{"report_id":"dc8b1401-e611-411d-9e14-55ef0524e693","version":6,"status":"done","tags":[],"date":"2026-03-07T16:26:38Z","url":{"schema":"http","addr":"ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724","fqdn":"ursonenight.com","domain":"ursonenight.com","tld":"com"},"ip":{"addr":"104.21.66.254","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724","fqdn":"ursonenight.com","domain":"ursonenight.com","tld":"com"},"title":"Rencontrer des femmes locales qui cherchent à baiser ce soir","dom":{"size":29037,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2360)","md5":"fed35bea06090d2eaba55dc0cccb78ea","sha1":"d261a94e9c9883981581a5d111a977885588c1bf","sha256":"47a822808e3c7df5129edf6e1d41da51ca5a0b2b47d8f60927de7e485f3c0e86","sha512":"516463e106f3dbceac8ab195f750daabe42528d6fb718f981710d01e999f78bbef2bf1b0d142bb36393483a66eaea58054e12a46bd5fb3a214bb36be645abbac","ssdeep":"384:X54rUiUJ1uLyuxuPpgp0j748N6MJdNBvE/zSEpAVZaf51jrpc:yrUi9jxuP2YU8NhuSEpAjaf51/pc","tlshash":"01d2e8dc5af029fe45c683c26f12955e7966d5a3d5068908f2ac1fcd8fc2cacdc9209b","dom_hash":"domhash4486cad8b9692180f803c9d9a90d5d10","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724","fqdn":"ursonenight.com","domain":"ursonenight.com","tld":"com"},"ip":{"addr":"104.21.66.254","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-11T16:26:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"ursonenight.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ursonenight.com","ip":{"addr":"172.67.210.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-05","domain_rank":2576776,"first_seen":"2025-04-19T17:46:16.109595Z","last_seen":"2026-02-12T17:25:02.603142Z","alert_count":14,"request_count":14,"received_data":694688,"sent_data":11618,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":2,"received_data":87942,"sent_data":1100,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":12014,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724","fqdn":"ursonenight.com","domain":"ursonenight.com","tld":"com"},"ip":{"addr":"172.67.210.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"18e13cd93c8d035dc7bd30d8d2440f2e","sha1":"4e7490f6858d9971762230b61d05c4fbd04dd1f8","sha256":"593633ab1e267d9e511d71b11af391e6197670120d7c32edb70c7bafd42eb807","sha512":"93a16b50d17770bbfb8bdb854a10b0ea2d313a67be46630d0b56fcb016906ace628f306f7a81069a7eac372cc4940c3c6c7c800e29ab6c3fd239a82e50e17f6b","ssdeep":"","tlshash":"fc119b41e110f570875623f24f6a88d9da7f110942b8c40be688fd60db2da1dceec5f8","size":985,"data":"","first_seen":"2025-07-19T12:42:22.111992Z","last_seen":"2026-03-17T16:51:20.290317Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ursonenight.com/fr/ebo-swipe-now/java.js","fqdn":"ursonenight.com","domain":"ursonenight.com","tld":"com"},"ip":{"addr":"172.67.210.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4763af11cac62c67bd66e118ff589f83","sha1":"37d3afff1090221b07aed88996decf1c505cb810","sha256":"d9e98a14fc6ef05a006ce9afb464285b70c829b4543cad594b84e24275aed566","sha512":"8c6790946ddf0cd641a18135871b4b8fb1208f42b4df65cdb3b070170df55b6c2e992cbedad329f4dd05e191f7df896c68190144f25f7ddc611b774b46b4d374","ssdeep":"1536:aLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t63t:+kn6x2xe9NK6nC603t","tlshash":"fda32acd73d670a247ab61fa446f500ff136189a6c4d8810f229d8d9bc74a4e8277f6e","size":106335,"data":"","first_seen":"2025-07-19T12:42:22.076807Z","last_seen":"2026-03-17T16:51:20.282089Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"ursonenight.com/fr/ebo-swipe-now/bg5.jpg","fqdn":"ursonenight.com","domain":"ursonenight.com","tld":"com"},"ip":{"addr":"172.67.210.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724","date":"2026-03-07T16:26:16.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ursonenight.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 05:31:19 GMT","end":"Sun, 24 May 2026 06:30:08 GMT"},"fingerprint":{"sha1":"52:84:6A:99:4C:0D:30:9A:82:A3:9A:F7:6B:8E:92:79:95:CA:FB:F4","sha256":"A9:47:7D:4C:E1:FF:31:41:05:EE:8A:95:1F:B5:75:15:BA:20:D7:65:56:F4:DF:88:32:C4:DC:A3:B8:7F:15:73"}}},"request":{"raw":"GET /fr/ebo-swipe-now/bg5.jpg HTTP/1.1\r\nHost: ursonenight.