{"report_id":"bd0809c1-c061-4b6e-84a4-39d0849f41a8","version":6,"status":"done","tags":[],"date":"2026-05-02T19:21:40Z","url":{"schema":"http","addr":"cordlon.com/","fqdn":"cordlon.com","domain":"cordlon.com","tld":"com"},"ip":{"addr":"13.248.213.45","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"cordlon.com/lander","fqdn":"cordlon.com","domain":"cordlon.com","tld":"com"},"title":"cordlon.com/lander","dom":{"size":922,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (776)","md5":"84ced43de8d5cfeb222c40f9feddf595","sha1":"fb3d411dc2c76b32b721a11fd8e0808e5ce0ad7d","sha256":"7deb02b38bc6aa253f72d655cb2c017cb7afcafe3484c183b5b3c14fa9f36051","sha512":"11a9894b9fcc9a659ecd5d2980cb181ad59a21839551e044d0d419600c2b67efb5f61eb6bd7a7421772f01be2a0e97c63c7a58f9dfdbb19c1e99722dc1205da6","ssdeep":"","tlshash":"ab1100c38c51c21d197085dc7932fb3ea257e01e9d91dc90f5f0006569c9ad34c5a994","dom_hash":"domhash3eda90ef943b5e2e25bb94c9e2b5bdc3","first_seen":"2026-04-30T19:24:35.976471Z","last_seen":"2026-05-05T21:41:17.067497Z","times_seen":1464,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cordlon.com/","fqdn":"cordlon.com","domain":"cordlon.com","tld":"com"},"ip":{"addr":"13.248.213.45","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-06T19:21:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"cordlon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"cordlon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"cordlon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"cordlon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cordlon.com","ip":{"addr":"13.248.213.45","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-19T00:47:04.699097Z","last_seen":"2026-03-19T00:47:04.699098Z","alert_count":8,"request_count":2,"received_data":1662,"sent_data":998,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"img1.wsimg.com","ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2008-03-17","domain_rank":58983,"first_seen":"2012-06-20T14:42:31Z","last_seen":"2026-04-26T23:26:49.005297Z","alert_count":0,"request_count":5,"received_data":821345,"sent_data":2266,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"csp.secureserver.net","ip":{"addr":"23.44.47.70","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"1998-03-30","domain_rank":62352,"first_seen":"2022-12-18T21:17:09Z","last_seen":"2026-04-27T07:34:41.617985Z","alert_count":0,"request_count":2,"received_data":1016,"sent_data":1094,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-04-26T22:38:44.781388Z","alert_count":0,"request_count":1,"received_data":354,"sent_data":438,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cordlon.com/","fqdn":"cordlon.com","domain":"cordlon.com","tld":"com"},"ip":{"addr":"13.248.213.45","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3effca764b1325dc476a4f275bb79d63","sha1":"83e96d57b2196e7dc7422e373d844941644d29ba","sha256":"6525c7cbcf52f274ffc5cbe01fd43c03fd77e9463d0757999a596776f0d4184b","sha512":"72188e1090ac227d6b67206326ff52924f0a264371024d22b1bed0a83a327e338b4044955da06d6bf02aa691b776990da4fddb1bdfead635696598d67646ad1b","ssdeep":"","tlshash":"20900289b011e5c411fa55265b17ba086063219bca105a4444010861653470f451abca","size":56,"data":"","first_seen":"2025-03-02T07:03:41.445505Z","last_seen":"2026-08-10T05:53:46.913331Z","times_seen":144306,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cordlon.com/lander","fqdn":"cordlon.com","domain":"cordlon.com","tld":"com"},"ip":{"addr":"13.248.213.45","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0101edc617f0c823dd41e318c9d39fc9","sha1":"d6464936a6d2fa4c765c4d92a2771f812ee1898f","sha256":"ac6eaa139076a0142af7792131f998e6fd1805