbdc3992b5be39b7477fa25a6f2207e7fabf97c","sha256":"8ff885ca3ae0630cb486be5b7752b789f46fd860ed9c3389dddd0de6ab6797f8","sha512":"2e34003a195d120691fd1783a4b3ec2a3b56737a66323ebb30509364d088019b160759d1d1b37b0ef3ef35b3f47e3cf1b7f8a2ec43181af44013eba1d46b4d08","ssdeep":"","tlshash":"35514381856ef325efad425fd05c557196af832cc66486bb8dc8c0eb20c3dacd5ca247","first_seen":"2025-11-07T13:31:56.546392Z","last_seen":"2026-04-06T02:56:14.678048Z","times_seen":273,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.atsptp.com/d/product/35062/jsfp/f19649becd04a7b1236c68996483e544","fqdn":"sync.atsptp.com","domain":"atsptp.com","tld":"com"},"ip":{"addr":"66.254.114.220","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:50.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atsptp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 17:50:37 GMT","end":"Sat, 03 Jan 2026 17:50:36 GMT"},"fingerprint":{"sha1":"7A:BC:85:53:25:22:B5:55:B4:F9:F9:CC:2B:48:5F:5A:72:43:2D:93","sha256":"D4:46:67:C0:E0:87:AB:76:FA:58:F5:8A:95:43:15:B1:C0:28:77:79:3C:CC:B5:F0:D8:60:77:A2:04:8A:BB:F2"}}},"request":{"raw":"GET /d/product/35062/jsfp/f19649becd04a7b1236c68996483e544 HTTP/1.1\r\nHost: sync.atsptp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.kosoglek.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kosoglek.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: d_uidb=da9a698f-b89b-a0b7-0a6d-9390821f130b; Max-Age=31536000; Expires=Sat, 14 Nov 2026 15:02:50 GMT; Path=/; Domain=sync.atsptp.com; SameSite=Lax\r\ndate: Fri, 14 Nov 2025 15:02:50 GMT\r\naccess-control-allow-origin: https://www.kosoglek.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncontent-length: 36\r\nvia: 1.1 google\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version\r\nalt-svc: h3=\":443\"; ma=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":36,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"8cf85fc642dff46afaf8860cde87ce49","sha1":"f2e022363533c12aae9c2f5478813132ea7ad7e6","sha256":"314b5622d8301b0ff74b3e310bdc593cac99197e79fa11276b81b0393ddd0d93","sha512":"2065ff99d869b3d6bb7e4a2917fa298ff0b65cc71562f7c2b2eb4dff21af000e01bd10b73ff076bb94215415a8c94fd12c7a8f2ea2a59ddfc4871f3f3fd5858b","ssdeep":"","tlshash":"bc8000af30a8380a8fb30a0a8a38302c88a02302f8e208ce30388080a802208cc20832","first_seen":"2025-10-07T06:40:48.524971Z","last_seen":"2026-01-06T07:20:06.239522Z","times_seen":437,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":51,"dns":0,"connect":19,"send":0,"wait":142,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.rtbix.com/r?hash=dYmamhQsJL3dBvu","fqdn":"pixel.rtbix.com","domain":"rtbix.com","tld":"com"},"ip":{"addr":"104.21.57.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:47.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtbix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 11:02:04 GMT","end":"Sat, 07 Feb 2026 12:00:17 GMT"},"fingerprint":{"sha1":"26:94:41:C5:85:F6:1D:42:F1:78:C7:E4:C4:AE:05:39:AD:ED:88:43","sha256":"1C:D7:1B:6B:24:75:C4:5D:07:57:C2:D3:39:36:BD:28:05:30:C9:D2:88:D9:14:30:F0:08:96:75:6F:84:69:70"}}},"request":{"raw":"GET /r?hash=dYmamhQsJL3dBvu HTTP/1.1\r\nHost: pixel.rtbix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kosoglek.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 14 Nov 2025 15:02:47 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: private, max-age=0, no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nHSCl1PfLbsKRHqw1PJ6UsVYv2A%2FQpw3wyfHoPWp9qBD0ABTPxqpUIMZWdN9zIEog0Q5G2S9rg%2BqTG6auH6aeHtTQqQzNBw%2B99ih08w%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 99e764540cce5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":2,"dns":4,"connect":1,"send":0,"wait":84,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.atsptp.com/link/da9a698f-b89b-a0b7-0a6d-9390821f130b/origin/a/oldd/da9a698f-b89b-a0b7-0a6d-9390821f130b","fqdn":"sync.atsptp.com","domain":"atsptp.com","tld":"com"},"ip":{"addr":"66.254.114.220","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:50.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atsptp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 17:47:53 GMT","end":"Sat, 03 Jan 2026 17:47:52 GMT"},"fingerprint":{"sha1":"D2:D7:5F:F3:86:83:34:73:29:F7:72:80:06:23:DA:28:F2:75:FF:8F","sha256":"C3:2D:47:65:C0:87:75:4F:8E:85:6F:9C:F9:B6:F4:6B:AE:BE:40:64:21:77:56:BA:03:67:07:54:89:1B:DE:31"}}},"request":{"raw":"POST /link/da9a698f-b89b-a0b7-0a6d-9390821f130b/origin/a/oldd/da9a698f-b89b-a0b7-0a6d-9390821f130b HTTP/1.1\r\nHost: sync.atsptp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: text/plain\r\nContent-Length: 144\r\nOrigin: https://www.kosoglek.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kosoglek.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nset-cookie: d_uidb=da9a698f-b89b-a0b7-0a6d-9390821f130b; Max-Age=31536000; Expires=Sat, 14 Nov 2026 15:02:50 GMT; Path=/; Domain=sync.atsptp.com; SameSite=Lax\r\ndate: Fri, 14 Nov 2025 15:02:50 GMT\r\naccess-control-allow-origin: https://www.kosoglek.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncontent-length: 36\r\nvia: 1.1 google\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version\r\nalt-svc: h3=\":443\"; ma=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":36,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"8cf85fc642dff46afaf8860cde87ce49","sha1":"f2e022363533c12aae9c2f5478813132ea7ad7e6","sha256":"314b5622d8301b0ff74b3e310bdc593cac99197e79fa11276b81b0393ddd0d93","sha512":"2065ff99d869b3d6bb7e4a2917fa298ff0b65cc71562f7c2b2eb4dff21af000e01bd10b73ff076bb94215415a8c94fd12c7a8f2ea2a59ddfc4871f3f3fd5858b","ssdeep":"","tlshash":"bc8000af30a8380a8fb30a0a8a38302c88a02302f8e208ce30388080a802208cc20832","first_seen":"2025-10-07T06:40:48.524971Z","last_seen":"2026-01-06T07:20:06.239522Z","times_seen":437,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/landers/images/loader/loading.webp","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:47.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kosoglek.