{"report_id":"9896971a-bd52-48f7-85dd-91b74085fff7","version":6,"status":"done","tags":[],"date":"2026-02-22T18:35:38Z","url":{"schema":"http","addr":"l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":0,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"title":"Jännittäviä keskusteluja kuumien miesten kanssa","dom":{"size":84591,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13252)","md5":"330894d5532ea919781ca3aaf316ff9a","sha1":"080b47202e02ffce8964aa0528d2b69c16100494","sha256":"81d10319eca80732d9b2db1d17afded823653f43fd9945de6d43ab88a9b59835","sha512":"f0b5ce868c44421fac61838ea837bb619dba626908f91451c737c38388fdbe4abcff314b41d08e19f9007ac4d5b7fd0453fa9eef5d63b10873cf7f00a74b120e","ssdeep":"768:Qqm3XvDoWuLmh3fodm6GkVG9eLAqO/uKCYGFzmZTizrWVB2:QjLoBLmh3qm6GkVGwiVCY+zmZT6a2","tlshash":"5683e82677a69133025300dc6b774f68aab6420797519c65bf9c83f26fd2c58873b2ec","dom_hash":"domhashcde1cad3f2b95b186844f64af52275b2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":0,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-29T18:35:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"s.opoxv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"s.chnsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"s.chmsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"s.orbsrv.com","ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2020-05-16","domain_rank":50502,"first_seen":"2020-09-02T21:53:48Z","last_seen":"2026-02-20T06:25:08.086032Z","alert_count":0,"request_count":4,"received_data":1672,"sent_data":1868,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.onesignal.com","ip":{"addr":"104.16.160.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-09-10","domain_rank":31060,"first_seen":"2015-04-22T13:41:50Z","last_seen":"2026-02-18T15:37:06.935687Z","alert_count":0,"request_count":1,"received_data":10028,"sent_data":426,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"syndication.realsrv.com","ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2019-02-07","domain_rank":176973,"first_seen":"2019-07-03T21:39:52Z","last_seen":"2026-02-19T18:09:34.205643Z","alert_count":0,"request_count":4,"received_data":1752,"sent_data":2018,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"l.gay2match.com","ip":{"addr":"188.122.84.136","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-03-28","domain_rank":0,"first_seen":"2025-09-06T17:33:05.860768Z","last_seen":"2026-02-22T17:44:20.39774Z","alert_count":0,"request_count":26,"received_data":2233448,"sent_data":18428,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"OneSignal","description":"OneSignal is a customer engagement messaging solution.","website":"https://onesignal.com","common_platform_enumeration":"","icon":"OneSignal.svg","categories":["Marketing automation","A/B Testing"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"jQuery UI:1.13.2","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}]},{"fqdn":"tile.openstreetmap.org","ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2004-08-09","domain_rank":69531,"first_seen":"2012-08-09T12:17:15Z","last_seen":"2026-02-16T23:55:57.932943Z","alert_count":0,"request_count":25,"received_data":860692,"sent_data":11200,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"s.chnsrv.com","ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-15","domain_rank":356919,"first_seen":"2025-07-16T14:39:46.853439Z","last_seen":"2026-02-18T18:10:29.934622Z","alert_count":4,"request_count":4,"received_data":1748,"sent_data":1974,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s.pemsrv.com","ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-08-01","domain_rank":104334,"first_seen":"2023-08-04T13:10:46Z","last_seen":"2026-02-18T21:04:11.941994Z","alert_count":0,"request_count":4,"received_data":1672,"sent_data":1868,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-02-15T23:01:11.547642Z","alert_count":0,"request_count":2,"received_data":345201,"sent_data":894,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s.magsrv.com","ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-08-01","domain_rank":47665,"first_seen":"2023-08-04T12:48:00Z","last_seen":"2026-02-19T05:46:16.061852Z","alert_count":4,"request_count":4,"received_data":1672,"sent_data":1868,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"a.magsrv.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2023-08-01","domain_rank":51490,"first_seen":"2023-08-04T16:18:00Z","last_seen":"2026-02-18T20:27:27.738597Z","alert_count":8,"request_count":4,"received_data":6740,"sent_data":1644,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-02-15T22:20:44.607116Z","alert_count":0,"request_count":1,"received_data":455678,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-02-15T23:23:43.665666Z","alert_count":0,"request_count":2,"received_data":149245,"sent_data":929,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"s.opoxv.com","ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2019-12-02","domain_rank":213712,"first_seen":"2019-12-13T09:21:20Z","last_seen":"2026-02-19T20:35:20.160318Z","alert_count":4,"request_count":4,"received_data":1668,"sent_data":1864,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s.dsr9gv.com","ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-10-29","domain_rank":0,"first_seen":"2026-02-20T14:50:05.157248Z","last_seen":"2026-02-20T14:50:05.157248Z","alert_count":0,"request_count":4,"received_data":1748,"sent_data":1974,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s.eln7dc.com","ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-11-06","domain_rank":0,"first_seen":"2025-11-07T14:16:43.337265Z","last_seen":"2026-02-19T13:01:22.222888Z","alert_count":0,"request_count":4,"received_data":1748,"sent_data":1974,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s.dsr577.com","ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-10-29","domain_rank":0,"first_seen":"2026-02-16T11:08:46.42555Z","last_seen":"2026-02-16T11:08:46.42555Z","alert_count":0,"request_count":4,"received_data":1748,"sent_data":1974,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s.chmsrv.com","ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-09-22","domain_rank":0,"first_seen":"2025-09-23T09:30:19.263762Z","last_seen":"2026-02-20T13:25:03.30514Z","alert_count":4,"request_count":4,"received_data":1748,"sent_data":1974,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"live.connect2api.com","ip":{"addr":"188.122.84.144","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"domain_registered":"2020-05-04","domain_rank":0,"first_seen":"2021-05-22T14:54:20Z","last_seen":"2026-02-22T07:07:02.805244Z","alert_count":0,"request_count":1,"received_data":631,"sent_data":509,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"d1zp0skjzco26d.cloudfront.net","ip":{"addr":"3.173.129.8","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2022-12-20T23:16:46Z","last_seen":"2026-02-19T07:04:12.831314Z","alert_count":0,"request_count":1,"received_data":3326,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"s.zlinkw.com","ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-06-30","domain_rank":0,"first_seen":"2025-11-13T15:02:59.109026Z","last_seen":"2026-02-22T17:02:27.802143Z","alert_count":0,"request_count":4,"received_data":1748,"sent_data":1974,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"unpkg.com/leaflet@1.9.4/dist/leaflet.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"35b48eb991f383702f153452506e07b2","sha1":"5a640ff863e7902a8cac2ce6ba37c87b30677761","sha256":"db49d009c841f5ca34a888c96511ae936fd9f5533e90d8b2c4d57596f4e5641a","sha512":"0701dfaebe1cf6499190bc3a89715dcdc75657f3c69158222322162cb953497cd6433c6e4a0e03890502a5abb3fc45a3824e53610a97fe4be7f691b536961faa","ssdeep":"1536:sdeV/7u3i297NP5yaKuLylR+xCa8Mc5ScLsG7JBVc3bk/+bB7naxDk9ILvZs+rTr:Z/7uNNyaKST0LbYQDDkOr","tlshash":"cee3c68ab3d17a2742c36264003f210bb6326595a40a416cb97cd9efee7ca497137f7d","size":147552,"data":"","first_seen":"2023-06-27T11:10:33Z","last_seen":"2026-04-04T06:28:05.382624Z","times_seen":4281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/tag_gen.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"19a25ea6643149ce82fd40a74ca56e16","sha1":"1e1c6dd9337a1f8a74975e30ec08f07404042d97","sha256":"b7c79f479ece6092e8983f60594e5561098b2816178bc7af3f5bf49764258d14","sha512":"164c460fed3020487b1575561bcef583b52a6e857906a875015666c4e2c32e283ccee99d05cabd8dc916908c9676aad846ff89cb924320a3fddd95222f38d235","ssdeep":"","tlshash":"ef2144b4b564653265701819a0ff4da1e07a07691e8296e018dfbc01997cfd7419aecc","size":1167,"data":"","first_seen":"2026-02-20T15:33:47.415522Z","last_seen":"2026-02-23T20:46:22.640907Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f7e66a9afd36520b3f4c3f5ac2326a8","sha1":"42b654cefe66b60ec2cd69c900e0ba72d341ae63","sha256":"8fc65d5b851e7e45ff9d73d18e56624c8c1b26dc91d0b4a96c28c1a5b911f26e","sha512":"a0b4aeb83eba5172d96eb7cd3e7cca4bb82bbf98fa89182c9e462e51b53044d4ad6b3f3bd5b34ed52d61fa5548e2a357ca86643e0134fb15bbdd60fb083acc7e","ssdeep":"","tlshash":"73c02b8c360f1c7041fb37008b3ff604f403321494d6aa314c4a2344ce30e03d784810","size":153,"data":"","first_seen":"2025-06-30T07:05:53.604912Z","last_seen":"2026-04-03T22:55:15.940374Z","times_seen":822,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jqueryui/1.13.2/jquery-ui.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e2047978946a1d271356d0b557a84a3","sha1":"5f29a324c8affb1fdb26ad4564b1e044372beed2","sha256":"9528ca634fecad433d044ddd3e6f9ce1f068d5d932dafdbb19d8e6daea1968bd","sha512":"e7ba19fef5bc00d32347f290e817bdbfffbf87a6eaf7f9777f439ceef9faa8cab286f3ddd5cbca051596a73bb44289de226aabd929263b8312a94f91a47a26dd","ssdeep":"3072:eDPNddBFak8JUaVDpYujVHUc92smVppuzUPFI9fB8NpjJSyACAV:uNdIVWjNS9cdzAV","tlshash":"8944f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","size":255084,"data":"","first_seen":"2023-03-07T18:39:57Z","last_seen":"2026-04-04T06:41:20.579435Z","times_seen":24392,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/tag_gen.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"19a25ea6643149ce82fd40a74ca56e16","sha1":"1e1c6dd9337a1f8a74975e30ec08f07404042d97","sha256":"b7c79f479ece6092e8983f60594e5561098b2816178bc7af3f5bf49764258d14","sha512":"164c460fed3020487b1575561bcef583b52a6e857906a875015666c4e2c32e283ccee99d05cabd8dc916908c9676aad846ff89cb924320a3fddd95222f38d235","ssdeep":"","tlshash":"ef2144b4b564653265701819a0ff4da1e07a07691e8296e018dfbc01997cfd7419aecc","size":1167,"data":"","first_seen":"2026-02-20T15:33:47.415522Z","last_seen":"2026-02-23T20:46:22.640907Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/tag_gen.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"19a25ea6643149ce82fd40a74ca56e16","sha1":"1e1c6dd9337a1f8a74975e30ec08f07404042d97","sha256":"b7c79f479ece6092e8983f60594e5561098b2816178bc7af3f5bf49764258d14","sha512":"164c460fed3020487b1575561bcef583b52a6e857906a875015666c4e2c32e283ccee99d05cabd8dc916908c9676aad846ff89cb924320a3fddd95222f38d235","ssdeep":"","tlshash":"ef2144b4b564653265701819a0ff4da1e07a07691e8296e018dfbc01997cfd7419aecc","size":1167,"data":"","first_seen":"2026-02-20T15:33:47.415522Z","last_seen":"2026-02-23T20:46:22.640907Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-04-04T06:39:29.259973Z","times_seen":114923,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-Z5RR7NCDXK","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbdeed7b46ef2fecc2a50f9785d9f198","sha1":"59612417d7e8f0fa3e1c99728e25fa765c95d9c6","sha256":"52279b45f760f7c95c234e08b0bdae4380a959e63854f1586550944654866e97","sha512":"29cbed49396d33278d9ddfb66de167b01128140b374d70a7f0795c24cd7af78c65068be59dca2f030d15a66bd7a50f4b0fb026adc30848f4bde35f172875d477","ssdeep":"6144:zX4D85YxaWJljxXUJ78kKUeDKJN5hSppR/UPEnQ/JYY:kw5YxacxkJ78ZN/Un","tlshash":"a0a41ace73d670269396e078503f018ba57b29a2f44dc89af189cce42d7499a4277f7c","size":455074,"data":"","first_seen":"2026-02-22T16:17:37.749701Z","last_seen":"2026-02-22T21:26:17.427914Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"syndication.realsrv.com/tag.php?goal=b2cdfc9c67c0343aca0ef0f56527db02","fqdn":"syndication.realsrv.com","domain":"realsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 12:00:56 GMT","end":"Thu, 26 Mar 2026 12:00:55 GMT"},"fingerprint":{"sha1":"64:14:CE:C9:3A:C1:9D:17:1E:17:06:35:DE:37:16:D3:07:B4:97:52","sha256":"B5:97:E2:D7:A3:3F:12:F4:1C:67:4F:93:80:C7:2C:10:4A:4B:FA:0D:0B:7D:17:93:62:98:87:22:11:A9:50:B0"}}},"request":{"raw":"GET /tag.php?goal=b2cdfc9c67c0343aca0ef0f56527db02 HTTP/1.1\r\nHost: syndication.realsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:49 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A139616%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:49 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":8,"connect":32,"send":0,"wait":28,"receive":0,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.opoxv.com/tag.php?goal=4ae3dc9ad80ddf0dfb0f5dd245bfe458","fqdn":"s.opoxv.com","domain":"opoxv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opoxv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:58:02 GMT","end":"Thu, 26 Mar 2026 11:58:01 GMT"},"fingerprint":{"sha1":"FD:ED:08:A5:4F:71:E3:CF:05:EC:2F:2D:A1:B6:4B:C8:31:0D:D1:3E","sha256":"18:C6:90:EB:ED:C9:1B:A3:2C:F1:48:DB:87:2A:99:04:F4:91:C0:24:1D:EA:E6:4C:70:A3:A2:CE:33:CF:5E:9D"}}},"request":{"raw":"GET /tag.php?goal=4ae3dc9ad80ddf0dfb0f5dd245bfe458 HTTP/1.1\r\nHost: s.opoxv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:49 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A139618%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:49 GMT; path=/; domain=.opoxv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":120,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"s.opoxv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"l.gay2match.com/1020/media/mgay6.png","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l.gay2match.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 14:33:03 GMT","end":"Sun, 12 Apr 2026 14:33:02 GMT"},"fingerprint":{"sha1":"FA:02:1A:40:68:CC:DA:69:92:D9:0E:32:2A:48:E0:2B:91:28:66:24","sha256":"66:E2:8D:22:93:A2:26:F0:64:9F:DA:1C:74:20:4B:12:38:D8:19:0F:4C:6E:7E:3B:B7:B4:0C:0B:BD:9E:F3:E5"}}},"request":{"raw":"GET /1020/media/mgay6.png HTTP/1.1\r\nHost: l.gay2match.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z5RR7NCDXK=GS2.1.s1771785288$o1$g0$t1771785288$j60$l0$h0; _ga=GA1.1.1539798426.1771785289\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\nlast-modified: Thu, 20 Nov 2025 10:45:02 GMT\r\netag: \"14dc6-6440463a6bb44\"\r\naccept-ranges: bytes\r\ncontent-length: 85446\r\ncache-control: max-age=63072000\r\nexpires: Tue, 22 Feb 2028 18:34:49 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85446,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"7195207c816d2c42e801458a7c40e87d","sha1":"a677235daa5cbfe7e1c4d1eebef4ab903169d0e2","sha256":"f0685b26bca3483892d98e4fc227325495cdbc8e5979af71225a4c4356f0df0f","sha512":"2bb66c582af467301de9543ecac2ae35b1471352acacb25853101b7a2c93adaaedc84c58f5b8e298d8794af8ffe2ecb5504e62b594512a7145eddb8740539c1a","ssdeep":"1536:+qgvYLwI+wqBG6sdZBz8QFWp/ymmu7BzDeIwFuefaBraM0KFSSbP3TIMub5+:ou5+wqBWBcKzuEIwFVoaM0KFS2cMuk","tlshash":"488312a6a0783c7ad49aeb612935f017c5bf14b88413ec78ba68cfa25fc7dd00524b0d","first_seen":"2025-09-20T18:00:07.066503Z","last_seen":"2026-03-27T22:57:13.616353Z","times_seen":48,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tile.openstreetmap.org/13/4208/2689.png","fqdn":"tile.openstreetmap.org","domain":"openstreetmap.org","tld":"org"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tile.openstreetmap.org","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 10 Nov 2025 22:01:08 GMT","end":"Sat, 12 Dec 2026 22:01:07 GMT"},"fingerprint":{"sha1":"07:9F:B2:D4:9E:DC:2E:8F:05:FE:15:93:27:F8:D6:6D:6E:C0:72:10","sha256":"2D:8E:B3:52:14:E2:C8:B0:2B:B0:50:15:D2:84:7E:ED:E8:6B:79:22:C7:DD:35:07:C5:67:2D:C7:E4:84:E4:B9"}}},"request":{"raw":"GET /13/4208/2689.png HTTP/1.1\r\nHost: tile.openstreetmap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\nserver: Apache\r\ncache-control: max-age=88835, stale-while-revalidate=604800, stale-if-error=604800\r\nexpires: Sun, 22 Feb 2026 13:17:46 GMT\r\netag: \"64327bed7a0a6ec7fc20e97bd2415552\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-tilerender: nidhogg.openstreetmap.org\r\naccept-ranges: bytes\r\nage: 107858\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410025-HEL, cache-hel1410024-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 0\r\nx-timer: S1771785289.225506,VS0,VE1\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 32323\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":32323,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"64327bed7a0a6ec7fc20e97bd2415552","sha1":"16d9e6d4e845e334789b813092586466a5a5711c","sha256":"7287f5f6449f0879463141bc8ab7cd9fb10ad4f7e62378120ca69ab0809bb4d3","sha512":"1b45ee23be4da5572bf42afe08e9e371ad754f66ac60057b8b6be5c362653362f511849fbcd96d89a362f72025f42e6a84ddceeec281dac894d42267b7e06237","ssdeep":"384:XpGflEIytEdoLznTgRxyynmOHO5CZGDR0U4eI66uBywD43mmS0CoZ0nQ9/9ecXyr:XpGX2/3nEfmOu0AF0IFB3GF0cX8x5Nz","tlshash":"e8e2d0976e8af89da760dc5e74c77fd98e8080409ca9c62085b974fdcf80bc9716e225","first_seen":"2026-02-22T17:44:22.074149Z","last_seen":"2026-02-24T20:25:39.650844Z","times_seen":3,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.dsr9gv.com/tag.php?goal=4743cffb835703dfda2a66afec68bc1d","fqdn":"s.dsr9gv.com","domain":"dsr9gv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsr9gv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 12:19:58 GMT","end":"Sat, 04 Apr 2026 12:19:57 GMT"},"fingerprint":{"sha1":"99:08:51:96:F8:F7:87:4B:50:1B:FE:12:9F:9C:57:69:7E:73:A5:99","sha256":"24:E5:11:2D:04:AD:67:62:12:B9:91:AE:99:1A:B9:E5:C5:F2:BB:45:18:F3:9A:D2:81:DF:9C:7E:17:49:72:20"}}},"request":{"raw":"GET /tag.php?goal=4743cffb835703dfda2a66afec68bc1d HTTP/1.1\r\nHost: s.dsr9gv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A129426%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:48 GMT; path=/; domain=.dsr9gv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":115,"dns":5,"connect":24,"send":0,"wait":39,"receive":0,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.chnsrv.com/tag.php?goal=f1adefe0892dc8be7551a5c06279c1b6","fqdn":"s.chnsrv.com","domain":"chnsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chnsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:37:55 GMT","end":"Tue, 28 Apr 2026 10:37:54 GMT"},"fingerprint":{"sha1":"7C:16:8B:6C:CD:F6:5F:56:53:1E:53:F5:8F:52:31:75:47:45:A1:7B","sha256":"EC:50:33:48:CE:BE:A0:F5:E2:9B:19:C2:50:7A:53:E4:24:5C:57:14:B2:1F:E1:00:39:EE:E5:15:F3:AE:4A:E9"}}},"request":{"raw":"GET /tag.php?goal=f1adefe0892dc8be7551a5c06279c1b6 HTTP/1.1\r\nHost: s.chnsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A139614%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:48 GMT; path=/; domain=.chnsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":2,"connect":28,"send":0,"wait":28,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"s.chnsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/tag.php?goal=f1adefe0892dc8be7551a5c06279c1b6","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /tag.php?goal=f1adefe0892dc8be7551a5c06279c1b6 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:49 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A139614%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:49 GMT; path=/; domain=.magsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":422,"timings":{"blocked":202,"dns":8,"connect":34,"send":0,"wait":31,"receive":0,"ssl":134},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.zlinkw.com/tag.php?goal=f1adefe0892dc8be7551a5c06279c1b6","fqdn":"s.zlinkw.com","domain":"zlinkw.