556c5f7174c3bcb149b2fe3aae","sha512":"7571051c857497560db8f9a8e56be6f7f0be0d615326808157a554ce64d07ff1dd67ab9cbb1cd354c42420d95173d076027e7f887e41b31defac0d2b3eb11df5","ssdeep":"","tlshash":"f67000280080000088308aeb320b2a8c322cf0e0a0008b20b230228220c00038c02080","size":25,"data":"","first_seen":"2025-03-02T07:03:41.447619Z","last_seen":"2026-08-10T05:16:04.046974Z","times_seen":57609,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cordlon.com/lander","fqdn":"cordlon.com","domain":"cordlon.com","tld":"com"},"ip":{"addr":"13.248.213.45","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4566be3a5ae95b1cc330f895a1bf2265","sha1":"712e5d763efe3bc39da3e99fdd0e13c3a5cbc943","sha256":"b23d5005af4518da7309bbb1f5dc1acf5adf215a3e28e21c59501eedcc7f08e4","sha512":"6b733bf4affdac5ace6d720afe9b8626a6f2a1c9c5c3e93b1a3b51611825398acae79c46a907bcf0cf4aef0e36947655673a5202362eff3741cc5d1fdfda8297","ssdeep":"","tlshash":"e6a00261508050e444fc911533733f17f7a3140524806450d7d0051472dfc27d0043d2","size":63,"data":"","first_seen":"2026-04-16T20:30:26.794154Z","last_seen":"2026-08-10T05:16:04.048379Z","times_seen":17901,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cordlon.com/lander","fqdn":"cordlon.com","domain":"cordlon.com","tld":"com"},"ip":{"addr":"13.248.213.45","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d5d32b0ee8d41b1e47a523df01b25b68","sha1":"ac3178156ab1fd26ac597c73367bed18880c5ce1","sha256":"167d38de22fc467ddbebd2a93ac19cd51bf189e0147c168a07f147ef8da0b609","sha512":"6a53edbf80bb8214232a9c68ce71076f23a0af76870a81219cc32cd31bc08558b2ebcfddeff4b0b86e983b1f1b63d65d82fdf792a0abd816587c4fd0e8688c9a","ssdeep":"","tlshash":"d09002840262480848ea662c0b06aa323730820880f3cce088c0e008320be43628b9c7","size":53,"data":"","first_seen":"2026-04-16T20:30:26.798415Z","last_seen":"2026-08-10T05:16:04.053001Z","times_seen":17901,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/parking-lander/static/js/main.e8ed54be.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a299786c81fa5e9c0353c62081257946","sha1":"45d4cacd7f33af913a84d2f1bed8363e01e9dbf3","sha256":"d22a657e33d7f65929f37fa7039e0966f8ec924055a9b5f5b59ca44276b4a045","sha512":"a2dbe2ca1fa1b1ff1ee1de2823772f56294e195cfa6b99e398d2b85d54eff2d10a360d70761e236dd7cbdb3401a2f9080fed7f6d9dc140c18f11815d1b452833","ssdeep":"12288:HVwcKW56drQYnT7QYnT1DUk4f0WTI4WugqciqXD5789fDH7:1wbgarQYnT7QYnT3897H7","tlshash":"f5e42bce76e1b0b407e292eac43f6c4fb3686e15d008c561efbad9da94694498137f1c","size":699500,"data":"","first_seen":"2026-04-30T19:24:35.978729Z","last_seen":"2026-05-05T21:47:58.759383Z","times_seen":1778,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b309239dc60d45e344f4d49a2c5f041","sha1":"c3f931166c53c402c065d8d63119f1009bb30ccf","sha256":"aed4593b11665f063ca6e5e6184435777c74615f5b5991ccdf4acfb8b08e2431","sha512":"4486905b59f275f398b0ffb6aa63dd92662a12d674861b2464a11797f6d0c322df6504f16dbd7c67b3562a9af55e32f344ee8ebc6b5dea2af869630099341a37","ssdeep":"1536:CzSGh6DmEMRNJHY/vbV4vlzH9UOa3mTM+xLxCLuf:8N9Y/ZE1f","tlshash":"33a3a598f6a1f07142e76165412f010bf379a966b0aed0d4e725e8f4adf84ce8173f29","size":104464,"data":"","first_seen":"2025-10-08T00:41:42.369445Z","last_seen":"2026-06-21T14:49:19.309354Z","times_seen":25016,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cordlon.com/lander","fqdn":"cordlon.com","domain":"cordlon.com","tld":"com"},"ip":{"addr":"13.248.213.45","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-02T19:21:19.