{"report_id":"df7440c8-e363-4dcf-b22e-62c286b61225","version":6,"status":"done","tags":[],"date":"2026-05-04T14:51:06Z","url":{"schema":"https","addr":"environmentsa.wpenginepowered.com/Gjensidige/welcome.html","fqdn":"environmentsa.wpenginepowered.com","domain":"environmentsa.wpenginepowered.com","tld":"wpenginepowered.com"},"ip":{"addr":"141.193.213.10","port":0,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"environmentsa.wpenginepowered.com/Gjensidige/welcome.html","fqdn":"environmentsa.wpenginepowered.com","domain":"environmentsa.wpenginepowered.com","tld":"wpenginepowered.com"},"title":"Client","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"4d62b787c25bdfeced8a594aaaedd275","sha1":"d8f00df7159cc9aa82e5d05a69c82b0f0e601e9b","sha256":"ac532ff8ed727913c2bfb517d45beb963d4c86d03797f71cf276baa7d31ea023","sha512":"4fffcf1746341c4980e534d690f2f4fe23b40c999c46991ad1c3b1272606021ecbcdd9a46afdb13b59aa9f6db76f0f3dda65b373fa808650f1c9c329ae2c32d4","ssdeep":"","tlshash":"c6e026e92c76c83866a0078620f5e2ac163061a0bb11d60482dcd83b9e20fd74ca2d4c","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"environmentsa.wpenginepowered.com/Gjensidige/welcome.html","fqdn":"environmentsa.wpenginepowered.com","domain":"environmentsa.wpenginepowered.com","tld":"wpenginepowered.com"},"ip":{"addr":"141.193.213.10","port":0,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-08T14:51:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"environmentsa.wpenginepowered.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"environmentsa.wpenginepowered.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"environmentsa.wpenginepowered.com","ip":{"addr":"141.193.213.10","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"domain_registered":"2020-05-22","domain_rank":0,"first_seen":"2026-05-04T06:17:33.27109Z","last_seen":"2026-05-04T06:17:33.27109Z","alert_count":16,"request_count":8,"received_data":100849,"sent_data":4161,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab95944e0f12df385e5d0b265abbfee5","sha1":"67982c8cab9af7849843b40322fc9ffdfa4f018b","sha256":"d1796a1dd20306637b1e76575b82c3e4b70f66a43525e352f2249aa288395b2b","sha512":"b2223daf1fcacb8e0491cd548c8f508ce50ae9f55a99fad6752ef2cf7411728f1159e61bc9c6131a92011e16f21bce3ab87c5cdbb483b7c1dffe8cfc5a1d9fb5","ssdeep":"","tlshash":"74d023992875c5345394025710bad3b8377121547711d200c2dccc2b6e31ed70cf5d5c","size":217,"data":"","first_seen":"2026-05-04T14:51:08.78172Z","last_seen":"2026-05-04T14:51:08.78172Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"environmentsa.wpenginepowered.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"environmentsa.wpenginepowered.com","domain":"environmentsa.wpenginepowered.com","tld":"wpenginepowered.com"},"ip":{"addr":"141.193.213.10","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6c4d1a786efe6793df59aab9449bb35","sha1":"783f82c7b55254ecf1bba341690097c16518facd","sha256":"81c34095a905c634211f9bb1a9b28e2ccd5f85980b954ad9aad0115244dc1202","sha512":"0b823d07026a7bcf60c1bbe1caa29a4922dc1a13d95bd51300db7854a2d4eedb8e829b15543c4b4a9f78aabc762be63b9999140585e9f1bbdd394ebdc7caf1ba","ssdeep":"384:OMIBdzsuti0dKUvZoMfE7VweNOzvO52I+Yzy5LhSjiYATDosxQOXfglqhulUMlYZ:OMIBFsSi0dnvZoMs7yeNOzvO52I+YzyV","tlshash":"42b284c53adbb09d172728f4082bb0dad55fcc9435a645cca710a9a4bca4b5cf0abddc","size":24260,"data":"","first_seen":"2026-05-04T14:51:08.77812Z","last_seen":"2026-05-04T15:22:50.750068Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"environmentsa.wpenginepowered.com/Gjensidige/welcome.html","fqdn":"environmentsa.wpenginepowered.com","domain":"environmentsa.wpenginepowered.com","tld":"wpenginepowered.com"},"ip":{"addr":"141.193.213.10","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"60b1aa671c127fde5767cdb37ab7f1e3","sha1":"b95edee70b215d81d1774e074a23a52eff7b056d","sha256":"e2fd6b692e74c338f570a25471f56abe04dc370bff9b20e67b3543b188320281","sha512":"8603f33bd0326a7ba42d31abcb0b582d30c5b93eb4798cc40bd630fa8554d476b9e0d44695703a7367560dedf34eddff6264e4dd2adb09a0d886c754876dfd09","ssdeep":"","tlshash":"1e11686d72860023f0ebb01e472ea1cc32a290530818e9457c9f1f4acfa4ba78c59bc2","size":862,"data":"","first_seen":"2026-01-13T07:30:21.298292Z","last_seen":"2026-05-04T14:51:08.78258Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"environmentsa.wpenginepowered.com/