{"report_id":"acb212b8-03d5-4053-9c0e-480c7ebf5037","version":6,"status":"done","tags":[],"date":"2026-06-07T00:36:10Z","url":{"schema":"http","addr":"theflurry.info/41-1511-280526?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=","fqdn":"theflurry.info","domain":"theflurry.info","tld":"info"},"ip":{"addr":"172.67.156.186","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=","fqdn":"theflurry.info","domain":"theflurry.info","tld":"info"},"title":"Track \u0026 Trace","dom":{"size":9138,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (361)","md5":"d5aaca25249a5440a35c799447f36604","sha1":"af4dd5a4bf6968ccb23f7d36c3425d86fbdcfed4","sha256":"6c6d08ccd4fd5984f1d7248ab4c3131198aeb343150404c7a36d2f9caac87111","sha512":"d60c22df282d0f4e11a042c2fbf6268e819578c9e7a9cae83c237d79a22fcad8b4df68ba415a197f091ff9446f8d8d2df72cc615f69b3a3836e08ccc774a86ac","ssdeep":"192:MIYEVJEA21ewLs6W12NYgLlTRk3iOcwOW3WVXLoQ5iK+amXiniJis:M0kAFwIl0NLlTRk3iOcwOkWREtKYinih","tlshash":"c912fbb0459c1d7601d2028a31702b8e78dfde36da7b8595fbfb43440bc7ec6999a226","dom_hash":"domhash8ab489d80a08dc37bcfb35a5cf124ef0","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"theflurry.info/41-1511-280526?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=","fqdn":"theflurry.info","domain":"theflurry.info","tld":"info"},"ip":{"addr":"172.67.156.186","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-12T00:36:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"theflurry.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"theflurry.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-05-31T22:26:05.480738Z","alert_count":0,"request_count":1,"received_data":480770,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-31T22:42:17.707694Z","alert_count":0,"request_count":2,"received_data":276891,"sent_data":977,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"theflurry.info","ip":{"addr":"172.67.156.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-05","domain_rank":0,"first_seen":"2026-05-26T04:49:20.005537Z","last_seen":"2026-06-06T13:50:11.389735Z","alert_count":24,"request_count":12,"received_data":445707,"sent_data":6426,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap:5.2.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-05-31T22:47:07.964282Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":675,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-05-31T22:37:14.287473Z","alert_count":0,"request_count":1,"received_data":90764,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"natureviewer.in","ip":{"addr":"104.21.20.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-19","domain_rank":3343791,"first_seen":"2023-06-19T11:10:09Z","last_seen":"2026-06-05T10:09:51.680019Z","alert_count":0,"request_count":1,"received_data":760,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-05-31T22:50:38.396379Z","alert_count":0,"request_count":2,"received_data":1676,"sent_data":2024,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.6.4/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"641dd14370106e992d352166f5a07e99","sha1":"eda46747c71d38a880bee44f9a439c3858bb8f99","sha256":"a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af","sha512":"a6e981b23351186aa43f32879dd64c6801be6e2af7ef8b0e472cccdeeba52d5d7894de4bcb292a364f1e11e525524077534338140a72687ada4fae62849843a5","ssdeep":"1536:IjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvg:IeeIygP3fulzhsz8jlvaDioQ47GKH","tlshash":"d193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89795,"data":"","first_seen":"2023-03-26T04:59:07Z","last_seen":"2026-06-17T13:23:02.642079Z","times_seen":25203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=","fqdn":"theflurry.info","domain":"theflurry.info","tld":"info"},"ip":{"addr":"172.67.156.186","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e70e1f77e7f04e8bebfb4db0138e829c","sha1":"465cb0f190be54833bcba1cb1129be6b79a47ab7","sha256":"1c71e6cb1fb5760a606ab6df1c1dbcbb482d6f10ee85fa94d5a7db1a5041ffc8","sha512":"5e842a3a0accab8b767af00305a94d8a11555292de6e81c81d0d8d0597f82d7c7a4fa21f2247e8c64b7415a750c1ea49a6bc148ede066c8c52e1ba2359fa91e1","ssdeep":"","tlshash":"b6019e49f7850e5d78f2001d509e28a81cbc4673cc570cd1b3a482948bf6e9c94ecf1c","size":659,"data":"","first_seen":"2024-08-20T11:28:17.965296Z","last_seen":"2026-06-07T02:39:23.851674Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=","fqdn":"theflurry.info","domain":"theflurry.info","tld":"info"},"ip":{"addr":"172.67.156.186","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9865e082ce464be3e92b96e7240f9480","sha1":"c0cb21290b77c70bb873d932ef5e8fc6d6ce70c3","sha256":"cbacaccc01608e175df4cd24b8e10ab4f4e4b6708013b709250519be4b29affd","sha512":"37bc3dd414ec7efbc79c68d6316923b011c8ee83213407d49ea02fb8aef41fd00c6d8087cefc05a30e33e7365a48d4a331d8a91a609024e9044e204fdb875821","ssdeep":"","tlshash":"67c09bdc214b5db595db2b414b3ff644f4563211a5a11c3109166344da30e17ab5cc58","size":144,"data":"","first_seen":"2023-04-26T20:30:02Z","last_seen":"2026-06-07T07:27:41.093035Z","times_seen":1206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=","fqdn":"theflurry.info","domain":"theflurry.info","tld":"info"},"ip":{"addr":"172.67.156.186","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eaf65b52bf29d3b43c284d077c7c635d","sha1":"c4c806cc1eb30af56f8a21b39eeb93ebab8082df","sha256":"40fe331ae10b138ecdd7b8fe2cd0f07b649a827fd4d55106f2507658e7f0a14b","