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 16:26:16 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 15:52:47 GMT\r\netag: \"b92d-62b0b9eb3fdca\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 47405\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HQswrprk8XQZ90DhgAv%2F7U24Z1IlsaCX8fUvej2Chu9D7rNPGKv1OY3Fx85yDCdWzpx28QHP4qgwMDEtTiNj%2FtB5zGipt7G2%2FJSY%2FGHC3A%3D%3D\"}]}\r\ncf-ray: 9d8af5fa3a8d618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47405,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x842, components 3","md5":"df4a8a544ac0d89d320ec147bb97f914","sha1":"28de295245a71c44ff3bf98494b1cfafb2915873","sha256":"ade2ea5c139b08b0db4ad4fe4258bda9d7be386b4caf1845a227eb72f0e115bd","sha512":"97716bde0684487cbdff97f271b00180e83369c3ed31e58ddffe8966bfbae9e0480833f12d1e5a90043ea5d5f9566ca8f3eb26c2e8d8cef8a09f85ddbde82643","ssdeep":"768:audSxWYFdf7h5DSu4mXpzqI36zJCaRZ7z1vkE0cIwLSyfwcrkmSTvUTF9AFwoUMJ:audSxWUjZ4kOXtz1vkE0tw2/8kmSTcT4","tlshash":"9d23e12a4ecd53b0f6d4da94c3fcf2fec4c3d2661c8c87498b6296ad2263556f881d91","first_seen":"2025-07-19T12:42:22.094323Z","last_seen":"2026-03-17T16:51:20.283883Z","times_seen":63,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"ursonenight.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ursonenight.com/fr/ebo-swipe-now/bg7.jpg","fqdn":"ursonenight.com","domain":"ursonenight.com","tld":"com"},"ip":{"addr":"172.67.210.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724","date":"2026-03-07T16:26:16.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ursonenight.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 05:31:19 GMT","end":"Sun, 24 May 2026 06:30:08 GMT"},"fingerprint":{"sha1":"52:84:6A:99:4C:0D:30:9A:82:A3:9A:F7:6B:8E:92:79:95:CA:FB:F4","sha256":"A9:47:7D:4C:E1:FF:31:41:05:EE:8A:95:1F:B5:75:15:BA:20:D7:65:56:F4:DF:88:32:C4:DC:A3:B8:7F:15:73"}}},"request":{"raw":"GET /fr/ebo-swipe-now/bg7.jpg HTTP/1.1\r\nHost: ursonenight.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 16:26:16 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 15:52:49 GMT\r\netag: \"a51f-62b0b9ed6993f\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 42271\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ECKKUgxoUmOJg%2BO3aPZ11eJWRXtX4dpnOX854EWV3%2FcqYu85%2Fw5MG6KV%2Bx9edTHVG8Uih%2Bbc1C1AY3T3nH7n6RW4bffxQCVQmOUKgEKVcA%3D%3D\"}]}\r\ncf-ray: 9d8af5fa3a8f618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42271,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, orientation=upper-left, xresolution=110, yresolution=118, resolutionunit=2, software=ACDSee 17, datetime=2016:12:21 10:44:27], baseline, precision 8, 450x600, components 3","md5":"73f341a4cab27ac9071f44c79bf397e6","sha1":"3108d71bd325fed1b33ce50f25716820ecc17737","sha256":"e2433a13f96d779d49ee6fdcff2c9a9c9597c28f0d953475a31a57e02b7d165f","sha512":"f1c631febfa69b231c8656eea6155bbbac463f159443bbffa450e9b7bc81bdf0980ce3e0f131a34fa530be85f35255483d842f602181dfc2d4a7d283d73dddb7","ssdeep":"768:ls5jDaCrf64+8FJ/Q3087e4j7P7mYRFKlTGffj5gRqZOs042tPmzY9vyt2KFbCQ:lsdDLRM7ey7dvK5GffwqZOh42BZ9aQKr","tlshash":"1613f260f841956ee023f2b96488d798523a77518ce9ff8b83410cfea673ec99c1e5c5","first_seen":"2025-07-19T12:42:22.096313Z","last_seen":"2026-03-17T16:51:20.286051Z","times_seen":63,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"ursonenight.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ursonenight.com/fr/ebo-swipe-now/submit-bg.svg","fqdn":"ursonenight.com","domain":"ursonenight.com","tld":"com"},"ip":{"addr":"172.67.210.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724","date":"2026-03-07T16:26:16.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ursonenight.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 05:31:19 GMT","end":"Sun, 24 May 2026 06:30:08 GMT"},"fingerprint":{"sha1":"52:84:6A:99:4C:0D:30:9A:82:A3:9A:F7:6B:8E:92:79:95:CA:FB:F4","sha256":"A9:47:7D:4C:E1:FF:31:41:05:EE:8A:95:1F:B5:75:15:BA:20:D7:65:56:F4:DF:88:32:C4:DC:A3:B8:7F:15:73"}}},"request":{"raw":"GET /fr/ebo-swipe-now/submit-bg.svg HTTP/1.1\r\nHost: ursonenight.