Gjensidige/welcome.html","fqdn":"environmentsa.wpenginepowered.com","domain":"environmentsa.wpenginepowered.com","tld":"wpenginepowered.com"},"ip":{"addr":"141.193.213.10","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e02c7efb63b58aeffdd8f97fa9995c4a","sha1":"a6e4dfd223b4d2e8c1ef44c32faf0a5e9668c3c7","sha256":"aa309773d90b7debb94d7c013b3f1b1cf747b9f2484a51bd2b81a2b3a88df71d","sha512":"e6cda600d4c3edb15965d0e2a8739fff927523a91c18c1a6ac1d6f43a72781ccc00d43c2c90426398650774da1402745e3007abfe9cce7264cce81a88aa0c8b0","ssdeep":"","tlshash":"5611c0793a2a5534c6c5418b317ee7a93e3260657a029144c36ccc299d28e8718efcbe","size":902,"data":"","first_seen":"2026-05-04T14:51:08.783103Z","last_seen":"2026-05-04T14:51:08.783103Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"environmentsa.wpenginepowered.com/Gjensidige/style/oidc-client.min.css","fqdn":"environmentsa.wpenginepowered.com","domain":"environmentsa.wpenginepowered.com","tld":"wpenginepowered.com"},"ip":{"addr":"141.193.213.10","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://environmentsa.wpenginepowered.com/Gjensidige/welcome.html","date":"2026-05-04T14:50:39.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpenginepowered.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:59:24 GMT","end":"Thu, 30 Jul 2026 07:59:23 GMT"},"fingerprint":{"sha1":"EC:5E:DD:BC:B8:6D:FD:F9:44:07:3B:00:E7:93:14:07:53:0F:B1:92","sha256":"45:18:70:58:26:BB:FA:01:C0:65:C8:D7:A1:E3:3D:90:FF:E9:6B:72:CC:E9:6F:DB:CA:DA:8C:D8:46:43:40:28"}}},"request":{"raw":"GET /Gjensidige/style/oidc-client.min.css HTTP/1.1\r\nHost: environmentsa.wpenginepowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://environmentsa.wpenginepowered.com/Gjensidige/welcome.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 14:50:39 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nlast-modified: Mon, 20 May 2024 20:30:48 GMT\r\netag: W/\"664bb2f8-7613\"\r\nset-cookie: __cf_bm=d0qr4WBeqnt8clb8jKH05_6sMPSIbN1s785Wr_27FoA-1777906239.22152-1.0.1.1-3gP3Xm8TlURe41DHTY_ciFDpO53WfB6EWYDDTCMldOSo6TlcPBSY3Is6H3XoDGMVqmAOJeRexw1gHi_TxHn_MdkXRFtaHY4xF.9BtrVH7v682FuQwYF5M8J3btKRu62S; HttpOnly; Secure; Path=/; Domain=wpenginepowered.com; Expires=Mon, 04 May 2026 15:20:39 GMT\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 249432\r\ncf-ray: 9f6851ab1e5c568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":30227,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3897)","md5":"9028eb9fe53aec8bc2677b0c1feae966","sha1":"497132850d097f28b1e423fdc54c0346530eaf94","sha256":"1ca91c942cc88a5d535a391160e66cfd3499239fd0bdb42f72ee23ffd7df7d0f","sha512":"e7587dbcbaffab14181f6c2d13731d1c621420ce0c69fbb9418b528d5d3b796508fd72f52529f90d02b39de054a75cf27f97a59881f9758aec50a9dc81f59b7e","ssdeep":"384:vKwIhInXV58as+uOMh40hEsgel+1rAxHmXDSrsJslocR:vKzm2acOW4ChYDSrdL","tlshash":"d3d2c8374a113620b037cf91d3d6e695d218c01391111effb74a6d1acbc7aea3376a6a","first_seen":"2023-08-14T09:30:41Z","last_seen":"2026-07-21T11:59:43.701812Z","times_seen":45,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"environmentsa.wpenginepowered.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"environmentsa.wpenginepowered.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"environmentsa.wpenginepowered.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"environmentsa.wpenginepowered.com","domain":"environmentsa.wpenginepowered.com","tld":"wpenginepowered.com"},"ip":{"addr":"141.193.213.10","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://environmentsa.wpenginepowered.com/Gjensidige/welcome.html","date":"2026-05-04T14:50:39.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpenginepowered.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:59:24 GMT","end":"Thu, 30 Jul 2026 07:59:23 GMT"},"fingerprint":{"sha1":"EC:5E:DD:BC:B8:6D:FD:F9:44:07:3B:00:E7:93:14:07:53:0F:B1:92","sha256":"45:18:70:58:26:BB:FA:01:C0:65:C8:D7:A1:E3:3D:90:FF:E9:6B:72:CC:E9:6F:DB:CA:DA:8C:D8:46:43:40:28"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: environmentsa.wpenginepowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Mon, 04 May 2026 14:50:39 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/fe6331af5207/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=XfLUPfS7ssfymulWliKCIcnzpt48Ba3A5bBoX0KPB18-1777906239.8953736-1.0.1.1-Cnb.A2efuB0Wen4cKlC_uZLXH.Kxr3myi0vE5BmlXKsZhHyCNPX3UIcYk60AZeO_J9rvLd.j8.aoQdP2WJUxsmHaps3kuYa56.u_jahgKqNLl1jw8zo8XSqlI1hzwhde; HttpOnly; Secure; Path=/; Domain=wpenginepowered.com; Expires=Mon, 04 May 2026 15:20:39 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f6851af5ab7568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24260,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T08:24:09.399753Z","times_seen":17542373,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"environmentsa.wpenginepowered.