sha512":"92a8194b06fb3962fbd90d2fb3259ea9e3f4477825ce72cff056507f52843b11810630e2d417bfb3e16c9d2fb7778347e1f213e3b743283db9596b9aba8c7c86","ssdeep":"","tlshash":"e8012b96fb6f0624086d515b166507c93c2cd4368d035dccad3c54b068aef95804ab59","size":663,"data":"","first_seen":"2024-08-20T11:28:17.968032Z","last_seen":"2026-06-07T02:39:23.867595Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b75ae000439862b6a97d2129c85680e8","sha1":"90d15036ef48fcb336a135bae812b45669f19044","sha256":"9520018fa5d81f4e4dc9d06afb576f90cbbaba209cfcc6cb60e1464647f7890b","sha512":"8bd7047c9c14c158843c529d0b57a7cf86511818fc610a3a401c854c5f766171e2ef0682ab27b1bd10fbe52e4d553b12893bfbaca5aa1bd639785c6646c3a7d0","ssdeep":"1536:p4SMTGR2t4n+3ifBHJR9WbUHk3j8YY+PwRM3CGJI9BqQM6kF:b4Fj8GPwRM3CiI9Bt8","tlshash":"6973c6593254b4770ade45b68037420bf2265d98b24b802cb5bcadde2a7dc863277f7c","size":80420,"data":"","first_seen":"2023-03-08T16:08:57Z","last_seen":"2026-06-17T13:07:14.275951Z","times_seen":8593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MB2WV0SZV7","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a8be5f356dcc6ad44105d3d71f1e74d","sha1":"3ffb012d4c0e94c15f107c7633baaa6568278c58","sha256":"5e2e40fb3c4294804e0d0b15975ffdf001eb5b6a65fda38aa6aec3512a3df5dd","sha512":"b394f0c8492ebf97685a563b3135f7e01bae47dad272b74d23f48f82c75a9192df486aede9e4ab8dd35814e3ea6aba2c997b192979154f25b246d7d6eb9a1b32","ssdeep":"6144:Saj3GsHPLhgbE47c2bXW0w40dicStQoSXDKTl25GrQ:Zhx47LSohG","tlshash":"afa4e9ceb3d674625296f478903f018ba57b28e2b44cc899b189cce42e7469a4177f7c","size":480166,"data":"","first_seen":"2026-06-06T17:01:15.680704Z","last_seen":"2026-06-07T06:20:51.200327Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=","date":"2026-06-07T00:35:49.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.2.3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://theflurry.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theflurry.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.2.3\r\nx-jsd-version-type: version\r\netag: W/\"13a24-kNFQNu9I/LM2oTW66BK0VmnxkEQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 07 Jun 2026 00:35:50 GMT\r\nage: 3353975\r\nx-served-by: cache-fra-eddf8230084-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24659\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80420,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"b75ae000439862b6a97d2129c85680e8","sha1":"90d15036ef48fcb336a135bae812b45669f19044","sha256":"9520018fa5d81f4e4dc9d06afb576f90cbbaba209cfcc6cb60e1464647f7890b","sha512":"8bd7047c9c14c158843c529d0b57a7cf86511818fc610a3a401c854c5f766171e2ef0682ab27b1bd10fbe52e4d553b12893bfbaca5aa1bd639785c6646c3a7d0","ssdeep":"1536:p4SMTGR2t4n+3ifBHJR9WbUHk3j8YY+PwRM3CGJI9BqQM6kF:b4Fj8GPwRM3CiI9Bt8","tlshash":"6973c6593254b4770ade45b68037420bf2265d98b24b802cb5bcadde2a7dc863277f7c","first_seen":"2023-03-08T16:08:57Z","last_seen":"2026-06-17T13:07:14.275951Z","times_seen":8593,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":107,"dns":1,"connect":26,"send":0,"wait":29,"receive":1,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theflurry.info/41-1511-280526/img/rating-i.png","fqdn":"theflurry.info","domain":"theflurry.info","tld":"info"},"ip":{"addr":"172.67.156.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=","date":"2026-06-07T00:35:49.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theflurry.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 11:32:22 GMT","end":"Thu, 30 Jul 2026 12:29:51 GMT"},"fingerprint":{"sha1":"CA:F8:68:04:62:54:44:2E:E4:7B:00:57:12:21:02:D5:85:B2:08:28","sha256":"03:2C:D1:44:05:22:BB:86:8B:87:F6:6D:31:30:BA:CB:D3:87:86:12:FD:17:EB:AD:5F:F6:2E:F0:0D:09:12:32"}}},"request":{"raw":"GET /41-1511-280526/img/rating-i.png HTTP/1.1\r\nHost: theflurry.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Jun 2026 00:35:49 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 28 May 2026 07:48:33 GMT\r\netag: \"202f-652dbf476b640\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l7n12hiBAUgj%2FkroJpIy1PiIxg%2BQbqvgBWvRRBHSxUjSZ7ivSYmrs1jVV6PFWoVySZoVYER9kR1xlezm1edK52t9cVAk9bHxOdlTF2SDqgli0vC1WPC%2F0SyYzJFo4prH%2BQ%3D%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-length: 8239\r\ncf-ray: a07b943cfdf3b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8239,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 80, 8-bit/color RGBA, non-interlaced","md5":"a42099f35afdf6b91cdc5491f7f19965","sha1":"2759dc3b50e330ab9dda1bb8a0f8ec7cf3c884a2","sha256":"4d3d826b6eae3f602e2cb612cc9a83bf7e6e79a95309c9cb0c75061a587f4205","sha512":"24030311f01881819c2e5fd50822efe88a9e42b76ed85d81c16c65e732e7ab8af47a3d3189e17f9a7d36efeeab29a2bbc5d152521dbd0d56aa4f48d656b62fa1","ssdeep":"192:VSTkneY/aiY5F8qj6jxYYSvVZKGXCWCAyE1Cwe4filW:04nnZbRxYJvvKGXjCzEzJalW","tlshash":"f102af8576127c51da4919cf3ebca5dbb6030fd48353d0c6b4ca4532f8212fb8e4968a","first_seen":"2023-05-19T03:37:17Z","last_seen":"2026-06-17T13:07:14.275272Z","times_seen":107,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"theflurry.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"theflurry.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theflurry.info/41-1511-280526/img/bg.jpg","fqdn":"theflurry.info","domain":"theflurry.info","tld":"info"},"ip":{"addr":"172.67.156.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=","date":"2026-06-07T00:35:50.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theflurry.