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 00:07:12 GMT","end":"Tue, 23 Dec 2025 01:00:45 GMT"},"fingerprint":{"sha1":"4A:AE:4D:B1:98:6F:C0:A8:9C:49:77:34:48:CC:8C:98:B7:0B:9F:EB","sha256":"1D:CB:76:99:14:5F:4C:2B:5D:F2:EC:F9:60:76:A6:54:4A:76:A8:1C:BF:B2:96:DD:74:85:A1:88:87:CA:76:CD"}}},"request":{"raw":"GET /landers/images/loader/loading.webp HTTP/1.1\r\nHost: www.kosoglek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 14 Nov 2025 15:02:47 GMT\r\nserver: nginx/1.14.2\r\ncontent-type: image/webp\r\ncontent-length: 1054\r\nlast-modified: Fri, 14 Nov 2025 13:01:30 GMT\r\netag: \"6917282a-41e\"\r\nx-cacheable: YES\r\ncache-control: max-age=300\r\nxkey: lander\r\nx-varnish: 4802536\r\nage: 0\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000, h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nvia: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish:6.0","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1054,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"32e9921a6e2174afbf4451c49adf1d4d","sha1":"f13214fa19e26a9210f0d237d39533c35eaa184d","sha256":"6a3e1b9c1e7f8766d521750f974dc78fe5ae55174d54c2eebbbe510c5887250e","sha512":"3c5d044b87f7a4e91620b3badbae4527a377a9a111906584f64f5d44ddd015932367620d993657512133457ad8e2593d746c7b06f02a9a5cbbdbee4972cbfd99","ssdeep":"","tlshash":"7b11b6fba396e6c0e1f45dfb60995800f71788148867dd961417b8b6f3a3280f50a7b8","first_seen":"2025-01-27T15:47:23.301014Z","last_seen":"2026-04-06T02:56:14.672824Z","times_seen":651,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsyndicate.com/api/v2/retargeting/set/bff23756-21d2-46e2-8261-55d262650959","fqdn":"tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"136.243.90.144","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:47.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 21:10:04 GMT","end":"Tue, 10 Feb 2026 21:10:03 GMT"},"fingerprint":{"sha1":"BB:2C:CE:C9:92:0E:A9:18:50:BD:8C:7E:7D:B2:E6:CC:72:54:29:18","sha256":"3B:E3:8E:A4:C5:EC:08:3B:96:2B:B0:16:ED:56:3F:0A:CD:55:81:4A:8F:FC:97:83:57:FC:6E:F9:FD:F4:43:83"}}},"request":{"raw":"GET /api/v2/retargeting/set/bff23756-21d2-46e2-8261-55d262650959 HTTP/1.1\r\nHost: tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kosoglek.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 14 Nov 2025 15:02:47 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\npragma: no-cache\r\nexpires: 0\r\nvary: *\r\nx-api-version: 2\r\nset-cookie: ts_rt_bff23756-21d2-46e2-8261-55d262650959=AAMC; expires=Sat, 14 Nov 2026 15:02:47 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, no-transform\r\nx-robots-tag: none, noindex, nofollow\r\nreport-to: { \"url\": \"https://pxl.tsyndicate.com/api/v1/heavy-ad/report\", \"max_age\": 86401 }\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\npermissions-policy: ch-ua-model=(self \"https://tsyndicate.com\"), ch-ua-platform-version=(self)\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ba036c43037cfe89320d1ef7b64cd43f","sha1":"88c72d3e26047eb1e45e5564a76427734f120efe","sha256":"42cb846e07917f6731406e500f24aeb2e88c42cda124eaa59e08c5331cad8bcb","sha512":"aa80ccd27c05eb729f730b9d830b011650bcf12cbb25d19edf29efcf962c7465bb5685a5ff5d084356c6710c08e829d16b59e7a59a41767eb14744f326b6c124","ssdeep":"","tlshash":"19900403f5400003d175d03107170340134cd110057c0307405d505cdc553510c01010","first_seen":"2023-05-10T09:10:20Z","last_seen":"2026-04-06T06:06:18.773811Z","times_seen":14490,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":45,"dns":9,"connect":24,"send":0,"wait":25,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KBRH6NB","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:48.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtm.js?id=GTM-KBRH6NB HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kosoglek.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 14 Nov 2025 15:02:48 GMT\r\nexpires: Fri, 14 Nov 2025 15:02:48 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 116659\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":355140,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (11088)","md5":"3eed198fc451a2a15eea183acebe5cbb","sha1":"954d8c42896e837014e07aa238e5f8fdd513d971","sha256":"40ef08a61164f5b8735a94fe028f6413021789c4c045b574f329b167d81b8b01","sha512":"e23fe1aa2fa9204162573ed9e02b6eb11d9ef8eaa3b122bd0832284421a1e6aef339957b3482a9ecf0d8672ed778f365b08fa372036f690aeca861e74458c170","ssdeep":"6144:AXovCYhsjtxj3Hj2sUOJdR+rVm+QZVGC1a:jvNhytVHSsYQZV0","tlshash":"797408cdb3d6b42283a3a474503f018ba57b68e2b44cc895f185ccd42e74aaa5277f7d","first_seen":"2025-11-14T15:03:19.724632Z","last_seen":"2025-11-14T22:34:34.899984Z","times_seen":2,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":102,"dns":3,"connect":21,"send":0,"wait":44,"receive":54,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.samlesamtykke.com/consent/collector","fqdn":"api.samlesamtykke.com","domain":"samlesamtykke.com","tld":"com"},"ip":{"addr":"34.54.44.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:49.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samlesamtykke.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 21:21:36 GMT","end":"Wed, 31 Dec 2025 22:17:31 GMT"},"fingerprint":{"sha1":"50:01:17:8A:98:F9:7F:1F:84:04:31:24:CD:75:75:3A:67:D7:DA:C9","sha256":"31:BF:AC:74:BE:3A:AD:00:0E:89:F4:75:91:C5:8F:86:53:7F:77:6B:EE:9E:DF:54:BD:BB:BC:4E:9E:AC:E3:22"}}},"request":{"raw":"OPTIONS /consent/collector HTTP/1.1\r\nHost: api.samlesamtykke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.kosoglek.com/\r\nOrigin: https://www.kosoglek.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Nov 2025 15:02:49 GMT\r\nserver: Apache/2.4.18 (Ubuntu)\r\naccess-control-allow-origin: https://www.kosoglek.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type\r\ncontent-length: 0\r\ncontent-type: application/vnd.api+json\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.18","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/vnd.api+json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.samlesamtykke.com/consent/loadSegment","fqdn":"api.samlesamtykke.com","domain":"samlesamtykke.com","tld":"com"},"ip":{"addr":"34.54.44.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:50.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samlesamtykke.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 21:21:36 GMT","end":"Wed, 31 Dec 2025 22:17:31 GMT"},"fingerprint":{"sha1":"50:01:17:8A:98:F9:7F:1F:84:04:31:24:CD:75:75:3A:67:D7:DA:C9","sha256":"31:BF:AC:74:BE:3A:AD:00:0E:89:F4:75:91:C5:8F:86:53:7F:77:6B:EE:9E:DF:54:BD:BB:BC:4E:9E:AC:E3:22"}}},"request":{"raw":"OPTIONS /consent/loadSegment HTTP/1.1\r\nHost: api.samlesamtykke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.kosoglek.com/\r\nOrigin: https://www.kosoglek.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Nov 2025 15:02:50 GMT\r\nserver: Apache/2.4.18 (Ubuntu)\r\naccess-control-allow-origin: https://www.kosoglek.