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlinkw.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:51:19 GMT","end":"Tue, 28 Apr 2026 10:51:18 GMT"},"fingerprint":{"sha1":"3C:F8:DD:5D:54:4F:73:D7:86:5A:CA:32:7B:45:73:0F:80:23:34:92","sha256":"E2:CD:2F:4C:CA:BA:C0:76:32:97:EC:05:0E:00:B1:6B:66:50:34:8B:15:2D:4B:E3:3B:22:16:98:37:A7:A8:3C"}}},"request":{"raw":"GET /tag.php?goal=f1adefe0892dc8be7551a5c06279c1b6 HTTP/1.1\r\nHost: s.zlinkw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A139614%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:48 GMT; path=/; domain=.zlinkw.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":111,"dns":9,"connect":30,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.zlinkw.com/tag.php?goal=b2cdfc9c67c0343aca0ef0f56527db02","fqdn":"s.zlinkw.com","domain":"zlinkw.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlinkw.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:51:19 GMT","end":"Tue, 28 Apr 2026 10:51:18 GMT"},"fingerprint":{"sha1":"3C:F8:DD:5D:54:4F:73:D7:86:5A:CA:32:7B:45:73:0F:80:23:34:92","sha256":"E2:CD:2F:4C:CA:BA:C0:76:32:97:EC:05:0E:00:B1:6B:66:50:34:8B:15:2D:4B:E3:3B:22:16:98:37:A7:A8:3C"}}},"request":{"raw":"GET /tag.php?goal=b2cdfc9c67c0343aca0ef0f56527db02 HTTP/1.1\r\nHost: s.zlinkw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:49 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A139616%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:49 GMT; path=/; domain=.zlinkw.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":190,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.eln7dc.com/tag.php?goal=4ae3dc9ad80ddf0dfb0f5dd245bfe458","fqdn":"s.eln7dc.com","domain":"eln7dc.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eln7dc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 12:21:41 GMT","end":"Sat, 04 Apr 2026 12:21:40 GMT"},"fingerprint":{"sha1":"B9:23:31:EC:61:B4:6A:E3:FB:59:35:73:4C:A9:81:E8:6A:AD:F6:20","sha256":"1F:21:4D:2C:21:14:F5:7B:5D:A7:2B:00:23:AC:12:B1:21:FD:BB:CD:8A:A6:4D:05:29:23:6D:7F:B8:88:87:EF"}}},"request":{"raw":"GET /tag.php?goal=4ae3dc9ad80ddf0dfb0f5dd245bfe458 HTTP/1.1\r\nHost: s.eln7dc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nCookie: goals=a%3A1%3A%7Bi%3A129426%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:49 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A2%3A%7Bi%3A129426%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7Di%3A139618%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:49 GMT; path=/; domain=.eln7dc.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":112,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.gay2match.com/1020/media/mgay7.png","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l.gay2match.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 14:33:03 GMT","end":"Sun, 12 Apr 2026 14:33:02 GMT"},"fingerprint":{"sha1":"FA:02:1A:40:68:CC:DA:69:92:D9:0E:32:2A:48:E0:2B:91:28:66:24","sha256":"66:E2:8D:22:93:A2:26:F0:64:9F:DA:1C:74:20:4B:12:38:D8:19:0F:4C:6E:7E:3B:B7:B4:0C:0B:BD:9E:F3:E5"}}},"request":{"raw":"GET /1020/media/mgay7.png HTTP/1.1\r\nHost: l.gay2match.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z5RR7NCDXK=GS2.1.s1771785288$o1$g0$t1771785288$j60$l0$h0; _ga=GA1.1.1539798426.1771785289\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\nlast-modified: Thu, 20 Nov 2025 10:45:02 GMT\r\netag: \"18ecc-6440463a6bb44\"\r\naccept-ranges: bytes\r\ncontent-length: 102092\r\ncache-control: max-age=63072000\r\nexpires: Tue, 22 Feb 2028 18:34:49 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102092,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"bb83f3493b7078d32014f68e9ba93475","sha1":"fd6ea0e42112a22c932e21e872f2df08a967be3f","sha256":"16415196ed603c38d474f806b9701c831b92d536f041ff9b5572241e88c5d634","sha512":"44a249b71b21190b731412df66a0cf0c2e71e884c7c0358c2374787b7babf59fcc7e1b17511e3bfea658a7e1a3b7330423df00e51cfbb2ea7fbcbb99e03bc9ce","ssdeep":"3072:RaHYiNw93XTfduW7hvm8RmDXxNX0iRYE9hoi:RaHPNw9zQBNschoi","tlshash":"cda3024b873118a8e9024e7dc6d3ca876f265d0201adbe2977b339960da24edd01ddf7","first_seen":"2025-09-20T18:00:07.086804Z","last_seen":"2026-03-27T22:57:13.655Z","times_seen":48,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.gay2match.com/1020/css/style.css","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l.gay2match.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 14:33:03 GMT","end":"Sun, 12 Apr 2026 14:33:02 GMT"},"fingerprint":{"sha1":"FA:02:1A:40:68:CC:DA:69:92:D9:0E:32:2A:48:E0:2B:91:28:66:24","sha256":"66:E2:8D:22:93:A2:26:F0:64:9F:DA:1C:74:20:4B:12:38:D8:19:0F:4C:6E:7E:3B:B7:B4:0C:0B:BD:9E:F3:E5"}}},"request":{"raw":"GET /1020/css/style.css HTTP/1.1\r\nHost: l.gay2match.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\nlast-modified: Wed, 24 Sep 2025 21:19:59 GMT\r\netag: \"1b71-63f929d70c4b2-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=63072000\r\nexpires: Tue, 22 Feb 2028 18:34:48 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 1814\r\ncontent-type: text/css\r\ndate: Sun, 22 Feb 2026 18:34:48 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7025,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"d5a63be91e6ea93139e13d71a1735eea","sha1":"077da819a63774e38c991e5ffca2c7ca45d89914","sha256":"e38e4dbba59cdf3d8ead54287dc164828229cfef464e3c558bf1559060bfe53c","sha512":"ed029d78574a6111c537af8098b28d71017311965798aaf4d1e0f869ff4b1ea3c0ddd90d645fb984af1c8f841ec14739c35e8210b29f03178ccc806b6d9afc04","ssdeep":"96:HZTVo2JvFuFOeaJ4cFDznLFY5+utDwT8Fr0bAFWyUxSoxwb6SbWx/sSYd+/+UXA4:H0YhFLFk+Eg8FrJF7j/iRMc+0AJ3foFD","tlshash":"d7e1229967b81204741be9a87eb61f9a331d4013d80eca7d6bd1606cefc81b6a5a234d","first_seen":"2025-09-19T16:36:45.165812Z","last_seen":"2026-03-31T16:37:22.592941Z","times_seen":155,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.chnsrv.com/tag.php?goal=4743cffb835703dfda2a66afec68bc1d","fqdn":"s.chnsrv.com","domain":"chnsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chnsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:37:55 GMT","end":"Tue, 28 Apr 2026 10:37:54 GMT"},"fingerprint":{"sha1":"7C:16:8B:6C:CD:F6:5F:56:53:1E:53:F5:8F:52:31:75:47:45:A1:7B","sha256":"EC:50:33:48:CE:BE:A0:F5:E2:9B:19:C2:50:7A:53:E4:24:5C:57:14:B2:1F:E1:00:39:EE:E5:15:F3:AE:4A:E9"}}},"request":{"raw":"GET /tag.php?goal=4743cffb835703dfda2a66afec68bc1d HTTP/1.1\r\nHost: s.chnsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A129426%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:48 GMT; path=/; domain=.chnsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":121,"dns":10,"connect":24,"send":0,"wait":39,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"s.chnsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/tag.php?goal=4743cffb835703dfda2a66afec68bc1d","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /tag.php?goal=4743cffb835703dfda2a66afec68bc1d HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A129426%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:48 GMT; path=/; domain=.magsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":169,"dns":0,"connect":36,"send":0,"wait":30,"receive":0,"ssl":128},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.dsr577.com/tag.php?goal=f1adefe0892dc8be7551a5c06279c1b6","fqdn":"s.dsr577.com","domain":"dsr577.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsr577.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 12:19:44 GMT","end":"Sat, 04 Apr 2026 12:19:43 GMT"},"fingerprint":{"sha1":"55:27:02:00:33:4D:54:0A:F7:F5:FB:49:7C:6F:9A:96:E3:35:D0:F6","sha256":"51:BA:C2:35:5F:50:CC:13:12:3F:94:D5:67:BF:3F:95:DF:50:10:30:9E:E2:21:0D:BF:2A:AD:2A:62:39:AF:B1"}}},"request":{"raw":"GET /tag.php?goal=f1adefe0892dc8be7551a5c06279c1b6 HTTP/1.1\r\nHost: s.dsr577.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:49 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A139614%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:49 GMT; path=/; domain=.dsr577.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":29,"dns":10,"connect":30,"send":0,"wait":31,"receive":0,"ssl":113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/tag_gen.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /tag_gen.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 18:34:48 GMT\r\ncontent-type: application/javascript\r\netag: W/\"1e1c6dd9337a1f8a74975e30ec0\"\r\nexpires: Fri, 20 Feb 2026 14:34:15 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBuUwJCgH3HA4AAAwBuUwKEwH3AAAAAAwBT3/Y+AGzMSoAAA\r\nx-77-nzt-ray: e2f75420a8fac7f9484c9b6954305d31\r\nx-77-cache: HIT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-77-age: 3612\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1167,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1167), with no line terminators","md5":"19a25ea6643149ce82fd40a74ca56e16","sha1":"1e1c6dd9337a1f8a74975e30ec08f07404042d97","sha256":"b7c79f479ece6092e8983f60594e5561098b2816178bc7af3f5bf49764258d14","sha512":"164c460fed3020487b1575561bcef583b52a6e857906a875015666c4e2c32e283ccee99d05cabd8dc916908c9676aad846ff89cb924320a3fddd95222f38d235","ssdeep":"","tlshash":"ef2144b4b564653265701819a0ff4da1e07a07691e8296e018dfbc01997cfd7419aecc","first_seen":"2026-02-20T15:33:47.415522Z","last_seen":"2026-02-23T20:46:22.640907Z","times_seen":23,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.chnsrv.com/tag.php?goal=4ae3dc9ad80ddf0dfb0f5dd245bfe458","fqdn":"s.chnsrv.com","domain":"chnsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chnsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:37:55 GMT","end":"Tue, 28 Apr 2026 10:37:54 GMT"},"fingerprint":{"sha1":"7C:16:8B:6C:CD:F6:5F:56:53:1E:53:F5:8F:52:31:75:47:45:A1:7B","sha256":"EC:50:33:48:CE:BE:A0:F5:E2:9B:19:C2:50:7A:53:E4:24:5C:57:14:B2:1F:E1:00:39:EE:E5:15:F3:AE:4A:E9"}}},"request":{"raw":"GET /tag.php?goal=4ae3dc9ad80ddf0dfb0f5dd245bfe458 HTTP/1.1\r\nHost: s.chnsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nCookie: goals=a%3A1%3A%7Bi%3A129426%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:49 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A2%3A%7Bi%3A129426%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7Di%3A139618%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:49 GMT; path=/; domain=.chnsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":111,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"s.chnsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/tag.php?goal=4ae3dc9ad80ddf0dfb0f5dd245bfe458","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /tag.php?goal=4ae3dc9ad80ddf0dfb0f5dd245bfe458 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:49 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A139618%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:49 GMT; path=/; domain=.magsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":105,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"l.gay2match.com/1020/media/mgay8.png","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l.gay2match.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 14:33:03 GMT","end":"Sun, 12 Apr 2026 14:33:02 GMT"},"fingerprint":{"sha1":"FA:02:1A:40:68:CC:DA:69:92:D9:0E:32:2A:48:E0:2B:91:28:66:24","sha256":"66:E2:8D:22:93:A2:26:F0:64:9F:DA:1C:74:20:4B:12:38:D8:19:0F:4C:6E:7E:3B:B7:B4:0C:0B:BD:9E:F3:E5"}}},"request":{"raw":"GET /1020/media/mgay8.png HTTP/1.1\r\nHost: l.gay2match.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z5RR7NCDXK=GS2.1.s1771785288$o1$g0$t1771785288$j60$l0$h0; _ga=GA1.1.1539798426.1771785289\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\nlast-modified: Wed, 24 Sep 2025 21:19:59 GMT\r\netag: \"16134-63f929d70e3f2\"\r\naccept-ranges: bytes\r\ncontent-length: 90420\r\ncache-control: max-age=63072000\r\nexpires: Tue, 22 Feb 2028 18:34:49 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":90420,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"766d787645922b027735da27b3575f70","sha1":"f7be457316948ef7432ff4f0c70d74a1d1fc09db","sha256":"0df95d1853e6456e5c12080b5ea82b649360c79407587941a518ce27af18c650","sha512":"e4a1759eec5832ea2e6d40d963caff2e60e9dc98b48029ded97c8651fff825cc00fcfb153479129886e3cfed6644f5528a540942b440845527250238ae13a596","ssdeep":"1536:7V8kDnalAAidJSKAc/lHoWqPXq/jU9vKjdB5LzDoshw3fnNjkER9JJWSbkun:7VMI/wXgU9vKjdBhzMshyNjkERbJtn","tlshash":"d29302978a12f718010ea7b2a2a76a107a3e0057774dc4b52b3dbd7dc2d1abd7c25272","first_seen":"2025-09-20T18:00:07.031285Z","last_seen":"2026-03-27T22:57:13.662878Z","times_seen":51,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.dsr577.com/tag.php?goal=4743cffb835703dfda2a66afec68bc1d","fqdn":"s.dsr577.com","domain":"dsr577.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsr577.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 12:19:44 GMT","end":"Sat, 04 Apr 2026 12:19:43 GMT"},"fingerprint":{"sha1":"55:27:02:00:33:4D:54:0A:F7:F5:FB:49:7C:6F:9A:96:E3:35:D0:F6","sha256":"51:BA:C2:35:5F:50:CC:13:12:3F:94:D5:67:BF:3F:95:DF:50:10:30:9E:E2:21:0D:BF:2A:AD:2A:62:39:AF:B1"}}},"request":{"raw":"GET /tag.php?goal=4743cffb835703dfda2a66afec68bc1d HTTP/1.1\r\nHost: s.dsr577.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A129426%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:48 GMT; path=/; domain=.dsr577.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":108,"dns":7,"connect":24,"send":0,"wait":24,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.eln7dc.com/tag.php?goal=f1adefe0892dc8be7551a5c06279c1b6","fqdn":"s.eln7dc.com","domain":"eln7dc.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eln7dc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 12:21:41 GMT","end":"Sat, 04 Apr 2026 12:21:40 GMT"},"fingerprint":{"sha1":"B9:23:31:EC:61:B4:6A:E3:FB:59:35:73:4C:A9:81:E8:6A:AD:F6:20","sha256":"1F:21:4D:2C:21:14:F5:7B:5D:A7:2B:00:23:AC:12:B1:21:FD:BB:CD:8A:A6:4D:05:29:23:6D:7F:B8:88:87:EF"}}},"request":{"raw":"GET /tag.php?goal=f1adefe0892dc8be7551a5c06279c1b6 HTTP/1.1\r\nHost: s.eln7dc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:49 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A139614%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:49 GMT; path=/; domain=.eln7dc.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":204,"dns":7,"connect":34,"send":0,"wait":31,"receive":0,"ssl":132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.orbsrv.com/tag.php?goal=f1adefe0892dc8be7551a5c06279c1b6","fqdn":"s.orbsrv.com","domain":"orbsrv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orbsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:58:51 GMT","end":"Thu, 26 Mar 2026 11:58:50 GMT"},"fingerprint":{"sha1":"2E:EF:FB:7D:B6:EE:F2:B5:C0:B4:00:64:EC:5E:78:E8:79:27:54:98","sha256":"F4:6C:A0:7A:11:B4:C6:FF:AC:67:38:8B:22:44:9A:36:33:88:1D:9D:78:6C:20:CC:67:60:CF:F9:02:49:88:3F"}}},"request":{"raw":"GET /tag.php?goal=f1adefe0892dc8be7551a5c06279c1b6 HTTP/1.1\r\nHost: s.orbsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A139614%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:48 GMT; path=/; domain=.orbsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":114,"dns":10,"connect":32,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.gay2match.com/1020/media/mgay11.png","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l.gay2match.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 14:33:03 GMT","end":"Sun, 12 Apr 2026 14:33:02 GMT"},"fingerprint":{"sha1":"FA:02:1A:40:68:CC:DA:69:92:D9:0E:32:2A:48:E0:2B:91:28:66:24","sha256":"66:E2:8D:22:93:A2:26:F0:64:9F:DA:1C:74:20:4B:12:38:D8:19:0F:4C:6E:7E:3B:B7:B4:0C:0B:BD:9E:F3:E5"}}},"request":{"raw":"GET /1020/media/mgay11.png HTTP/1.1\r\nHost: l.gay2match.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z5RR7NCDXK=GS2.1.s1771785288$o1$g0$t1771785289$j59$l0$h0; _ga=GA1.1.1539798426.1771785289\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\nlast-modified: Wed, 24 Sep 2025 21:19:59 GMT\r\netag: \"1640b-63f929d70d06a\"\r\naccept-ranges: bytes\r\ncontent-length: 91147\r\ncache-control: max-age=63072000\r\nexpires: Tue, 22 Feb 2028 18:34:49 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91147,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"9b8a7ed1d9a78a23cc63ce8ff81c8367","sha1":"b06013c9524650c59972c4510c4e9bfbbfde7164","sha256":"89dc2233bf80211c4cac1228f535652efef870998281efae9ce4a8e8bf2dbfe6","sha512":"8796b0d8f9aee9e01f5c76b7ff44ca293a42798a86f34c002d6bd70af5c0e4dfe7b691aa3b8fbaf03269213c558e4ac388118f32b634a934e2ee322b79b273f9","ssdeep":"1536:m8yqaXO1iLHpgUQcCrqe4+gtDnOmsIAnySYpxqUuiUgw8tenwFf3dkUXhsbhLHaA:mVdLHpgUQzrq4MnOmsvnyS2K8taK3vX2","tlshash":"9d9312432a3f1a221827ea71937572662b3c01d9583b62cdcf21e6dbf7f51b0505e29e","first_seen":"2025-09-20T18:00:06.952421Z","last_seen":"2026-03-27T22:57:13.609914Z","times_seen":51,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.gay2match.com/1020/media/mgay13.png","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l.gay2match.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 14:33:03 GMT","end":"Sun, 12 Apr 2026 14:33:02 GMT"},"fingerprint":{"sha1":"FA:02:1A:40:68:CC:DA:69:92:D9:0E:32:2A:48:E0:2B:91:28:66:24","sha256":"66:E2:8D:22:93:A2:26:F0:64:9F:DA:1C:74:20:4B:12:38:D8:19:0F:4C:6E:7E:3B:B7:B4:0C:0B:BD:9E:F3:E5"}}},"request":{"raw":"GET /1020/media/mgay13.png HTTP/1.1\r\nHost: l.gay2match.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z5RR7NCDXK=GS2.1.s1771785288$o1$g0$t1771785289$j59$l0$h0; _ga=GA1.1.1539798426.1771785289\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\nlast-modified: Wed, 24 Sep 2025 21:19:59 GMT\r\netag: \"12c12-63f929d70d06a\"\r\naccept-ranges: bytes\r\ncontent-length: 76818\r\ncache-control: max-age=63072000\r\nexpires: Tue, 22 Feb 2028 18:34:49 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":76818,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"2ebc36565219c35246fdfd6a642198e5","sha1":"fc87dcd1939bae0824081c4f44df40699935d13c","sha256":"fa4f14c7e81ce137ae4276a48f7211bd725153110fe5c81f8c8e93c6247a97f2","sha512":"3ea8ac54ffe94230be343eba79de95cde3e3911ed1c28e2de95f843d7f70903747fa8719f21c095d3092bc5798930202a2d870867d9f5e286195b77f54a9917f","ssdeep":"1536:epBfShAt0kf6ZIVqz5eTfu5ipgw0V9kHvU4H+DN+Ru7k:epBCAt0ozTq+5Y9gvviN+QI","tlshash":"52730208065cb5c7fb00d0c59b28309c3e41b87ceaaeba7c35bd5529d1efb264d49da6","first_seen":"2025-09-20T18:00:07.05961Z","last_seen":"2026-03-27T22:57:13.618762Z","times_seen":51,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.gay2match.com/1020/media/mgay14.png","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l.gay2match.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 14:33:03 GMT","end":"Sun, 12 Apr 2026 14:33:02 GMT"},"fingerprint":{"sha1":"FA:02:1A:40:68:CC:DA:69:92:D9:0E:32:2A:48:E0:2B:91:28:66:24","sha256":"66:E2:8D:22:93:A2:26:F0:64:9F:DA:1C:74:20:4B:12:38:D8:19:0F:4C:6E:7E:3B:B7:B4:0C:0B:BD:9E:F3:E5"}}},"request":{"raw":"GET /1020/media/mgay14.png HTTP/1.1\r\nHost: l.gay2match.