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ursonenight.com/fr/ebo-swipe-now/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 16:26:17 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 15:52:55 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=grGr6K9Zjnrvdu0kZxQjwEiqww23R2OeLENIErBcI3MZgU%2Bk2nDacvIu%2BTYFF1KHHMRb%2BvoWzlwaIqxiU0q%2FbLx5RyPwhKLqbAgJ%2Fzh53Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\netag: W/\"1ea-62b0b9f30561d\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9d8af5fe2b43618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":490,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"49764b53be6ffad8cfb35b6994822ef5","sha1":"641d457b7ab4204f3bcc62e1d49eb3354f082385","sha256":"56e16e072174d5e28b7e06f5908d36f5b9107769b4ffc6bdb9d174abbc6ccdf1","sha512":"161f9acc6aa1747958f5a0d0a1b8fe12c3ddc177645b60952a113a8bbd71c7a22728564d60b184eaf0b47157b30aa1cafeffed4c4f783f76d0031e4029e5b8b8","ssdeep":"","tlshash":"bbf054fd03c5cbe0c4504b7073387365f13b60e0c1c87868c980175574225a2f1935d9","first_seen":"2025-07-19T12:42:22.089421Z","last_seen":"2026-03-17T16:51:20.278735Z","times_seen":63,"resource_available":false,"data":null}},"time_used":565,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":565,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"ursonenight.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724","date":"2026-03-07T16:26:16.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ursonenight.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 23:57:11 GMT\r\nexpires: Thu, 04 Mar 2027 23:57:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 232145\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-04T15:50:23.17118Z","times_seen":62358,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":202,"dns":0,"connect":28,"send":0,"wait":28,"receive":15,"ssl":172},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724","fqdn":"ursonenight.com","domain":"ursonenight.com","tld":"com"},"ip":{"addr":"172.67.210.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-07T16:26:15.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ursonenight.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 05:31:19 GMT","end":"Sun, 24 May 2026 06:30:08 GMT"},"fingerprint":{"sha1":"52:84:6A:99:4C:0D:30:9A:82:A3:9A:F7:6B:8E:92:79:95:CA:FB:F4","sha256":"A9:47:7D:4C:E1:FF:31:41:05:EE:8A:95:1F:B5:75:15:BA:20:D7:65:56:F4:DF:88:32:C4:DC:A3:B8:7F:15:73"}}},"request":{"raw":"GET /fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724 HTTP/1.1\r\nHost: ursonenight.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 16:26:15 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 15:52:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X4Io6a8JcUXl6hawIavR1PO%2FPpkzJjh%2FZnx0JAZTkxTJk%2Bc0vxzyy27Ovr54SvozhovhchMzAfJdHUig30k4C33ve0QWOe58pXwko%2BH4OA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d8af5f608452d96-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29430,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2360), with CRLF line terminators","md5":"704dd2d4ddd8d2e61d07ba5e5c236f16","sha1":"07bb2e47d3656c0c7bc935af34c9dbd7c5c30b03","sha256":"6003ce46252d36bc88b0ebdff8f7b968293f5fe8e15f1efef12994c0e60fb752","sha512":"f4940c80f7ac4b663726db73895d41c13fb37162615e79d38b2e724145e6498d04bae2bcfef1bc2269f8cbd0ad31d198192a1292ea659ed040d4852a5e7eadee","ssdeep":"384:N54rUiv2suLyuduPpgpwj74816MJ9NBvELzSEpoVZaf51rrlS:wrUiojduP2UU81xmSEpojaf51XlS","tlshash":"95d2d8dc5ae029ee45d683c25f16969df8668193d6068908f2ac2fcb4ff2c6cdc93057","first_seen":"2025-08-09T10:14:14.283041Z","last_seen":"2026-03-07T16:26:39.770616Z","times_seen":26,"resource_available":true,"data":null}},"time_used":515,"timings":{"blocked":38,"dns":5,"connect":8,"send":0,"wait":439,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"ursonenight.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ursonenight.com/fr/ebo-swipe-now/style.css","fqdn":"ursonenight.com","domain":"ursonenight.com","tld":"com"},"ip":{"addr":"172.67.210.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724","date":"2026-03-07T16:26:16.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ursonenight.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 05:31:19 GMT","end":"Sun, 24 May 2026 06:30:08 GMT"},"fingerprint":{"sha1":"52:84:6A:99:4C:0D:30:9A:82:A3:9A:F7:6B:8E:92:79:95:CA:FB:F4","sha256":"A9:47:7D:4C:E1:FF:31:41:05:EE:8A:95:1F:B5:75:15:BA:20:D7:65:56:F4:DF:88:32:C4:DC:A3:B8:7F:15:73"}}},"request":{"raw":"GET /fr/ebo-swipe-now/style.css HTTP/1.1\r\nHost: ursonenight.