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type\r\ncontent-length: 0\r\ncontent-type: application/vnd.api+json\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.18","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/vnd.api+json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/landers/images/landing110/default/default/01.webp?geo=no","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:48.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kosoglek.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 00:07:12 GMT","end":"Tue, 23 Dec 2025 01:00:45 GMT"},"fingerprint":{"sha1":"4A:AE:4D:B1:98:6F:C0:A8:9C:49:77:34:48:CC:8C:98:B7:0B:9F:EB","sha256":"1D:CB:76:99:14:5F:4C:2B:5D:F2:EC:F9:60:76:A6:54:4A:76:A8:1C:BF:B2:96:DD:74:85:A1:88:87:CA:76:CD"}}},"request":{"raw":"GET /landers/images/landing110/default/default/01.webp?geo=no HTTP/1.1\r\nHost: www.kosoglek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Nov 2025 15:02:48 GMT\r\nserver: nginx/1.14.2\r\ncontent-type: image/webp\r\ncontent-length: 72080\r\nlast-modified: Fri, 14 Nov 2025 13:01:29 GMT\r\netag: \"69172829-11990\"\r\nx-cacheable: YES\r\ncache-control: max-age=300\r\nxkey: lander\r\nx-varnish: 23506818\r\nage: 0\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000, h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nvia: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish:6.0","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72080,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8713de84f60b35efdf8063e98e8ea119","sha1":"35e3ab8efce9609cb38eba46cd770c1e64300c4c","sha256":"3d59fb21e86ca7408d1c7b5749e9d71b5bdce1162c6f17aa89c0b17b1863b5b4","sha512":"d18a63146d0c36dbfa2e709eae1c4384ddbf2dd666473f447d0cbeaeb9f40f976f612b69c8b335dbf421ebc6191ca98a212f273ce6eedee132f8d369c200b5b6","ssdeep":"1536:Deubn7/47hqGfuNvbzEA9ztuUs92m8tl4It4OJ55RujFzF9jv/Zx:DJT7dYuNL9x22m8t3xdRujX9jT","tlshash":"546302fbbcca900ac3bfd1f982a46158c5958981958443ef6461f9cf25e0a4eb50ff0c","first_seen":"2025-10-14T01:36:02.453847Z","last_seen":"2026-04-05T04:48:04.214111Z","times_seen":9,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-14T15:02:46.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kosoglek.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 00:07:12 GMT","end":"Tue, 23 Dec 2025 01:00:45 GMT"},"fingerprint":{"sha1":"4A:AE:4D:B1:98:6F:C0:A8:9C:49:77:34:48:CC:8C:98:B7:0B:9F:EB","sha256":"1D:CB:76:99:14:5F:4C:2B:5D:F2:EC:F9:60:76:A6:54:4A:76:A8:1C:BF:B2:96:DD:74:85:A1:88:87:CA:76:CD"}}},"request":{"raw":"GET /landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643 HTTP/1.1\r\nHost: www.kosoglek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 14 Nov 2025 15:02:47 GMT\r\nserver: nginx/1.14.2\r\ncontent-type: text/html;charset=UTF-8\r\nx-powered-by: PHP/7.2.34\r\nx-host: kosoglek.com\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\ncache-control: max-age=300\r\nxkey: lander\r\nvary: Accept-Encoding\r\nx-varnish: 3536899\r\nage: 0\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000, h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nvia: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"PHP:7.2.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish:6.0","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"ExoClick","description":"ExoClick is a Barcelona-based online advertising company, which provides online advertising services to both advertisers and publishers.","website":"https://www.exoclick.com","common_platform_enumeration":"","icon":"ExoClick.png","categories":["Advertising"]}],"data":{"size":34797,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3163)","md5":"49d7c98e6f31c06f07e9f72558a2b856","sha1":"839886364c30ff8579613d4fe0f8c5144de86fde","sha256":"ab53cb84047338872efac353dddb801a5bf18f743183b0d4d71f3c74d581e10f","sha512":"d04c11be9792ec820b8f46fafecaa1c873d9d1101a3505a42c5483bbd969b91656c810069a7042acc9477b6a8d29a112d111e1d04ffd35f9cb2f5e9e829233c1","ssdeep":"384:1a3zR8FcES0ZNIITeijS9p2X1PnTWIHH3MFLjD83K3Vpz8nYt:Q3zilmITBjS9p2X1vTfHH3YUK3VlkYt","tlshash":"baf2b7a9b8f14972029380ecd22a77097866f20fde465080b59c06b05fd6df6fd2769e","first_seen":"2025-11-14T15:03:19.728342Z","last_seen":"2025-11-14T15:03:19.728342Z","times_seen":1,"resource_available":false,"data":null}},"time_used":727,"timings":{"blocked":290,"dns":47,"connect":13,"send":0,"wait":147,"receive":0,"ssl":227},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.rtbix.com/r?hash=dYmamhQsJL3dBvu","fqdn":"pixel.rtbix.com","domain":"rtbix.com","tld":"com"},"ip":{"addr":"104.21.57.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:48.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtbix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 11:02:04 GMT","end":"Sat, 07 Feb 2026 12:00:17 GMT"},"fingerprint":{"sha1":"26:94:41:C5:85:F6:1D:42:F1:78:C7:E4:C4:AE:05:39:AD:ED:88:43","sha256":"1C:D7:1B:6B:24:75:C4:5D:07:57:C2:D3:39:36:BD:28:05:30:C9:D2:88:D9:14:30:F0:08:96:75:6F:84:69:70"}}},"request":{"raw":"GET /r?hash=dYmamhQsJL3dBvu HTTP/1.1\r\nHost: pixel.rtbix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kosoglek.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 14 Nov 2025 15:02:48 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wlatog%2FM%2BE%2Bo4euqKMxfpxCtYiR5vn4p1L%2BcerTQiwcai5U6nNPFD9TbejiBEMJnjpOTQLNbGoMKc%2BGe7CnrHUybvPIiOTe1bIxC1IY%3D\"}]}\r\npriority: u=4,i=?0\r\ncache-control: private, max-age=0, no-cache\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99e764563e4a56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s\u0026co=aHR0cHM6Ly93d3cua29zb2dsZWsuY29tOjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=6w5bmynbjcx6","date":"2025-11-14T15:02:49.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Nov 2025 00:15:00 GMT\r\nexpires: Thu, 20 Nov 2025 00:15:00 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nage: 139669\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-04-06T08:11:23.911743Z","times_seen":543642,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/landers/css/theme/pornhub.css","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:47.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kosoglek.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 00:07:12 GMT","end":"Tue, 23 Dec 2025 01:00:45 GMT"},"fingerprint":{"sha1":"4A:AE:4D:B1:98:6F:C0:A8:9C:49:77:34:48:CC:8C:98:B7:0B:9F:EB","sha256":"1D:CB:76:99:14:5F:4C:2B:5D:F2:EC:F9:60:76:A6:54:4A:76:A8:1C:BF:B2:96:DD:74:85:A1:88:87:CA:76:CD"}}},"request":{"raw":"GET /landers/css/theme/pornhub.css HTTP/1.1\r\nHost: www.kosoglek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 14 Nov 2025 15:02:47 GMT\r\nserver: nginx/1.14.2\r\ncontent-type: text/css;charset=UTF-8\r\nx-powered-by: PHP/7.2.34\r\nx-host: kosoglek.com\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\ncache-control: max-age=300\r\nxkey: lander\r\nvary: Accept-Encoding\r\nx-varnish: 2252022\r\nage: 0\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000, h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nvia: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.2.