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z5RR7NCDXK=GS2.1.s1771785288$o1$g0$t1771785289$j59$l0$h0; _ga=GA1.1.1539798426.1771785289\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\nlast-modified: Wed, 24 Sep 2025 21:19:59 GMT\r\netag: \"11d72-63f929d70d06a\"\r\naccept-ranges: bytes\r\ncontent-length: 73074\r\ncache-control: max-age=63072000\r\nexpires: Tue, 22 Feb 2028 18:34:49 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73074,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"919191557d47e129c0ee9a84c83ee29a","sha1":"5fef90cc86953a7c21dc8d127b3383c286bb31da","sha256":"77486379326db345f36c70df00d9886b2a5a3e3ab8f3a86d7b3fec1523d60c16","sha512":"97e3a79a0eeac13218f7011ee1c5193c0a65ad13e3af18338f8234f98551a5db496099658296562420b34c0d48836f27bec3b4e7b2cc206f26deb8d98d6e999b","ssdeep":"1536:E1lSlGl31B5KSccalwmRIDqsudxULE8NcKXoXRZBPZn4M3O17:eGGF1BwvwmGDYDULJHXMhnfG7","tlshash":"266312d2ad42ead48146f996c96bac03752f5c7cb302bca46621ad3e195c31f37b2cc5","first_seen":"2025-09-20T18:00:06.972056Z","last_seen":"2026-03-27T22:57:13.659603Z","times_seen":51,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tile.openstreetmap.org/13/4207/2692.png","fqdn":"tile.openstreetmap.org","domain":"openstreetmap.org","tld":"org"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tile.openstreetmap.org","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 10 Nov 2025 22:01:08 GMT","end":"Sat, 12 Dec 2026 22:01:07 GMT"},"fingerprint":{"sha1":"07:9F:B2:D4:9E:DC:2E:8F:05:FE:15:93:27:F8:D6:6D:6E:C0:72:10","sha256":"2D:8E:B3:52:14:E2:C8:B0:2B:B0:50:15:D2:84:7E:ED:E8:6B:79:22:C7:DD:35:07:C5:67:2D:C7:E4:84:E4:B9"}}},"request":{"raw":"GET /13/4207/2692.png HTTP/1.1\r\nHost: tile.openstreetmap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: image/png\r\nserver: Apache\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nexpires: Tue, 24 Feb 2026 18:39:49 GMT\r\netag: \"8918aeb0606fea8f57319077c78f589c\"\r\nx-tilerender: ysera.openstreetmap.org\r\ncache-control: max-age=604800, stale-while-revalidate=604800, stale-if-error=604800\r\naccept-ranges: bytes\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nvia: 1.1 varnish\r\nage: 431697\r\nx-served-by: cache-hel1410020-HEL, cache-hel1410024-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 13\r\nx-timer: S1771785289.238428,VS0,VE0\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 39650\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":39650,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"8918aeb0606fea8f57319077c78f589c","sha1":"9ec3763fad3bc5b5b462ca7bbff99d349f2a47bf","sha256":"41195fe54a6478357407822d1aba6072be318c44d685fd095d9adbc6526f8fe4","sha512":"eeb63cd9fa8ca003b5248a03238a94d2c70e818cb76c4d99abea101f90011d19d7151e78e9102711984d4daaa3dba302da54b0133702afd1ae0240c8fe92bebf","ssdeep":"768:UsrhQOw2jNHXTgZFJ1UnBjWWlO0Ct7VE/kK6JEIOl0sQBJIES/zsl:Frlt0ZFJ1UnJWHPtB3GoW/Yl","tlshash":"a703f2dc415196c5d52b22e34c6b7210453aa848c3efc098b723e7af1ff25e6c66ea06","first_seen":"2026-02-22T18:35:44.798779Z","last_seen":"2026-02-24T20:25:39.652791Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":23,"connect":26,"send":0,"wait":32,"receive":32,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tile.openstreetmap.org/13/4205/2692.png","fqdn":"tile.openstreetmap.org","domain":"openstreetmap.org","tld":"org"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tile.openstreetmap.org","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 10 Nov 2025 22:01:08 GMT","end":"Sat, 12 Dec 2026 22:01:07 GMT"},"fingerprint":{"sha1":"07:9F:B2:D4:9E:DC:2E:8F:05:FE:15:93:27:F8:D6:6D:6E:C0:72:10","sha256":"2D:8E:B3:52:14:E2:C8:B0:2B:B0:50:15:D2:84:7E:ED:E8:6B:79:22:C7:DD:35:07:C5:67:2D:C7:E4:84:E4:B9"}}},"request":{"raw":"GET /13/4205/2692.png HTTP/1.1\r\nHost: tile.openstreetmap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\nserver: Apache\r\ncache-control: max-age=89910, stale-while-revalidate=604800, stale-if-error=604800\r\nexpires: Mon, 23 Feb 2026 15:07:42 GMT\r\netag: \"1825502f5475f6be788f7c8fb8cb78c0\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-tilerender: culebre.openstreetmap.org\r\naccept-ranges: bytes\r\nage: 15937\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL, cache-hel1410024-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 0\r\nx-timer: S1771785289.225480,VS0,VE1\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 36218\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":36218,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"1825502f5475f6be788f7c8fb8cb78c0","sha1":"2f60a1478f240c840e15e0073bc09330363080d2","sha256":"ed4bc828f64bf591a05a15e3ca481110aedb3102e21f2edd84bc6915636cc8dc","sha512":"d9b3377b346ac476ca7f694c3ba08d8929247b08a3babc2daa12f6a24e3c25b5f4e28874945ceb657cd48e242ccf4f247c38b210ef9ae3448ffabed767fedb45","ssdeep":"768:tXEiaeWUVPB9XR7R9tyaseEV8ZrtZ3zLmS3QovseEQgR:tUneWUZJV+jegyr3zLrgich","tlshash":"1ef2e1ee664aac55c2f831d2d83449f15bdd68cadb430c1f245627a0f1ccf568a43e79","first_seen":"2026-02-22T17:44:22.080382Z","last_seen":"2026-02-22T18:35:44.800617Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-22T18:34:47.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l.gay2match.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 14:33:03 GMT","end":"Sun, 12 Apr 2026 14:33:02 GMT"},"fingerprint":{"sha1":"FA:02:1A:40:68:CC:DA:69:92:D9:0E:32:2A:48:E0:2B:91:28:66:24","sha256":"66:E2:8D:22:93:A2:26:F0:64:9F:DA:1C:74:20:4B:12:38:D8:19:0F:4C:6E:7E:3B:B7:B4:0C:0B:BD:9E:F3:E5"}}},"request":{"raw":"GET /1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id} HTTP/1.1\r\nHost: l.gay2match.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\ncache-control: max-age=0\r\nexpires: Sun, 22 Feb 2026 18:34:47 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 16891\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 22 Feb 2026 18:34:47 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"OneSignal","description":"OneSignal is a customer engagement messaging solution.","website":"https://onesignal.com","common_platform_enumeration":"","icon":"OneSignal.svg","categories":["Marketing automation","A/B Testing"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery UI:1.13.2","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}],"data":{"size":71531,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2001)","md5":"a6eefbb4d053c7df08498f3fa5e595b6","sha1":"05092fbc206e3fe8653267bc1ab8981c3f46d9f6","sha256":"23cfde85e05e66e125e2d99878fd69084c89e727ab9784ad3eb58d17514b0889","sha512":"67fc05af34f3feb26d6ce7feea3c441ff1da5c578bcc6b1bcd5007676a0bd77bcf1dc41eb545c26c9b274a7546e20427b733a5e0feb08b3c5249611d48eeb5bf","ssdeep":"768:kqm3XvDoa+S3fodm6GTzuaULAqoqu8cG/PxXizrWVB0:kjLoa+S3qm6GTzux0CcYPxX6a0","tlshash":"67630916669bc53202a700dc2b6b4b586ab64317aa95dc50be1dd3f11fe2c6c83377ec","first_seen":"2026-02-22T18:35:44.802046Z","last_seen":"2026-02-22T18:35:44.802046Z","times_seen":1,"resource_available":true,"data":null}},"time_used":717,"timings":{"blocked":66,"dns":1,"connect":28,"send":0,"wait":584,"receive":1,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/leaflet@1.9.4/dist/leaflet.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /leaflet@1.9.4/dist/leaflet.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://l.gay2match.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 18:34:48 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9d2094653be737c2-ARN\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 11602806\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 22 Feb 2027 18:34:48 GMT\r\nlast-modified: Mon, 23 Jun 2025 11:59:23 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:20nQCchB9co0qIjJZRGuk2/Z9VM+kNiyxNV1lvTlZBo=:\r\nfly-request-id: 01JYEAGHPA31A491YEJBZKGDK0-ord\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":147552,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65383)","md5":"35b48eb991f383702f153452506e07b2","sha1":"5a640ff863e7902a8cac2ce6ba37c87b30677761","sha256":"db49d009c841f5ca34a888c96511ae936fd9f5533e90d8b2c4d57596f4e5641a","sha512":"0701dfaebe1cf6499190bc3a89715dcdc75657f3c69158222322162cb953497cd6433c6e4a0e03890502a5abb3fc45a3824e53610a97fe4be7f691b536961faa","ssdeep":"1536:sdeV/7u3i297NP5yaKuLylR+xCa8Mc5ScLsG7JBVc3bk/+bB7naxDk9ILvZs+rTr:Z/7uNNyaKST0LbYQDDkOr","tlshash":"cee3c68ab3d17a2742c36264003f210bb6326595a40a416cb97cd9efee7ca497137f7d","first_seen":"2023-06-27T11:10:33Z","last_seen":"2026-04-04T06:28:05.382624Z","times_seen":4281,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":37,"dns":1,"connect":10,"send":0,"wait":27,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onesignal.com/sdks/OneSignalSDK.js","fqdn":"cdn.onesignal.com","domain":"onesignal.com","tld":"com"},"ip":{"addr":"104.16.160.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.onesignal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 14:02:55 GMT","end":"Sat, 16 May 2026 15:02:54 GMT"},"fingerprint":{"sha1":"89:3E:A6:43:B5:73:4B:81:54:88:8C:2D:F3:65:96:D4:59:17:F6:9B","sha256":"93:10:10:A6:0B:4D:88:14:6B:3B:DB:F8:35:0A:7E:B6:D3:00:8F:00:D0:25:50:0A:55:D2:97:8F:C5:9E:0F:1B"}}},"request":{"raw":"GET /sdks/OneSignalSDK.js HTTP/1.1\r\nHost: cdn.onesignal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 18:34:48 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\netag: W/\"09282956186c8515ef0d208902803581\"\r\naccess-control-allow-headers: OneSignal-Subscription-Id\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1116\r\nexpires: Wed, 25 Feb 2026 18:34:48 GMT\r\ncache-control: public, max-age=259200\r\nset-cookie: __cf_bm=d3um2qxxk0rev2b4LQdAE85Znz9BsECfDOJWH_J3qEc-1771785288-1.0.1.1-Ti4EfRNHAS7oKw.7kLRVIGa_b.tp_OkY8L.4X4DI_fpBhSUmaBtaqhtGWxi1fkHX3w8IkFF1iKVnHtKWkVXypLrKh3SrSd6wwr5ki63Pnjg; path=/; expires=Sun, 22-Feb-26 19:04:48 GMT; domain=.onesignal.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nserver: cloudflare\r\ncf-ray: 9d2094653d8b2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9204,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9163)","md5":"09282956186c8515ef0d208902803581","sha1":"ea83b81c9955b3e983a7bef75714a9cefa904151","sha256":"ec8b1b07980996f574075e1b7e895d5d47794b9dcf345a68d60fbb17034f7bef","sha512":"39bf696c593e20bd86ae8994eb8e767b6c7fa6fa029f94b5dbc145cc30dc9460bcd5544f0182a79e4befc85df960b30dc53d7b435db24463f0e91d82faa4cd10","ssdeep":"96:/AQneVFrK3RJ1oauMhLBiobXf1JqZ8zZDV81uZIJqEKIZft4JqxCYZX7+Aroq3I3:o8Noqhtig1XzZZWuZIUsft40pTrU3","tlshash":"0512449bb970b5f253d358f6802f210ae27b993894b9a4905b85c4e09c7161f4337f6a","first_seen":"2024-07-22T22:24:59Z","last_seen":"2026-02-26T04:51:42.108077Z","times_seen":13513,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":11,"connect":1,"send":0,"wait":36,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.orbsrv.com/tag.php?goal=4743cffb835703dfda2a66afec68bc1d","fqdn":"s.orbsrv.com","domain":"orbsrv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orbsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:58:51 GMT","end":"Thu, 26 Mar 2026 11:58:50 GMT"},"fingerprint":{"sha1":"2E:EF:FB:7D:B6:EE:F2:B5:C0:B4:00:64:EC:5E:78:E8:79:27:54:98","sha256":"F4:6C:A0:7A:11:B4:C6:FF:AC:67:38:8B:22:44:9A:36:33:88:1D:9D:78:6C:20:CC:67:60:CF:F9:02:49:88:3F"}}},"request":{"raw":"GET /tag.php?goal=4743cffb835703dfda2a66afec68bc1d HTTP/1.1\r\nHost: s.orbsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A129426%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:48 GMT; path=/; domain=.orbsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":1,"connect":34,"send":0,"wait":30,"receive":0,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.pemsrv.com/tag.php?goal=f1adefe0892dc8be7551a5c06279c1b6","fqdn":"s.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:59:06 GMT","end":"Thu, 26 Mar 2026 11:59:05 GMT"},"fingerprint":{"sha1":"8C:23:43:2A:16:0E:E5:14:D7:54:DB:F5:5F:BB:56:E4:32:AF:3B:BA","sha256":"91:45:ED:F2:0E:35:83:14:E7:B4:0D:2D:8E:1A:A6:05:62:4F:B6:6E:83:8A:0C:D3:BF:D4:8A:1C:A7:19:9D:9C"}}},"request":{"raw":"GET /tag.php?goal=f1adefe0892dc8be7551a5c06279c1b6 HTTP/1.1\r\nHost: s.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A139614%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:48 GMT; path=/; domain=.pemsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":6,"connect":34,"send":0,"wait":28,"receive":0,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.orbsrv.com/tag.php?goal=b2cdfc9c67c0343aca0ef0f56527db02","fqdn":"s.orbsrv.com","domain":"orbsrv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orbsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:58:51 GMT","end":"Thu, 26 Mar 2026 11:58:50 GMT"},"fingerprint":{"sha1":"2E:EF:FB:7D:B6:EE:F2:B5:C0:B4:00:64:EC:5E:78:E8:79:27:54:98","sha256":"F4:6C:A0:7A:11:B4:C6:FF:AC:67:38:8B:22:44:9A:36:33:88:1D:9D:78:6C:20:CC:67:60:CF:F9:02:49:88:3F"}}},"request":{"raw":"GET /tag.php?goal=b2cdfc9c67c0343aca0ef0f56527db02 HTTP/1.1\r\nHost: s.orbsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:49 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A139616%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:49 GMT; path=/; domain=.orbsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":166,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.gay2match.com/1020/media/mgay9.png","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l.gay2match.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 14:33:03 GMT","end":"Sun, 12 Apr 2026 14:33:02 GMT"},"fingerprint":{"sha1":"FA:02:1A:40:68:CC:DA:69:92:D9:0E:32:2A:48:E0:2B:91:28:66:24","sha256":"66:E2:8D:22:93:A2:26:F0:64:9F:DA:1C:74:20:4B:12:38:D8:19:0F:4C:6E:7E:3B:B7:B4:0C:0B:BD:9E:F3:E5"}}},"request":{"raw":"GET /1020/media/mgay9.png HTTP/1.1\r\nHost: l.gay2match.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z5RR7NCDXK=GS2.1.s1771785288$o1$g0$t1771785288$j60$l0$h0; _ga=GA1.1.1539798426.1771785289\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\nlast-modified: Wed, 24 Sep 2025 21:19:59 GMT\r\netag: \"15f7b-63f929d70e3f2\"\r\naccept-ranges: bytes\r\ncontent-length: 89979\r\ncache-control: max-age=63072000\r\nexpires: Tue, 22 Feb 2028 18:34:49 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":89979,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"2615f5e6df8c02fde7ca38e6aa954253","sha1":"6b5225330bbac595f20aa337a7f467fdeeeff4e3","sha256":"6ae3047069aede4ec0bb49420a7c35b6e47f13db820730f66ff28c7462f87ecc","sha512":"262ce3e96ec1ea585b3380ade6f1da57f0cd2a03421f864080a157fc108dece07cab6bb888624e40256a428c4e6af991566459dc8258e35009553e49cdbf200e","ssdeep":"1536:hnFKaFk1zh0gqvDlrh7SV/7EotwIBCUNHyAG8QROSA8hF0LbZX8U8sATGw:hFKn1zhQ7R2oiHBpyMcOSlmHkGw","tlshash":"0593121202296ca159f672e30c3395df7a42b1367c454fd06ff5432a1386abb175476b","first_seen":"2025-09-20T18:00:06.962265Z","last_seen":"2026-03-27T22:57:13.671958Z","times_seen":51,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.gay2match.com/1020/media/mgay20.png","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l.gay2match.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 14:33:03 GMT","end":"Sun, 12 Apr 2026 14:33:02 GMT"},"fingerprint":{"sha1":"FA:02:1A:40:68:CC:DA:69:92:D9:0E:32:2A:48:E0:2B:91:28:66:24","sha256":"66:E2:8D:22:93:A2:26:F0:64:9F:DA:1C:74:20:4B:12:38:D8:19:0F:4C:6E:7E:3B:B7:B4:0C:0B:BD:9E:F3:E5"}}},"request":{"raw":"GET /1020/media/mgay20.png HTTP/1.1\r\nHost: l.gay2match.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z5RR7NCDXK=GS2.1.s1771785288$o1$g0$t1771785289$j59$l0$h0; _ga=GA1.1.1539798426.1771785289\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\nlast-modified: Wed, 24 Sep 2025 21:19:59 GMT\r\netag: \"1896d-63f929d70dc22\"\r\naccept-ranges: bytes\r\ncontent-length: 100717\r\ncache-control: max-age=63072000\r\nexpires: Tue, 22 Feb 2028 18:34:49 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100717,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"da4f47987b5a21ec54ba377d0ad6dc50","sha1":"142068ccc536a603f3a079c20a5fd14af1e1c1a2","sha256":"8ce43bf5de1314ebf23072c57dd03fa67c27f1faf922dd38df957362e1d88f34","sha512":"38e6bb360a36c7da1c76d2f040b7dd7b55891c58204f5b180357b2795b6895f3462d1522e989051f1d562499dcb269f3b9b4fb25b4c0dc4acf7374bc72eebf6b","ssdeep":"3072:cyh3nXTIF9CxOaItkS+eI92Zwo9MfAhst+tQ1+:DXTYfkFa9JswCQ","tlshash":"69a312f280652ef57b9bb22a94a2ad33e40f61f2bb4906511465d0cb3bf68f4439079c","first_seen":"2025-09-20T18:00:07.081339Z","last_seen":"2026-03-27T22:57:13.632071Z","times_seen":51,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.opoxv.com/tag.php?goal=f1adefe0892dc8be7551a5c06279c1b6","fqdn":"s.opoxv.com","domain":"opoxv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opoxv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:58:02 GMT","end":"Thu, 26 Mar 2026 11:58:01 GMT"},"fingerprint":{"sha1":"FD:ED:08:A5:4F:71:E3:CF:05:EC:2F:2D:A1:B6:4B:C8:31:0D:D1:3E","sha256":"18:C6:90:EB:ED:C9:1B:A3:2C:F1:48:DB:87:2A:99:04:F4:91:C0:24:1D:EA:E6:4C:70:A3:A2:CE:33:CF:5E:9D"}}},"request":{"raw":"GET /tag.php?goal=f1adefe0892dc8be7551a5c06279c1b6 HTTP/1.1\r\nHost: s.opoxv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:49 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A139614%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:49 GMT; path=/; domain=.opoxv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":58,"dns":9,"connect":34,"send":0,"wait":28,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"s.opoxv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.chmsrv.com/tag.php?goal=b2cdfc9c67c0343aca0ef0f56527db02","fqdn":"s.chmsrv.com","domain":"chmsrv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chmsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 15:17:20 GMT","end":"Fri, 22 May 2026 15:17:19 GMT"},"fingerprint":{"sha1":"0F:71:83:16:20:BF:BD:E0:7E:FA:26:7D:9D:04:4B:3D:D6:45:37:6F","sha256":"7E:B6:98:08:BC:FD:61:D2:B6:93:F1:E5:8D:20:03:47:C6:5C:3C:23:07:A5:23:B2:38:63:FF:4F:AE:44:DB:4D"}}},"request":{"raw":"GET /tag.php?goal=b2cdfc9c67c0343aca0ef0f56527db02 HTTP/1.1\r\nHost: s.chmsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A139616%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:48 GMT; path=/; domain=.chmsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"s.chmsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.dsr577.com/tag.php?goal=b2cdfc9c67c0343aca0ef0f56527db02","fqdn":"s.dsr577.com","domain":"dsr577.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsr577.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 12:19:44 GMT","end":"Sat, 04 Apr 2026 12:19:43 GMT"},"fingerprint":{"sha1":"55:27:02:00:33:4D:54:0A:F7:F5:FB:49:7C:6F:9A:96:E3:35:D0:F6","sha256":"51:BA:C2:35:5F:50:CC:13:12:3F:94:D5:67:BF:3F:95:DF:50:10:30:9E:E2:21:0D:BF:2A:AD:2A:62:39:AF:B1"}}},"request":{"raw":"GET /tag.php?goal=b2cdfc9c67c0343aca0ef0f56527db02 HTTP/1.1\r\nHost: s.dsr577.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A139616%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:48 GMT; path=/; domain=.dsr577.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/tag.php?goal=b2cdfc9c67c0343aca0ef0f56527db02","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /tag.php?goal=b2cdfc9c67c0343aca0ef0f56527db02 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:49 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A139616%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:49 GMT; path=/; domain=.magsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":147,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.pemsrv.com/tag.php?goal=4ae3dc9ad80ddf0dfb0f5dd245bfe458","fqdn":"s.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:59:06 GMT","end":"Thu, 26 Mar 2026 11:59:05 GMT"},"fingerprint":{"sha1":"8C:23:43:2A:16:0E:E5:14:D7:54:DB:F5:5F:BB:56:E4:32:AF:3B:BA","sha256":"91:45:ED:F2:0E:35:83:14:E7:B4:0D:2D:8E:1A:A6:05:62:4F:B6:6E:83:8A:0C:D3:BF:D4:8A:1C:A7:19:9D:9C"}}},"request":{"raw":"GET /tag.php?goal=4ae3dc9ad80ddf0dfb0f5dd245bfe458 HTTP/1.1\r\nHost: s.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:49 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A139618%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:49 GMT; path=/; domain=.pemsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":104,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.zlinkw.com/tag.php?goal=4ae3dc9ad80ddf0dfb0f5dd245bfe458","fqdn":"s.zlinkw.com","domain":"zlinkw.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlinkw.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:51:19 GMT","end":"Tue, 28 Apr 2026 10:51:18 GMT"},"fingerprint":{"sha1":"3C:F8:DD:5D:54:4F:73:D7:86:5A:CA:32:7B:45:73:0F:80:23:34:92","sha256":"E2:CD:2F:4C:CA:BA:C0:76:32:97:EC:05:0E:00:B1:6B:66:50:34:8B:15:2D:4B:E3:3B:22:16:98:37:A7:A8:3C"}}},"request":{"raw":"GET /tag.php?goal=4ae3dc9ad80ddf0dfb0f5dd245bfe458 HTTP/1.1\r\nHost: s.zlinkw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nCookie: goals=a%3A1%3A%7Bi%3A129426%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:49 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A2%3A%7Bi%3A129426%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7Di%3A139618%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:49 GMT; path=/; domain=.zlinkw.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.gay2match.com/1020/media/mgay10.png","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l.gay2match.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 14:33:03 GMT","end":"Sun, 12 Apr 2026 14:33:02 GMT"},"fingerprint":{"sha1":"FA:02:1A:40:68:CC:DA:69:92:D9:0E:32:2A:48:E0:2B:91:28:66:24","sha256":"66:E2:8D:22:93:A2:26:F0:64:9F:DA:1C:74:20:4B:12:38:D8:19:0F:4C:6E:7E:3B:B7:B4:0C:0B:BD:9E:F3:E5"}}},"request":{"raw":"GET /1020/media/mgay10.png HTTP/1.1\r\nHost: l.gay2match.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z5RR7NCDXK=GS2.1.s1771785288$o1$g0$t1771785289$j59$l0$h0; _ga=GA1.1.1539798426.1771785289\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\nlast-modified: Wed, 24 Sep 2025 21:19:59 GMT\r\netag: \"160a9-63f929d70cc82\"\r\naccept-ranges: bytes\r\ncontent-length: 90281\r\ncache-control: max-age=63072000\r\nexpires: Tue, 22 Feb 2028 18:34:49 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":90281,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"07850db7f185ac30f7294bc2c1bbe26d","sha1":"0e9f20efab1dc4ee2705297c859846db047bff8f","sha256":"9d2c5b5c7964573d85406598d51406f730d937e712783f98eaebaa6ce1c4efa0","sha512":"f737a0a9e360b37e6fc5f17736d861c43605263f27d0253f32b9d7967c1eb7bd8967eb2f9203376224fb74d4609d3ccb52818676ce2f7ff2360615df190f1d5e","ssdeep":"1536:buOmjky8Hr5x8wXql+AQEH+i5p7IMxPhQwyJ85IBrhPFJLbha4Plg:bCOr5jXJA5N5pIKGvJvBJLt9g","tlshash":"ea9312ab49112e5109a73958a23e02bff337504fc952c6deba139cb553ef072e14f981","first_seen":"2025-09-20T18:00:06.931372Z","last_seen":"2026-03-27T22:57:13.644218Z","times_seen":51,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.gay2match.com/1020/media/mgay22.png","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l.gay2match.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 14:33:03 GMT","end":"Sun, 12 Apr 2026 14:33:02 GMT"},"fingerprint":{"sha1":"FA:02:1A:40:68:CC:DA:69:92:D9:0E:32:2A:48:E0:2B:91:28:66:24","sha256":"66:E2:8D:22:93:A2:26:F0:64:9F:DA:1C:74:20:4B:12:38:D8:19:0F:4C:6E:7E:3B:B7:B4:0C:0B:BD:9E:F3:E5"}}},"request":{"raw":"GET /1020/media/mgay22.png HTTP/1.1\r\nHost: l.gay2match.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z5RR7NCDXK=GS2.1.s1771785288$o1$g0$t1771785289$j59$l0$h0; _ga=GA1.1.1539798426.1771785289\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\nlast-modified: Wed, 24 Sep 2025 21:19:59 GMT\r\netag: \"17710-63f929d70dc22\"\r\naccept-ranges: bytes\r\ncontent-length: 96016\r\ncache-control: max-age=63072000\r\nexpires: Tue, 22 Feb 2028 18:34:49 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96016,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"0f91a49e2aa5483ab02c02e164b08493","sha1":"b5d4b7b4d9e385654d9404c3c2c68b421d155932","sha256":"1ce56fa223ea4518c68be6b1ce8632c15fe0035d11749e32b722c17f7b47f66a","sha512":"e1dd598f29704a1131bbfd96782a3048d87252ed82c06753acd54fe8da995607b91f19100c7ee500ed99cef16e8bd5650f4e7eccbe049f270fa67b237cc9c760","ssdeep":"1536:EvQBg5yQ5kzGAgnCHDt8Y//uZpUyCNa60Mx1j3t8D268DfQRElViqgZNylR:EYK5yRiAgCHDSCWZpjCcMDKN8DfI+XX","tlshash":"4e9312b4fd3040a61f442e5cd7a85b43ecae8955ddaf80848f25e65bd594c3e632cb0e","first_seen":"2025-09-20T18:00:07.025734Z","last_seen":"2026-03-27T22:57:13.636928Z","times_seen":51,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.opoxv.com/tag.php?goal=4743cffb835703dfda2a66afec68bc1d","fqdn":"s.opoxv.com","domain":"opoxv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opoxv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:58:02 GMT","end":"Thu, 26 Mar 2026 11:58:01 GMT"},"fingerprint":{"sha1":"FD:ED:08:A5:4F:71:E3:CF:05:EC:2F:2D:A1:B6:4B:C8:31:0D:D1:3E","sha256":"18:C6:90:EB:ED:C9:1B:A3:2C:F1:48:DB:87:2A:99:04:F4:91:C0:24:1D:EA:E6:4C:70:A3:A2:CE:33:CF:5E:9D"}}},"request":{"raw":"GET /tag.php?goal=4743cffb835703dfda2a66afec68bc1d HTTP/1.1\r\nHost: s.opoxv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A129426%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:48 GMT; path=/; domain=.opoxv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":23,"receive":0,"ssl":128},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"s.opoxv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.chnsrv.com/tag.php?goal=b2cdfc9c67c0343aca0ef0f56527db02","fqdn":"s.chnsrv.com","domain":"chnsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chnsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:37:55 GMT","end":"Tue, 28 Apr 2026 10:37:54 GMT"},"fingerprint":{"sha1":"7C:16:8B:6C:CD:F6:5F:56:53:1E:53:F5:8F:52:31:75:47:45:A1:7B","sha256":"EC:50:33:48:CE:BE:A0:F5:E2:9B:19:C2:50:7A:53:E4:24:5C:57:14:B2:1F:E1:00:39:EE:E5:15:F3:AE:4A:E9"}}},"request":{"raw":"GET /tag.php?goal=b2cdfc9c67c0343aca0ef0f56527db02 HTTP/1.1\r\nHost: s.chnsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A139616%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:48 GMT; path=/; domain=.chnsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"s.chnsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.dsr9gv.com/tag.php?goal=4ae3dc9ad80ddf0dfb0f5dd245bfe458","fqdn":"s.dsr9gv.com","domain":"dsr9gv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsr9gv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 12:19:58 GMT","end":"Sat, 04 Apr 2026 12:19:57 GMT"},"fingerprint":{"sha1":"99:08:51:96:F8:F7:87:4B:50:1B:FE:12:9F:9C:57:69:7E:73:A5:99","sha256":"24:E5:11:2D:04:AD:67:62:12:B9:91:AE:99:1A:B9:E5:C5:F2:BB:45:18:F3:9A:D2:81:DF:9C:7E:17:49:72:20"}}},"request":{"raw":"GET /tag.php?goal=4ae3dc9ad80ddf0dfb0f5dd245bfe458 HTTP/1.1\r\nHost: s.dsr9gv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nCookie: goals=a%3A1%3A%7Bi%3A129426%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A2%3A%7Bi%3A129426%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7Di%3A139618%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:48 GMT; path=/; domain=.dsr9gv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.gay2match.com/1020/media/mgay5.png","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l.gay2match.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 14:33:03 GMT","end":"Sun, 12 Apr 2026 14:33:02 GMT"},"fingerprint":{"sha1":"FA:02:1A:40:68:CC:DA:69:92:D9:0E:32:2A:48:E0:2B:91:28:66:24","sha256":"66:E2:8D:22:93:A2:26:F0:64:9F:DA:1C:74:20:4B:12:38:D8:19:0F:4C:6E:7E:3B:B7:B4:0C:0B:BD:9E:F3:E5"}}},"request":{"raw":"GET /1020/media/mgay5.png HTTP/1.1\r\nHost: l.gay2match.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z5RR7NCDXK=GS2.1.s1771785288$o1$g0$t1771785288$j60$l0$h0; _ga=GA1.1.1539798426.1771785289\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\nlast-modified: Wed, 24 Sep 2025 21:19:59 GMT\r\netag: \"1f623-63f929d70e3f2\"\r\naccept-ranges: bytes\r\ncontent-length: 128547\r\ncache-control: max-age=63072000\r\nexpires: Tue, 22 Feb 2028 18:34:49 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":128547,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"642ae2388d67ade81f5446cb92625fe3","sha1":"c4f87d2803c8bd2b7b0a7092cf8575f19c6f0280","sha256":"6698c5541a7b67cba05cef6ecc06eb2b7d676eaee13dcf0afdb3030dd66b6028","sha512":"44f86dc14ac8ccb761876cb28ba45fa852e60e1416e1982184df179a0f02e8b98608b70fd565fc082bdff536e06c671c9141e16b0bdb10445e9b7752dc3127ec","ssdeep":"3072:8ixrhi180D2hFmaXOLOkk9PS13G8PMI7xvMZp6H6pbAbUWqrx:zxli18RjmWHx9oWkMZZ0H6pbAbUWqrx","tlshash":"5cc312c360af4d154af036cdba47fb8812405dd08ee826984f1eb96f79f528e4d92a53","first_seen":"2025-09-20T18:00:07.07764Z","last_seen":"2026-03-27T22:57:13.656557Z","times_seen":51,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tile.openstreetmap.org/13/4207/2691.png","fqdn":"tile.openstreetmap.org","domain":"openstreetmap.org","tld":"org"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tile.openstreetmap.org","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 10 Nov 2025 22:01:08 GMT","end":"Sat, 12 Dec 2026 22:01:07 GMT"},"fingerprint":{"sha1":"07:9F:B2:D4:9E:DC:2E:8F:05:FE:15:93:27:F8:D6:6D:6E:C0:72:10","sha256":"2D:8E:B3:52:14:E2:C8:B0:2B:B0:50:15:D2:84:7E:ED:E8:6B:79:22:C7:DD:35:07:C5:67:2D:C7:E4:84:E4:B9"}}},"request":{"raw":"GET /13/4207/2691.png HTTP/1.1\r\nHost: tile.openstreetmap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\nserver: Apache\r\ncache-control: max-age=604800, stale-while-revalidate=604800, stale-if-error=604800\r\nexpires: Sun, 01 Mar 2026 12:38:03 GMT\r\netag: \"a0ded92711d6a86ec66e5f7acacabbbf\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-tilerender: ysera.openstreetmap.org\r\naccept-ranges: bytes\r\nage: 21404\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL, cache-hel1410024-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 0\r\nx-timer: S1771785289.211344,VS0,VE2\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 34546\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":34546,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"a0ded92711d6a86ec66e5f7acacabbbf","sha1":"ab457ace5a004cf06b3d0ab19219544088ff21f7","sha256":"3d9b2394dda8e4031de7e511d8461945c7296013a2f21add564e897677d38199","sha512":"995cab507a5092be1b16ab51348d4df63525ce195e1825cc3028f89ee71763ef7f2a9db291130037961fb1a59ba6077047429398e33b1fb16fcd096baa6bc24a","ssdeep":"768:dEqEnXEtXhmloqjVfSIG/pPwtoMw22vPx8HNUA8jd3pZTpIseBB:ezg1qBa96w22CPGTT+seBB","tlshash":"58f2f1d9d7e1df62d8bf9f4b440a01881c24dba141d8d2c95a16bcd68e66ae1833ff42","first_seen":"2026-02-22T17:44:22.057399Z","last_seen":"2026-03-01T05:45:51.018522Z","times_seen":5,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":25,"connect":13,"send":0,"wait":32,"receive":52,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tile.openstreetmap.org/13/4208/2691.png","fqdn":"tile.openstreetmap.org","domain":"openstreetmap.org","tld":"org"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tile.openstreetmap.org","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 10 Nov 2025 22:01:08 GMT","end":"Sat, 12 Dec 2026 22:01:07 GMT"},"fingerprint":{"sha1":"07:9F:B2:D4:9E:DC:2E:8F:05:FE:15:93:27:F8:D6:6D:6E:C0:72:10","sha256":"2D:8E:B3:52:14:E2:C8:B0:2B:B0:50:15:D2:84:7E:ED:E8:6B:79:22:C7:DD:35:07:C5:67:2D:C7:E4:84:E4:B9"}}},"request":{"raw":"GET /13/4208/2691.png HTTP/1.1\r\nHost: tile.openstreetmap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"bc4db42069a3dee38647854817b7262d\"\r\nx-tilerender: wawel.openstreetmap.org\r\naccess-control-allow-origin: *\r\ncontent-type: image/png\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncache-control: max-age=604800, stale-while-revalidate=604800, stale-if-error=604800\r\nserver: Apache\r\nexpires: Sun, 01 Mar 2026 14:09:12 GMT\r\naccept-ranges: bytes\r\nage: 15935\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410029-HEL, cache-hel1410024-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 0\r\nx-timer: S1771785289.237209,VS0,VE1\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 33829\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":33829,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"bc4db42069a3dee38647854817b7262d","sha1":"3500601694b577e5263a445046878e5ebb46839e","sha256":"547a05d63a3214d1f5b5f71648709617a510ffaffd77e36c16c0ae6e8bd8a06e","sha512":"48fb20d206f4e4e7962585042bb2ab371a1f7c5a994121726afea77a7c2e2afa82aa7ea3c6cab00f7c9f6ccf49a161b4e282b7704523e1d97e5bdcc1407bcdff","ssdeep":"768:13Kj582oHkaZzTI0PYrzJBU31yLMA9kmINIMonMy:BK982oHBCCqB+yLMA9ktaMyt","tlshash":"13e2f1dc794e874cedf7ded5034d18c58480631466aefa8c88ef69b76a3a838f950b10","first_seen":"2026-02-22T17:44:22.086425Z","last_seen":"2026-03-01T05:45:51.039664Z","times_seen":5,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":24,"connect":26,"send":0,"wait":33,"receive":32,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tile.openstreetmap.org/13/4207/2689.png","fqdn":"tile.openstreetmap.org","domain":"openstreetmap.org","tld":"org"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tile.openstreetmap.org","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 10 Nov 2025 22:01:08 GMT","end":"Sat, 12 Dec 2026 22:01:07 GMT"},"fingerprint":{"sha1":"07:9F:B2:D4:9E:DC:2E:8F:05:FE:15:93:27:F8:D6:6D:6E:C0:72:10","sha256":"2D:8E:B3:52:14:E2:C8:B0:2B:B0:50:15:D2:84:7E:ED:E8:6B:79:22:C7:DD:35:07:C5:67:2D:C7:E4:84:E4:B9"}}},"request":{"raw":"GET /13/4207/2689.png HTTP/1.1\r\nHost: tile.openstreetmap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"05b59cf598637f4f0f75d0d72795d6b0\"\r\nx-tilerender: culebre.openstreetmap.org\r\naccess-control-allow-origin: *\r\ncontent-type: image/png\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncache-control: max-age=94988, stale-while-revalidate=604800, stale-if-error=604800\r\nserver: Apache\r\nexpires: Sun, 22 Feb 2026 15:00:19 GMT\r\naccept-ranges: bytes\r\nage: 107857\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410034-HEL, cache-hel1410024-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 0\r\nx-timer: S1771785289.212259,VS0,VE2\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 38286\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":38286,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"05b59cf598637f4f0f75d0d72795d6b0","sha1":"810a411fd38f35ba38b6b051b3f77ba6acddb380","sha256":"99c202dd1ed63afbb00ede959af0801553aa360cb0f9ea76a589a898332b7b47","sha512":"b21736db6961409b066091e87964b5a0df4068f55e6aa161e72005a04b5ae9b4a3a37b1c03cc9797df5f4f5bc19d8e064ada4b2d44c63dfdfc54049011aaac5c","ssdeep":"768:Y9cb2IrPjFQ5KJtoR/1JMhalgBEU+PL5PK7s8NlSxct/v5c+rPcmXL1xxj:0cb3qkoNvMh5EUGYoY0xS/BTr5L1xxj","tlshash":"a903e0bf227ebb7454b428c4a6cf61f0f402eaf265222748bd25e1650ddbcfe4c68549","first_seen":"2026-02-22T17:44:22.092511Z","last_seen":"2026-02-24T20:25:39.650001Z","times_seen":3,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tile.openstreetmap.org/13/4209/2691.png","fqdn":"tile.openstreetmap.org","domain":"openstreetmap.org","tld":"org"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tile.openstreetmap.org","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 10 Nov 2025 22:01:08 GMT","end":"Sat, 12 Dec 2026 22:01:07 GMT"},"fingerprint":{"sha1":"07:9F:B2:D4:9E:DC:2E:8F:05:FE:15:93:27:F8:D6:6D:6E:C0:72:10","sha256":"2D:8E:B3:52:14:E2:C8:B0:2B:B0:50:15:D2:84:7E:ED:E8:6B:79:22:C7:DD:35:07:C5:67:2D:C7:E4:84:E4:B9"}}},"request":{"raw":"GET /13/4209/2691.png HTTP/1.1\r\nHost: tile.openstreetmap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\nserver: Apache\r\ncache-control: max-age=95184, stale-while-revalidate=604800, stale-if-error=604800\r\nexpires: Sun, 22 Feb 2026 14:21:01 GMT\r\netag: \"1b224f836ed5f10c47d739a00f16d9e7\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-tilerender: nidhogg.openstreetmap.org\r\naccept-ranges: bytes\r\nage: 110412\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL, cache-hel1410024-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 0\r\nx-timer: S1771785289.212229,VS0,VE1\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 30575\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":30575,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"1b224f836ed5f10c47d739a00f16d9e7","sha1":"b09e6f262fa8d59551320798b252ce54108ef051","sha256":"861876d94882b45cd100c1b5718ebbd77d2cae768c860607b2185c345a81ca70","sha512":"67e325a71ccf177c414ac8cda6c933215e6e361f2c80af9ecef266c9b2b8b1c15c0c24d2f6381639f1d598495c0d1f188cc3eb69c3136b03300a3bd31264f485","ssdeep":"768:KK+TRlzxMHVy6wriUHPlh8wdPaP59BDPcbDVr0cc1W:KLRlzxM1y1J8w9aB9ubDVr0cQW","tlshash":"bdd2e1b2fd82331f18499589265a0d7be3ef5289cd069f21d17299d35c53d028b2dcdd","first_seen":"2026-02-22T17:44:22.06301Z","last_seen":"2026-02-22T18:35:44.818468Z","times_seen":2,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/leaflet@1.9.4/dist/leaflet.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /leaflet@1.9.4/dist/leaflet.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://l.gay2match.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 18:34:48 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\ncf-ray: 9d2094653be037c2-ARN\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 5233916\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 22 Feb 2027 18:34:48 GMT\r\nlast-modified: Tue, 08 Jul 2025 08:24:40 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:p4NxAoJBhIIN+hmNHrzRCf9tD/miZyoHS5obTRR9BMY=:\r\nfly-request-id: 01JZMJ65N88QK198R3XV7Y1GNB-ord\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30774\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 19 Feb 2026 02:03:23 GMT\r\nexpires: Fri, 19 Feb 2027 02:03:23 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 318685\r\nlast-modified: Mon, 13 May 2019 14:37:17 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":88145,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-04-04T06:39:29.259973Z","times_seen":114923,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":126,"dns":0,"connect":24,"send":0,"wait":22,"receive":22,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.dsr9gv.com/tag.php?goal=b2cdfc9c67c0343aca0ef0f56527db02","fqdn":"s.dsr9gv.com","domain":"dsr9gv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsr9gv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 12:19:58 GMT","end":"Sat, 04 Apr 2026 12:19:57 GMT"},"fingerprint":{"sha1":"99:08:51:96:F8:F7:87:4B:50:1B:FE:12:9F:9C:57:69:7E:73:A5:99","sha256":"24:E5:11:2D:04:AD:67:62:12:B9:91:AE:99:1A:B9:E5:C5:F2:BB:45:18:F3:9A:D2:81:DF:9C:7E:17:49:72:20"}}},"request":{"raw":"GET /tag.php?goal=b2cdfc9c67c0343aca0ef0f56527db02 HTTP/1.1\r\nHost: s.dsr9gv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:49 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A139616%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:49 GMT; path=/; domain=.dsr9gv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":126,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tile.openstreetmap.org/13/4207/2690.png","fqdn":"tile.openstreetmap.org","domain":"openstreetmap.org","tld":"org"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tile.openstreetmap.org","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 10 Nov 2025 22:01:08 GMT","end":"Sat, 12 Dec 2026 22:01:07 GMT"},"fingerprint":{"sha1":"07:9F:B2:D4:9E:DC:2E:8F:05:FE:15:93:27:F8:D6:6D:6E:C0:72:10","sha256":"2D:8E:B3:52:14:E2:C8:B0:2B:B0:50:15:D2:84:7E:ED:E8:6B:79:22:C7:DD:35:07:C5:67:2D:C7:E4:84:E4:B9"}}},"request":{"raw":"GET /13/4207/2690.png HTTP/1.1\r\nHost: tile.openstreetmap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\nserver: Apache\r\ncache-control: max-age=604800, stale-while-revalidate=604800, stale-if-error=604800\r\nexpires: Sun, 01 Mar 2026 12:38:03 GMT\r\netag: \"2f79f3f8cb99e3351ed53fa9061a8509\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-tilerender: ysera.openstreetmap.org\r\naccept-ranges: bytes\r\nage: 21404\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410034-HEL, cache-hel1410024-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 0\r\nx-timer: S1771785289.224942,VS0,VE1\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 