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 11:32:22 GMT","end":"Thu, 30 Jul 2026 12:29:51 GMT"},"fingerprint":{"sha1":"CA:F8:68:04:62:54:44:2E:E4:7B:00:57:12:21:02:D5:85:B2:08:28","sha256":"03:2C:D1:44:05:22:BB:86:8B:87:F6:6D:31:30:BA:CB:D3:87:86:12:FD:17:EB:AD:5F:F6:2E:F0:0D:09:12:32"}}},"request":{"raw":"GET /41-1511-280526/img/bg.jpg HTTP/1.1\r\nHost: theflurry.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theflurry.info/41-1511-280526/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Jun 2026 00:35:50 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 28 May 2026 07:48:22 GMT\r\netag: \"20bc2-652dbf3d7c2b9\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eMXewGA5zjLxb%2FrHy%2FEVH2EauwzyzxpN3FHj5vmd3Cp6AcNioL3Yl%2Bm4%2Fmk8iNwTIBVsZYJjqvntd%2FdTalWB0DEnlnAlQ4lEOf%2BNTxheE1haJXxXsD%2BiXOBGt6WLmFhbDA%3D%3D\"}]}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-length: 134082\r\ncf-ray: a07b943f1dfab4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134082,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1440x840, components 3","md5":"1b9fbe0498bb7164958c41f566d401f5","sha1":"a85dc0f171e6c8be0d5f1857c6fd4e7958ce92fd","sha256":"43f6c150e5cdd789faafc713386aa71098bc4048c8cd86299dafbee4d1a8629b","sha512":"c63ad1928d20a4b9891c75dd208a463948316506566c7565456e77ca4e0b26baa5fba3a49b2988ad0f8da0825bed20915de922864e1f00a703d4511ddf2a5168","ssdeep":"3072:lRg5rTAYhKkXgyYIrjS2428r72o2nUgok9i/muOdefU:luFxhKmQ2eCo+UR3NOd9","tlshash":"35d31229fb299362a351f9f60e22d5d66c6e4951fceac32757a04d1163c82c0ac4fcd2","first_seen":"2023-05-19T03:37:17Z","last_seen":"2026-06-17T13:07:14.256125Z","times_seen":119,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"theflurry.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"theflurry.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-MB2WV0SZV7\u0026cid=2105978777.1780792550\u0026gtm=45je6631v9115169269za200zd9115169269\u0026rcb=15\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115616985~115938465~115938469~118228214~119027222\u0026z=628353848","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=","date":"2026-06-07T00:35:50.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:39:21 GMT","end":"Mon, 10 Aug 2026 18:39:20 GMT"},"fingerprint":{"sha1":"6E:BB:D5:FE:D9:79:CC:FE:23:D6:E1:24:F7:51:B4:EA:C7:A5:3E:BF","sha256":"D3:65:DF:4C:85:93:FF:13:D7:84:DF:43:A0:13:13:AA:81:E5:6D:FD:67:86:0D:30:F4:BD:84:4A:7F:9C:E1:82"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-MB2WV0SZV7\u0026cid=2105978777.1780792550\u0026gtm=45je6631v9115169269za200zd9115169269\u0026rcb=15\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115616985~115938465~115938469~118228214~119027222\u0026z=628353848 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theflurry.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 07 Jun 2026 00:35:50 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-17T15:31:29.24201Z","times_seen":952378,"resource_available":true,"data":null}},"time_used":392,"timings":{"blocked":177,"dns":16,"connect":18,"send":0,"wait":34,"receive":0,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.6.4/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=","date":"2026-06-07T00:35:49.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/jquery/3.6.4/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theflurry.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Jun 2026 00:35:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Wed, 08 Mar 2023 16:05:42 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 108061\r\nexpires: Fri, 28 May 2027 00:35:49 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OGd%2Faxd8S42IBi85j50Z9wyZqIm806PQvcIBEufA%2BZkz3tUljgB66xz22LroCnEcsJAW%2FmkDCQa3hHjM%2FFsQxENnNs3ClBQ4iPzcfOSnqvMg8ARCboyj%2FAZYjRygQjmIW6NfVGju\"}]}\r\ncf-ray: a07b943d083776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89795,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"641dd14370106e992d352166f5a07e99","sha1":"eda46747c71d38a880bee44f9a439c3858bb8f99","sha256":"a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af","sha512":"a6e981b23351186aa43f32879dd64c6801be6e2af7ef8b0e472cccdeeba52d5d7894de4bcb292a364f1e11e525524077534338140a72687ada4fae62849843a5","ssdeep":"1536:IjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvg:IeeIygP3fulzhsz8jlvaDioQ47GKH","tlshash":"d193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-26T04:59:07Z","last_seen":"2026-06-17T13:23:02.642079Z","times_seen":25203,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":6,"dns":1,"connect":1,"send":0,"wait":9,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"natureviewer.in/clicks?p=1515P161C1515\u0026e=fasel.arno%40bluewin.ch\u0026s3=Ursula\u0026s4=Widmer","fqdn":"natureviewer.in","domain":"natureviewer.in","tld":"in"},"ip":{"addr":"104.21.20.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=","date":"2026-06-07T00:35:50.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"natureviewer.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 May 2026 13:23:29 GMT","end":"Thu, 20 Aug 2026 14:22:17 GMT"},"fingerprint":{"sha1":"26:DF:3E:FA:3C:E2:02:43:EC:F6:0B:03:CB:89:87:1C:49:96:B4:EE","sha256":"45:E4:B7:6E:E4:00:B6:93:B3:64:C6:FF:80:EF:4F:70:C3:93:EA:9F:5B:33:D4:8C:FE:75:B7:5E:6F:F1:A3:AB"}}},"request":{"raw":"GET /clicks?p=1515P161C1515\u0026e=fasel.arno%40bluewin.ch\u0026s3=Ursula\u0026s4=Widmer HTTP/1.1\r\nHost: natureviewer.