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cordlon.com","organization":""},"issuer":{"commonName":"GoDaddy TLS Intermediate CA DV - R1v1","organization":"GoDaddy.com"},"validity":{"start":"Tue, 28 Apr 2026 05:18:24 GMT","end":"Thu, 12 Nov 2026 05:18:24 GMT"},"fingerprint":{"sha1":"5C:63:0E:77:D3:3F:17:83:00:33:07:AB:A1:4D:04:43:E4:0F:90:1C","sha256":"36:44:60:9C:F7:40:B5:DF:4D:B2:00:59:F7:35:AC:A8:C0:34:D8:9F:45:8B:EE:F5:10:BA:41:7C:54:47:32:F0"}}},"request":{"raw":"GET /lander HTTP/1.1\r\nHost: cordlon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cordlon.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: private, max-age=86400\r\nContent-Type: text/html\r\nDate: Sat, 02 May 2026 19:21:19 GMT\r\nServer: openresty\r\nSet-Cookie: traffic_target=reseller; Path=/; Max-Age=86400\ncaf_ipaddr=91.90.42.154; Path=/; Max-Age=86400\ncountry=NO; Path=/; Max-Age=86400\ncity=\"Oslo\"; Path=/; Max-Age=86400\nlander_type=parkweb-reseller; Path=/; Max-Age=86400\r\nX-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_HIJEV5SitWqt4TO3cRBA/kCHvplDhzBvv2khxmXMEHyDlk715Zmx0ZP0tqNzy1gQwFsONSuuPlbcK5Aklp/biQ\r\nX-Content-Type-Options: nosniff\r\nContent-Length: 795\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":795,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (794)","md5":"7bfc288b386bef575298ba0dbdfd1f12","sha1":"bb22155bfc983f2d1da7a668a0069d9b16d3fc3a","sha256":"5499d138329b4897c5970e601a720aa843177456e8418a409723b503e55b99ee","sha512":"053ef93f801d5520fe9ac0da90616173f96259c974aafbba970d41629ce988c2100b43eb1cc21ee6a88abcf50f4e59d2048894cabc4305087ea7d1dd9cb993a5","ssdeep":"","tlshash":"de01bdd28c51c21c0ab085ed7932fb3ea116e019edd2e991e4d0002668d9be34c5ed90","first_seen":"2026-04-30T19:24:35.981687Z","last_seen":"2026-05-05T21:41:17.069014Z","times_seen":1477,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"cordlon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"cordlon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"cordlon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"cordlon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/parking-lander/static/js/main.e8ed54be.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cordlon.com/lander","date":"2026-05-02T19:21:19.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /parking-lander/static/js/main.e8ed54be.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cordlon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: XDR00Zg0XDIrrOj3Ixqpjaa2WI5j/aPifXkwAppYWlSeTY9fjCYbYgYNMlmjH7GBDV2cbv0V8wo=\r\nx-amz-request-id: Z554C5FCVZP5YDGD\r\nlast-modified: Thu, 30 Apr 2026 18:59:35 GMT\r\netag: \"a299786c81fa5e9c0353c62081257946\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: pZbMzKasm8YShzzAcS2_UW4pHMBNEh9R\r\naccept-ranges: bytes\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=31536000\r\nexpires: Sun, 02 May 2027 19:21:19 GMT\r\ndate: Sat, 02 May 2026 19:21:19 GMT\r\ncontent-length: 183681\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":699500,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"a299786c81fa5e9c0353c62081257946","sha1":"45d4cacd7f33af913a84d2f1bed8363e01e9dbf3","sha256":"d22a657e33d7f65929f37fa7039e0966f8ec924055a9b5f5b59ca44276b4a045","sha512":"a2dbe2ca1fa1b1ff1ee1de2823772f56294e195cfa6b99e398d2b85d54eff2d10a360d70761e236dd7cbdb3401a2f9080fed7f6d9dc140c18f11815d1b452833","ssdeep":"12288:HVwcKW56drQYnT7QYnT1DUk4f0WTI4WugqciqXD5789fDH7:1wbgarQYnT7QYnT3897H7","tlshash":"f5e42bce76e1b0b407e292eac43f6c4fb3686e15d008c561efbad9da94694498137f1c","first_seen":"2026-04-30T19:24:35.978729Z","last_seen":"2026-05-05T21:47:58.759383Z","times_seen":1778,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":45,"dns":21,"connect":5,"send":0,"wait":9,"receive":11,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/parking-lander/static/css/main.46c07fdb.css","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cordlon.com/lander","date":"2026-05-02T19:21:19.