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish:6.0","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":15818,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"27737ad41907712ac59a0edf3717cb81","sha1":"fff8842b90b86c0430fb2ba679e6fa03c156b5ee","sha256":"5a2c2f2891ec7a5267931c0dc1b46884dc85a9acc3d6474f9e436e1d86efd2be","sha512":"1fcf235b76a2e8ecd918a528e4d7402aeb7977048db3fca29580077b0e5a27abaab3a4981633be16e3983360525ffd13fbcea46235de5f7fa11c8f126c18f136","ssdeep":"192:/W7HxZ4ciQp0/i2IFWHhZlonq8OxxvC0E+M+Jjw0pJ6nlvpme:aiP/f4nq8OxxvC0E+TjLrAlv","tlshash":"06624d62e2f699073227cb690251965c373c4295c44a9f3df37e71fcaad86c438ba4c6","first_seen":"2025-10-30T14:33:54.630464Z","last_seen":"2026-01-22T00:05:58.569086Z","times_seen":10,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.twinrdengine.com/beh.engine?b=551\u0026o=1\u0026x=\u0026s=","fqdn":"ad.twinrdengine.com","domain":"twinrdengine.com","tld":"com"},"ip":{"addr":"34.111.67.216","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:47.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad.twinrdengine.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Oct 2025 07:02:38 GMT","end":"Tue, 27 Jan 2026 07:58:33 GMT"},"fingerprint":{"sha1":"A3:C5:7D:BF:34:21:56:DD:4A:F8:AB:96:25:73:E4:21:3D:11:7D:02","sha256":"F5:BA:6C:98:1F:F1:3E:55:D6:05:39:C5:69:26:0C:A8:52:4D:B3:61:E0:D5:5B:19:07:60:38:0E:89:75:4C:F0"}}},"request":{"raw":"GET /beh.engine?b=551\u0026o=1\u0026x=\u0026s= HTTP/1.1\r\nHost: ad.twinrdengine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kosoglek.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ndate: Fri, 14 Nov 2025 15:02:47 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":949,"timings":{"blocked":144,"dns":1,"connect":17,"send":0,"wait":626,"receive":0,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/favicon/apple-touch-icon-180x180.png","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:48.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kosoglek.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 00:07:12 GMT","end":"Tue, 23 Dec 2025 01:00:45 GMT"},"fingerprint":{"sha1":"4A:AE:4D:B1:98:6F:C0:A8:9C:49:77:34:48:CC:8C:98:B7:0B:9F:EB","sha256":"1D:CB:76:99:14:5F:4C:2B:5D:F2:EC:F9:60:76:A6:54:4A:76:A8:1C:BF:B2:96:DD:74:85:A1:88:87:CA:76:CD"}}},"request":{"raw":"GET /favicon/apple-touch-icon-180x180.png HTTP/1.1\r\nHost: www.kosoglek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 14 Nov 2025 15:02:48 GMT\r\nserver: Apache/2.4.58 (Ubuntu)\r\ncontent-length: 278\r\ncontent-type: text/html; charset=iso-8859-1\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":278,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"758b3880763b237ce4d114c0c920bf83","sha1":"311d0bde7cdfedfb7f627fc9d26df8e9fe85b699","sha256":"f910e941d2d8bf6667df01900bcc691a83c4b3b21b6f4f137e6bf5ae076ff876","sha512":"ca9153f49eaa7b7e9603f512b07909475bd5887969a213aa4dc2296899b9292c585f91d32d090f4f55662400a45e528d13bbf7f23da4eabd05e816c448912c4e","ssdeep":"","tlshash":"19d0eb9e5043a38b0862007039c121c2268c13f6a03a81e86d82d483229853ecd8a6cc","first_seen":"2023-11-27T20:25:31Z","last_seen":"2026-01-03T16:01:32.465051Z","times_seen":20,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise/webworker.js?hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s\u0026co=aHR0cHM6Ly93d3cua29zb2dsZWsuY29tOjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=6w5bmynbjcx6","date":"2025-11-14T15:02:49.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"BD:40:9A:DB:26:FC:C1:FF:4D:85:05:A9:F0:E9:24:BD:05:29:25:7B","sha256":"C7:A3:E4:68:D6:D8:86:E7:C6:E2:D6:E3:1D:DA:60:9A:35:7E:71:9E:F1:91:26:57:47:43:91:7C:CE:BB:07:17"}}},"request":{"raw":"GET /recaptcha/enterprise/webworker.js?hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s\u0026co=aHR0cHM6Ly93d3cua29zb2dsZWsuY29tOjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=6w5bmynbjcx6\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Fri, 14 Nov 2025 15:02:49 GMT\r\ndate: Fri, 14 Nov 2025 15:02:49 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"4e8c5e231c8c4b52a9f1110707827d3f","sha1":"58e2f59c8426047a2671a46fae39f739035a8032","sha256":"4b12d6a235970b2239057a7cae12f85606fc432c6ad4ae32d13fdc27ffee0891","sha512":"064d9f12c63084d2e179e0f0dfe9cfd184af33cf937b3a89e0969ec32f3cca35540c29c3d9b714004d8e95bd394ebc1f9ff1986792a9ee84397fc9930523067f","ssdeep":"","tlshash":"68b012330510d46c0d1082c2d63bd3acf0114234db6082f041b90fd883649e39800400","first_seen":"2025-11-13T21:19:52.258197Z","last_seen":"2026-02-22T14:16:54.065986Z","times_seen":38461,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise.js?render=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:47.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:45 GMT","end":"Mon, 19 Jan 2026 08:35:44 GMT"},"fingerprint":{"sha1":"88:42:9A:E3:85:29:1D:A4:9A:60:E6:5F:C1:71:A6:01:27:91:C8:BC","sha256":"6D:0F:B5:30:E0:1A:7B:ED:55:DD:26:C8:34:D0:0A:34:65:0E:E8:E4:93:E9:8C:DF:D6:3C:63:71:A9:AE:DF:D2"}}},"request":{"raw":"GET /recaptcha/enterprise.js?render=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kosoglek.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Fri, 14 Nov 2025 15:02:47 GMT\r\ndate: Fri, 14 Nov 2025 15:02:47 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1200,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1200), with no line terminators","md5":"70baff7a79c2c9345f1a8583e01c0d61","sha1":"e5871097fb37471ac1b86b084209d46d8c615eb7","sha256":"6b1b3a44e8a99d7fbbe689545a80eb5b3f6ae13a2485b7b1e8e94943c82ef339","sha512":"7291505d7523cc29f70906abd90cd49c04194db8aa9be6dcf5816d6779bc91e04a445efa720d36ea71161223846c0c398154fd2fc9c6d592d1e5b025b423943d","ssdeep":"","tlshash":"6c2114b2170aa07b07b209f1e1fec771e851742cb15c49dca506ea850eaeccfce05a95","first_seen":"2025-11-13T21:46:32.747365Z","last_seen":"2025-12-08T05:31:20.579651Z","times_seen":60,"resource_available":true,"data":null}},"time_used":370,"timings":{"blocked":149,"dns":0,"connect":24,"send":0,"wait":36,"receive":0,"ssl":157},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s\u0026co=aHR0cHM6Ly93d3cua29zb2dsZWsuY29tOjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=6w5bmynbjcx6","date":"2025-11-14T15:02:49.