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Jun 2026 00:35:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rcGYaB5rKY5RW%2BegoZo%2FcviN1WaOTLV3NJCTDdv26Gd%2FBfafAntDlVec7RtrjEq05ATSJCHPpuH87GN2kuO7M%2BZnkRocjhBRUCvRJgBWoYdpYNGipLYEQ0dMEW8%2BWTJu0nI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a07b943ddb5556bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T15:31:19.745285Z","times_seen":16487195,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":41,"dns":0,"connect":1,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theflurry.info/favicon.ico","fqdn":"theflurry.info","domain":"theflurry.info","tld":"info"},"ip":{"addr":"172.67.156.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=","date":"2026-06-07T00:35:50.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theflurry.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 11:32:22 GMT","end":"Thu, 30 Jul 2026 12:29:51 GMT"},"fingerprint":{"sha1":"CA:F8:68:04:62:54:44:2E:E4:7B:00:57:12:21:02:D5:85:B2:08:28","sha256":"03:2C:D1:44:05:22:BB:86:8B:87:F6:6D:31:30:BA:CB:D3:87:86:12:FD:17:EB:AD:5F:F6:2E:F0:0D:09:12:32"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: theflurry.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 07 Jun 2026 00:35:50 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8d%2BpmgLN9YxSy69BTxgt9A%2BebMfRZsT1G66e%2B81ZbcUEMrIfrEntRidZ1AfotKlMrO3EvCEEbS2T9peaYV2zC%2FSnm9KXfS87t4THTy39u9MMiQHWtq9p28ujk8J2Op7RHQ%3D%3D\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\ncf-ray: a07b94402e00b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":209,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"18ffb59b61525f781cf9251045be575d","sha1":"bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d","sha256":"b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642","sha512":"a032f853abd9492232e1183d1cb1d14110b623f2e9dec56b7b64dd576a0317dda8d51125763e11d6642433c5364b2bd10a994ee4f1514629a4950bbab3aba499","ssdeep":"","tlshash":"ebd0229ea083228f452321903ac211d2a54d23a6bc7a42e83c83a88a921893dc4ca29d","first_seen":"2023-04-05T03:16:16Z","last_seen":"2026-06-17T14:55:18.914193Z","times_seen":37158,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"theflurry.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"theflurry.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-MB2WV0SZV7\u0026gtm=45je6631v9115169269za200zd9115169269\u0026_p=1780792550170\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=AAAAAGA\u0026cid=2105978777.1780792550\u0026frm=0\u0026pscdl=noapi\u0026rcb=15\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=1\u0026tag_exp=0~115616985~115938465~115938469~118228214~119027222\u0026sid=1780792550\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Ftheflurry.info%2F41-1511-280526%2F%3Fu%3D161C1515%26e%3Dfasel.arno%252540bluewin.ch%26s3%3DUrsula%26s4%3DWidmer%26s5%3D%26s6%3D%26s7%3D%26s8%3D\u0026dt=Track%20%26%20Trace\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=1279","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=","date":"2026-06-07T00:35:50.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:35:20 GMT","end":"Mon, 10 Aug 2026 18:35:19 GMT"},"fingerprint":{"sha1":"63:72:D7:36:8B:4A:E9:19:CA:E0:B4:EB:48:4F:D5:0D:68:A1:98:18","sha256":"41:D5:9A:61:75:1B:F5:CA:A6:88:2D:3D:DE:D4:36:13:4C:3A:6D:2D:2A:EB:E6:2F:11:A0:E9:DD:B5:EB:F1:03"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-MB2WV0SZV7\u0026gtm=45je6631v9115169269za200zd9115169269\u0026_p=1780792550170\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=AAAAAGA\u0026cid=2105978777.1780792550\u0026frm=0\u0026pscdl=noapi\u0026rcb=15\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=1\u0026tag_exp=0~115616985~115938465~115938469~118228214~119027222\u0026sid=1780792550\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Ftheflurry.info%2F41-1511-280526%2F%3Fu%3D161C1515%26e%3Dfasel.arno%252540bluewin.ch%26s3%3DUrsula%26s4%3DWidmer%26s5%3D%26s6%3D%26s7%3D%26s8%3D\u0026dt=Track%20%26%20Trace\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=1279 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://theflurry.info/\r\nOrigin: https://theflurry.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://theflurry.info\r\ndate: Sun, 07 Jun 2026 00:35:50 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:196:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:196:0\r\nreport-to: {\"group\":\"ascnsrsggc:196:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:196:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T15:31:19.745285Z","times_seen":16487195,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":88,"dns":7,"connect":8,"send":0,"wait":17,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-MB2WV0SZV7\u0026gtm=45je6631v9115169269za200zd9115169269\u0026_p=1780792550170\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=AEAAAGQ\u0026ae=a\u0026cid=2105978777.1780792550\u0026frm=0\u0026pscdl=noapi\u0026rcb=15\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=2\u0026tag_exp=0~115616985~115938465~115938469~118228214~119027222\u0026sid=1780792550\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Ftheflurry.info%2F41-1511-280526%2F%3Fu%3D161C1515%26e%3Dfasel.arno%252540bluewin.ch%26s3%3DUrsula%26s4%3DWidmer%26s5%3D%26s6%3D%26s7%3D%26s8%3D\u0026dt=Track%20%26%20Trace\u0026en=scroll\u0026epn.percent_scrolled=90\u0026tfd=6311","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=","date":"2026-06-07T00:35:55.