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /parking-lander/static/css/main.46c07fdb.css HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cordlon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: 77JK9arndE5gTb0THLLKHVDZzn8mfXzlk/jWJi381wEH7sLZkKmfzYmjhYyS/ytg9ltqD2cRz1A=\r\nx-amz-request-id: 8X1913C8R0XWR7HP\r\nlast-modified: Thu, 30 Apr 2026 18:36:22 GMT\r\netag: \"cb1fd53012357f9cea2a233ae7154152\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: F9j3zOBjk3ob3cPGyZtu7vZ6UbgThh3E\r\naccept-ranges: bytes\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=31536000\r\nexpires: Sun, 02 May 2027 19:21:19 GMT\r\ndate: Sat, 02 May 2026 19:21:19 GMT\r\ncontent-length: 3302\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":14181,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14136)","md5":"cb1fd53012357f9cea2a233ae7154152","sha1":"8298986d8a624248cd3c163d70cea84cba0bcab5","sha256":"0dc8d87d0f7d826ddcbabfb73f9dd5ead7c14aa94c4ca2938c646047052ab0ee","sha512":"e6b30741831d65b50a637e53ed44183fde9068d3ac5864f5976862a0e15613a60549a54784725616e17ce4dfa03f4965faddc10336b6cdfdd753159edd5cedbd","ssdeep":"384:v9HfffU8GKbmB9aLNLi6qjUYyQyl/gj1nXSxHqUoCtC/0rtYYle:v9HfffU8GKbmB9aLNLi6qjUYyQylYRnp","tlshash":"0252b7621d56143ee5278424d9f1e75c9069f046d6afa7b1d837232f8adf0d2b23ba0c","first_seen":"2026-04-30T18:40:16.33234Z","last_seen":"2026-05-05T21:47:58.75704Z","times_seen":1779,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":40,"dns":17,"connect":4,"send":0,"wait":10,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csp.secureserver.net/eventbus/web?clientid=8da2217409854bee82e12dc4ca0b39fb","fqdn":"csp.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"23.44.47.70","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cordlon.com/lander","date":"2026-05-02T19:21:19.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.secureserver.net","organization":"Special Domain Services, LLC"},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Thu, 23 Oct 2025 00:07:48 GMT","end":"Tue, 24 Nov 2026 00:07:48 GMT"},"fingerprint":{"sha1":"0C:85:75:97:2A:6F:2B:92:48:28:1A:FB:30:8A:C4:98:A7:9E:26:CE","sha256":"2F:4B:65:33:11:10:9D:A1:94:4B:5A:5D:40:E6:63:70:B6:7E:1A:7F:E7:90:E4:E8:F4:4A:37:2E:94:17:64:AB"}}},"request":{"raw":"POST /eventbus/web?clientid=8da2217409854bee82e12dc4ca0b39fb HTTP/1.1\r\nHost: csp.secureserver.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1682\r\nOrigin: https://cordlon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cordlon.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1682,"data":"{\"schemaId\":\"urn:shared:user:events:/v1\",\"data\":[{\"global\":{\"traceId\":\"b0ac6f91c245425a8139be62e97643a9\",\"client\":{\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk\":{\"name\":\"scc-c2\",\"version\":\"1.3.0\"},\"device\":{\"viewportWidth\":1280,\"viewportHeight\":1024,\"screenResolutionWidth\":1280,\"screenResolutionHeight\":1024}},\"page\":{\"traceId\":\"b0ac6f91c245425a8139be62e97643a9\",\"host\":\"cordlon.com\",\"path\":\"/lander\",\"location\":\"https://cordlon.com/lander\",\"referrer\":\"https://cordlon.com/\",\"sessionPageViewCount\":1},\"context\":{\"userType\":\"c2\",\"visitorId\":\"622eedbd-a832-40b8-8692-272ebcfc0748\",\"sessionId\":\"622eedbd-a832-40b8-8692-272ebcfc0748\"}},\"events\":[{\"schemaId\":\"urn:shared:user:event:/rigor/page-navigation/v1\",\"data\":{\"eventCreationTimestamp\":\"2026-05-02T19:21:19.628Z\",\"navigationType\":\"navigate\",\"timing\":{\"navigation\":{\"connectEnd\":1777749679006,\"connectStart\":1777749679006,\"domComplete\":1777749679621