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 16:26:16 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 15:52:54 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HoNzn5e6LxiurXnILVQA6ooE9K2f%2B6YHwLCuArc2kYZnGyBp3bABXENeKMT%2FBqVjC3iztr2sqk039rIPLwIu5FPnUA7%2F%2B6nyMx8xqpradw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\netag: W/\"151f-62b0b9f1c06d9\"\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9d8af5fa3a87618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5407,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5407), with no line terminators","md5":"1332b369951c29d39546de07aeeaecf5","sha1":"2570e0b53573da081eec6c584b3b2a48c8786fe2","sha256":"4b4417b612882b6c660b82487f3e7c3cd43d337d1495b1f6785b9aba996a7a12","sha512":"5f9d88abf12a5d3a62bd05a50bffc9c4050abeabacc98c63aeaf6e1a97d6af2addcae71ed8d80e0a7c2de85bc923d66195a8f0bf1e084bcbcedab5462ce9f0f8","ssdeep":"48:vsEBD3D855k151CtHZLenJSKWk3JaSE4dxudmv9+WmmQ5WXW5VUhQRntM:UEBrivJi/yidEIGCI+hQlC","tlshash":"02b175637b5f212c95330bb99dd036fcd02e9ac2b7135a9b211a512b434ddc492f23b9","first_seen":"2025-07-19T12:42:22.098431Z","last_seen":"2026-03-17T16:51:20.281193Z","times_seen":63,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"ursonenight.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ursonenight.com/fr/ebo-swipe-now/java.js","fqdn":"ursonenight.com","domain":"ursonenight.com","tld":"com"},"ip":{"addr":"172.67.210.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724","date":"2026-03-07T16:26:16.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ursonenight.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 05:31:19 GMT","end":"Sun, 24 May 2026 06:30:08 GMT"},"fingerprint":{"sha1":"52:84:6A:99:4C:0D:30:9A:82:A3:9A:F7:6B:8E:92:79:95:CA:FB:F4","sha256":"A9:47:7D:4C:E1:FF:31:41:05:EE:8A:95:1F:B5:75:15:BA:20:D7:65:56:F4:DF:88:32:C4:DC:A3:B8:7F:15:73"}}},"request":{"raw":"GET /fr/ebo-swipe-now/java.js HTTP/1.1\r\nHost: ursonenight.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 16:26:16 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 15:52:53 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bbgfzJerflA1hQBcqaTeqqPuJKThRJCdfwvLNEMcrOEWm9GE7%2Frs35ZXcIDzdAVr%2BF4JvzeAhHR0bBZQKyNSoyOxzleJp9zy6biYaKSPOA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\netag: W/\"19f5f-62b0b9f10a8aa\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9d8af5fa3a88618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106335,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators","md5":"4763af11cac62c67bd66e118ff589f83","sha1":"37d3afff1090221b07aed88996decf1c505cb810","sha256":"d9e98a14fc6ef05a006ce9afb464285b70c829b4543cad594b84e24275aed566","sha512":"8c6790946ddf0cd641a18135871b4b8fb1208f42b4df65cdb3b070170df55b6c2e992cbedad329f4dd05e191f7df896c68190144f25f7ddc611b774b46b4d374","ssdeep":"1536:aLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t63t:+kn6x2xe9NK6nC603t","tlshash":"fda32acd73d670a247ab61fa446f500ff136189a6c4d8810f229d8d9bc74a4e8277f6e","first_seen":"2025-07-19T12:42:22.076807Z","last_seen":"2026-03-17T16:51:20.282089Z","times_seen":63,"resource_available":true,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"ursonenight.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ursonenight.com/fr/ebo-swipe-now/bg1.jpg","fqdn":"ursonenight.com","domain":"ursonenight.com","tld":"com"},"ip":{"addr":"172.67.210.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724","date":"2026-03-07T16:26:16.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ursonenight.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 05:31:19 GMT","end":"Sun, 24 May 2026 06:30:08 GMT"},"fingerprint":{"sha1":"52:84:6A:99:4C:0D:30:9A:82:A3:9A:F7:6B:8E:92:79:95:CA:FB:F4","sha256":"A9:47:7D:4C:E1:FF:31:41:05:EE:8A:95:1F:B5:75:15:BA:20:D7:65:56:F4:DF:88:32:C4:DC:A3:B8:7F:15:73"}}},"request":{"raw":"GET /fr/ebo-swipe-now/bg1.jpg HTTP/1.1\r\nHost: ursonenight.