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:35:20 GMT","end":"Mon, 10 Aug 2026 18:35:19 GMT"},"fingerprint":{"sha1":"63:72:D7:36:8B:4A:E9:19:CA:E0:B4:EB:48:4F:D5:0D:68:A1:98:18","sha256":"41:D5:9A:61:75:1B:F5:CA:A6:88:2D:3D:DE:D4:36:13:4C:3A:6D:2D:2A:EB:E6:2F:11:A0:E9:DD:B5:EB:F1:03"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-MB2WV0SZV7\u0026gtm=45je6631v9115169269za200zd9115169269\u0026_p=1780792550170\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=AEAAAGQ\u0026ae=a\u0026cid=2105978777.1780792550\u0026frm=0\u0026pscdl=noapi\u0026rcb=15\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=2\u0026tag_exp=0~115616985~115938465~115938469~118228214~119027222\u0026sid=1780792550\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Ftheflurry.info%2F41-1511-280526%2F%3Fu%3D161C1515%26e%3Dfasel.arno%252540bluewin.ch%26s3%3DUrsula%26s4%3DWidmer%26s5%3D%26s6%3D%26s7%3D%26s8%3D\u0026dt=Track%20%26%20Trace\u0026en=scroll\u0026epn.percent_scrolled=90\u0026tfd=6311 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://theflurry.info/\r\nOrigin: https://theflurry.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://theflurry.info\r\ndate: Sun, 07 Jun 2026 00:35:55 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:196:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:196:0\r\nreport-to: {\"group\":\"ascnsrsggc:196:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:196:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T15:31:19.745285Z","times_seen":16487195,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theflurry.info/41-1511-280526?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=","fqdn":"theflurry.info","domain":"theflurry.info","tld":"info"},"ip":{"addr":"172.67.156.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-07T00:35:49.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theflurry.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 11:32:22 GMT","end":"Thu, 30 Jul 2026 12:29:51 GMT"},"fingerprint":{"sha1":"CA:F8:68:04:62:54:44:2E:E4:7B:00:57:12:21:02:D5:85:B2:08:28","sha256":"03:2C:D1:44:05:22:BB:86:8B:87:F6:6D:31:30:BA:CB:D3:87:86:12:FD:17:EB:AD:5F:F6:2E:F0:0D:09:12:32"}}},"request":{"raw":"GET /41-1511-280526?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8= HTTP/1.1\r\nHost: theflurry.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 07 Jun 2026 00:35:49 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: http://theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZhTgCwdLw5plx5CLu1AuUTRBSm6V0RX95v67zYXZLowETujDbyXSZ6OahLoII1svLryyUalJLbtnandVSHrudCP4Nn%2FPIbzhgg4CcVnUKdd8Toq4ddzM2%2FdhpP4Q2z9H2Q%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a07b9439dfd50883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9220,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T15:31:19.745285Z","times_seen":16487195,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":30,"dns":1,"connect":1,"send":0,"wait":67,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"theflurry.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"theflurry.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theflurry.info/41-1511-280526/css/track-loader.css","fqdn":"theflurry.info","domain":"theflurry.info","tld":"info"},"ip":{"addr":"172.67.156.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=","date":"2026-06-07T00:35:49.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theflurry.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 11:32:22 GMT","end":"Thu, 30 Jul 2026 12:29:51 GMT"},"fingerprint":{"sha1":"CA:F8:68:04:62:54:44:2E:E4:7B:00:57:12:21:02:D5:85:B2:08:28","sha256":"03:2C:D1:44:05:22:BB:86:8B:87:F6:6D:31:30:BA:CB:D3:87:86:12:FD:17:EB:AD:5F:F6:2E:F0:0D:09:12:32"}}},"request":{"raw":"GET /41-1511-280526/css/track-loader.css HTTP/1.1\r\nHost: theflurry.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Jun 2026 00:35:49 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 28 May 2026 07:48:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=htxvwy5ENQ%2FX1DzKX0tUqr8TSl0wMG4KNJ%2BENXB%2BL90LIM4e4vkwfnEjqAVkb8zjFU%2BHQouQAA6cqJg33vnBm89RT87ukvtK0OMLtw1X9a8%2B%2BWFleArahUeT94RJwIaDew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\netag: W/\"153f-652dbf3175b9d\"\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a07b943cedecb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5439,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"620e9eb489c2851e5d7f6e4ea1ebacef","sha1":"bab506bb93aa2482a1bff507e0254c64d492e2c5","sha256":"a6290d462fbb7cda0f1074fa3faa2063576f12a02b715315751f9ad855bd1004","sha512":"2d05b2174e02aed2a268f6280507ead32f08fb151472269fe79525e568e73c78dd184a36540e829a8b281c1c521545ba465211a1bdbc48b883a09417cbfbb83d","ssdeep":"96:RDIS5PkiqA+Fj3PGiO9qM/7Xso5l1RvmPg2KT9Chw9CL:RES58j7Fj3PGiaqMjVRmPgHiL","tlshash":"b4b1ed1a8a651904b0bbe3bdaba20355d6ab0043c62745ccbbdd63118f745889d66fe4","first_seen":"2025-06-27T16:49:48.853523Z","last_seen":"2026-06-17T13:07:14.278683Z","times_seen":103,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"theflurry.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"theflurry.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MB2WV0SZV7","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=","date":"2026-06-07T00:35:49.