,\"domContentLoadedEventEnd\":1777749679620,\"domContentLoadedEventStart\":1777749679618,\"domInteractive\":1777749679527,\"domLoading\":1777749679159,\"domainLookupEnd\":1777749679006,\"domainLookupStart\":1777749679006,\"fetchStart\":1777749679006,\"navigationStart\":1777749679006,\"requestStart\":1777749679026,\"responseEnd\":1777749679130,\"responseStart\":1777749679130,\"loadEventStart\":1777749679621,\"loadEventEnd\":0,\"pageLoadTime\":615,\"domContentLoadedTime\":612,\"domInteractiveTime\":521,\"serverResponseTime\":104},\"paint\":{}},\"traffic\":{\"pageLevelProperties\":{\"ap\":\"parking\"}},\"producerEventId\":\"37a0cc22-ddab-4608-a995-212068a7ad6d\",\"contentLoadType\":\"hard\",\"response\":{\"transferSize\":1498,\"encodedBodySize\":795,\"decodedBodySize\":795}}}]}]}"}},"response":{"raw":"HTTP/1.1 202 Accepted\r\nContent-Type: application/json\r\nContent-Length: 2\r\nAccess-Control-Allow-Origin: *\r\nx-bus-trace-id: 238494118692355945930179585506004677315\r\nx-envoy-upstream-service-time: 81\r\nx-error-info: 0\r\nx-request-id: a4a72049-1004-477e-ab4d-1e67e1bd8ec6\r\nExpires: Sat, 02 May 2026 19:21:20 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Sat, 02 May 2026 19:21:20 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=86400 ; includeSubDomains ; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-10T05:50:15.714594Z","times_seen":758353,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":48,"dns":34,"connect":1,"send":0,"wait":214,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cordlon.com/","fqdn":"cordlon.com","domain":"cordlon.com","tld":"com"},"ip":{"addr":"13.248.213.45","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-02T19:21:18.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cordlon.com","organization":""},"issuer":{"commonName":"GoDaddy TLS Intermediate CA DV - R1v1","organization":"GoDaddy.com"},"validity":{"start":"Tue, 28 Apr 2026 05:18:24 GMT","end":"Thu, 12 Nov 2026 05:18:24 GMT"},"fingerprint":{"sha1":"5C:63:0E:77:D3:3F:17:83:00:33:07:AB:A1:4D:04:43:E4:0F:90:1C","sha256":"36:44:60:9C:F7:40:B5:DF:4D:B2:00:59:F7:35:AC:A8:C0:34:D8:9F:45:8B:EE:F5:10:BA:41:7C:54:47:32:F0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cordlon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nDate: Sat, 02 May 2026 19:21:18 GMT\r\nContent-Length: 114\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":114,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"e89f75f918dbdcee28604d4e09dd71d7","sha1":"f9d9055e9878723a12063b47d4a1a5f58c3eb1e9","sha256":"6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023","sha512":"8df0ab2e3679b64a6174deff4259ae5680f88e3ae307e0ea2dfff88ec4ba14f3477c9fe3a5aa5da3a8e857601170a5108ed75f6d6975958ac7a314e4a336aed0","ssdeep":"","tlshash":"eeb092ddbc61e48018e535511ea3b60d146a22ebb9018b4018c00836a96035f8d0aac5","first_seen":"2024-03-15T21:37:10Z","last_seen":"2026-08-10T05:49:45.240755Z","times_seen":161965,"resource_available":true,"data":null}},"time_used":780,"timings":{"blocked":339,"dns":32,"connect":1,"send":0,"wait":101,"receive":0,"ssl":302},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"cordlon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"cordlon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"cordlon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"cordlon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js?abp=1\u0026gdabp=true","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cordlon.com/lander","date":"2026-05-02T19:21:19.