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 16:26:16 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 15:52:42 GMT\r\netag: \"37e72-62b0b9e6b5027\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 228978\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3XsDHRT1E5C6fbbHH1U3rKRBJ1PXD5sQBLXvZ7X%2BfqKYE2fHhdTTqLNG1DNWTWm5f88bIX2mbXvxgagTPfqbgRbAsHqxuwvFVzFRu77UTA%3D%3D\"}]}\r\ncf-ray: 9d8af5fa3a89618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":228978,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1067x1600, components 3","md5":"e851c3e7842f30abeebbcbcc844218b8","sha1":"ce50098816c16d869ae72e5442400f6ea8f5f445","sha256":"ed0983a2bb14d995316b307cb14bb24cae4239c2637e84e23cfa06e49ea8e9cd","sha512":"dd725838b029e64cb60166857055ab21026a9f10f8f7f74f6a8eadb8f5da8efe1a4a5740ab59d15013b2ea612afdf15a78b4da2bdc05670670b44655fd51974f","ssdeep":"6144:zxhjeH/fDvPmN8H2zqTAwagouMlN6ug0yxlfyLEKRh/Pimuae3:9wb2CZ6u66ug0yxlfKx9e3","tlshash":"2c24239784e336b3c1387ed79daf3dc8119a298732cd4578d816f7e2acb10917586e48","first_seen":"2025-07-19T12:42:22.100069Z","last_seen":"2026-03-17T16:51:20.276111Z","times_seen":63,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"ursonenight.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ursonenight.com/fr/ebo-swipe-now/bg6.jpg","fqdn":"ursonenight.com","domain":"ursonenight.com","tld":"com"},"ip":{"addr":"172.67.210.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724","date":"2026-03-07T16:26:16.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ursonenight.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 05:31:19 GMT","end":"Sun, 24 May 2026 06:30:08 GMT"},"fingerprint":{"sha1":"52:84:6A:99:4C:0D:30:9A:82:A3:9A:F7:6B:8E:92:79:95:CA:FB:F4","sha256":"A9:47:7D:4C:E1:FF:31:41:05:EE:8A:95:1F:B5:75:15:BA:20:D7:65:56:F4:DF:88:32:C4:DC:A3:B8:7F:15:73"}}},"request":{"raw":"GET /fr/ebo-swipe-now/bg6.jpg HTTP/1.1\r\nHost: ursonenight.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 16:26:16 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 15:52:48 GMT\r\netag: \"fb3d-62b0b9ec249fb\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 64317\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yUr6hUSnM41ICJ5YtalLTZXfnKd8KiCoz6UmWBOt9v%2B2AvAnjp7024rKu87iLqMWCDCEKqeMFHeJuSVUfRSRifHALSmqqqFQ0fLVE6ECRA%3D%3D\"}]}\r\ncf-ray: 9d8af5fa3a8e618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64317,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 585x1063, components 3","md5":"370b1f5b5b1ba4672a9b40606c24bffa","sha1":"5beae6ae96cc552e285179d9dd82b7ba99ffd01d","sha256":"0aee5bb4da26a9decd5aeaa26ec9e44c38148d91d4d860115e26950511b4bc4f","sha512":"a4f824d418ba0b432959ba7b68ae37c55e618f1ae744877e69a60a208cd8decc0c0208b3014dc420f53cbc17c526a7bc823b2dd66931603051ca0266975573d2","ssdeep":"1536:LZoCO736BV90DOe4S3tFnp4eA4bTduj2xqRxhm:/O73zDuS3vphuj2MPhm","tlshash":"bc5302b725d8aaf1583271544bbdcf8e5376c8bc4fa2019d3cdc29419db7e86a40b887","first_seen":"2025-07-19T12:42:22.105429Z","last_seen":"2026-03-17T16:51:20.284788Z","times_seen":63,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"ursonenight.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ursonenight.com/fr/ebo-swipe-now/bg8.jpg","fqdn":"ursonenight.com","domain":"ursonenight.com","tld":"com"},"ip":{"addr":"172.67.210.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724","date":"2026-03-07T16:26:16.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ursonenight.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 05:31:19 GMT","end":"Sun, 24 May 2026 06:30:08 GMT"},"fingerprint":{"sha1":"52:84:6A:99:4C:0D:30:9A:82:A3:9A:F7:6B:8E:92:79:95:CA:FB:F4","sha256":"A9:47:7D:4C:E1:FF:31:41:05:EE:8A:95:1F:B5:75:15:BA:20:D7:65:56:F4:DF:88:32:C4:DC:A3:B8:7F:15:73"}}},"request":{"raw":"GET /fr/ebo-swipe-now/bg8.jpg HTTP/1.1\r\nHost: ursonenight.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 16:26:16 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 15:52:50 GMT\r\netag: \"69af-62b0b9edf72e4\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 27055\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2uBul5S4XwzA4qKIMBLNTPWJNIIb%2F07i4sSpNPWgpvVFc8LipbK0BNrR9VykphQsNWe%2B%2FlcNVrOQ9hedg3RPnFt0TsZb5rtHA9fLuMTS5A%3D%3D\"}]}\r\ncf-ray: 9d8af5fa4a90618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27055,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, orientation=upper-left, xresolution=110, yresolution=118, resolutionunit=2, software=ACDSee 17, datetime=2016:11:29 16:16:34], baseline, precision 8, 450x600, components 3","md5":"fb28a08a3bcd2f460a8a8f5b01dde2c5","sha1":"a2b68c5c09dd124a975c8eb9b68e119b38620757","sha256":"57b7283821efed3cfaf4cb2c4dd2c2e8bb5a28ab160714475337d592d9ebb9b7","sha512":"eb1d99b2599e815c2b353914781989f09ed18d91a1f936804cea823df2ff3c8d5d5b7c4adecdd55de0eb6b1cd46e49ab7ea34331c22f5ba86f0bc2e14e645bc1","ssdeep":"384:6NsNnJ+4vrZo2IWoS5M78D6eYSUOFIv8FrNYBkxIjicChTTrmos5PUAIGkapeCmv:6NsFLn5MwDPjUtorNYH+xLC5MUXpLDUj","tlshash":"7ac2e1536a0408d6de2fd7b157a1c70cc9065b8887680db77e0745c078ef9ae7a24fd9","first_seen":"2025-07-19T12:42:22.082274Z","last_seen":"2026-03-17T16:51:20.287895Z","times_seen":63,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":217,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"ursonenight.