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:35:27 GMT","end":"Mon, 10 Aug 2026 18:35:26 GMT"},"fingerprint":{"sha1":"81:79:25:0A:2E:C8:CA:DA:16:EF:B8:34:B7:38:E6:48:7B:5B:4C:6D","sha256":"7B:74:72:15:7A:A8:4B:D0:1D:D6:11:DE:7C:D9:15:EE:E9:22:FF:E8:56:41:9E:88:6C:4A:F9:9F:AB:B3:6E:2C"}}},"request":{"raw":"GET /gtag/js?id=G-MB2WV0SZV7 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theflurry.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 07 Jun 2026 00:35:50 GMT\r\nexpires: Sun, 07 Jun 2026 00:35:50 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 159033\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":480166,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"8a8be5f356dcc6ad44105d3d71f1e74d","sha1":"3ffb012d4c0e94c15f107c7633baaa6568278c58","sha256":"5e2e40fb3c4294804e0d0b15975ffdf001eb5b6a65fda38aa6aec3512a3df5dd","sha512":"b394f0c8492ebf97685a563b3135f7e01bae47dad272b74d23f48f82c75a9192df486aede9e4ab8dd35814e3ea6aba2c997b192979154f25b246d7d6eb9a1b32","ssdeep":"6144:Saj3GsHPLhgbE47c2bXW0w40dicStQoSXDKTl25GrQ:Zhx47LSohG","tlshash":"afa4e9ceb3d674625296f478903f018ba57b28e2b44cc899b189cce42e7469a4177f7c","first_seen":"2026-06-06T17:01:15.680704Z","last_seen":"2026-06-07T06:20:51.200327Z","times_seen":40,"resource_available":true,"data":null}},"time_used":536,"timings":{"blocked":212,"dns":5,"connect":19,"send":0,"wait":37,"receive":63,"ssl":196},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=","date":"2026-06-07T00:35:49.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.2.3/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://theflurry.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theflurry.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.2.3\r\nx-jsd-version-type: version\r\netag: W/\"2f955-d5HdHzFzoNYsw5wh0q1x/I2tDnI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 07 Jun 2026 00:35:50 GMT\r\nage: 3435175\r\nx-served-by: cache-fra-etou8220160-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 30336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":194901,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65305)","md5":"3f30c2c47d7d23c7a994db0c862d45a5","sha1":"7791dd1f3173a0d62cc39c21d2ad71fc8dad0e72","sha256":"c0bcf7898fdc3b87babca678cd19a8e3ef570e931c80a3afbffcc453738c951a","sha512":"49b891fdebaca612a8315557cac4ca1bfed5b1e5a28be63715d1ebb741292a0a53a1979e9a1a8779978b58b849badcffdaeb76570d6e4048f631b445f9354150","ssdeep":"1536:ZtGg9JfWgeQK5wlP72qgOfI3N9LsqkVkpz600I4lp:ZtGg9JfWD9kVkpz600I4lp","tlshash":"991482d6f190307d98a7c2499591fefd866fa585d7120aaaf0137b6807ca7c30963ecc","first_seen":"2023-04-05T16:04:29Z","last_seen":"2026-06-17T14:06:33.927014Z","times_seen":8612,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":108,"dns":5,"connect":19,"send":0,"wait":34,"receive":2,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theflurry.info/41-1511-280526/img/brand.png","fqdn":"theflurry.info","domain":"theflurry.info","tld":"info"},"ip":{"addr":"172.67.156.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=","date":"2026-06-07T00:35:49.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theflurry.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 11:32:22 GMT","end":"Thu, 30 Jul 2026 12:29:51 GMT"},"fingerprint":{"sha1":"CA:F8:68:04:62:54:44:2E:E4:7B:00:57:12:21:02:D5:85:B2:08:28","sha256":"03:2C:D1:44:05:22:BB:86:8B:87:F6:6D:31:30:BA:CB:D3:87:86:12:FD:17:EB:AD:5F:F6:2E:F0:0D:09:12:32"}}},"request":{"raw":"GET /41-1511-280526/img/brand.png HTTP/1.1\r\nHost: theflurry.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Jun 2026 00:35:49 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 28 May 2026 07:48:24 GMT\r\netag: \"4d74-652dbf3fb640b\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KuqAVXoFdRiIir1BWLiURPUXQRuTVJRNCe4ZNUylXBWHRb4%2BcGw5Wu%2BG%2BMzZlPMjWvwEzfelWaoASaiWz4TLEc1F%2B76i%2FT9F%2BvesOXctTiNp0sF4YcmmDZyfkCzin44uhg%3D%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-length: 19828\r\ncf-ray: a07b943cedf0b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19828,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 304 x 94, 8-bit/color RGBA, non-interlaced","md5":"353f3e5fd185ed7c2562cf6738353d91","sha1":"a787e2b5ea26eab37d5fe94daf8dce177ca0f01e","sha256":"0694d0f465065bbfff057c48480b1d7f8899c6c679b817ef2e1ebeefe725bed6","sha512":"99072229a5236eea64e6ea37fe309beab1e9773d0745438d9b2656847d4aac95617c8362c9daee280e2843e770ade82c79e677e78e8087265419f25eac6cea8e","ssdeep":"384:MInGYRzR6XBQkWDT3yeIO14pVgYufH1W5sarl1satYlWIdHIIGL+twL/cayt:lGCoRQ7Ly81waHY5suvs0mFmIG+twLUv","tlshash":"6492b086fe611996084ef14bd67ca22282330dde5a53994e5e59f83b9f7007fcd1c4c6","first_seen":"2023-05-19T03:37:17Z","last_seen":"2026-06-17T13:07:14.254026Z","times_seen":104,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"theflurry.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"theflurry.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theflurry.info/41-1511-280526/img/box.png","fqdn":"theflurry.info","domain":"theflurry.info","tld":"info"},"ip":{"addr":"172.67.156.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=","date":"2026-06-07T00:35:49.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theflurry.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 11:32:22 GMT","end":"Thu, 30 Jul 2026 12:29:51 GMT"},"fingerprint":{"sha1":"CA:F8:68:04:62:54:44:2E:E4:7B:00:57:12:21:02:D5:85:B2:08:28","sha256":"03:2C:D1:44:05:22:BB:86:8B:87:F6:6D:31:30:BA:CB:D3:87:86:12:FD:17:EB:AD:5F:F6:2E:F0:0D:09:12:32"}}},"request":{"raw":"GET /41-1511-280526/img/box.png HTTP/1.1\r\nHost: theflurry.