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:20:28 GMT","end":"Wed, 01 Jul 2026 05:20:27 GMT"},"fingerprint":{"sha1":"B4:91:17:84:3C:D9:FA:84:A4:40:60:C3:B9:3F:CD:5B:78:3A:50:7A","sha256":"8C:FB:DA:65:E4:DD:E6:17:CA:EA:AE:21:0F:37:5C:D0:D8:A3:71:77:C6:1E:C5:E2:4B:59:EB:19:51:C9:A5:8D"}}},"request":{"raw":"GET /adsense/domains/caf.js?abp=1\u0026gdabp=true HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cordlon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\ncache-control: no-store, must-revalidate\r\ndate: Sat, 02 May 2026 19:21:19 GMT\r\nserver: sffe\r\ncontent-length: 1604\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T05:49:11.595527Z","times_seen":17812245,"resource_available":true,"data":null}},"time_used":480,"timings":{"blocked":217,"dns":1,"connect":21,"send":0,"wait":41,"receive":0,"ssl":196},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cordlon.com/lander","date":"2026-05-02T19:21:19.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /signals/js/clients/scc-c2/scc-c2.min.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cordlon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: sZHtSt/BAcaTNUdoxqmqc/sqQ4Q9S534Aven84WQkdXv1JYienXoeInBXkfA1kgn9Ov1XGgZSms=\r\nx-amz-request-id: P8Z2VKH8KJY1TRQV\r\nlast-modified: Thu, 19 Feb 2026 18:11:28 GMT\r\netag: \"6b309239dc60d45e344f4d49a2c5f041\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-version: 1.3.0\r\nx-amz-version-id: 5rz5mfani0A4Sx2XrwmZgSvEFZ7uFBOZ\r\naccept-ranges: bytes\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=1800\r\nexpires: Sat, 02 May 2026 19:51:19 GMT\r\ndate: Sat, 02 May 2026 19:21:19 GMT\r\ncontent-length: 21133\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":104464,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6b309239dc60d45e344f4d49a2c5f041","sha1":"c3f931166c53c402c065d8d63119f1009bb30ccf","sha256":"aed4593b11665f063ca6e5e6184435777c74615f5b5991ccdf4acfb8b08e2431","sha512":"4486905b59f275f398b0ffb6aa63dd92662a12d674861b2464a11797f6d0c322df6504f16dbd7c67b3562a9af55e32f344ee8ebc6b5dea2af869630099341a37","ssdeep":"1536:CzSGh6DmEMRNJHY/vbV4vlzH9UOa3mTM+xLxCLuf:8N9Y/ZE1f","tlshash":"33a3a598f6a1f07142e76165412f010bf379a966b0aed0d4e725e8f4adf84ce8173f29","first_seen":"2025-10-08T00:41:42.369445Z","last_seen":"2026-06-21T14:49:19.309354Z","times_seen":25016,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":43,"dns":19,"connect":4,"send":0,"wait":10,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/parking-lander/px.js?ch=1\u0026abp=1\u0026gdabp=true","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cordlon.com/lander","date":"2026-05-02T19:21:19.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /parking-lander/px.js?ch=1\u0026abp=1\u0026gdabp=true HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cordlon.com/\r\nOrigin: https://cordlon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: zXSi7ozY+8IUfkedw5upA8Z6ROUCjJKHD5zoYeWv3cxIVROUluQowxkzZwB/bfyshmsWMAqcQcQE09Jqi4bjwqQOJgLvQV71\r\nx-amz-request-id: 955MHB8VVQGJ4QWS\r\nlast-modified: Thu, 23 Apr 2026 21:16:10 GMT\r\netag: \"d41d8cd98f00b204e9800998ecf8427e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: PXQvo3WSoiZ6ILkCvgAPALEI61_c16Ad\r\naccept-ranges: bytes\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 20\r\ncache-control: max-age=31536000\r\nexpires: Sun, 02 May 2027 19:21:19 GMT\r\ndate: Sat, 02 May 2026 19:21:19 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T05:49:11.595527Z","times_seen":17812245,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/parking-lander/px.js?ch=2\u0026abp=2\u0026gdabp=true","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cordlon.com/lander","date":"2026-05-02T19:21:19.