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Nov 2025 09:01:03 GMT\r\nexpires: Thu, 12 Nov 2026 09:01:03 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 16 Oct 2017 17:33:02 GMT\r\ncontent-type: font/woff2\r\nage: 194506\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15552,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15552, version 1.0","md5":"285467176f7fe6bb6a9c6873b3dad2cc","sha1":"ea04e4ff5142ddd69307c183def721a160e0a64e","sha256":"5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7","sha512":"5f9bb763406ea8ce978ec675bd51a0263e9547021ea71188dbd62f0212eb00c1421b750d3b94550b50425bebff5f881c41299f6a33bbfa12fb1ff18c12bc7ff1","ssdeep":"384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi","tlshash":"8462e103f2bc4c01e786193ebb5870237205272619efa67780ce7ea4c65ec81a39b457","first_seen":"2023-04-05T04:58:40Z","last_seen":"2026-04-06T07:27:15.576956Z","times_seen":338636,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":59,"dns":0,"connect":20,"send":0,"wait":27,"receive":17,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.atsptp.com/d/product/35062/jsfp/f19649becd04a7b1236c68996483e544","fqdn":"sync.atsptp.com","domain":"atsptp.com","tld":"com"},"ip":{"addr":"66.254.114.220","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:50.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atsptp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 17:50:37 GMT","end":"Sat, 03 Jan 2026 17:50:36 GMT"},"fingerprint":{"sha1":"7A:BC:85:53:25:22:B5:55:B4:F9:F9:CC:2B:48:5F:5A:72:43:2D:93","sha256":"D4:46:67:C0:E0:87:AB:76:FA:58:F5:8A:95:43:15:B1:C0:28:77:79:3C:CC:B5:F0:D8:60:77:A2:04:8A:BB:F2"}}},"request":{"raw":"GET /d/product/35062/jsfp/f19649becd04a7b1236c68996483e544 HTTP/1.1\r\nHost: sync.atsptp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.kosoglek.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kosoglek.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: d_uidb=da9a698f-b89b-a0b7-0a6d-9390821f130b; Max-Age=31536000; Expires=Sat, 14 Nov 2026 15:02:50 GMT; Path=/; Domain=sync.atsptp.com; SameSite=Lax\r\ndate: Fri, 14 Nov 2025 15:02:50 GMT\r\naccess-control-allow-origin: https://www.kosoglek.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncontent-length: 36\r\nvia: 1.1 google\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version\r\nalt-svc: h3=\":443\"; ma=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":36,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"8cf85fc642dff46afaf8860cde87ce49","sha1":"f2e022363533c12aae9c2f5478813132ea7ad7e6","sha256":"314b5622d8301b0ff74b3e310bdc593cac99197e79fa11276b81b0393ddd0d93","sha512":"2065ff99d869b3d6bb7e4a2917fa298ff0b65cc71562f7c2b2eb4dff21af000e01bd10b73ff076bb94215415a8c94fd12c7a8f2ea2a59ddfc4871f3f3fd5858b","ssdeep":"","tlshash":"bc8000af30a8380a8fb30a0a8a38302c88a02302f8e208ce30388080a802208cc20832","first_seen":"2025-10-07T06:40:48.524971Z","last_seen":"2026-01-06T07:20:06.239522Z","times_seen":437,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync_events.atsptp.com/p/e","fqdn":"sync_events.atsptp.com","domain":"atsptp.com","tld":"com"},"ip":{"addr":"66.254.114.220","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:50.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atsptp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 17:47:53 GMT","end":"Sat, 03 Jan 2026 17:47:52 GMT"},"fingerprint":{"sha1":"D2:D7:5F:F3:86:83:34:73:29:F7:72:80:06:23:DA:28:F2:75:FF:8F","sha256":"C3:2D:47:65:C0:87:75:4F:8E:85:6F:9C:F9:B6:F4:6B:AE:BE:40:64:21:77:56:BA:03:67:07:54:89:1B:DE:31"}}},"request":{"raw":"POST /p/e HTTP/1.1\r\nHost: sync_events.atsptp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: text/plain\r\nContent-Length: 516\r\nOrigin: https://www.kosoglek.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kosoglek.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST\r\naccess-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With\r\naccess-control-allow-origin: https://www.kosoglek.com\r\nset-cookie: d_uidb=da9a698f-b89b-a0b7-0a6d-9390821f130b\r\ndate: Fri, 14 Nov 2025 15:02:50 GMT\r\ncontent-type: application/json\r\ncontent-length: 8\r\nvia: 1.1 google\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version\r\nalt-svc: h3=\":443\"; ma=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":8,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"c5946eb9400717fd6f40e26e36cdb498","sha1":"38428a698ab1222540680e7ab78e1d739e9afd1c","sha256":"318c5ad51e9b36ff5924ae323dd59031245413a3e0f2aa3e03cc42902e9e7acc","sha512":"f2e79b59e286405076bdaffa56310693bf20fa909a5acaed6c11c901e09bbb9bd2eb4fea8b83daa7ecf5d1346997167785222ed645b15ae9435c6a6c2d4f44cf","ssdeep":"","tlshash":"8f500000000300030000000000003000000000c0030000c00cfc000000000300000000","first_seen":"2023-04-06T21:19:48Z","last_seen":"2026-04-06T06:06:18.777434Z","times_seen":1228,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.samlesamtykke.com/consent/collector","fqdn":"api.samlesamtykke.com","domain":"samlesamtykke.com","tld":"com"},"ip":{"addr":"34.54.44.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:48.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samlesamtykke.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 21:21:36 GMT","end":"Wed, 31 Dec 2025 22:17:31 GMT"},"fingerprint":{"sha1":"50:01:17:8A:98:F9:7F:1F:84:04:31:24:CD:75:75:3A:67:D7:DA:C9","sha256":"31:BF:AC:74:BE:3A:AD:00:0E:89:F4:75:91:C5:8F:86:53:7F:77:6B:EE:9E:DF:54:BD:BB:BC:4E:9E:AC:E3:22"}}},"request":{"raw":"POST /consent/collector HTTP/1.1\r\nHost: api.samlesamtykke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 169\r\nOrigin: https://www.kosoglek.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kosoglek.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 14 Nov 2025 15:02:48 GMT\r\nserver: Apache/2.4.18 (Ubuntu)\r\naccess-control-allow-origin: https://www.kosoglek.com\r\naccess-control-allow-credentials: true\r\ncontent-length: 4915\r\ncontent-type: application/vnd.api+json\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.18","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4915,"size_decoded":0,"mime_type":"application/vnd.api+json","magic":"JSON text data","md5":"cf8709996b0e1a4100a39fcc51f50515","sha1":"dedde23a14b9e1f9d7bfb3f3e3fc4aacc6a93842","sha256":"160373d54caf104dc7e190ce4bd4081befdbc97ca2abb0543bc1ae04d8380dab","sha512":"1330f17a41b994537c1bcc9aa15e644a6b3cabf66e84f91d328a911a495d7004ec9058d0affea6e03a1e3136a07e145c528aa8e20fb17b627668aa660b90709f","ssdeep":"48:ppp0SCzsP7UbnMJWFEbnWrePQkrXrs5r6risr4rkrStrdYcrhYrPn:pX09sPobMjbQ2QGbKUFaGS5d94P","tlshash":"23a1ed7e056881fdabff71a9c6071958676c11f3b2487c05ea9cc1b82cfa1d132b162b","first_seen":"2024-06-01T20:33:18Z","last_seen":"2026-01-18T16:45:57.13568Z","times_seen":68,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.samlesamtykke.com/consent/collector","fqdn":"api.samlesamtykke.com","domain":"samlesamtykke.com","tld":"com"},"ip":{"addr":"34.54.44.