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Jun 2026 00:35:49 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 28 May 2026 07:48:35 GMT\r\netag: \"37c34-652dbf499f6c9\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B31qDEVSBJOE3sIn4Ho6ySoKJ86U7FL7D5tacCaDhJWBZHs411yBrF3%2FQtjxjd8n%2BqObZvUcsJvOQsgezsaG5z48K2zK2mS2daWAs7oEdCTxHgh7%2BQpYCOSmjOzz6r3WqA%3D%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-length: 228404\r\ncf-ray: a07b943cedf1b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":228404,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 420 x 401, 8-bit/color RGBA, non-interlaced","md5":"ae25b8c62a010907af3933fc358f523b","sha1":"da7c9fe675530bff9602710271f26268b33f0d42","sha256":"86572a5417fc6dd1f5568998253264f4ede87cb11f71488f3e5182452c1d3d54","sha512":"affa68beecc1df1c0feabfb619dd2c19f9ceedb236bc69515f35f84eb84f089028c59a48b4d0438860a1019fe069409681161e0fc5810399965ae781dab19e18","ssdeep":"3072:ywZZfDf1CeosfcpGwVuZ5tvwWvoXZkgwGG3s/2XpRBF58sdZ5HF:pfLAeoS/vpwJk1pXDBXTLF","tlshash":"892413f195a48df1e36d9b0b4b44eae75ce7b436cb4b03786e13ac1b5822b914003add","first_seen":"2023-05-19T03:37:17Z","last_seen":"2026-06-17T13:07:14.254746Z","times_seen":103,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"theflurry.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"theflurry.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theflurry.info/41-1511-280526/img/deliv-i.png","fqdn":"theflurry.info","domain":"theflurry.info","tld":"info"},"ip":{"addr":"172.67.156.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=","date":"2026-06-07T00:35:49.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theflurry.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 11:32:22 GMT","end":"Thu, 30 Jul 2026 12:29:51 GMT"},"fingerprint":{"sha1":"CA:F8:68:04:62:54:44:2E:E4:7B:00:57:12:21:02:D5:85:B2:08:28","sha256":"03:2C:D1:44:05:22:BB:86:8B:87:F6:6D:31:30:BA:CB:D3:87:86:12:FD:17:EB:AD:5F:F6:2E:F0:0D:09:12:32"}}},"request":{"raw":"GET /41-1511-280526/img/deliv-i.png HTTP/1.1\r\nHost: theflurry.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Jun 2026 00:35:49 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 28 May 2026 07:48:29 GMT\r\netag: \"1424-652dbf43f9968\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SufwfMAUAOGx8OsCFdQ%2FP2BMtUt0yBJPQHqWJnPYeyPcQXpRsJ10yYHNBqteuFYgr3IONtI2vP2josf%2F8B%2F5pcauJiExBCtPpcEujG%2F1mMwSE3ztWj%2FqIt3rUu%2BQ3BLYeg%3D%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-length: 5156\r\ncf-ray: a07b943cfdf4b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5156,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 80, 8-bit/color RGBA, non-interlaced","md5":"78b4efc4159a13bea40c884aed7ebfa1","sha1":"a53f45d514b90615f76671dc7e40308f9fb31aa8","sha256":"5279405c62450851379ec0c27a4c929d540dc8416399ea4859b58476fced8900","sha512":"e3809810781a07509231bf4187875b8008017d7c333a8177667f6a7e8011cffe94f9673d786f906fdad3a71d4283e6a7b8264393307d584f08849bca4691348b","ssdeep":"96:VSTknmWI4KzrmZ9HfLGJH0HRUc/MXZF8xx/qrormt+D9HYjQt76pCDvu5Sdm:VSTknESZ9/qJpFyi1tiHOm6ADv2j","tlshash":"16b14c8cbd0198d91d433a4b6afe19022939074455f9f417f8da4c1718317becaaf5ea","first_seen":"2023-05-19T03:37:17Z","last_seen":"2026-06-17T13:07:14.280751Z","times_seen":107,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"theflurry.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"theflurry.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theflurry.info/41-1511-280526/img/trk-i.png","fqdn":"theflurry.info","domain":"theflurry.info","tld":"info"},"ip":{"addr":"172.67.156.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=","date":"2026-06-07T00:35:49.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theflurry.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 11:32:22 GMT","end":"Thu, 30 Jul 2026 12:29:51 GMT"},"fingerprint":{"sha1":"CA:F8:68:04:62:54:44:2E:E4:7B:00:57:12:21:02:D5:85:B2:08:28","sha256":"03:2C:D1:44:05:22:BB:86:8B:87:F6:6D:31:30:BA:CB:D3:87:86:12:FD:17:EB:AD:5F:F6:2E:F0:0D:09:12:32"}}},"request":{"raw":"GET /41-1511-280526/img/trk-i.png HTTP/1.1\r\nHost: theflurry.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Jun 2026 00:35:49 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 28 May 2026 07:48:37 GMT\r\netag: \"108d-652dbf4c2c842\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZYxX0cgORJfEvtulwkFbTw5ichq3pYr5N5PzazHLrpqVKppuADByOnpLe5GZV%2B7L%2FKEsHqWXIcPhQxara%2FK7OkiVbOhAuijMtTRlJkdSIjiXY7LlITD%2Bsm43XTfbs%2BvXVw%3D%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-length: 4237\r\ncf-ray: a07b943cfdf2b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4237,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 80, 8-bit/color RGBA, non-interlaced","md5":"e633e9a7cecaebfb9d9a7a6bb944cb7f","sha1":"b42b9b919a5daab054d42394a6b4ba6ce0ce332e","sha256":"3182db0b463d052f9710a9772efb53c7c505be5bdc43e964b0b6227fde9d8002","sha512":"2c13ce5f6a237ffc3e4e71666a9bc1dec9989e573d80cdbda6284045f367d22bd9d5022095e79ed79bfd30975f86e7558cc8ebe4f245cf5e554adb87ed46f75e","ssdeep":"96:VSTknmWI4ysUGk+IkHfLmqH0jQ5GwCnuTIKIPyZ39TBxA82n7OpaWqT:VSTkn/PIk/HLOnh43xXA82n7OparT","tlshash":"1a912acef5216d444688be0726e9510756bb4390eac0c055f4eec82358904b6ce0e8da","first_seen":"2023-05-19T03:37:17Z","last_seen":"2026-06-17T13:07:14.281975Z","times_seen":107,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"theflurry.