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /parking-lander/px.js?ch=2\u0026abp=2\u0026gdabp=true HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cordlon.com/\r\nOrigin: https://cordlon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: CQ3XjoNtpH/LEJALgfMZkq6w8YsN5udOMpFfPtVdKecLvcGmkYELzYwc98GO6SIqcc2XgvWHH1pJN3MCmmtjD6Gu5Y96QQ/+\r\nx-amz-request-id: 955NM8EP4YFGW15P\r\nlast-modified: Thu, 23 Apr 2026 21:16:10 GMT\r\netag: \"d41d8cd98f00b204e9800998ecf8427e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: PXQvo3WSoiZ6ILkCvgAPALEI61_c16Ad\r\naccept-ranges: bytes\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 20\r\ncache-control: max-age=31536000\r\nexpires: Sun, 02 May 2027 19:21:19 GMT\r\ndate: Sat, 02 May 2026 19:21:19 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T05:49:11.595527Z","times_seen":17812245,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csp.secureserver.net/eventbus/web?clientid=b18ef4f046435b64a469b32c3c1c20a3","fqdn":"csp.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"23.44.47.70","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cordlon.com/lander","date":"2026-05-02T19:21:19.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.secureserver.net","organization":"Special Domain Services, LLC"},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Thu, 23 Oct 2025 00:07:48 GMT","end":"Tue, 24 Nov 2026 00:07:48 GMT"},"fingerprint":{"sha1":"0C:85:75:97:2A:6F:2B:92:48:28:1A:FB:30:8A:C4:98:A7:9E:26:CE","sha256":"2F:4B:65:33:11:10:9D:A1:94:4B:5A:5D:40:E6:63:70:B6:7E:1A:7F:E7:90:E4:E8:F4:4A:37:2E:94:17:64:AB"}}},"request":{"raw":"POST /eventbus/web?clientid=b18ef4f046435b64a469b32c3c1c20a3 HTTP/1.1\r\nHost: csp.secureserver.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1002\r\nOrigin: https://cordlon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cordlon.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1002,"data":"{\"schemaId\":\"urn:shared:user:events:/v1\",\"data\":[{\"global\":{\"traceId\":\"b0ac6f91c245425a8139be62e97643a9\",\"client\":{\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk\":{\"name\":\"scc-c2\",\"version\":\"1.3.0\"},\"device\":{\"viewportWidth\":1280,\"viewportHeight\":1024,\"screenResolutionWidth\":1280,\"screenResolutionHeight\":1024}},\"page\":{\"traceId\":\"b0ac6f91c245425a8139be62e97643a9\",\"host\":\"cordlon.com\",\"path\":\"/lander\",\"location\":\"https://cordlon.com/lander\",\"referrer\":\"https://cordlon.com/\",\"sessionPageViewCount\":1},\"context\":{\"userType\":\"c2\",\"visitorId\":\"622eedbd-a832-40b8-8692-272ebcfc0748\",\"sessionId\":\"622eedbd-a832-40b8-8692-272ebcfc0748\"}},\"events\":[{\"schemaId\":\"urn:shared:user:event:/data-platform/signals/page-view/v1\",\"data\":{\"eventCreationTimestamp\":\"2026-05-02T19:21:19.615Z\",\"forensics\":{\"traceIdAdopted\":false},\"traffic\":{\"pageLevelProperties\":{\"ap\":\"parking\"},\"customProperties\":{}},\"producerEventId\":\"8c6e3503-4863-4950-b2df-8d9eaed6db73\"}}]}]}"}},"response":{"raw":"HTTP/1.1 202 Accepted\r\nContent-Type: application/json\r\nContent-Length: 2\r\nAccess-Control-Allow-Origin: *\r\nx-bus-trace-id: 226062028826874277673886826016055247244\r\nx-envoy-upstream-service-time: 81\r\nx-error-info: 0\r\nx-request-id: d416a0e3-b5ff-43b0-bc84-a5e067c6640e\r\nExpires: Sat, 02 May 2026 19:21:20 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Sat, 02 May 2026 19:21:20 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=86400 ; includeSubDomains ; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-10T05:50:15.714594Z","times_seen":758353,"resource_available":true,"data":null}},"time_used":365,"timings":{"blocked":51,"dns":35,"connect":1,"send":0,"wait":261,"receive":1,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