40024\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":40024,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"2f79f3f8cb99e3351ed53fa9061a8509","sha1":"69bb1332ac905b66bf56f2000f691540918b78fc","sha256":"f2fc9114f1470c8082bf5b56e0be54493c500f3244306d3052dfcf2effa44f11","sha512":"d1c5d9ab36eaab2f0b422ac91405890e69f58cdca2bd7416a3de93d65ee8c907662c1233b4528499f42f5b13406a334fa9fadded805eef38118dc3042dcda501","ssdeep":"768:ySk3S1qzKKuCe5oli7G6sqeHcONOKH3uf08atD3hlcgwMghMSvADZ8NJg9U:UCnCDl+ZRsO+WSNlvgCSAZaJv","tlshash":"4e03f1427c326f617ab164403bf0f9528351cd90997567c7036b9d0d8325fa88cbd8ab","first_seen":"2026-02-22T17:44:22.058459Z","last_seen":"2026-02-24T20:25:39.645936Z","times_seen":3,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":23,"connect":15,"send":0,"wait":46,"receive":43,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tile.openstreetmap.org/13/4206/2690.png","fqdn":"tile.openstreetmap.org","domain":"openstreetmap.org","tld":"org"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tile.openstreetmap.org","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 10 Nov 2025 22:01:08 GMT","end":"Sat, 12 Dec 2026 22:01:07 GMT"},"fingerprint":{"sha1":"07:9F:B2:D4:9E:DC:2E:8F:05:FE:15:93:27:F8:D6:6D:6E:C0:72:10","sha256":"2D:8E:B3:52:14:E2:C8:B0:2B:B0:50:15:D2:84:7E:ED:E8:6B:79:22:C7:DD:35:07:C5:67:2D:C7:E4:84:E4:B9"}}},"request":{"raw":"GET /13/4206/2690.png HTTP/1.1\r\nHost: tile.openstreetmap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\nserver: Apache\r\ncache-control: max-age=86698, stale-while-revalidate=604800, stale-if-error=604800\r\nexpires: Mon, 23 Feb 2026 14:14:10 GMT\r\netag: \"5418d4d596644049d95e41094a2deb53\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-tilerender: culebre.openstreetmap.org\r\naccept-ranges: bytes\r\nage: 15937\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410033-HEL, cache-hel1410024-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 0\r\nx-timer: S1771785289.239588,VS0,VE1\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 26973\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":26973,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"5418d4d596644049d95e41094a2deb53","sha1":"144259d279152879dcee96b9e282c06535b27e3b","sha256":"2165cc05b1b9a2b21197400fc4720702fd0bde9026f6a832a66e78411ce178d3","sha512":"3b2e81dfe4e41321179fb665de85152a93d41731f50042824f8edabc4346742a722be44c76dbfb59096b1735020649b9571905e633e4767aedefbc98e34b037f","ssdeep":"384:hVd8tBseyG9Wq0aykAKD2h75SDhhJbThSS5cbGqwvCY0hd44nCCk6v:hL8Jgqdobaxj5xqK0hCCb","tlshash":"72c2f15bc0d72875caa26f4696438c1be9d82dc9035c7b8172bbece463566fe7284211","first_seen":"2026-02-22T17:44:22.077179Z","last_seen":"2026-02-22T18:35:44.822013Z","times_seen":2,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":22,"connect":28,"send":0,"wait":31,"receive":27,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tile.openstreetmap.org/13/4206/2689.png","fqdn":"tile.openstreetmap.org","domain":"openstreetmap.org","tld":"org"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tile.openstreetmap.org","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 10 Nov 2025 22:01:08 GMT","end":"Sat, 12 Dec 2026 22:01:07 GMT"},"fingerprint":{"sha1":"07:9F:B2:D4:9E:DC:2E:8F:05:FE:15:93:27:F8:D6:6D:6E:C0:72:10","sha256":"2D:8E:B3:52:14:E2:C8:B0:2B:B0:50:15:D2:84:7E:ED:E8:6B:79:22:C7:DD:35:07:C5:67:2D:C7:E4:84:E4:B9"}}},"request":{"raw":"GET /13/4206/2689.png HTTP/1.1\r\nHost: tile.openstreetmap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\nserver: Apache\r\ncache-control: max-age=89682, stale-while-revalidate=604800, stale-if-error=604800\r\nexpires: Fri, 20 Feb 2026 20:47:26 GMT\r\netag: \"7834b761aa994f7b649ed2bf40a9f0ce\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-tilerender: culebre.openstreetmap.org\r\naccept-ranges: bytes\r\nage: 224536\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410025-HEL, cache-hel1410024-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 0\r\nx-timer: S1771785289.225506,VS0,VE2\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 37944\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":37944,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"7834b761aa994f7b649ed2bf40a9f0ce","sha1":"c28409bdc2d1e3888e486bd4b1f1bc872414861b","sha256":"9c551c51b3ca02c27f93c50bf60b372bd3e400bb49846a0add78bc7e8caa4584","sha512":"3ad9d15691280c1ea314608775e536b96e34203b998a3e4b59ccb3bb9a786d92c5762f5ce2eabd1194f524891f18e5ea173a33b0f6f238445a852e7238ce668f","ssdeep":"768:wMJwZ4c6webNlkb+iLWtNN/y40h89JMPDQyv1oIhFmV26Lvy62ZXHbIs2EtNuBUJ:wOwikexl1iLSNZy9wMU6hFQLv76bI+uA","tlshash":"5803f204c983f6c6d19a90271b4f1627ff540281c17f8a85db67cd74f58b9ac8d7d650","first_seen":"2026-02-22T17:44:22.065095Z","last_seen":"2026-02-28T02:28:34.987529Z","times_seen":4,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tile.openstreetmap.org/13/4206/2693.png","fqdn":"tile.openstreetmap.org","domain":"openstreetmap.org","tld":"org"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tile.openstreetmap.org","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 10 Nov 2025 22:01:08 GMT","end":"Sat, 12 Dec 2026 22:01:07 GMT"},"fingerprint":{"sha1":"07:9F:B2:D4:9E:DC:2E:8F:05:FE:15:93:27:F8:D6:6D:6E:C0:72:10","sha256":"2D:8E:B3:52:14:E2:C8:B0:2B:B0:50:15:D2:84:7E:ED:E8:6B:79:22:C7:DD:35:07:C5:67:2D:C7:E4:84:E4:B9"}}},"request":{"raw":"GET /13/4206/2693.png HTTP/1.1\r\nHost: tile.openstreetmap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"6cc18f7f94a7d862e90135a6f659a06a\"\r\nx-tilerender: culebre.openstreetmap.org\r\naccess-control-allow-origin: *\r\ncontent-type: image/png\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncache-control: max-age=96262, stale-while-revalidate=604800, stale-if-error=604800\r\nserver: Apache\r\nexpires: Mon, 23 Feb 2026 16:53:34 GMT\r\naccept-ranges: bytes\r\nage: 15937\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410027-HEL, cache-hel1410024-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 0\r\nx-timer: S1771785289.225621,VS0,VE1\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 34052\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":34052,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"6cc18f7f94a7d862e90135a6f659a06a","sha1":"a72edbfea14000a6e83bdb9e6239e454fdba8ac2","sha256":"dbe9a77a77dae5971108829938f2c6a391f6ffe5771c7da0fc967e36342a1d7d","sha512":"75f08d8117831966f4f836b2ef087f1777f6c8e5f05425506bb8db8dc292c6b61d8a0b761a3f8ab5fd14eda1e951f2d1caa79d9fbf549a36253c4bfe28dd92c2","ssdeep":"768:+m023Iitgm4CXMA4qDMuQjw8o9sqCoqcrMYb0jO2P2Utd:a2Ztgm4CXUuMuqxx8z43","tlshash":"7de2f1d0da1ef57bda65b1c928802a372501153a7ed450a0e8f84fd0cec9cad9f5bfa1","first_seen":"2026-02-22T17:44:22.070697Z","last_seen":"2026-02-22T18:35:44.824765Z","times_seen":2,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tile.openstreetmap.org/13/4205/2689.png","fqdn":"tile.openstreetmap.org","domain":"openstreetmap.org","tld":"org"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tile.openstreetmap.org","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 10 Nov 2025 22:01:08 GMT","end":"Sat, 12 Dec 2026 22:01:07 GMT"},"fingerprint":{"sha1":"07:9F:B2:D4:9E:DC:2E:8F:05:FE:15:93:27:F8:D6:6D:6E:C0:72:10","sha256":"2D:8E:B3:52:14:E2:C8:B0:2B:B0:50:15:D2:84:7E:ED:E8:6B:79:22:C7:DD:35:07:C5:67:2D:C7:E4:84:E4:B9"}}},"request":{"raw":"GET /13/4205/2689.png HTTP/1.1\r\nHost: tile.openstreetmap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"ecfe6fbfb7f2157b2d2528ba25d89212\"\r\nx-tilerender: culebre.openstreetmap.org\r\naccess-control-allow-origin: *\r\ncontent-type: image/png\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncache-control: max-age=87814, stale-while-revalidate=604800, stale-if-error=604800\r\nserver: Apache\r\nexpires: Sun, 22 Feb 2026 13:00:45 GMT\r\naccept-ranges: bytes\r\nage: 107858\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410025-HEL, cache-hel1410024-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 0\r\nx-timer: S1771785289.225211,VS0,VE2\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 35454\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35454,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"ecfe6fbfb7f2157b2d2528ba25d89212","sha1":"7480b03281f8526699b16028c9e9224849f6d83a","sha256":"3affdc8fd0142c6867d4b63fd134ae921a44fb19b82273014b7e07ea3c00f5b8","sha512":"e90ada81ce7de6e67f6cd2886d3ab3254a8ddccd899f4683138801f19f535ee23cd23b3748540b38dd112f88f5816df928e8416c0abfb52a3bfc57d2f3a6f3ab","ssdeep":"768:RvTD6fD8dY/Wlv2TJTLgKpl1BpOv0j6rH1/NMSnb9dokqnDEdg1bx:R7D6fD5/WR2Sv0UV/ZbjotDx","tlshash":"53f2e119daa1c3b00e9f0c5f9bda644a2d048229a49e3ed57ff44849cb3232a50ddf59","first_seen":"2026-02-22T17:44:22.075112Z","last_seen":"2026-02-28T02:28:34.961774Z","times_seen":4,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.chmsrv.com/tag.php?goal=4743cffb835703dfda2a66afec68bc1d","fqdn":"s.chmsrv.com","domain":"chmsrv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chmsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 15:17:20 GMT","end":"Fri, 22 May 2026 15:17:19 GMT"},"fingerprint":{"sha1":"0F:71:83:16:20:BF:BD:E0:7E:FA:26:7D:9D:04:4B:3D:D6:45:37:6F","sha256":"7E:B6:98:08:BC:FD:61:D2:B6:93:F1:E5:8D:20:03:47:C6:5C:3C:23:07:A5:23:B2:38:63:FF:4F:AE:44:DB:4D"}}},"request":{"raw":"GET /tag.php?goal=4743cffb835703dfda2a66afec68bc1d HTTP/1.1\r\nHost: s.chmsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A129426%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:48 GMT; path=/; domain=.chmsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":116,"dns":12,"connect":21,"send":0,"wait":24,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"s.chmsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.pemsrv.com/tag.php?goal=b2cdfc9c67c0343aca0ef0f56527db02","fqdn":"s.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:59:06 GMT","end":"Thu, 26 Mar 2026 11:59:05 GMT"},"fingerprint":{"sha1":"8C:23:43:2A:16:0E:E5:14:D7:54:DB:F5:5F:BB:56:E4:32:AF:3B:BA","sha256":"91:45:ED:F2:0E:35:83:14:E7:B4:0D:2D:8E:1A:A6:05:62:4F:B6:6E:83:8A:0C:D3:BF:D4:8A:1C:A7:19:9D:9C"}}},"request":{"raw":"GET /tag.php?goal=b2cdfc9c67c0343aca0ef0f56527db02 HTTP/1.1\r\nHost: s.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:49 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A139616%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:49 GMT; path=/; domain=.pemsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":181,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndication.realsrv.com/tag.php?goal=4ae3dc9ad80ddf0dfb0f5dd245bfe458","fqdn":"syndication.realsrv.com","domain":"realsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 12:00:56 GMT","end":"Thu, 26 Mar 2026 12:00:55 GMT"},"fingerprint":{"sha1":"64:14:CE:C9:3A:C1:9D:17:1E:17:06:35:DE:37:16:D3:07:B4:97:52","sha256":"B5:97:E2:D7:A3:3F:12:F4:1C:67:4F:93:80:C7:2C:10:4A:4B:FA:0D:0B:7D:17:93:62:98:87:22:11:A9:50:B0"}}},"request":{"raw":"GET /tag.php?goal=4ae3dc9ad80ddf0dfb0f5dd245bfe458 HTTP/1.1\r\nHost: syndication.realsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nCookie: goals=a%3A1%3A%7Bi%3A129426%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:49 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A2%3A%7Bi%3A129426%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7Di%3A139618%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:49 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.gay2match.com/1020/media/mgay0.png","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l.gay2match.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 14:33:03 GMT","end":"Sun, 12 Apr 2026 14:33:02 GMT"},"fingerprint":{"sha1":"FA:02:1A:40:68:CC:DA:69:92:D9:0E:32:2A:48:E0:2B:91:28:66:24","sha256":"66:E2:8D:22:93:A2:26:F0:64:9F:DA:1C:74:20:4B:12:38:D8:19:0F:4C:6E:7E:3B:B7:B4:0C:0B:BD:9E:F3:E5"}}},"request":{"raw":"GET /1020/media/mgay0.png HTTP/1.1\r\nHost: l.gay2match.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z5RR7NCDXK=GS2.1.s1771785288$o1$g0$t1771785288$j60$l0$h0; _ga=GA1.1.1539798426.1771785289\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\nlast-modified: Wed, 24 Sep 2025 21:19:59 GMT\r\netag: \"1c365-63f929d70cc82\"\r\naccept-ranges: bytes\r\ncontent-length: 115557\r\ncache-control: max-age=63072000\r\nexpires: Tue, 22 Feb 2028 18:34:49 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":115557,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"e231c6fa0d16d73e6c809b1c23db42fd","sha1":"4f8bed2dde3fe18de9039132c652f95b054c3c4d","sha256":"fe121a0a0931b4acc0262f52c4a5b0a0cb72aadc174ba2045847662665ed9216","sha512":"1dcb9be49cd3229cab8228acf15f8a546c1126a919066fa203014777107c3a3f640d1a72d040dabe8ce954b91d7f231714afcf56ce8f899c6e5f7dbfe4c4519b","ssdeep":"3072:nHLswA/+cBQ8h1003yMVs9+4wVyKaX03YqvC7lB94ot9S:rswA/+cBQ8h100rMwVyKaEzCZB91S","tlshash":"4ab31231034bd211f8b9335ae155d8e0a3c45f962862b3383709d6562a625bfbe6f733","first_seen":"2025-09-20T18:00:06.995552Z","last_seen":"2026-03-27T22:57:13.64322Z","times_seen":51,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/tag_gen.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /tag_gen.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 18:34:48 GMT\r\ncontent-type: application/javascript\r\netag: W/\"1e1c6dd9337a1f8a74975e30ec0\"\r\nexpires: Fri, 20 Feb 2026 14:34:15 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBuUwJCgH3HA4AAAwBuUwKEwH3AAAAAAwBT3/Y+AGzMSoAAA\r\nx-77-nzt-ray: e2f75420a8fac7f9484c9b696a83b121\r\nx-77-cache: HIT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-77-age: 3612\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1167,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1167), with no line terminators","md5":"19a25ea6643149ce82fd40a74ca56e16","sha1":"1e1c6dd9337a1f8a74975e30ec08f07404042d97","sha256":"b7c79f479ece6092e8983f60594e5561098b2816178bc7af3f5bf49764258d14","sha512":"164c460fed3020487b1575561bcef583b52a6e857906a875015666c4e2c32e283ccee99d05cabd8dc916908c9676aad846ff89cb924320a3fddd95222f38d235","ssdeep":"","tlshash":"ef2144b4b564653265701819a0ff4da1e07a07691e8296e018dfbc01997cfd7419aecc","first_seen":"2026-02-20T15:33:47.415522Z","last_seen":"2026-02-23T20:46:22.640907Z","times_seen":23,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":82,"dns":67,"connect":9,"send":0,"wait":8,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syndication.realsrv.com/tag.php?goal=f1adefe0892dc8be7551a5c06279c1b6","fqdn":"syndication.realsrv.com","domain":"realsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 12:00:56 GMT","end":"Thu, 26 Mar 2026 12:00:55 GMT"},"fingerprint":{"sha1":"64:14:CE:C9:3A:C1:9D:17:1E:17:06:35:DE:37:16:D3:07:B4:97:52","sha256":"B5:97:E2:D7:A3:3F:12:F4:1C:67:4F:93:80:C7:2C:10:4A:4B:FA:0D:0B:7D:17:93:62:98:87:22:11:A9:50:B0"}}},"request":{"raw":"GET /tag.php?goal=f1adefe0892dc8be7551a5c06279c1b6 HTTP/1.1\r\nHost: syndication.realsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A139614%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:48 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":120,"dns":5,"connect":28,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.eln7dc.com/tag.php?goal=b2cdfc9c67c0343aca0ef0f56527db02","fqdn":"s.eln7dc.com","domain":"eln7dc.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eln7dc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 12:21:41 GMT","end":"Sat, 04 Apr 2026 12:21:40 GMT"},"fingerprint":{"sha1":"B9:23:31:EC:61:B4:6A:E3:FB:59:35:73:4C:A9:81:E8:6A:AD:F6:20","sha256":"1F:21:4D:2C:21:14:F5:7B:5D:A7:2B:00:23:AC:12:B1:21:FD:BB:CD:8A:A6:4D:05:29:23:6D:7F:B8:88:87:EF"}}},"request":{"raw":"GET /tag.php?goal=b2cdfc9c67c0343aca0ef0f56527db02 HTTP/1.1\r\nHost: s.eln7dc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:49 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A139616%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:49 GMT; path=/; domain=.eln7dc.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":137,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.opoxv.com/tag.php?goal=b2cdfc9c67c0343aca0ef0f56527db02","fqdn":"s.opoxv.com","domain":"opoxv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opoxv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:58:02 GMT","end":"Thu, 26 Mar 2026 11:58:01 GMT"},"fingerprint":{"sha1":"FD:ED:08:A5:4F:71:E3:CF:05:EC:2F:2D:A1:B6:4B:C8:31:0D:D1:3E","sha256":"18:C6:90:EB:ED:C9:1B:A3:2C:F1:48:DB:87:2A:99:04:F4:91:C0:24:1D:EA:E6:4C:70:A3:A2:CE:33:CF:5E:9D"}}},"request":{"raw":"GET /tag.php?goal=b2cdfc9c67c0343aca0ef0f56527db02 HTTP/1.1\r\nHost: s.opoxv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:49 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A139616%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:49 GMT; path=/; domain=.opoxv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":159,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"s.opoxv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.chmsrv.com/tag.php?goal=4ae3dc9ad80ddf0dfb0f5dd245bfe458","fqdn":"s.chmsrv.com","domain":"chmsrv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chmsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 15:17:20 GMT","end":"Fri, 22 May 2026 15:17:19 GMT"},"fingerprint":{"sha1":"0F:71:83:16:20:BF:BD:E0:7E:FA:26:7D:9D:04:4B:3D:D6:45:37:6F","sha256":"7E:B6:98:08:BC:FD:61:D2:B6:93:F1:E5:8D:20:03:47:C6:5C:3C:23:07:A5:23:B2:38:63:FF:4F:AE:44:DB:4D"}}},"request":{"raw":"GET /tag.php?goal=4ae3dc9ad80ddf0dfb0f5dd245bfe458 HTTP/1.1\r\nHost: s.chmsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nCookie: goals=a%3A1%3A%7Bi%3A129426%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A2%3A%7Bi%3A129426%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7Di%3A139618%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:48 GMT; path=/; domain=.chmsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"s.chmsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"live.connect2api.com/langlog?country=FI\u0026lang=en\u0026en=1\u0026nl=0\u0026de=0\u0026es=0\u0026fr=0\u0026it=0\u0026langs=en-US,en","fqdn":"live.connect2api.com","domain":"connect2api.com","tld":"com"},"ip":{"addr":"188.122.84.144","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"live.connect2api.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 16:41:43 GMT","end":"Sun, 15 Mar 2026 16:41:42 GMT"},"fingerprint":{"sha1":"51:0B:A2:48:14:C2:2C:56:26:23:DE:A9:D4:02:D4:A0:CE:EC:D3:5C","sha256":"4C:62:17:AC:49:0F:DF:FC:5E:D7:AE:AF:04:EA:2D:31:81:04:B3:5E:76:FC:FF:04:38:01:12:D3:03:47:96:FE"}}},"request":{"raw":"GET /langlog?country=FI\u0026lang=en\u0026en=1\u0026nl=0\u0026de=0\u0026es=0\u0026fr=0\u0026it=0\u0026langs=en-US,en HTTP/1.1\r\nHost: live.connect2api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://l.gay2match.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nserver: Apache/2.4.62 (Rocky Linux)\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-API-KEY, Origin, X-Requested-With, Content-Type, Accept, Access-Control-Request-Method\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\nallow: GET, POST, OPTIONS, PUT, DELETE\r\napp: MadOffersAPI\r\ncache-control: no-cache, private\r\ncontent-type: application/json\r\nset-cookie: registerapifrontend=registerapi02; path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":118,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"47d641b8cf27198f79994fd71865658b","sha1":"1664e94f4192d4bd63c417aa1d8988017c8e550c","sha256":"ee241930526c207d5f2c79f1a800300456ba1ee5e8726dc249216f9870b76d62","sha512":"8e3e95006fca75d8006a7e0628c0d9cecd66e02c0559c43c408ac35eee921db964264bdf61b0591dfa8fc9c1acc7d6076228a090caf6dfc4986ee4def2081b4e","ssdeep":"","tlshash":"a9b01238dc9c8c234cf7e08d14ec286138e456030d352d68798e555c4f6cabfec6a5e5","first_seen":"2023-12-28T15:28:25Z","last_seen":"2026-04-03T22:55:15.929927Z","times_seen":1370,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":96,"dns":35,"connect":35,"send":0,"wait":40,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.gay2match.com/1020/media/mgay1.png","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l.gay2match.