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"theflurry.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=","fqdn":"theflurry.info","domain":"theflurry.info","tld":"info"},"ip":{"addr":"172.67.156.186","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-07T00:35:49.526Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8= HTTP/1.1\r\nHost: theflurry.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 07 Jun 2026 00:35:49 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: https://theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VbHbQHonQLbSokEdyhFYNlAPCzsWUwJWksiIPFQCtjBrXQHNhR%2BeqjY8FH3%2FTgTTswWmyXYnWSneIKZcMLuv3yDDzeUHkRjneoqh2Os53oX5ltmcyCatQYWswEfFBDGC9Q%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: a07b943a8ac556c5-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9220,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-17T15:31:19.745285Z","times_seen":16487195,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":1,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"theflurry.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"theflurry.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=","fqdn":"theflurry.info","domain":"theflurry.info","tld":"info"},"ip":{"addr":"172.67.156.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-07T00:35:49.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theflurry.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 11:32:22 GMT","end":"Thu, 30 Jul 2026 12:29:51 GMT"},"fingerprint":{"sha1":"CA:F8:68:04:62:54:44:2E:E4:7B:00:57:12:21:02:D5:85:B2:08:28","sha256":"03:2C:D1:44:05:22:BB:86:8B:87:F6:6D:31:30:BA:CB:D3:87:86:12:FD:17:EB:AD:5F:F6:2E:F0:0D:09:12:32"}}},"request":{"raw":"GET /41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8= HTTP/1.1\r\nHost: theflurry.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Jun 2026 00:35:49 GMT\r\nserver: cloudflare\r\nx-powered-by: PHP/7.4.33\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=15w%2ByQeqiZRab%2BxwHrzWuPLZUia875X9hQ5VXsb3uTquunQgLQRB%2FwIAIqhsVI%2FbKG1%2B%2B5zOtDaLGLMZ7HhzIEBOaGLqRlXk2INCwz11UT1jpc1icFHg8dUoaLmR2Euj3w%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a07b943aade3b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap:5.2.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":9220,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (345), with CRLF line terminators","md5":"9d20dd977c61ce5318999eff8a4bf161","sha1":"fa4831dff3995ccea1a5414605ba7c10c23a1640","sha256":"e993508a8a5c03086c5762f53a9d09c75c541b7dd72e5246e384cdd9a01e7791","sha512":"7d4f1f01fcdf5413b0338b00a44bd99dd18db7588f37672f30b301361e833e49e6ca51f5f7d5caad8e450260cc7451557a2d92c0f39dc0b4de7de8aae13308e7","ssdeep":"192:tIXEV0EA29EVoROaU5y+0Ism0zLtoLWaPmrxe5iKgPei0ifiJ:thlAvVoW70Ism0zLtoLWaeFXKfi0ifiJ","tlshash":"7f12edb031cd897602e3028b21702b4ae4dfc626c7774196fbfa137707d2d95ae8b225","first_seen":"2026-06-06T13:50:11.857034Z","last_seen":"2026-06-07T00:36:14.095477Z","times_seen":2,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"theflurry.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"theflurry.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theflurry.info/41-1511-280526/css/style.css","fqdn":"theflurry.info","domain":"theflurry.info","tld":"info"},"ip":{"addr":"172.67.156.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=","date":"2026-06-07T00:35:49.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theflurry.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 11:32:22 GMT","end":"Thu, 30 Jul 2026 12:29:51 GMT"},"fingerprint":{"sha1":"CA:F8:68:04:62:54:44:2E:E4:7B:00:57:12:21:02:D5:85:B2:08:28","sha256":"03:2C:D1:44:05:22:BB:86:8B:87:F6:6D:31:30:BA:CB:D3:87:86:12:FD:17:EB:AD:5F:F6:2E:F0:0D:09:12:32"}}},"request":{"raw":"GET /41-1511-280526/css/style.css HTTP/1.1\r\nHost: theflurry.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theflurry.info/41-1511-280526/?u=161C1515\u0026e=fasel.arno%2540bluewin.ch\u0026s3=Ursula\u0026s4=Widmer\u0026s5=\u0026s6=\u0026s7=\u0026s8=\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 07 Jun 2026 00:35:49 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 28 May 2026 07:48:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VBXKvo7YVvk7d1eqVgvFwYjMxTKyvElQUTbMthPVf%2BYcMvaXgCW0%2FiW6riG%2FfGQYF75iGoazMRDNKgH2HRjo60H8QtKnCnS2HRkJYg35D%2BHcJpjFlbKMfIQnhwa8%2BdagEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\netag: W/\"1059-652dbf314cb59\"\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncf-ray: a07b943cededb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4185,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"77c9cbedd3abcc52c6e0f6b46a5f92db","sha1":"fde8182b6d92f5c546d888bc39f38f465e2a9c0e","sha256":"319234dad60e15191fef622457949d7922ade6c4754088d6c7ff9353d39e509d","sha512":"a604aeb36cb17b11ad31634d4d7dcc618ebaea5a392b8fd8ef5b94b2522d18f249ceaa78427e765e3df7de061d5e3a6c3c36174555c33af22e61da08e2d77a31","ssdeep":"96:gcQvVb0BtBVTPsQslSA0/gFMzctZYqZx1J+:ntBxknfxf+","tlshash":"6b811229fa57100a7277c9f477f24f96eb490013d70606b9bbe06164abd446c9a74fcc","first_seen":"2025-06-27T16:49:48.854721Z","last_seen":"2026-06-17T13:07:14.25821Z","times_seen":103,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"theflurry.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"theflurry.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}