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:400,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724","date":"2026-03-07T16:26:16.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"6B:DB:3B:B8:9F:A1:8E:49:35:74:D9:D8:24:91:F2:5E:42:56:2F:58","sha256":"37:ED:DF:C4:FB:A3:96:16:9E:47:69:CE:86:A5:35:8E:B5:3A:0B:0B:6A:A1:08:A2:DF:DE:6C:7C:31:BE:94:B1"}}},"request":{"raw":"GET /css?family=Roboto:400,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ursonenight.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncontent-security-policy-report-only: script-src 'unsafe-inline';report-uri https://csp.withgoogle.com/csp/script-inclusions/bcfae741e379a885f2ab2cf83ebe6d32\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 07 Mar 2026 16:26:16 GMT\r\ndate: Sat, 07 Mar 2026 16:26:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11170,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"4e32070abc078348e9e5e9b9988c9f8a","sha1":"f6a4221b9d88c9640738f370ba6a512efdb9578a","sha256":"d5ad03bcc92672ee24ef497848c0dbae3ef6c6e4fa553e3a8618c8f2be4223b4","sha512":"3ae5a4af3df48fad3611d4d1084b7bc743bd6ed1601a7271cd92cf4e66008b7f16bfdacda980e09dfb9c96760f314a7eb922ec7ba161ca2f794bb71bb4cf5c13","ssdeep":"192:2N9fmN9fN94N9fkN9/qbN9DbqGIwV4BN9nN9uwN9wN9fxN9UN9LN9fvN9/qIN9Ds:89fM919W969yh9/qY4X9N9t9+9fn9y9U","tlshash":"1a321fa1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-20T18:28:50.407696Z","last_seen":"2026-04-04T12:18:30.389787Z","times_seen":92,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":115,"dns":0,"connect":18,"send":0,"wait":33,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ursonenight.com/favicon.ico","fqdn":"ursonenight.com","domain":"ursonenight.com","tld":"com"},"ip":{"addr":"172.67.210.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724","date":"2026-03-07T16:26:17.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ursonenight.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 05:31:19 GMT","end":"Sun, 24 May 2026 06:30:08 GMT"},"fingerprint":{"sha1":"52:84:6A:99:4C:0D:30:9A:82:A3:9A:F7:6B:8E:92:79:95:CA:FB:F4","sha256":"A9:47:7D:4C:E1:FF:31:41:05:EE:8A:95:1F:B5:75:15:BA:20:D7:65:56:F4:DF:88:32:C4:DC:A3:B8:7F:15:73"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ursonenight.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 07 Mar 2026 16:26:17 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ihhIdFk5ZHte2jrQwrz%2Fni2f0Y1QT4rHVzOunEbvnbidnyulK4dOUh0YEmPuzjpvfB%2FGD8q45X38vdTsrNq8nJzulnD2wDgJBFwJN3gfg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8af6006b98618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"62962daa1b19bbcc2db10b7bfd531ea6","sha1":"d64bae91091eda6a7532ebec06aa70893b79e1f8","sha256":"80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880","sha512":"9002a0475fdb38541e78048709006926655c726e93e823b84e2dbf5b53fd539a5342e7266447d23db0e5528e27a19961b115b180c94f2272ff124c7e5c8304e7","ssdeep":"","tlshash":"c0d0129e9183638b442225907ac211d2654d13a6b87645e82d82a48a951857dc5ca69d","first_seen":"2023-03-07T12:06:54Z","last_seen":"2026-04-04T15:26:21.917086Z","times_seen":90075,"resource_available":true,"data":null}},"time_used":446,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"ursonenight.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ursonenight.com/fr/ebo-swipe-now/bg2.jpg","fqdn":"ursonenight.com","domain":"ursonenight.com","tld":"com"},"ip":{"addr":"172.67.210.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724","date":"2026-03-07T16:26:16.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ursonenight.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 05:31:19 GMT","end":"Sun, 24 May 2026 06:30:08 GMT"},"fingerprint":{"sha1":"52:84:6A:99:4C:0D:30:9A:82:A3:9A:F7:6B:8E:92:79:95:CA:FB:F4","sha256":"A9:47:7D:4C:E1:FF:31:41:05:EE:8A:95:1F:B5:75:15:BA:20:D7:65:56:F4:DF:88:32:C4:DC:A3:B8:7F:15:73"}}},"request":{"raw":"GET /fr/ebo-swipe-now/bg2.jpg HTTP/1.1\r\nHost: ursonenight.