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 14:33:03 GMT","end":"Sun, 12 Apr 2026 14:33:02 GMT"},"fingerprint":{"sha1":"FA:02:1A:40:68:CC:DA:69:92:D9:0E:32:2A:48:E0:2B:91:28:66:24","sha256":"66:E2:8D:22:93:A2:26:F0:64:9F:DA:1C:74:20:4B:12:38:D8:19:0F:4C:6E:7E:3B:B7:B4:0C:0B:BD:9E:F3:E5"}}},"request":{"raw":"GET /1020/media/mgay1.png HTTP/1.1\r\nHost: l.gay2match.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z5RR7NCDXK=GS2.1.s1771785288$o1$g0$t1771785288$j60$l0$h0; _ga=GA1.1.1539798426.1771785289\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\nlast-modified: Wed, 24 Sep 2025 21:19:59 GMT\r\netag: \"16a61-63f929d70cc82\"\r\naccept-ranges: bytes\r\ncontent-length: 92769\r\ncache-control: max-age=63072000\r\nexpires: Tue, 22 Feb 2028 18:34:49 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92769,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"ed0ec133908073084dd91369eb874fa4","sha1":"5f2b43f2173ca074ad2656476b40da11e6d3f164","sha256":"95de4bc1e081a6cbcf07d3fc9cbb0236ecd41bc4eec72418bc02f677af482f2b","sha512":"d4be9d65da6d564d90f8ee332a4258790676f6c8016615bad57545b0aee064f347dbce1d9cca5fd60a306dd4239c0e80014ec81ae850c3fae2fb5222876baa9b","ssdeep":"1536:nFJZ6Z1Rd7zNkL2IsBO5Sl09ASJyzQuleqkDqglazNtDWaz4bLYCpIr2UHUBUo5D:FJ01LwxTCqyzTbkmglI/Dpz4wC2r2GY1","tlshash":"3c93025a45b3d0412145711fecaa522016f597fd290deaa3bfe3cb4ef04a8af927d184","first_seen":"2025-09-20T18:00:06.941537Z","last_seen":"2026-03-27T22:57:13.664765Z","times_seen":51,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.gay2match.com/1020/media/mgay12.png","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l.gay2match.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 14:33:03 GMT","end":"Sun, 12 Apr 2026 14:33:02 GMT"},"fingerprint":{"sha1":"FA:02:1A:40:68:CC:DA:69:92:D9:0E:32:2A:48:E0:2B:91:28:66:24","sha256":"66:E2:8D:22:93:A2:26:F0:64:9F:DA:1C:74:20:4B:12:38:D8:19:0F:4C:6E:7E:3B:B7:B4:0C:0B:BD:9E:F3:E5"}}},"request":{"raw":"GET /1020/media/mgay12.png HTTP/1.1\r\nHost: l.gay2match.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z5RR7NCDXK=GS2.1.s1771785288$o1$g0$t1771785289$j59$l0$h0; _ga=GA1.1.1539798426.1771785289\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\nlast-modified: Wed, 24 Sep 2025 21:19:59 GMT\r\netag: \"1235c-63f929d70d06a\"\r\naccept-ranges: bytes\r\ncontent-length: 74588\r\ncache-control: max-age=63072000\r\nexpires: Tue, 22 Feb 2028 18:34:49 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74588,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"6e5b0a41d94a7cef8db203b99cdd8b38","sha1":"990b3db4448121b7a56cd8110b9615694d889985","sha256":"a086abef6e1dcda470518ea60db338d6ad761d325ae00a4728e5cdd2eac081e8","sha512":"4349f9db5fdec0ee6de37f83c7c12d2a3e2a91b81ab75d419bcc196837d2d8935a6705bc008a73da6d2b6133ed6af6d4386a17f04eb4eac57f050aedfa510ebc","ssdeep":"1536:rmK0YUwXXdH6aVpI7sAT6+HM7FsArIDpiyq5ZCbNGkSBf:rfHdHGIJuurI0ykCbjA","tlshash":"5f7312d6306d42390e909f12a3e05a16bb273162cd76b6449f3db698a103fbed21b0dd","first_seen":"2025-09-20T18:00:07.046656Z","last_seen":"2026-03-27T22:57:13.666399Z","times_seen":51,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.orbsrv.com/tag.php?goal=4ae3dc9ad80ddf0dfb0f5dd245bfe458","fqdn":"s.orbsrv.com","domain":"orbsrv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orbsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:58:51 GMT","end":"Thu, 26 Mar 2026 11:58:50 GMT"},"fingerprint":{"sha1":"2E:EF:FB:7D:B6:EE:F2:B5:C0:B4:00:64:EC:5E:78:E8:79:27:54:98","sha256":"F4:6C:A0:7A:11:B4:C6:FF:AC:67:38:8B:22:44:9A:36:33:88:1D:9D:78:6C:20:CC:67:60:CF:F9:02:49:88:3F"}}},"request":{"raw":"GET /tag.php?goal=4ae3dc9ad80ddf0dfb0f5dd245bfe458 HTTP/1.1\r\nHost: s.orbsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:49 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A139618%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:49 GMT; path=/; domain=.orbsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.gay2match.com/1020/media/mgay16.png","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l.gay2match.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 14:33:03 GMT","end":"Sun, 12 Apr 2026 14:33:02 GMT"},"fingerprint":{"sha1":"FA:02:1A:40:68:CC:DA:69:92:D9:0E:32:2A:48:E0:2B:91:28:66:24","sha256":"66:E2:8D:22:93:A2:26:F0:64:9F:DA:1C:74:20:4B:12:38:D8:19:0F:4C:6E:7E:3B:B7:B4:0C:0B:BD:9E:F3:E5"}}},"request":{"raw":"GET /1020/media/mgay16.png HTTP/1.1\r\nHost: l.gay2match.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z5RR7NCDXK=GS2.1.s1771785288$o1$g0$t1771785289$j59$l0$h0; _ga=GA1.1.1539798426.1771785289\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\nlast-modified: Wed, 24 Sep 2025 21:19:59 GMT\r\netag: \"149c6-63f929d70d452\"\r\naccept-ranges: bytes\r\ncontent-length: 84422\r\ncache-control: max-age=63072000\r\nexpires: Tue, 22 Feb 2028 18:34:49 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":84422,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"d3231a063ee9f19a8d9ce3ab22722847","sha1":"f5acdba7fe916d6b5330b425b3d0355b06bf3152","sha256":"2139c10897f76fd9c7aa0a46d182949e89a1f9e49fdc1cada6d37b0f18244023","sha512":"0a8a6e766cd6d06422bc8bb0c155d67ce4d2e2901109cd1a706d7295b1b8ffffa57727edd28ab20ea7b74f4affd74a224526e248002795cee4db656544448e9c","ssdeep":"1536:ToVLBS6HJVDO9e3+cy4ogboI65VQD7ovV/1VYUSAA7PPn5swV8NVcKpWS+7Oh:T6BS6pVDWQb16LQ4vLV7+PPnVuRZ+qh","tlshash":"6683028089d0c0639af708ecede05576417236a17a1c3f166cc14af7569de3683e87ea","first_seen":"2025-09-20T18:00:06.93428Z","last_seen":"2026-03-27T22:57:13.628766Z","times_seen":51,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.gay2match.com/1020/media/mgay17.png","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l.gay2match.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 14:33:03 GMT","end":"Sun, 12 Apr 2026 14:33:02 GMT"},"fingerprint":{"sha1":"FA:02:1A:40:68:CC:DA:69:92:D9:0E:32:2A:48:E0:2B:91:28:66:24","sha256":"66:E2:8D:22:93:A2:26:F0:64:9F:DA:1C:74:20:4B:12:38:D8:19:0F:4C:6E:7E:3B:B7:B4:0C:0B:BD:9E:F3:E5"}}},"request":{"raw":"GET /1020/media/mgay17.png HTTP/1.1\r\nHost: l.gay2match.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z5RR7NCDXK=GS2.1.s1771785288$o1$g0$t1771785289$j59$l0$h0; _ga=GA1.1.1539798426.1771785289\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\nlast-modified: Wed, 24 Sep 2025 21:19:59 GMT\r\netag: \"18899-63f929d70d452\"\r\naccept-ranges: bytes\r\ncontent-length: 100505\r\ncache-control: max-age=63072000\r\nexpires: Tue, 22 Feb 2028 18:34:49 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100505,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"93268a5c7c001ae7c1328bac98e524de","sha1":"13bc6ff01f4d0a2c472b8533f555886be88fa76c","sha256":"c269d82ecf07922f5211e4869abd91eea22563c21c1f6dd2634ef997b6d29d81","sha512":"31cf4120f3b9ef206518bc6fb8852deac0f91760b5fff3d46a31530bf0c0856456a94c43918b21fe9a30ef3f047b2aa0f5703a8d97f298b2231a0801cd8452cf","ssdeep":"3072:Kle+11p+JOr3703l4sbbqANPQDzlOzRmoa:oeJOrY14sbDmzSU","tlshash":"65a312eccc4a0b04d7646da4d1115fb81f0487ece6b70ee2b572bd3a4b9c7db0a242a5","first_seen":"2025-09-20T18:00:06.956422Z","last_seen":"2026-03-27T22:57:13.663771Z","times_seen":51,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tile.openstreetmap.org/13/4208/2692.png","fqdn":"tile.openstreetmap.org","domain":"openstreetmap.org","tld":"org"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tile.openstreetmap.org","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 10 Nov 2025 22:01:08 GMT","end":"Sat, 12 Dec 2026 22:01:07 GMT"},"fingerprint":{"sha1":"07:9F:B2:D4:9E:DC:2E:8F:05:FE:15:93:27:F8:D6:6D:6E:C0:72:10","sha256":"2D:8E:B3:52:14:E2:C8:B0:2B:B0:50:15:D2:84:7E:ED:E8:6B:79:22:C7:DD:35:07:C5:67:2D:C7:E4:84:E4:B9"}}},"request":{"raw":"GET /13/4208/2692.png HTTP/1.1\r\nHost: tile.openstreetmap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"1c8e51dc8fc7435af39a5a026a68d57c\"\r\nx-tilerender: wawel.openstreetmap.org\r\naccess-control-allow-origin: *\r\ncontent-type: image/png\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncache-control: max-age=604800, stale-while-revalidate=604800, stale-if-error=604800\r\nserver: Apache\r\nexpires: Sun, 01 Mar 2026 14:09:12 GMT\r\naccept-ranges: bytes\r\nage: 15935\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410030-HEL, cache-hel1410024-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 0\r\nx-timer: S1771785289.212139,VS0,VE1\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 37143\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":37143,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"1c8e51dc8fc7435af39a5a026a68d57c","sha1":"6b58e4b9d5368cb150bd452f6439cbda0934d16a","sha256":"2360de2cbd97d759b032de1679c28726c8fc3ed55b751385d9e47f591479f1ca","sha512":"f4146586bc60ec0531ea500a48aa1a9d937b608883fdcf1c53e29719397e69640eddd5eb731770d55f8c0be67d6573912798d108584fd1cd9ecf11ec3f609137","ssdeep":"768:k53O659BlhBV36aVWpI9RzyGQbxjNEOV0Pq2gr/MZIMTHTko:kzjDsaYYR+ZjoqnAaMToo","tlshash":"91f2e13bbf1ccec7e52d07b2499b1b3447a57db1f008c1d7041d8a60aa29267e7a64d3","first_seen":"2026-02-22T17:44:22.06968Z","last_seen":"2026-03-01T05:45:51.04021Z","times_seen":4,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tile.openstreetmap.org/13/4205/2691.png","fqdn":"tile.openstreetmap.org","domain":"openstreetmap.org","tld":"org"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tile.openstreetmap.org","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 10 Nov 2025 22:01:08 GMT","end":"Sat, 12 Dec 2026 22:01:07 GMT"},"fingerprint":{"sha1":"07:9F:B2:D4:9E:DC:2E:8F:05:FE:15:93:27:F8:D6:6D:6E:C0:72:10","sha256":"2D:8E:B3:52:14:E2:C8:B0:2B:B0:50:15:D2:84:7E:ED:E8:6B:79:22:C7:DD:35:07:C5:67:2D:C7:E4:84:E4:B9"}}},"request":{"raw":"GET /13/4205/2691.png HTTP/1.1\r\nHost: tile.openstreetmap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\nserver: Apache\r\ncache-control: max-age=93268, stale-while-revalidate=604800, stale-if-error=604800\r\nexpires: Mon, 23 Feb 2026 16:03:40 GMT\r\netag: \"6a35ec7a87aeffc50651750aedb22eea\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-tilerender: culebre.openstreetmap.org\r\naccept-ranges: bytes\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nvia: 1.1 varnish\r\nage: 15937\r\nx-served-by: cache-hel1410024-HEL, cache-hel1410024-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 1\r\nx-timer: S1771785289.212432,VS0,VE1\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 28653\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":28653,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"6a35ec7a87aeffc50651750aedb22eea","sha1":"08dbf696b63c533ef710652adf63f6208c1b071c","sha256":"ce60a4621588981de6f34ffc235126e4173ae05b5f6c365ded728cdb5b687bbf","sha512":"fbfd62e9f95b333eaf69711ee246a51ea1a9a64893e35afac24881d1091e7309229b299cd07eb9387228189a860df5f4c4ccc794f25d32f17d853265e649ea2c","ssdeep":"768:wvokF0tg0Q7bHBXljxlCGH2Dfl7f4h8kS0z94YKQinh7:wok6LQp1jDCZDFf4h8JYKXh7","tlshash":"27d2e1f53d97086376b4e78e1e911b5119fb02710a30bb2aa5d9d726cde162cf4eb00c","first_seen":"2026-02-22T18:35:44.833447Z","last_seen":"2026-02-22T18:35:44.833447Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tile.openstreetmap.org/13/4205/2690.png","fqdn":"tile.openstreetmap.org","domain":"openstreetmap.org","tld":"org"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tile.openstreetmap.org","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 10 Nov 2025 22:01:08 GMT","end":"Sat, 12 Dec 2026 22:01:07 GMT"},"fingerprint":{"sha1":"07:9F:B2:D4:9E:DC:2E:8F:05:FE:15:93:27:F8:D6:6D:6E:C0:72:10","sha256":"2D:8E:B3:52:14:E2:C8:B0:2B:B0:50:15:D2:84:7E:ED:E8:6B:79:22:C7:DD:35:07:C5:67:2D:C7:E4:84:E4:B9"}}},"request":{"raw":"GET /13/4205/2690.png HTTP/1.1\r\nHost: tile.openstreetmap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"e62e82a11e000d056c2e14dd23675a90\"\r\nx-tilerender: ysera.openstreetmap.org\r\naccess-control-allow-origin: *\r\ncontent-type: image/png\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncache-control: max-age=604800, stale-while-revalidate=604800, stale-if-error=604800\r\nserver: Apache\r\nexpires: Thu, 26 Feb 2026 12:46:15 GMT\r\naccept-ranges: bytes\r\nage: 280111\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL, cache-hel1410024-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 0\r\nx-timer: S1771785289.225158,VS0,VE2\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 21123\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":21123,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"e62e82a11e000d056c2e14dd23675a90","sha1":"f0e68f1b28f4ee7b68e00b9a806a2f206a7d32a6","sha256":"a2e60ae8be1c1f4b1f034aa53892b6f4b73f5d9e9c3c218251916a59e9727794","sha512":"d75be938943a1b68f5a9a7dfb456bcc5594bbb4032ca90a0fd685fa455af93d4fc2f4ef7f815006222a03866d8a2425b93ed9feb61a70ba5caf79a2a353dc505","ssdeep":"384:PMp5HJmfIYmYdng05dOvxnuLXqpXotGF1YgrQKelLMWaJupzoXSB:MoI/kXUpuLXqUGUgriIWaYpzaSB","tlshash":"4692d0067bdfe05888a49063ef66fb1472a4c4f8877145c286dc2d117fb9ba664d7312","first_seen":"2026-02-22T17:44:22.073234Z","last_seen":"2026-02-28T02:28:34.979046Z","times_seen":4,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tile.openstreetmap.org/13/4208/2693.png","fqdn":"tile.openstreetmap.org","domain":"openstreetmap.org","tld":"org"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tile.openstreetmap.org","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 10 Nov 2025 22:01:08 GMT","end":"Sat, 12 Dec 2026 22:01:07 GMT"},"fingerprint":{"sha1":"07:9F:B2:D4:9E:DC:2E:8F:05:FE:15:93:27:F8:D6:6D:6E:C0:72:10","sha256":"2D:8E:B3:52:14:E2:C8:B0:2B:B0:50:15:D2:84:7E:ED:E8:6B:79:22:C7:DD:35:07:C5:67:2D:C7:E4:84:E4:B9"}}},"request":{"raw":"GET /13/4208/2693.png HTTP/1.1\r\nHost: tile.openstreetmap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: image/png\r\nserver: Apache\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nexpires: Wed, 18 Feb 2026 18:40:24 GMT\r\netag: \"dd3adb04355a342eba07985a820080ba\"\r\nx-tilerender: nidhogg.openstreetmap.org\r\ncache-control: max-age=86435, stale-while-revalidate=604800, stale-if-error=604800\r\naccept-ranges: bytes\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nvia: 1.1 varnish\r\nage: 394652\r\nx-served-by: cache-hel1410024-HEL, cache-hel1410024-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 157\r\nx-timer: S1771785289.225403,VS0,VE1\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 41498\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41498,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"dd3adb04355a342eba07985a820080ba","sha1":"df46a33edfe4570ecb5c095f1c76572a629d6957","sha256":"5a9764da65a21e6ea1930e0605f0d5ea1437f46937e0e1ac2aa53f9269da35b1","sha512":"3b6ccab2d48489abc31d230cb111521b4f21a6e1a2b0661818d21955469ce82951c4234ef38b8cf1529e929a28f25abf56851509d09ca00098aeb8e25168eca5","ssdeep":"768:NVw0XhIx3nAufYjaXdN9k3Esii8zpyyriWfC7APSIgE7Eq2XkmwPE:HhEnjhXd7k0szghRBPFIwPE","tlshash":"2b13f28515420d9c7bca4cab33a19b863cd46d8e117fd5d4a681edec7bfe1702889339","first_seen":"2026-02-22T17:44:22.087462Z","last_seen":"2026-02-24T20:25:39.632974Z","times_seen":3,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.chmsrv.com/tag.php?goal=f1adefe0892dc8be7551a5c06279c1b6","fqdn":"s.chmsrv.com","domain":"chmsrv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chmsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 15:17:20 GMT","end":"Fri, 22 May 2026 15:17:19 GMT"},"fingerprint":{"sha1":"0F:71:83:16:20:BF:BD:E0:7E:FA:26:7D:9D:04:4B:3D:D6:45:37:6F","sha256":"7E:B6:98:08:BC:FD:61:D2:B6:93:F1:E5:8D:20:03:47:C6:5C:3C:23:07:A5:23:B2:38:63:FF:4F:AE:44:DB:4D"}}},"request":{"raw":"GET /tag.php?goal=f1adefe0892dc8be7551a5c06279c1b6 HTTP/1.1\r\nHost: s.chmsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A139614%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:48 GMT; path=/; domain=.chmsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":3,"connect":28,"send":0,"wait":28,"receive":1,"ssl":112},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"s.chmsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/tag_gen.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /tag_gen.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 18:34:48 GMT\r\ncontent-type: application/javascript\r\netag: W/\"1e1c6dd9337a1f8a74975e30ec0\"\r\nexpires: Fri, 20 Feb 2026 14:34:15 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBuUwJCgH3HA4AAAwBuUwKEwH3AAAAAAwBT3/Y+AGzMSoAAA\r\nx-77-nzt-ray: e2f75420a8fac7f9484c9b69eb8bb935\r\nx-77-cache: HIT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-77-age: 3612\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1167,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1167), with no line terminators","md5":"19a25ea6643149ce82fd40a74ca56e16","sha1":"1e1c6dd9337a1f8a74975e30ec08f07404042d97","sha256":"b7c79f479ece6092e8983f60594e5561098b2816178bc7af3f5bf49764258d14","sha512":"164c460fed3020487b1575561bcef583b52a6e857906a875015666c4e2c32e283ccee99d05cabd8dc916908c9676aad846ff89cb924320a3fddd95222f38d235","ssdeep":"","tlshash":"ef2144b4b564653265701819a0ff4da1e07a07691e8296e018dfbc01997cfd7419aecc","first_seen":"2026-02-20T15:33:47.415522Z","last_seen":"2026-02-23T20:46:22.640907Z","times_seen":23,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tile.openstreetmap.org/13/4206/2691.png","fqdn":"tile.openstreetmap.org","domain":"openstreetmap.org","tld":"org"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tile.openstreetmap.org","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 10 Nov 2025 22:01:08 GMT","end":"Sat, 12 Dec 2026 22:01:07 GMT"},"fingerprint":{"sha1":"07:9F:B2:D4:9E:DC:2E:8F:05:FE:15:93:27:F8:D6:6D:6E:C0:72:10","sha256":"2D:8E:B3:52:14:E2:C8:B0:2B:B0:50:15:D2:84:7E:ED:E8:6B:79:22:C7:DD:35:07:C5:67:2D:C7:E4:84:E4:B9"}}},"request":{"raw":"GET /13/4206/2691.png HTTP/1.1\r\nHost: tile.openstreetmap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: image/png\r\nserver: Apache\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nexpires: Wed, 25 Feb 2026 03:33:23 GMT\r\netag: \"52035a8ea0ca7745576aad90772a6541\"\r\nx-tilerender: ysera.openstreetmap.org\r\ncache-control: max-age=604800, stale-while-revalidate=604800, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 399683\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410022-HEL, cache-hel1410024-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 0\r\nx-timer: S1771785289.224894,VS0,VE2\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 33741\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":33741,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"52035a8ea0ca7745576aad90772a6541","sha1":"bd2c715bdb16e65d62d71dd7e70b5e43b7659f3f","sha256":"936c00eea1b5dbc6f58911738f2293a9697a1f803b077db47d941fe12de66d82","sha512":"e2d2782d49a08eb91cf15aa7c527881990b0f0d83b0c82403416422cb46e3aa4ed7349368f17d142648d9e99f032141ff575d9312c62ef43c80abb6d091567ce","ssdeep":"768:282oKeW2GfB1XHuOtvmysnrmlKqlXYpd415ri7DB2pOD3x:282oHMZNHu0ImzAU27doOt","tlshash":"e3e2f2cc8a0987e88456b1dc42363a677d73fc97c1d0b9c82a756859b1d90f3098f3ba","first_seen":"2026-02-22T17:44:22.068719Z","last_seen":"2026-02-24T20:25:39.638101Z","times_seen":3,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":24,"connect":15,"send":0,"wait":46,"receive":36,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tile.openstreetmap.org/13/4206/2692.png","fqdn":"tile.openstreetmap.org","domain":"openstreetmap.org","tld":"org"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tile.openstreetmap.org","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 10 Nov 2025 22:01:08 GMT","end":"Sat, 12 Dec 2026 22:01:07 GMT"},"fingerprint":{"sha1":"07:9F:B2:D4:9E:DC:2E:8F:05:FE:15:93:27:F8:D6:6D:6E:C0:72:10","sha256":"2D:8E:B3:52:14:E2:C8:B0:2B:B0:50:15:D2:84:7E:ED:E8:6B:79:22:C7:DD:35:07:C5:67:2D:C7:E4:84:E4:B9"}}},"request":{"raw":"GET /13/4206/2692.png HTTP/1.1\r\nHost: tile.openstreetmap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: image/png\r\nserver: Apache\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nexpires: Tue, 24 Feb 2026 18:39:49 GMT\r\netag: \"09e879db54da19d954366d523ea3c5e0\"\r\nx-tilerender: ysera.openstreetmap.org\r\ncache-control: max-age=604800, stale-while-revalidate=604800, stale-if-error=604800\r\naccept-ranges: bytes\r\nage: 431697\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410032-HEL, cache-hel1410024-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 0\r\nx-timer: S1771785289.211631,VS0,VE1\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 39298\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":39298,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"09e879db54da19d954366d523ea3c5e0","sha1":"b00c2925b599b1d8779e94c15e4f2372ac71d83f","sha256":"d23a1d850e49e30ff9f6970a5cedbced73ccddd4ba620b1054ccad18b744bb2a","sha512":"a4be491ee93e1645ce8a853909874543358f67ba4c007431df0f3e4d35504aaad448885daf228cf033d90e7cb80c018a6551e6e05a65974717187c9305a1e523","ssdeep":"768:2WghnsyTjYIYaEcN1nh1nCw1pGQqrIZ5Wk2larZ2En9rcPw04bqXUpnU4:2Wgh+IYNGnh1CoGQqQ2larZbnNv0oqXy","tlshash":"7e03f1fb04f45df6c3a769ec82a3031b90d2efc3edaa4116f6491546c21e8548aa2793","first_seen":"2026-02-22T17:44:22.094971Z","last_seen":"2026-02-28T02:28:34.997308Z","times_seen":4,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tile.openstreetmap.org/13/4207/2693.png","fqdn":"tile.openstreetmap.org","domain":"openstreetmap.org","tld":"org"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tile.openstreetmap.org","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 10 Nov 2025 22:01:08 GMT","end":"Sat, 12 Dec 2026 22:01:07 GMT"},"fingerprint":{"sha1":"07:9F:B2:D4:9E:DC:2E:8F:05:FE:15:93:27:F8:D6:6D:6E:C0:72:10","sha256":"2D:8E:B3:52:14:E2:C8:B0:2B:B0:50:15:D2:84:7E:ED:E8:6B:79:22:C7:DD:35:07:C5:67:2D:C7:E4:84:E4:B9"}}},"request":{"raw":"GET /13/4207/2693.png HTTP/1.1\r\nHost: tile.openstreetmap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\netag: \"bab6724f93435de90568c6ca3b55fc4d\"\r\ncache-control: max-age=604800, stale-while-revalidate=604800, stale-if-error=604800\r\naccess-control-allow-origin: *\r\nx-tilerender: ysera.openstreetmap.org\r\nserver: Apache\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nexpires: Wed, 25 Feb 2026 04:57:15 GMT\r\naccept-ranges: bytes\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nvia: 1.1 varnish\r\nage: 394652\r\nx-served-by: cache-hel1410022-HEL, cache-hel1410024-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 12\r\nx-timer: S1771785289.212208,VS0,VE1\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 38153\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38153,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"bab6724f93435de90568c6ca3b55fc4d","sha1":"fd4c2c6c2ffbf4290925a33e769611fd3accf95e","sha256":"7b19fbf733530f6adbf576c6d30830de8dc0d49e168b7fe7d6ee93dcbbb137ec","sha512":"c0116e6268c52bca5eace9f886a047aa55f87196c70df5ed9c99316659aa943dfaad37bcf2455f45f8ca941f8498ddd7e8a96c1e1324aa90f4c20a0258a9f414","ssdeep":"768:Ub2CxIi6ihR2WNdUxSWYsXmEIST3c8A/eGjb7MMAaresBdR4XOD6HIyyxB8hIJcc:xi6ihR2WNLRs3ZjVA/evparpBj4+D6HY","tlshash":"3103f1e02c8664878a4aac4fedf06d0df43fd9f054946f30e19b772afc887366425869","first_seen":"2026-02-22T17:44:22.063998Z","last_seen":"2026-02-24T20:25:39.646589Z","times_seen":3,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tile.openstreetmap.org/13/4209/2689.png","fqdn":"tile.openstreetmap.org","domain":"openstreetmap.org","tld":"org"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tile.openstreetmap.org","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 10 Nov 2025 22:01:08 GMT","end":"Sat, 12 Dec 2026 22:01:07 GMT"},"fingerprint":{"sha1":"07:9F:B2:D4:9E:DC:2E:8F:05:FE:15:93:27:F8:D6:6D:6E:C0:72:10","sha256":"2D:8E:B3:52:14:E2:C8:B0:2B:B0:50:15:D2:84:7E:ED:E8:6B:79:22:C7:DD:35:07:C5:67:2D:C7:E4:84:E4:B9"}}},"request":{"raw":"GET /13/4209/2689.png HTTP/1.1\r\nHost: tile.openstreetmap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\nserver: Apache\r\ncache-control: max-age=92852, stale-while-revalidate=604800, stale-if-error=604800\r\nexpires: Fri, 20 Feb 2026 21:40:16 GMT\r\netag: \"2b3dc6c4d678f7095d9107594c3791ea\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-tilerender: nidhogg.openstreetmap.org\r\naccept-ranges: bytes\r\nage: 107858\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL, cache-hel1410024-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 0\r\nx-timer: S1771785289.224986,VS0,VE4\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 26666\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26666,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"2b3dc6c4d678f7095d9107594c3791ea","sha1":"f331c17483e6a15d352533a2ae7753c2f8aecbae","sha256":"2eb9e3840e1f975693b54d4bf10038587dd3f7e4c71e33516ad53a63aa37b794","sha512":"e3a7a20fc12ef1aa004cac66c2840137d41e55f2cd9c4534d5acbd6891ddfe37b9e5b8c7050728adf3adb215259f4d051a8c018c7648103341d0579f47b352de","ssdeep":"768:g8oXP8iajnKhXWs0gUfbaMzQqkBfdKyEHWJ:g/u+FWefTllKtG","tlshash":"29c2d1e88b654ed1c16d77a39807d9340b9b83214e7ac740c7a8b9d9ff628ec2046a43","first_seen":"2026-02-22T17:44:22.088299Z","last_seen":"2026-02-24T20:25:39.661146Z","times_seen":3,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tile.openstreetmap.org/13/4205/2693.png","fqdn":"tile.openstreetmap.org","domain":"openstreetmap.org","tld":"org"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tile.openstreetmap.org","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 10 Nov 2025 22:01:08 GMT","end":"Sat, 12 Dec 2026 22:01:07 GMT"},"fingerprint":{"sha1":"07:9F:B2:D4:9E:DC:2E:8F:05:FE:15:93:27:F8:D6:6D:6E:C0:72:10","sha256":"2D:8E:B3:52:14:E2:C8:B0:2B:B0:50:15:D2:84:7E:ED:E8:6B:79:22:C7:DD:35:07:C5:67:2D:C7:E4:84:E4:B9"}}},"request":{"raw":"GET /13/4205/2693.png HTTP/1.1\r\nHost: tile.openstreetmap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\nserver: Apache\r\ncache-control: max-age=90990, stale-while-revalidate=604800, stale-if-error=604800\r\nexpires: Mon, 23 Feb 2026 15:25:42 GMT\r\netag: \"0e620645c7b2231a0b136b52fe925464\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-tilerender: culebre.openstreetmap.org\r\naccept-ranges: bytes\r\nage: 15937\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL, cache-hel1410024-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 0\r\nx-timer: S1771785289.225023,VS0,VE2\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 35291\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":35291,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"0e620645c7b2231a0b136b52fe925464","sha1":"054a907dc50dd23f78ca6a450eb995cc867c6770","sha256":"e371e769720378a5f5fad4602aaad19727f57e506dc27a204d4fc3e4c3f71730","sha512":"b78d6686813d4079aa37c4af469434ce861496f03fb5c0c167d15dd6e0c36886571a819f79e941b06d4a947686d38e9186e6501b3dcf38df209c78ccadef3e07","ssdeep":"768:fXLpGF1mnGkXxdaKD1jZtujuPttzjbsPNFxO1FZn25ipkPuxuqpqqxfYZ1c:fXLpGF1PkXxVvIuPttHbs8FZ2s1F2Dc","tlshash":"5cf2022f7fbe69d9f8d51915c8101b850153b8facac2a52077fd9e89b41937bc438d84","first_seen":"2026-02-22T17:44:22.093419Z","last_seen":"2026-02-22T18:35:44.842778Z","times_seen":2,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.dsr577.com/tag.php?goal=4ae3dc9ad80ddf0dfb0f5dd245bfe458","fqdn":"s.dsr577.com","domain":"dsr577.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsr577.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 12:19:44 GMT","end":"Sat, 04 Apr 2026 12:19:43 GMT"},"fingerprint":{"sha1":"55:27:02:00:33:4D:54:0A:F7:F5:FB:49:7C:6F:9A:96:E3:35:D0:F6","sha256":"51:BA:C2:35:5F:50:CC:13:12:3F:94:D5:67:BF:3F:95:DF:50:10:30:9E:E2:21:0D:BF:2A:AD:2A:62:39:AF:B1"}}},"request":{"raw":"GET /tag.php?goal=4ae3dc9ad80ddf0dfb0f5dd245bfe458 HTTP/1.1\r\nHost: s.dsr577.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nCookie: goals=a%3A1%3A%7Bi%3A129426%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:49 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A2%3A%7Bi%3A129426%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7Di%3A139618%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:49 GMT; path=/; domain=.dsr577.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":104,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.gay2match.com/1020/media/mgay2.png","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l.gay2match.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 14:33:03 GMT","end":"Sun, 12 Apr 2026 14:33:02 GMT"},"fingerprint":{"sha1":"FA:02:1A:40:68:CC:DA:69:92:D9:0E:32:2A:48:E0:2B:91:28:66:24","sha256":"66:E2:8D:22:93:A2:26:F0:64:9F:DA:1C:74:20:4B:12:38:D8:19:0F:4C:6E:7E:3B:B7:B4:0C:0B:BD:9E:F3:E5"}}},"request":{"raw":"GET /1020/media/mgay2.png HTTP/1.1\r\nHost: l.gay2match.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z5RR7NCDXK=GS2.1.s1771785288$o1$g0$t1771785288$j60$l0$h0; _ga=GA1.1.1539798426.1771785289\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\nlast-modified: Wed, 24 Sep 2025 21:19:59 GMT\r\netag: \"1534a-63f929d70d83a\"\r\naccept-ranges: bytes\r\ncontent-length: 86858\r\ncache-control: max-age=63072000\r\nexpires: Tue, 22 Feb 2028 18:34:49 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":86858,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"39f5eca038755a293f12418132a689d3","sha1":"c9bd00e501c3e57de246759b165c9aaf762d27bd","sha256":"43335e40c790f572a3765e94330af158c324ec399cd96702c2304c4915eb7deb","sha512":"053b4a68d8df65da68b149582220e7c15a862df0587c3fdff1e14b47a5e097e02364df0d20f2fe661fc879e9a8bfd0b5e7d7522133cbf7b669f59b62dc21633d","ssdeep":"1536:24H+2efUI70Ci+QBfkhcKCuTr6KZGi/MjQMT5HxpiFIVzVF:wfMI7ipB9JCr1E+c1xpiOVb","tlshash":"ca8302c7ac28425dca14eebae2d4c6669511a3f4a4463f04d7d3aa9337e80dce9c670c","first_seen":"2025-09-20T18:00:06.954542Z","last_seen":"2026-03-27T22:57:13.621075Z","times_seen":51,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.gay2match.com/1020/media/mgay4.png","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l.gay2match.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 14:33:03 GMT","end":"Sun, 12 Apr 2026 14:33:02 GMT"},"fingerprint":{"sha1":"FA:02:1A:40:68:CC:DA:69:92:D9:0E:32:2A:48:E0:2B:91:28:66:24","sha256":"66:E2:8D:22:93:A2:26:F0:64:9F:DA:1C:74:20:4B:12:38:D8:19:0F:4C:6E:7E:3B:B7:B4:0C:0B:BD:9E:F3:E5"}}},"request":{"raw":"GET /1020/media/mgay4.png HTTP/1.1\r\nHost: l.gay2match.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z5RR7NCDXK=GS2.1.s1771785288$o1$g0$t1771785288$j60$l0$h0; _ga=GA1.1.1539798426.1771785289\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\nlast-modified: Wed, 24 Sep 2025 21:19:59 GMT\r\netag: \"14088-63f929d70e00a\"\r\naccept-ranges: bytes\r\ncontent-length: 82056\r\ncache-control: max-age=63072000\r\nexpires: Tue, 22 Feb 2028 18:34:49 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":82056,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"12042211b57556b8d7c5c34af68e29a3","sha1":"fe4ce3b521b1f1687ede8638e2f26f1d5dfe2791","sha256":"e395db1335a0c589e42e0302bee8af85c0fa99406bb6a07fb49c9680c4bde5f4","sha512":"96ac0be23a44fdefb59ef53f8343df9ae323a17abc9bb46eb08b6cb3d812f0c41be0a003073520ae775e74f81ea434a2883321db656e08e8e81e1e382e97f967","ssdeep":"1536:/7QbtHjpu0uMlCwJZEwr6lloJWZDQf/3/KUpuvY/XEgo6TsRUbDE+t4bfs:/8jTf1JZV2lSYJWvx+Cxo6vQ4","tlshash":"348312f6a6af3fb2a8044f230bb5345799de40984b1b983ef7d685a51fe4c36c175404","first_seen":"2025-09-20T18:00:06.950444Z","last_seen":"2026-03-27T22:57:13.614096Z","times_seen":51,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.gay2match.com/1020/media/favicon.ico","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:50.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l.gay2match.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 14:33:03 GMT","end":"Sun, 12 Apr 2026 14:33:02 GMT"},"fingerprint":{"sha1":"FA:02:1A:40:68:CC:DA:69:92:D9:0E:32:2A:48:E0:2B:91:28:66:24","sha256":"66:E2:8D:22:93:A2:26:F0:64:9F:DA:1C:74:20:4B:12:38:D8:19:0F:4C:6E:7E:3B:B7:B4:0C:0B:BD:9E:F3:E5"}}},"request":{"raw":"GET /1020/media/favicon.ico HTTP/1.1\r\nHost: l.gay2match.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z5RR7NCDXK=GS2.1.s1771785288$o1$g0$t1771785289$j59$l0$h0; _ga=GA1.1.1539798426.1771785289\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\nlast-modified: Wed, 24 Sep 2025 21:19:59 GMT\r\netag: \"3c2e-63f929d70c4b2-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Sun, 01 Mar 2026 18:34:50 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 1576\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Sun, 22 Feb 2026 18:34:50 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"caeed6a792e29eb3ab754df3a4873440","sha1":"9f76a0615a2a36eb36faf0efbf1c374e7d0adf65","sha256":"ce7a2ba093796730c1778e15ec64b6e9a6d0c487f6452816aaf54fdeb0308be3","sha512":"4e94a843930521613786728eb7dcad67ed35f61d3d8f33274cb774b2141f1c40a334bb37fe7812bf2519a61e45c0fb55a5655c1f228d086dbd78e16d9a1a7d07","ssdeep":"96:XHmawHlYAJ7V3mDEVk+k2cK6vZMxLmGuXC1d:WawFTHLk+x/6vMm1XC1","tlshash":"e262ec84a3607be4e64601b859294b4d6100625bf1fbd852f8644df37b47c5d9fdc743","first_seen":"2024-08-19T12:48:07.668543Z","last_seen":"2026-03-30T16:28:13.827188Z","times_seen":67,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.eln7dc.com/tag.php?goal=4743cffb835703dfda2a66afec68bc1d","fqdn":"s.eln7dc.com","domain":"eln7dc.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eln7dc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 12:21:41 GMT","end":"Sat, 04 Apr 2026 12:21:40 GMT"},"fingerprint":{"sha1":"B9:23:31:EC:61:B4:6A:E3:FB:59:35:73:4C:A9:81:E8:6A:AD:F6:20","sha256":"1F:21:4D:2C:21:14:F5:7B:5D:A7:2B:00:23:AC:12:B1:21:FD:BB:CD:8A:A6:4D:05:29:23:6D:7F:B8:88:87:EF"}}},"request":{"raw":"GET /tag.php?goal=4743cffb835703dfda2a66afec68bc1d HTTP/1.1\r\nHost: s.eln7dc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A129426%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:48 GMT; path=/; domain=.eln7dc.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":111,"dns":1,"connect":23,"send":0,"wait":39,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.dsr9gv.com/tag.php?goal=f1adefe0892dc8be7551a5c06279c1b6","fqdn":"s.dsr9gv.com","domain":"dsr9gv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsr9gv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 12:19:58 GMT","end":"Sat, 04 Apr 2026 12:19:57 GMT"},"fingerprint":{"sha1":"99:08:51:96:F8:F7:87:4B:50:1B:FE:12:9F:9C:57:69:7E:73:A5:99","sha256":"24:E5:11:2D:04:AD:67:62:12:B9:91:AE:99:1A:B9:E5:C5:F2:BB:45:18:F3:9A:D2:81:DF:9C:7E:17:49:72:20"}}},"request":{"raw":"GET /tag.php?goal=f1adefe0892dc8be7551a5c06279c1b6 HTTP/1.1\r\nHost: s.dsr9gv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A139614%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:48 GMT; path=/; domain=.dsr9gv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":11,"connect":30,"send":0,"wait":28,"receive":0,"ssl":112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.gay2match.com/1020/media/mgay19.png","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l.gay2match.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 14:33:03 GMT","end":"Sun, 12 Apr 2026 14:33:02 GMT"},"fingerprint":{"sha1":"FA:02:1A:40:68:CC:DA:69:92:D9:0E:32:2A:48:E0:2B:91:28:66:24","sha256":"66:E2:8D:22:93:A2:26:F0:64:9F:DA:1C:74:20:4B:12:38:D8:19:0F:4C:6E:7E:3B:B7:B4:0C:0B:BD:9E:F3:E5"}}},"request":{"raw":"GET /1020/media/mgay19.png HTTP/1.1\r\nHost: l.gay2match.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z5RR7NCDXK=GS2.1.s1771785288$o1$g0$t1771785289$j59$l0$h0; _ga=GA1.1.1539798426.1771785289\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\nlast-modified: Wed, 24 Sep 2025 21:19:59 GMT\r\netag: \"12fac-63f929d70d83a\"\r\naccept-ranges: bytes\r\ncontent-length: 77740\r\ncache-control: max-age=63072000\r\nexpires: Tue, 22 Feb 2028 18:34:49 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":77740,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"a2b450b6bf0d1fdbb37e7b768ca12e43","sha1":"cf0bfb999ddbaa35852b7893dff9ae27d2390154","sha256":"36bc65ef4180b2089fa99c72315f07ddf144f3dd6f7a33c7d02e1cdf56748e0e","sha512":"b9ac89d974ed73bcae2a33fec944c95d69583d0271d4666f106322602063f1050cb03b90a7aef74decf8749ba71ddb6f561966dccfa826ef04fad00bd58e2841","ssdeep":"1536:HQbUlzb2ryQQx0fwwBTBc4ttJYwX5x4ZSTCdDRxU6YzIWr+bx:bb2rypx0YwZGCtJl50Se66tbx","tlshash":"917302e0de34f10eb2d1b8a232ee730d84ed8cf421e256f1a574a518541fe6859a57cf","first_seen":"2025-09-20T18:00:07.075017Z","last_seen":"2026-03-27T22:57:13.660593Z","times_seen":51,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.gay2match.com/1020/media/mgay21.png","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l.gay2match.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 14:33:03 GMT","end":"Sun, 12 Apr 2026 14:33:02 GMT"},"fingerprint":{"sha1":"FA:02:1A:40:68:CC:DA:69:92:D9:0E:32:2A:48:E0:2B:91:28:66:24","sha256":"66:E2:8D:22:93:A2:26:F0:64:9F:DA:1C:74:20:4B:12:38:D8:19:0F:4C:6E:7E:3B:B7:B4:0C:0B:BD:9E:F3:E5"}}},"request":{"raw":"GET /1020/media/mgay21.png HTTP/1.1\r\nHost: l.gay2match.