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:49.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samlesamtykke.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 21:21:36 GMT","end":"Wed, 31 Dec 2025 22:17:31 GMT"},"fingerprint":{"sha1":"50:01:17:8A:98:F9:7F:1F:84:04:31:24:CD:75:75:3A:67:D7:DA:C9","sha256":"31:BF:AC:74:BE:3A:AD:00:0E:89:F4:75:91:C5:8F:86:53:7F:77:6B:EE:9E:DF:54:BD:BB:BC:4E:9E:AC:E3:22"}}},"request":{"raw":"POST /consent/collector HTTP/1.1\r\nHost: api.samlesamtykke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 169\r\nOrigin: https://www.kosoglek.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kosoglek.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Nov 2025 15:02:50 GMT\r\nserver: Apache/2.4.18 (Ubuntu)\r\naccess-control-allow-origin: https://www.kosoglek.com\r\naccess-control-allow-credentials: true\r\ncontent-length: 4915\r\ncontent-type: application/vnd.api+json\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.18","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4915,"size_decoded":0,"mime_type":"application/vnd.api+json","magic":"JSON text data","md5":"cf8709996b0e1a4100a39fcc51f50515","sha1":"dedde23a14b9e1f9d7bfb3f3e3fc4aacc6a93842","sha256":"160373d54caf104dc7e190ce4bd4081befdbc97ca2abb0543bc1ae04d8380dab","sha512":"1330f17a41b994537c1bcc9aa15e644a6b3cabf66e84f91d328a911a495d7004ec9058d0affea6e03a1e3136a07e145c528aa8e20fb17b627668aa660b90709f","ssdeep":"48:ppp0SCzsP7UbnMJWFEbnWrePQkrXrs5r6risr4rkrStrdYcrhYrPn:pX09sPobMjbQ2QGbKUFaGS5d94P","tlshash":"23a1ed7e056881fdabff71a9c6071958676c11f3b2487c05ea9cc1b82cfa1d132b162b","first_seen":"2024-06-01T20:33:18Z","last_seen":"2026-01-18T16:45:57.13568Z","times_seen":68,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/img/logo.png","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:47.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kosoglek.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 00:07:12 GMT","end":"Tue, 23 Dec 2025 01:00:45 GMT"},"fingerprint":{"sha1":"4A:AE:4D:B1:98:6F:C0:A8:9C:49:77:34:48:CC:8C:98:B7:0B:9F:EB","sha256":"1D:CB:76:99:14:5F:4C:2B:5D:F2:EC:F9:60:76:A6:54:4A:76:A8:1C:BF:B2:96:DD:74:85:A1:88:87:CA:76:CD"}}},"request":{"raw":"GET /img/logo.png HTTP/1.1\r\nHost: www.kosoglek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 14 Nov 2025 15:02:47 GMT\r\nserver: Apache/2.4.58 (Ubuntu)\r\nvary: X-Forwarded-Proto\r\nlast-modified: Mon, 10 Nov 2025 15:37:44 GMT\r\netag: \"1512-6433f50003d26\"\r\naccept-ranges: bytes\r\ncontent-length: 5394\r\nx-ua-compatible: IE=edge,chrome=1\r\ncontent-type: image/png\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5394,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 110, 8-bit/color RGBA, non-interlaced","md5":"29d605846b67e86cb677b29b3edcdb0b","sha1":"dde8b720f2ea1395a29086af02ea2a1a6c240ca3","sha256":"0627d1cfbe5d7203791fdd1fe465b26b156b50ab11cde03c86e9bbb92fa6262c","sha512":"bb84ea8e14cf8a58f60da96c6a5803e5e9a8babcd28c85c7083247b2e2a49743e7d528bc3a4bf7dd5f0f6e42a84175f21f1e8af9f9b70d83833d8bfe93ce63d6","ssdeep":"96:PSiqknmWPiYI1HAHHNfxwA8m6kXA2SnQNXq3LREKtWqtMZw4bnwOujfLzkQoS687:PSHknEgnckXf6FkqFwnLuTLNom7","tlshash":"0cb15b1beb626c070a4d598439e6726711375e2867a3fd98bedd1c0364710fabc0e4cb","first_seen":"2023-05-18T22:26:51Z","last_seen":"2026-01-03T16:01:32.458831Z","times_seen":40,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/landers/js/vendor.js","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:48.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kosoglek.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 00:07:12 GMT","end":"Tue, 23 Dec 2025 01:00:45 GMT"},"fingerprint":{"sha1":"4A:AE:4D:B1:98:6F:C0:A8:9C:49:77:34:48:CC:8C:98:B7:0B:9F:EB","sha256":"1D:CB:76:99:14:5F:4C:2B:5D:F2:EC:F9:60:76:A6:54:4A:76:A8:1C:BF:B2:96:DD:74:85:A1:88:87:CA:76:CD"}}},"request":{"raw":"GET /landers/js/vendor.js HTTP/1.1\r\nHost: www.kosoglek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Nov 2025 15:02:48 GMT\r\nserver: nginx/1.14.2\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Nov 2025 13:01:30 GMT\r\netag: W/\"6917282a-1e2ae\"\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\ncache-control: max-age=300\r\nxkey: lander\r\nvary: Accept-Encoding\r\nx-varnish: 5194952\r\nage: 0\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000, h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nvia: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish:6.0","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":123566,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60065)","md5":"9a83ff659eaee246f89328e0e69c1705","sha1":"e85aba65e7bfa6080f1505c0a618668990d3925e","sha256":"88eafe7963c0e06e533c355d66639266062ff7093d3cb32d3ed810bf1650607c","sha512":"54f72daa339127352ec2a8947f41122129d25a8fbd085fcfa55dcb72e005f8025c4928a6d5dacd82531d2e5a27ee335cc5dd3f121ed90d82e768f298292f44b9","ssdeep":"1536:LRLiB3wGnUL6oXHUbxmyBWpsbm1Tmu9dnI9ETHCRlNzDnXEYsSBuPTn8GlDKUQTX:BlmKi6TCtErPTnoL0MZ","tlshash":"66c329ce72c6706247ab31ba046f550bf23a5959384d8840f169e4e5bc71b8e8277f3e","first_seen":"2025-10-15T11:38:47.014116Z","last_seen":"2026-01-08T01:37:16.541086Z","times_seen":196,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:48.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.kosoglek.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.kosoglek.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 355016\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Nov 2025 11:18:14 GMT\r\nexpires: Thu, 12 Nov 2026 11:18:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 10 Nov 2025 14:52:55 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 186274\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":831957,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"2506e0d302c7bbd6654b091f44fdda03","sha1":"cddd2822fd20c3a5eaadae592bbe2c1f6d42e430","sha256":"ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e","sha512":"4c5dc8474d796a78832e9607760ad5389576ec4663bf02fd19217902de38fc06423d5bde421b68deed1842ee62d9ccd0eb521aa1fa1626c0f4160a456270a8c3","ssdeep":"12288:b/PieE69kbgh40LMuqHKQn6e8kSCvcFazia7Rbbck:s69mghUD4etS/Fudck","tlshash":"06052ad870527ae47772f8f684973018a33d9479d84c4a2eb1a4d4f42bf084ae276db7","first_seen":"2025-11-13T16:13:50.046413Z","last_seen":"2026-04-04T05:18:28.342811Z","times_seen":46498,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":93,"dns":21,"connect":21,"send":0,"wait":24,"receive":95,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s\u0026co=aHR0cHM6Ly93d3cua29zb2dsZWsuY29tOjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=6w5bmynbjcx6","date":"2025-11-14T15:02:49.