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 16:26:16 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 15:52:44 GMT\r\netag: \"b274-62b0b9e7eb50a\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 45684\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FU5PmfvcM09Xt%2FUfj47pPm5cQhrxgV6E%2Bm4abUxgUC0TARAZZ3xn4Zxm3s7U%2FmsEXn%2FgKNWBa5rPYJe%2F3VdFUoTRxctSKDOogtWHrFEKxA%3D%3D\"}]}\r\ncf-ray: 9d8af5fa3a8a618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45684,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x798, components 3","md5":"9b9ce01e38e3f476fdbd6d7d6598f1ac","sha1":"a6a0a33acf7c34934d84d267f5c3472b9d6510e6","sha256":"d406091facc1d462c711684e1873e02ed89e4caafeded50d420c4e3f3eb341b7","sha512":"a31fc683937e54a5bb357d204216538d7a9810cc38ed5e397550a94dc96a09076c0033186f199859d022d0b315811386df63a558476b06332f8073b7176ace3a","ssdeep":"768:pjumkC4sI1ipx+y/faaWxQUycVZL5bw7SENPfT/uqd9dY8Vng57s6kb5Z/GPLD:pCs3B3mxJh/5bweEF6q1Y8B16kb5p2D","tlshash":"0a23f135db3ab784d6ec0dd8c16d62f7867929ca6c10fba17046ca06502defda41a05f","first_seen":"2025-07-19T12:42:22.10841Z","last_seen":"2026-03-17T16:51:20.282987Z","times_seen":63,"resource_available":false,"data":null}},"time_used":825,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":406,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"ursonenight.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ursonenight.com/fr/ebo-swipe-now/bg4.jpg","fqdn":"ursonenight.com","domain":"ursonenight.com","tld":"com"},"ip":{"addr":"172.67.210.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724","date":"2026-03-07T16:26:16.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ursonenight.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 05:31:19 GMT","end":"Sun, 24 May 2026 06:30:08 GMT"},"fingerprint":{"sha1":"52:84:6A:99:4C:0D:30:9A:82:A3:9A:F7:6B:8E:92:79:95:CA:FB:F4","sha256":"A9:47:7D:4C:E1:FF:31:41:05:EE:8A:95:1F:B5:75:15:BA:20:D7:65:56:F4:DF:88:32:C4:DC:A3:B8:7F:15:73"}}},"request":{"raw":"GET /fr/ebo-swipe-now/bg4.jpg HTTP/1.1\r\nHost: ursonenight.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 16:26:16 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 15:52:46 GMT\r\netag: \"5946-62b0b9e9d399d\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 22854\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eqTrnIObeJKb3KkoQCLiKw%2FqLo0HhJe6R6PQswVlaa%2BXBj7yMTjzMZ%2BCYU%2FFUzJIBzu0qWF0RNXrxltXCTBlHO1Yq03Uo1AL4YXCJBtv2g%3D%3D\"}]}\r\ncf-ray: 9d8af5fa3a8c618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22854,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x632, components 3","md5":"ac3255539bcc42070207161942473ff4","sha1":"484ea20e08ecbd908471536796259f958511eff0","sha256":"07ba784cdf2d9d21ff8011db04427dda726b9a2f3a1a0d798646077ef71c504a","sha512":"49fa44809ef5d89172cc8b2b8c5b5d04139f891fe948d6f9b46da86cc82ecb3bdae116f6d89206f6e6939e42aecab9b542e5b9bb2f36d43f075840aa66204e64","ssdeep":"384:ycdg/lK6Hb0kOnxQ2+S6e3bREQhz6qz47IJoQGEvUPNHlBXvE+xOJuVt5t:5dCgkoaa3bRdTz40vGEcRlhvbhF","tlshash":"f5a2f140e41f8f18c5f226746a0cf16f28e473a83dc5d79c6d29634a6f344736b2a653","first_seen":"2025-07-19T12:42:22.10384Z","last_seen":"2026-03-17T16:51:20.286901Z","times_seen":63,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"ursonenight.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ursonenight.com/fr/ebo-swipe-now/bg9.jpg","fqdn":"ursonenight.com","domain":"ursonenight.com","tld":"com"},"ip":{"addr":"172.67.210.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724","date":"2026-03-07T16:26:16.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ursonenight.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 05:31:19 GMT","end":"Sun, 24 May 2026 06:30:08 GMT"},"fingerprint":{"sha1":"52:84:6A:99:4C:0D:30:9A:82:A3:9A:F7:6B:8E:92:79:95:CA:FB:F4","sha256":"A9:47:7D:4C:E1:FF:31:41:05:EE:8A:95:1F:B5:75:15:BA:20:D7:65:56:F4:DF:88:32:C4:DC:A3:B8:7F:15:73"}}},"request":{"raw":"GET /fr/ebo-swipe-now/bg9.jpg HTTP/1.1\r\nHost: ursonenight.