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z5RR7NCDXK=GS2.1.s1771785288$o1$g0$t1771785289$j59$l0$h0; _ga=GA1.1.1539798426.1771785289\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\nlast-modified: Wed, 24 Sep 2025 21:19:59 GMT\r\netag: \"173fa-63f929d70dc22\"\r\naccept-ranges: bytes\r\ncontent-length: 95226\r\ncache-control: max-age=63072000\r\nexpires: Tue, 22 Feb 2028 18:34:49 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95226,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"78b1a68dc475af586d67408c0397357c","sha1":"ce661155223a7a8dca63919a8c0a53b1876b3f89","sha256":"3b7e2a7cab38134ec23faa7a3e0be467cabf3dc7d46d32dbd1b2cab1ca7ee9f5","sha512":"50dbb41b7579da58ba212b0025d89ebaeeab42a76e0b23fb27034302e4355ef5ed5b21a7e0485d6ba5f5d9dfb5bb73272586b5607a4307efe8b83afe864c5d93","ssdeep":"1536:rTMH9dEU/El/L7W0XmCT5pnzCEs8jE6jiAx/1KSWT+LgAufWyd3sIKRv7:rgH0UE9BnzCEs8oScSS+0AunO7Rj","tlshash":"6c9302ab1d6d7baad536cace0f115fdc63aa62e0d6c141dda018ace8763856f35034c8","first_seen":"2025-09-20T18:00:06.964858Z","last_seen":"2026-03-27T22:57:13.629801Z","times_seen":51,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tile.openstreetmap.org/13/4209/2690.png","fqdn":"tile.openstreetmap.org","domain":"openstreetmap.org","tld":"org"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tile.openstreetmap.org","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 10 Nov 2025 22:01:08 GMT","end":"Sat, 12 Dec 2026 22:01:07 GMT"},"fingerprint":{"sha1":"07:9F:B2:D4:9E:DC:2E:8F:05:FE:15:93:27:F8:D6:6D:6E:C0:72:10","sha256":"2D:8E:B3:52:14:E2:C8:B0:2B:B0:50:15:D2:84:7E:ED:E8:6B:79:22:C7:DD:35:07:C5:67:2D:C7:E4:84:E4:B9"}}},"request":{"raw":"GET /13/4209/2690.png HTTP/1.1\r\nHost: tile.openstreetmap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\nserver: Apache\r\ncache-control: max-age=89476, stale-while-revalidate=604800, stale-if-error=604800\r\nexpires: Mon, 23 Feb 2026 13:29:19 GMT\r\netag: \"218bfb6746c72a17d980620f18e638c3\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-tilerender: odin.openstreetmap.org\r\naccept-ranges: bytes\r\nage: 21406\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410024-HEL, cache-hel1410024-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 0\r\nx-timer: S1771785289.225519,VS0,VE1\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 26540\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26540,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"218bfb6746c72a17d980620f18e638c3","sha1":"a95f2fde825ca6949df8e83e6c73f59b48ff0a19","sha256":"bffe5aaf240c5839d4a9c6a9fe232a36dd3ab4309180f3cf8ead92fb8b485bf8","sha512":"78bbb51f441ad28b04864cda8158ea87a411915c6eec04e0a6a9ef82ded73f33f8c97c0f756a1fa7391dfd06cf2a56e74fcf68ff1063bffa0e5b1eecebde2cb3","ssdeep":"768:LcvnrMcY4bydXF1AbprmF8eQsQ7CAVbbQ0/U5a4rW:0nrpY4OdXF2FqF8eQ5CANwVrW","tlshash":"4ec2e15d31b0ef6c2aba265cd6dcd741b05737af7044ac08889f723ecdc6526a62db12","first_seen":"2026-01-24T20:47:12.722015Z","last_seen":"2026-02-22T18:35:44.847403Z","times_seen":5,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tile.openstreetmap.org/13/4209/2692.png","fqdn":"tile.openstreetmap.org","domain":"openstreetmap.org","tld":"org"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tile.openstreetmap.org","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 10 Nov 2025 22:01:08 GMT","end":"Sat, 12 Dec 2026 22:01:07 GMT"},"fingerprint":{"sha1":"07:9F:B2:D4:9E:DC:2E:8F:05:FE:15:93:27:F8:D6:6D:6E:C0:72:10","sha256":"2D:8E:B3:52:14:E2:C8:B0:2B:B0:50:15:D2:84:7E:ED:E8:6B:79:22:C7:DD:35:07:C5:67:2D:C7:E4:84:E4:B9"}}},"request":{"raw":"GET /13/4209/2692.png HTTP/1.1\r\nHost: tile.openstreetmap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\nserver: Apache\r\ncache-control: max-age=96981, stale-while-revalidate=604800, stale-if-error=604800\r\nexpires: Sun, 22 Feb 2026 14:50:58 GMT\r\netag: \"8d36fa52f38bdad517cac99575929cce\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-tilerender: nidhogg.openstreetmap.org\r\naccept-ranges: bytes\r\nage: 110412\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410033-HEL, cache-hel1410024-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 0\r\nx-timer: S1771785289.225185,VS0,VE2\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24722\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":24722,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"8d36fa52f38bdad517cac99575929cce","sha1":"38032b4af1c526615b47d5596a5122b989f33563","sha256":"38a3cecfd768c6c2d3abe068d649f9a7d37a2e6c7a760836c97053bda3a0f131","sha512":"3df4a5e65d454f9d98b6ce2b4be9ee4673ceaa59a90646af2b9305568c2bb29cc227d306653f932d124de4b4b65659f761e490073e031b0d01e316de3836c7d4","ssdeep":"384:pDelAh8h7INQF/aBNuJ8ReJncZDlbBFPBr2UM8CtAA+rGMhbquFA/5PFhxcwO:AAWZINQFiGJ8ReJOFpryntAA+S4bQzs","tlshash":"50b2d062b2c6725a5a62db0d26af13d6c8325db2b0c59611ffd142ff00f922d35ad24f","first_seen":"2026-02-22T17:44:22.091507Z","last_seen":"2026-02-22T18:35:44.848158Z","times_seen":2,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tile.openstreetmap.org/13/4209/2693.png","fqdn":"tile.openstreetmap.org","domain":"openstreetmap.org","tld":"org"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tile.openstreetmap.org","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 10 Nov 2025 22:01:08 GMT","end":"Sat, 12 Dec 2026 22:01:07 GMT"},"fingerprint":{"sha1":"07:9F:B2:D4:9E:DC:2E:8F:05:FE:15:93:27:F8:D6:6D:6E:C0:72:10","sha256":"2D:8E:B3:52:14:E2:C8:B0:2B:B0:50:15:D2:84:7E:ED:E8:6B:79:22:C7:DD:35:07:C5:67:2D:C7:E4:84:E4:B9"}}},"request":{"raw":"GET /13/4209/2693.png HTTP/1.1\r\nHost: tile.openstreetmap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"8726d51be75d966f01bfac60f0a91852\"\r\nx-tilerender: wawel.openstreetmap.org\r\naccess-control-allow-origin: *\r\ncontent-type: image/png\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncache-control: max-age=604800, stale-while-revalidate=604800, stale-if-error=604800\r\nserver: Apache\r\nexpires: Sun, 01 Mar 2026 14:09:12 GMT\r\naccept-ranges: bytes\r\nage: 15935\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410027-HEL, cache-hel1410024-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 0\r\nx-timer: S1771785289.224993,VS0,VE2\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 39898\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":39898,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"8726d51be75d966f01bfac60f0a91852","sha1":"ba64699c94eed9f114af865943febd925a22171a","sha256":"c0933963afbedef31fe9abe41d3a03b0013bbcc05c45ffb5a8d7470dd959dcde","sha512":"01e41f189fbe328c8323ac36ec102ec0718833160bac212ea38b4d6ca46717501d74b8b0659416c0bcd9a52aee6147add6f1e5cea9fa753beace739013c9a9fb","ssdeep":"768:HzJY/5eC/gt/8poahiYzg8NMIEGWiT4Rfi0GAl8RogQDfU:HVyept/8OaBzpNfr4FBGDRozA","tlshash":"cf03e16951cf12143cb4dbe73a0b002b466af06fc4f1295be2e135b917eaa56270708b","first_seen":"2026-02-22T17:44:22.066124Z","last_seen":"2026-03-01T05:45:50.987668Z","times_seen":5,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.pemsrv.com/tag.php?goal=4743cffb835703dfda2a66afec68bc1d","fqdn":"s.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:59:06 GMT","end":"Thu, 26 Mar 2026 11:59:05 GMT"},"fingerprint":{"sha1":"8C:23:43:2A:16:0E:E5:14:D7:54:DB:F5:5F:BB:56:E4:32:AF:3B:BA","sha256":"91:45:ED:F2:0E:35:83:14:E7:B4:0D:2D:8E:1A:A6:05:62:4F:B6:6E:83:8A:0C:D3:BF:D4:8A:1C:A7:19:9D:9C"}}},"request":{"raw":"GET /tag.php?goal=4743cffb835703dfda2a66afec68bc1d HTTP/1.1\r\nHost: s.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A129426%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:48 GMT; path=/; domain=.pemsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":30,"connect":30,"send":0,"wait":28,"receive":0,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.zlinkw.com/tag.php?goal=4743cffb835703dfda2a66afec68bc1d","fqdn":"s.zlinkw.com","domain":"zlinkw.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlinkw.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 10:51:19 GMT","end":"Tue, 28 Apr 2026 10:51:18 GMT"},"fingerprint":{"sha1":"3C:F8:DD:5D:54:4F:73:D7:86:5A:CA:32:7B:45:73:0F:80:23:34:92","sha256":"E2:CD:2F:4C:CA:BA:C0:76:32:97:EC:05:0E:00:B1:6B:66:50:34:8B:15:2D:4B:E3:3B:22:16:98:37:A7:A8:3C"}}},"request":{"raw":"GET /tag.php?goal=4743cffb835703dfda2a66afec68bc1d HTTP/1.1\r\nHost: s.zlinkw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A129426%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:48 GMT; path=/; domain=.zlinkw.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":28,"receive":0,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tile.openstreetmap.org/13/4208/2690.png","fqdn":"tile.openstreetmap.org","domain":"openstreetmap.org","tld":"org"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tile.openstreetmap.org","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 10 Nov 2025 22:01:08 GMT","end":"Sat, 12 Dec 2026 22:01:07 GMT"},"fingerprint":{"sha1":"07:9F:B2:D4:9E:DC:2E:8F:05:FE:15:93:27:F8:D6:6D:6E:C0:72:10","sha256":"2D:8E:B3:52:14:E2:C8:B0:2B:B0:50:15:D2:84:7E:ED:E8:6B:79:22:C7:DD:35:07:C5:67:2D:C7:E4:84:E4:B9"}}},"request":{"raw":"GET /13/4208/2690.png HTTP/1.1\r\nHost: tile.openstreetmap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"5c01b0e020cee56789b4d0790cd9b5de\"\r\nx-tilerender: wawel.openstreetmap.org\r\naccess-control-allow-origin: *\r\ncontent-type: image/png\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncache-control: max-age=604800, stale-while-revalidate=604800, stale-if-error=604800\r\nserver: Apache\r\nexpires: Sun, 01 Mar 2026 14:09:12 GMT\r\naccept-ranges: bytes\r\nage: 15935\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL, cache-hel1410024-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 0\r\nx-timer: S1771785289.211656,VS0,VE1\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 30364\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":30364,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"5c01b0e020cee56789b4d0790cd9b5de","sha1":"70b0cfbf34877a6b62188c0be367e26de80b82d0","sha256":"3311a4e86d4c74942d832b82529a07072bbd6a5532198b346e433d06465b8ee0","sha512":"44be816cf4ebcd7c45df06be53cde6c74018435cc53cc79784d03ed109ff203afba53120f3491bf3ff92e529c29b016f99a8102bfcc0a7cb1d7d8c3b9a20a45f","ssdeep":"768:YsAFdI6g22VwtDnKLRYJZKHykdwY8QUHOQ6IQOM:YswiLenEmZKH18FB6DV","tlshash":"b1d2e132a5b2b1edb8dae3cf5d7e2828281f469c7d3b477091014aca866032f1536d5f","first_seen":"2026-02-22T17:44:22.059475Z","last_seen":"2026-02-24T20:25:39.656371Z","times_seen":3,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jqueryui/1.13.2/jquery-ui.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /ajax/libs/jqueryui/1.13.2/jquery-ui.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 67865\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 21 Feb 2026 00:33:13 GMT\r\nexpires: Sun, 21 Feb 2027 00:33:13 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 151295\r\nlast-modified: Wed, 20 Jul 2022 08:22:53 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":255084,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64399)","md5":"1e2047978946a1d271356d0b557a84a3","sha1":"5f29a324c8affb1fdb26ad4564b1e044372beed2","sha256":"9528ca634fecad433d044ddd3e6f9ce1f068d5d932dafdbb19d8e6daea1968bd","sha512":"e7ba19fef5bc00d32347f290e817bdbfffbf87a6eaf7f9777f439ceef9faa8cab286f3ddd5cbca051596a73bb44289de226aabd929263b8312a94f91a47a26dd","ssdeep":"3072:eDPNddBFak8JUaVDpYujVHUc92smVppuzUPFI9fB8NpjJSyACAV:uNdIVWjNS9cdzAV","tlshash":"8944f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","first_seen":"2023-03-07T18:39:57Z","last_seen":"2026-04-04T06:41:20.579435Z","times_seen":24392,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":142,"dns":0,"connect":25,"send":0,"wait":27,"receive":26,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndication.realsrv.com/tag.php?goal=4743cffb835703dfda2a66afec68bc1d","fqdn":"syndication.realsrv.com","domain":"realsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 12:00:56 GMT","end":"Thu, 26 Mar 2026 12:00:55 GMT"},"fingerprint":{"sha1":"64:14:CE:C9:3A:C1:9D:17:1E:17:06:35:DE:37:16:D3:07:B4:97:52","sha256":"B5:97:E2:D7:A3:3F:12:F4:1C:67:4F:93:80:C7:2C:10:4A:4B:FA:0D:0B:7D:17:93:62:98:87:22:11:A9:50:B0"}}},"request":{"raw":"GET /tag.php?goal=4743cffb835703dfda2a66afec68bc1d HTTP/1.1\r\nHost: syndication.realsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 22 Feb 2026 18:34:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A129426%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-02-22%22%3B%7D%7D; expires=Mon, 22 Feb 2027 18:34:48 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":1,"connect":30,"send":0,"wait":28,"receive":1,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.gay2match.com/1020/media/mgay3.png","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l.gay2match.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 14:33:03 GMT","end":"Sun, 12 Apr 2026 14:33:02 GMT"},"fingerprint":{"sha1":"FA:02:1A:40:68:CC:DA:69:92:D9:0E:32:2A:48:E0:2B:91:28:66:24","sha256":"66:E2:8D:22:93:A2:26:F0:64:9F:DA:1C:74:20:4B:12:38:D8:19:0F:4C:6E:7E:3B:B7:B4:0C:0B:BD:9E:F3:E5"}}},"request":{"raw":"GET /1020/media/mgay3.png HTTP/1.1\r\nHost: l.gay2match.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z5RR7NCDXK=GS2.1.s1771785288$o1$g0$t1771785288$j60$l0$h0; _ga=GA1.1.1539798426.1771785289\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\nlast-modified: Wed, 24 Sep 2025 21:19:59 GMT\r\netag: \"1a3b2-63f929d70e00a\"\r\naccept-ranges: bytes\r\ncontent-length: 107442\r\ncache-control: max-age=63072000\r\nexpires: Tue, 22 Feb 2028 18:34:49 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":107442,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"6babd733229a19f01201ce1f78da44f5","sha1":"38b591a71c6260cd2e7b659025f1e5e372fff3ce","sha256":"dad711666705a04a67af6a4387fb03ebe5d1abdb2387f281114f737533399ad8","sha512":"65e9134495804f0d2a6bebc672ebcd8ac716d249fd5a5bbc254cb5365e6bd4cb25bc3a1a22423aab63b852b612b04dc012c418a1406aea8be2c70fb3073f77a5","ssdeep":"1536:4l8jB/PmCdp2yp/+BhcRa4gnnYxC4qpLVZeFoZ7ZLMAq7Yp8oOHp:4lMxPmf7cE4iB4qxVZVKAq1DHp","tlshash":"ccb312dd838edf04a79bfbb9c98912c5cac1d839b3d8f440e7886ac5875d6e878444e4","first_seen":"2025-09-20T18:00:07.039713Z","last_seen":"2026-03-27T22:57:13.668423Z","times_seen":51,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.gay2match.com/1020/media/mgay15.png","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l.gay2match.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 14:33:03 GMT","end":"Sun, 12 Apr 2026 14:33:02 GMT"},"fingerprint":{"sha1":"FA:02:1A:40:68:CC:DA:69:92:D9:0E:32:2A:48:E0:2B:91:28:66:24","sha256":"66:E2:8D:22:93:A2:26:F0:64:9F:DA:1C:74:20:4B:12:38:D8:19:0F:4C:6E:7E:3B:B7:B4:0C:0B:BD:9E:F3:E5"}}},"request":{"raw":"GET /1020/media/mgay15.png HTTP/1.1\r\nHost: l.gay2match.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z5RR7NCDXK=GS2.1.s1771785288$o1$g0$t1771785289$j59$l0$h0; _ga=GA1.1.1539798426.1771785289\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\nlast-modified: Wed, 24 Sep 2025 21:19:59 GMT\r\netag: \"127f2-63f929d70d452\"\r\naccept-ranges: bytes\r\ncontent-length: 75762\r\ncache-control: max-age=63072000\r\nexpires: Tue, 22 Feb 2028 18:34:49 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":75762,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"0cfcbe1df6f262bb770fa98ab44df969","sha1":"d395737454ab5f140f550284e032a8971480bfcc","sha256":"912005e5ab40544aefad20c72d78f1a8ecb2810e0dc69b2bc1c7fcb5810b15a8","sha512":"a1c1b8a48f554f04ba4c19a55dec9631c750890e4cac457d02f172c0bfc688248a5679d6919c00b6f3ef8fff49ee73d1526d406d3bda3687db84345262cdd150","ssdeep":"1536:oFRsG2aXymWp7kaTEJt9Sl6wDN7DqtEDXjfb/Urh0l0uoD9jjCzdWsHa:oN2aqXEJXbAN7uGXjfb/UiGjydWs6","tlshash":"5e7302a0496e723bc6a032495f6c750f815fc4b48daf002d6ebd79d0eda1da80e6c47e","first_seen":"2025-09-20T18:00:06.977656Z","last_seen":"2026-03-27T22:57:13.642264Z","times_seen":51,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.gay2match.com/1020/media/mgay18.png","fqdn":"l.gay2match.com","domain":"gay2match.com","tld":"com"},"ip":{"addr":"188.122.84.136","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:49.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l.gay2match.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Jan 2026 14:33:03 GMT","end":"Sun, 12 Apr 2026 14:33:02 GMT"},"fingerprint":{"sha1":"FA:02:1A:40:68:CC:DA:69:92:D9:0E:32:2A:48:E0:2B:91:28:66:24","sha256":"66:E2:8D:22:93:A2:26:F0:64:9F:DA:1C:74:20:4B:12:38:D8:19:0F:4C:6E:7E:3B:B7:B4:0C:0B:BD:9E:F3:E5"}}},"request":{"raw":"GET /1020/media/mgay18.png HTTP/1.1\r\nHost: l.gay2match.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_Z5RR7NCDXK=GS2.1.s1771785288$o1$g0$t1771785289$j59$l0$h0; _ga=GA1.1.1539798426.1771785289\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreferrer-policy: no-referrer-when-downgrade\r\nlast-modified: Wed, 24 Sep 2025 21:19:59 GMT\r\netag: \"1a54f-63f929d70d83a\"\r\naccept-ranges: bytes\r\ncontent-length: 107855\r\ncache-control: max-age=63072000\r\nexpires: Tue, 22 Feb 2028 18:34:49 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, sameorigin\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/png\r\ndate: Sun, 22 Feb 2026 18:34:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":107855,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"a426ac3d36780d420bc5d07ceca54fa7","sha1":"1e667ba787433d7a8ea7f513ddec98131096254b","sha256":"834a3efd9b3b7e8bba25d24174b7d29b79a078abbb8bfc8ca9147d1ad17fbdca","sha512":"022704a3d0cdd0a95e4d0a37f648318f17ece5abf9fee11d21736b0e78f2c54a2e6f88517cf45b0ca8c8c994592363120fc67f6fa879ed64fdd31fb501772e20","ssdeep":"1536:vWBRFnEZWKdXVbsK9ckwPYvIjm0AdIWjkHAVMI2Gu1n3uXQ+z+kzMq2tL/Ia6qe:vWBbEzx92m0CIWYeMGu1c+wML/Ia6qe","tlshash":"16b30253222efc928d6636cefc579ef9907a57a25ab430c4f731609b4a3b7a0411dc1e","first_seen":"2025-09-20T18:00:06.997986Z","last_seen":"2026-03-27T22:57:13.625899Z","times_seen":51,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1zp0skjzco26d.cloudfront.net/extra/ml.png","fqdn":"d1zp0skjzco26d.cloudfront.net","domain":"d1zp0skjzco26d.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.173.129.8","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:50.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /extra/ml.png HTTP/1.1\r\nHost: d1zp0skjzco26d.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2808\r\nlast-modified: Thu, 11 Apr 2024 09:21:43 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 21 Feb 2026 22:27:46 GMT\r\netag: \"130b0473884363ea7759364fd777d691\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 7f4ce23397408092dc910b2d5162f0a2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS56-P1\r\nx-amz-cf-id: 9uKK4tOgO5BJs8P-12Ak1hoEdAPh_XJpehUSkI6GT75h-iFbwNkejA==\r\nage: 72425\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2808,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 178 x 21, 8-bit/color RGBA, non-interlaced","md5":"130b0473884363ea7759364fd777d691","sha1":"107ede9d4f681968d3136c546ad059b2899a1c47","sha256":"23f6a3f865a3870ecf611ee3893416b0f4f1012409675770898aa15a82225ca5","sha512":"eb1bbe385173e1482e35515a191737fc8eb94c819ab997b7ac7fc13c8ee1670bc22edb618b31eb32b749dbe0c77807c5f5ab9bbbeb0e79613895465f8c698b88","ssdeep":"","tlshash":"88514ca6ab188c94b5e653c384a22c6fbc3815b92c8d347991210627f60b7dfc946041","first_seen":"2025-06-30T07:05:53.60317Z","last_seen":"2026-04-03T22:55:15.91441Z","times_seen":886,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":152,"dns":15,"connect":95,"send":0,"wait":100,"receive":0,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-Z5RR7NCDXK","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtag/js?id=G-Z5RR7NCDXK HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 22 Feb 2026 18:34:48 GMT\r\nexpires: Sun, 22 Feb 2026 18:34:48 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 150801\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":455074,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"cbdeed7b46ef2fecc2a50f9785d9f198","sha1":"59612417d7e8f0fa3e1c99728e25fa765c95d9c6","sha256":"52279b45f760f7c95c234e08b0bdae4380a959e63854f1586550944654866e97","sha512":"29cbed49396d33278d9ddfb66de167b01128140b374d70a7f0795c24cd7af78c65068be59dca2f030d15a66bd7a50f4b0fb026adc30848f4bde35f172875d477","ssdeep":"6144:zX4D85YxaWJljxXUJ78kKUeDKJN5hSppR/UPEnQ/JYY:kw5YxacxkJ78ZN/Un","tlshash":"a0a41ace73d670269396e078503f018ba57b29a2f44dc89af189cce42d7499a4277f7c","first_seen":"2026-02-22T16:17:37.749701Z","last_seen":"2026-02-22T21:26:17.427914Z","times_seen":4,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":137,"dns":0,"connect":8,"send":0,"wait":18,"receive":24,"ssl":135},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/tag_gen.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://l.gay2match.com/1020/?type=mb\u0026country=FI\u0026region=Lapland\u0026city=Rovaniemi\u0026brands=379\u0026site=495\u0026clickid=wlln02ls89r0ifgg3pfl5r7u\u0026campaignId={campaign_id}\u0026var1={site_host}\u0026var2={adspot_id}","date":"2026-02-22T18:34:48.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 11:56:20 GMT","end":"Thu, 26 Mar 2026 11:56:19 GMT"},"fingerprint":{"sha1":"DF:13:B9:10:74:49:F1:EA:9F:3D:F3:15:97:53:11:B0:E6:D1:BC:11","sha256":"EA:56:F1:F2:2F:23:5B:B1:6D:A2:02:FF:F3:4A:6A:75:C4:72:FE:91:FB:23:8F:9D:A3:79:56:F4:83:DA:3A:6A"}}},"request":{"raw":"GET /tag_gen.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://l.gay2match.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 18:34:48 GMT\r\ncontent-type: application/javascript\r\netag: W/\"1e1c6dd9337a1f8a74975e30ec0\"\r\nexpires: Fri, 20 Feb 2026 14:34:15 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBuUwJCgH3HA4AAAwBuUwKEwH3AAAAAAwBT3/Y+AGzMSoAAA\r\nx-77-nzt-ray: e2f75420a8fac7f9484c9b69092f722e\r\nx-77-cache: HIT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-77-age: 3612\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1167,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1167), with no line terminators","md5":"19a25ea6643149ce82fd40a74ca56e16","sha1":"1e1c6dd9337a1f8a74975e30ec08f07404042d97","sha256":"b7c79f479ece6092e8983f60594e5561098b2816178bc7af3f5bf49764258d14","sha512":"164c460fed3020487b1575561bcef583b52a6e857906a875015666c4e2c32e283ccee99d05cabd8dc916908c9676aad846ff89cb924320a3fddd95222f38d235","ssdeep":"","tlshash":"ef2144b4b564653265701819a0ff4da1e07a07691e8296e018dfbc01997cfd7419aecc","first_seen":"2026-02-20T15:33:47.415522Z","last_seen":"2026-02-23T20:46:22.640907Z","times_seen":23,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}