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42505\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 11 Nov 2025 00:45:32 GMT\r\nexpires: Wed, 11 Nov 2026 00:45:32 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 10 Nov 2025 14:52:55 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 310637\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82951,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7b035012fa886d53fb1f1e7d14635b97","sha1":"03c77a04fecbca19d5555d6ae876291d3b7973c1","sha256":"4d271d0650a8fb32c6ea7055f6ab8e7edce63e3868aa0a7b4ba03b56f069099f","sha512":"765bec023e54b64c7c93cd75e55320bc5e524dc24b2fd474e5ca63dbcc2bf2106464ac13cb72ed3949816463281c3715ae4edd5e3a11befd0af2ee255c53e89e","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOIUCdthXwW5l1Dx7:1GRFauOxLA/+IcTOULX1","tlshash":"d8838f7338513b39fc2b9b616186b9edf22cc423e5514bfab5457a20c3db19a8253b07","first_seen":"2025-11-13T21:19:52.249776Z","last_seen":"2026-02-22T14:16:54.110663Z","times_seen":40042,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6Lc2aYkcAAAAANp1JsXLqbWbhNIDzi_7RBy95c-s\u0026co=aHR0cHM6Ly93d3cua29zb2dsZWsuY29tOjQ0Mw..\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=6w5bmynbjcx6","date":"2025-11-14T15:02:49.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15344\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Nov 2025 17:55:22 GMT\r\nexpires: Thu, 12 Nov 2026 17:55:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 16 Oct 2017 17:32:55 GMT\r\ncontent-type: font/woff2\r\nage: 162447\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:06:50.903633Z","times_seen":536376,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":62,"dns":0,"connect":20,"send":0,"wait":22,"receive":5,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/enterprise/webworker.js?hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9","date":"2025-11-14T15:02:49.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 355016\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Nov 2025 11:18:14 GMT\r\nexpires: Thu, 12 Nov 2026 11:18:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 10 Nov 2025 14:52:55 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 186275\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":831957,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"2506e0d302c7bbd6654b091f44fdda03","sha1":"cddd2822fd20c3a5eaadae592bbe2c1f6d42e430","sha256":"ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e","sha512":"4c5dc8474d796a78832e9607760ad5389576ec4663bf02fd19217902de38fc06423d5bde421b68deed1842ee62d9ccd0eb521aa1fa1626c0f4160a456270a8c3","ssdeep":"12288:b/PieE69kbgh40LMuqHKQn6e8kSCvcFazia7Rbbck:s69mghUD4etS/Fudck","tlshash":"06052ad870527ae47772f8f684973018a33d9479d84c4a2eb1a4d4f42bf084ae276db7","first_seen":"2025-11-13T16:13:50.046413Z","last_seen":"2026-04-04T05:18:28.342811Z","times_seen":46498,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/landers/images/landing110/default/default/slide02.webp?geo=no","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:53.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kosoglek.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 00:07:12 GMT","end":"Tue, 23 Dec 2025 01:00:45 GMT"},"fingerprint":{"sha1":"4A:AE:4D:B1:98:6F:C0:A8:9C:49:77:34:48:CC:8C:98:B7:0B:9F:EB","sha256":"1D:CB:76:99:14:5F:4C:2B:5D:F2:EC:F9:60:76:A6:54:4A:76:A8:1C:BF:B2:96:DD:74:85:A1:88:87:CA:76:CD"}}},"request":{"raw":"GET /landers/images/landing110/default/default/slide02.webp?geo=no HTTP/1.1\r\nHost: www.kosoglek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_QXFHHE16V3=GS2.1.s1763132569$o1$g0$t1763132569$j60$l0$h0; _ga=GA1.1.1810538657.1763132569; d_fs=1; d_uid=da9a698f-b89b-a0b7-0a6d-9390821f130b; d_uidb=da9a698f-b89b-a0b7-0a6d-9390821f130b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Nov 2025 15:02:53 GMT\r\nserver: nginx/1.14.2\r\ncontent-type: image/webp\r\ncontent-length: 310912\r\nlast-modified: Fri, 14 Nov 2025 13:01:29 GMT\r\netag: \"69172829-4be80\"\r\nx-cacheable: YES\r\ncache-control: max-age=300\r\nxkey: lander\r\nx-varnish: 23285501\r\nage: 0\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000, h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nvia: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish:6.0","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":310912,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1678x1049, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8ad56f094209e0eebc0a922ad78091c4","sha1":"d032aeff6f7ee4ecb0c9949f5a957946254e5cff","sha256":"591cd6b1091fd08df04f4099bb381cb0a729f89555df3e9836153dc622237cff","sha512":"4dd537dbe7140561d03b083df4a840fd6b275fa263ea20574a91381df566d6733ddb1a0adbdc43656b040de37f802dc9abbf9a4424da4b5564b87323616bf8b9","ssdeep":"6144:lzr9DA+SQljFDis4O7y8bSraVGd5tkOcpiiHuNHb9E+Bpf8:ldDPSQN14CyMIFkOc8B79BE","tlshash":"c664239ca9563cb4bff0c7c74cf368a08a9b8ec08885490d497f559daa97f5ddb18380","first_seen":"2025-02-03T23:09:43.857551Z","last_seen":"2026-04-05T04:48:04.203395Z","times_seen":26,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/landers/images/landing110/default/default/slide03.webp?geo=no","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:58.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kosoglek.