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 16:26:16 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 15:52:51 GMT\r\netag: \"80e9-62b0b9ef350e0\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 33001\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lx2t5ZTSx8ogeQ4O3dMgYI2ibS2pQeCBRwW23TGrI4wZh2ttweATiB8mzxD0FoFuHtSWxIqnR9QowyoAlF%2F79oPpYwiMrcXTjyljAOqVVw%3D%3D\"}]}\r\ncf-ray: 9d8af5fa4a91618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33001,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, orientation=upper-left, xresolution=110, yresolution=118, resolutionunit=2, software=ACDSee 17, datetime=2016:11:21 11:08:40], baseline, precision 8, 450x600, components 3","md5":"a7385347208e36f54084e6892bbe8403","sha1":"985668d94c8f15806a055a91758903fd1cf78dac","sha256":"86feedfc6562e137683defa6061757b64bad894eb9a95586ed007f0312e97fc6","sha512":"022d5a6f73779b4cad3f89e2ba18914a0187eed0b5963920b0c81a938f6541ebb75d6128e006f02e5bd70a992d973681c00eea5dd66e07e43f19c1d663ef8ae1","ssdeep":"768:DsSceqn5Dmcvt0Yl9QjExt9PO8MXTvvrB+8wJO6deUf78nH:DsScecQrjE1PO8CTLk8IfAnH","tlshash":"f7e2e10f61c55d18d1895ab8cef30b8a7fa67cee62c79382d4946af9b6d8040cc9c0d5","first_seen":"2025-07-19T12:42:22.085221Z","last_seen":"2026-03-17T16:51:20.289447Z","times_seen":63,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":274,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"ursonenight.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724","date":"2026-03-07T16:26:16.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ursonenight.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 23:57:11 GMT\r\nexpires: Thu, 04 Mar 2027 23:57:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 232145\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-04T15:50:23.17118Z","times_seen":62358,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":121,"dns":1,"connect":28,"send":0,"wait":29,"receive":37,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ursonenight.com/fr/ebo-swipe-now/bg3.jpg","fqdn":"ursonenight.com","domain":"ursonenight.com","tld":"com"},"ip":{"addr":"172.67.210.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724","date":"2026-03-07T16:26:16.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ursonenight.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 05:31:19 GMT","end":"Sun, 24 May 2026 06:30:08 GMT"},"fingerprint":{"sha1":"52:84:6A:99:4C:0D:30:9A:82:A3:9A:F7:6B:8E:92:79:95:CA:FB:F4","sha256":"A9:47:7D:4C:E1:FF:31:41:05:EE:8A:95:1F:B5:75:15:BA:20:D7:65:56:F4:DF:88:32:C4:DC:A3:B8:7F:15:73"}}},"request":{"raw":"GET /fr/ebo-swipe-now/bg3.jpg HTTP/1.1\r\nHost: ursonenight.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ursonenight.com/fr/ebo-swipe-now/?bemobdata=c=21ee4047-7b76-44ee-800b-8998c905ec2d..l=9b8c64a3-0ad9-4541-a66e-d62a0c186ea5..a=1..rl=f356a2c6-e034-49a6-ac6d-3e03d3a77a77..b=0..pt=49ed6a74-345b-44be-861a-cd2834f83e4f..zo=0.013..zc=USD..e={click_id}..c1={campaign_id}..c2={creative_id}..c3={category}..c4={keywords}..c5={adspot_id}..c6={site_id}..c7={referrer}..c8={ip}..c9={adspot_name}..c10={pricing_model}..ts=1772897768724\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 16:26:16 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jan 2025 15:52:45 GMT\r\netag: \"7cb7-62b0b9e905c9d\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 31927\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KGvM11WPkHeLWv9DwdJxl3zc1C6Apf9Wxrp8UIyEnJ3Ate9498R1KkWimOk78Kzbj9zuNcZgrpkXVf%2FXEoQIsSxcZrJP6SPye7JB8aOqHg%3D%3D\"}]}\r\ncf-ray: 9d8af5fa3a8b618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31927,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, orientation=upper-left, xresolution=110, yresolution=118, resolutionunit=2, software=ACDSee 17, datetime=2016:11:14 16:27:09], baseline, precision 8, 450x600, components 3","md5":"eb64b0c5c76f4401d2f4748e19b59dc4","sha1":"6d4dd7a6f4176093c863b05221dc0f5d6e725796","sha256":"16e27f656607d6c5580493f265b0f6d42015f7824372081bfc703ecff7f48fb2","sha512":"af53eef1027e574c5d67c942aa47a3bf74580f93b36a0a3a54dbfda2f5ec54da02e47be9ac2a835bae972eb7f7662bfa510971d7414e95a1abfb7974845440b7","ssdeep":"768:CsP7xlDUQjVhAF1shdS90gpt4GgeXmo2Bf3U:CsPNdnhtggeB2Bs","tlshash":"4ae2f15cd541e787c611a1b84b8d9f27d252768d94e60af040e67af207f224cbef2b87","first_seen":"2025-07-19T12:42:22.101888Z","last_seen":"2026-03-17T16:51:20.277423Z","times_seen":63,"resource_available":false,"data":null}},"time_used":644,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":252,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"ursonenight.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}