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 00:07:12 GMT","end":"Tue, 23 Dec 2025 01:00:45 GMT"},"fingerprint":{"sha1":"4A:AE:4D:B1:98:6F:C0:A8:9C:49:77:34:48:CC:8C:98:B7:0B:9F:EB","sha256":"1D:CB:76:99:14:5F:4C:2B:5D:F2:EC:F9:60:76:A6:54:4A:76:A8:1C:BF:B2:96:DD:74:85:A1:88:87:CA:76:CD"}}},"request":{"raw":"GET /landers/images/landing110/default/default/slide03.webp?geo=no HTTP/1.1\r\nHost: www.kosoglek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_QXFHHE16V3=GS2.1.s1763132569$o1$g0$t1763132569$j60$l0$h0; _ga=GA1.1.1810538657.1763132569; d_fs=1; d_uid=da9a698f-b89b-a0b7-0a6d-9390821f130b; d_uidb=da9a698f-b89b-a0b7-0a6d-9390821f130b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Nov 2025 15:02:58 GMT\r\nserver: nginx/1.14.2\r\ncontent-type: image/webp\r\ncontent-length: 125604\r\nlast-modified: Fri, 14 Nov 2025 13:01:29 GMT\r\netag: \"69172829-1eaa4\"\r\nx-cacheable: YES\r\ncache-control: max-age=300\r\nxkey: lander\r\nx-varnish: 2252083\r\nage: 0\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000, h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nvia: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish:6.0","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":125604,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1678x1049, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"44f61cac74912ab201b798195e08396f","sha1":"53cc892db8b9fa032360dd1b4022873d89704ca1","sha256":"f907f7f65b4515f83823641bfc25581ba90d933fdfdc6d35cf54eef67a3e6dc3","sha512":"4fe8ae2bc93a6fbbb63ac16b51b38fb4b135b2433c0adaa7b8a3d683f658da4883e848e53eb799a8b9dc318887ba86656052acc07e1d6d067fe5ebca2f6d4ae2","ssdeep":"3072:/qOP6libDBLAZmIOVxWVAp7CNRbi4jSxGA2TgQKz:/d6QbqoQfit89TZKz","tlshash":"d7c313d3cef89f8a2fd5145497b030405d273989b2876dcbdc3a23da62c9a4d12ad793","first_seen":"2025-02-03T23:09:43.83635Z","last_seen":"2026-04-05T04:48:04.19817Z","times_seen":26,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":106,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.samlesamtykke.com/consent/loadSegment","fqdn":"api.samlesamtykke.com","domain":"samlesamtykke.com","tld":"com"},"ip":{"addr":"34.54.44.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:50.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samlesamtykke.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 21:21:36 GMT","end":"Wed, 31 Dec 2025 22:17:31 GMT"},"fingerprint":{"sha1":"50:01:17:8A:98:F9:7F:1F:84:04:31:24:CD:75:75:3A:67:D7:DA:C9","sha256":"31:BF:AC:74:BE:3A:AD:00:0E:89:F4:75:91:C5:8F:86:53:7F:77:6B:EE:9E:DF:54:BD:BB:BC:4E:9E:AC:E3:22"}}},"request":{"raw":"OPTIONS /consent/loadSegment HTTP/1.1\r\nHost: api.samlesamtykke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.kosoglek.com/\r\nOrigin: https://www.kosoglek.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Nov 2025 15:02:50 GMT\r\nserver: Apache/2.4.18 (Ubuntu)\r\naccess-control-allow-origin: https://www.kosoglek.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type\r\ncontent-length: 0\r\ncontent-type: application/vnd.api+json\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.18","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/vnd.api+json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"franklimydear.com/?a=14937\u0026c=98164\u0026s2=%7B%25site%25%7D\u0026s3=%7B%25platform%25%7D\u0026s1=82643\u0026s4=VLS-wkdvdauuq57dpf5ej4esuup8","fqdn":"franklimydear.com","domain":"franklimydear.com","tld":"com"},"ip":{"addr":"52.223.19.77","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-14T15:02:46.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"franklimydear.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Sun, 08 Jun 2025 00:00:00 GMT","end":"Tue, 07 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2F:C8:AA:6B:3B:C2:FF:DC:19:C1:E0:C6:01:D2:E8:9F:AD:39:A8:19","sha256":"6F:58:37:94:9C:8B:44:1D:BD:70:D8:E4:68:64:38:2F:43:EF:B8:08:20:1A:09:2D:3A:F6:92:CD:02:58:87:3D"}}},"request":{"raw":"GET /?a=14937\u0026c=98164\u0026s2=%7B%25site%25%7D\u0026s3=%7B%25platform%25%7D\u0026s1=82643\u0026s4=VLS-wkdvdauuq57dpf5ej4esuup8 HTTP/1.1\r\nHost: franklimydear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 14 Nov 2025 15:02:46 GMT\r\ncontent-length: 0\r\nlocation: https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643\r\nserver: nginx\r\nset-cookie: pt30=f280f3dec2d1415e98064411189b1c77; Max-Age=2592000; Expires=Sun, 14 Dec 2025 15:02:46 GMT; Domain=franklimydear.com; Path=/; Secure; HttpOnly; SameSite=None\nptc=f280f3dec2d1415e98064411189b1c77; Max-Age=157680000; Expires=Wed, 13 Nov 2030 15:02:46 GMT; Domain=franklimydear.com; Path=/; Secure; HttpOnly; SameSite=None\nptbs=f280f3dec2d1415e98064411189b1c77; Domain=franklimydear.com; Path=/; Secure; HttpOnly; SameSite=None\nptr=pt8160bf5b3c2d437d91d5fff9ab800d16; Max-Age=157680000; Expires=Wed, 13 Nov 2030 15:02:46 GMT; Domain=franklimydear.com; Path=/; Secure; HttpOnly; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34797,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":144,"dns":19,"connect":1,"send":0,"wait":46,"receive":0,"ssl":119},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"franklimydear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"franklimydear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.kosoglek.com/landers/js/landing110.js","fqdn":"www.kosoglek.com","domain":"kosoglek.com","tld":"com"},"ip":{"addr":"34.149.196.159","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643","date":"2025-11-14T15:02:48.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kosoglek.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 00:07:12 GMT","end":"Tue, 23 Dec 2025 01:00:45 GMT"},"fingerprint":{"sha1":"4A:AE:4D:B1:98:6F:C0:A8:9C:49:77:34:48:CC:8C:98:B7:0B:9F:EB","sha256":"1D:CB:76:99:14:5F:4C:2B:5D:F2:EC:F9:60:76:A6:54:4A:76:A8:1C:BF:B2:96:DD:74:85:A1:88:87:CA:76:CD"}}},"request":{"raw":"GET /landers/js/landing110.js HTTP/1.1\r\nHost: www.kosoglek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.kosoglek.com/landing110?pi=14937\u0026pt1=pt8160bf5b3c2d437d91d5fff9ab800d16\u0026pe=82643\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Nov 2025 15:02:48 GMT\r\nserver: nginx/1.14.2\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Nov 2025 13:01:30 GMT\r\netag: W/\"6917282a-1107d\"\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\ncache-control: max-age=300\r\nxkey: lander\r\nvary: Accept-Encoding\r\nx-varnish: 5194956\r\nage: 0\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000, h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nvia: 1.1 varnish (Varnish/6.0), 1.1 google, 1.1 google\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":69757,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65473), with no line terminators","md5":"1ec7a559d3d613da6589182a151bf39c","sha1":"3c9a07d94013b24edf321545df185b9573dd23c0","sha256":"a6a710cfc575daa02a538ae7a82599d8deeca0a8113b7460e342b24d3064904d","sha512":"de07fc00b7169278a5baba1b3e916912124b4a4b0374dbc588169e85da736fdfa43cab496209b548d53585286e23c2a8278ee5693e45c1af8fe953819cc1a887","ssdeep":"768:mTt/I4jW1X4/JvVO1izVSofQrB+BIUH2z+I+/QClnGxuIK6e+ZAORMPNhlCJ9hh2:mxg4jWBFwzIR7CFfrkoy4iby","tlshash":"4b63f88cf2a5b1a2039360f8506f110ab237f968680d49a4f714c9d13d7ad4ab677f7e","first_seen":"2025-10-31T13:00:03.532633Z","last_seen":"2025-11-28T21:43:35.827882Z","times_seen":36,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}