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"environmentsa.wpenginepowered.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"environmentsa.wpenginepowered.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/fe6331af5207/main.js?","fqdn":"environmentsa.wpenginepowered.com","domain":"environmentsa.wpenginepowered.com","tld":"wpenginepowered.com"},"ip":{"addr":"141.193.213.10","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://environmentsa.wpenginepowered.com/Gjensidige/welcome.html","date":"2026-05-04T14:50:39.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpenginepowered.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:59:24 GMT","end":"Thu, 30 Jul 2026 07:59:23 GMT"},"fingerprint":{"sha1":"EC:5E:DD:BC:B8:6D:FD:F9:44:07:3B:00:E7:93:14:07:53:0F:B1:92","sha256":"45:18:70:58:26:BB:FA:01:C0:65:C8:D7:A1:E3:3D:90:FF:E9:6B:72:CC:E9:6F:DB:CA:DA:8C:D8:46:43:40:28"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/fe6331af5207/main.js? HTTP/1.1\r\nHost: environmentsa.wpenginepowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 14:50:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=Kqy4Js.wkbwLBUhuweFVWd1YXkENlqx2kikDcxmSAps-1777906239.9207127-1.0.1.1-IuBImgmR8OVvCJpqduO8J2Pw59Fy.UhL0eJ9Ba6LAcNQxohoxrE8zOENvTCQHQF9ENe0hnFzWiL_._Mu18jHOv4ZSnchSsMrwtWY1BYVMKsi0tDtBKwydaAe.nu6x8Vm; HttpOnly; Secure; Path=/; Domain=wpenginepowered.com; Expires=Mon, 04 May 2026 15:20:39 GMT\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f6851af7adf568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24260,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (24260), with no line terminators","md5":"c6c4d1a786efe6793df59aab9449bb35","sha1":"783f82c7b55254ecf1bba341690097c16518facd","sha256":"81c34095a905c634211f9bb1a9b28e2ccd5f85980b954ad9aad0115244dc1202","sha512":"0b823d07026a7bcf60c1bbe1caa29a4922dc1a13d95bd51300db7854a2d4eedb8e829b15543c4b4a9f78aabc762be63b9999140585e9f1bbdd394ebdc7caf1ba","ssdeep":"384:OMIBdzsuti0dKUvZoMfE7VweNOzvO52I+Yzy5LhSjiYATDosxQOXfglqhulUMlYZ:OMIBFsSi0dnvZoMs7yeNOzvO52I+YzyV","tlshash":"42b284c53adbb09d172728f4082bb0dad55fcc9435a645cca710a9a4bca4b5cf0abddc","first_seen":"2026-05-04T14:51:08.77812Z","last_seen":"2026-05-04T15:22:50.750068Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"environmentsa.wpenginepowered.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"environmentsa.wpenginepowered.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"environmentsa.wpenginepowered.com/cdn-cgi/challenge-platform/h/g/jsd/oneshot/fe6331af5207/0.8808298249539124:1777903989:T_-1pYBCaFxS4v7cl2DDBkIzvdxQgtGcTZhtH7f3UP4/9f6851a93e450b59","fqdn":"environmentsa.wpenginepowered.com","domain":"environmentsa.wpenginepowered.com","tld":"wpenginepowered.com"},"ip":{"addr":"141.193.213.10","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://environmentsa.wpenginepowered.com/Gjensidige/welcome.html","date":"2026-05-04T14:50:40.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpenginepowered.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:59:24 GMT","end":"Thu, 30 Jul 2026 07:59:23 GMT"},"fingerprint":{"sha1":"EC:5E:DD:BC:B8:6D:FD:F9:44:07:3B:00:E7:93:14:07:53:0F:B1:92","sha256":"45:18:70:58:26:BB:FA:01:C0:65:C8:D7:A1:E3:3D:90:FF:E9:6B:72:CC:E9:6F:DB:CA:DA:8C:D8:46:43:40:28"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/fe6331af5207/0.8808298249539124:1777903989:T_-1pYBCaFxS4v7cl2DDBkIzvdxQgtGcTZhtH7f3UP4/9f6851a93e450b59 HTTP/1.1\r\nHost: environmentsa.wpenginepowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12213\r\nOrigin: https://environmentsa.wpenginepowered.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://environmentsa.wpenginepowered.com/Gjensidige/welcome.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 14:50:40 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-chl-out-s: WIZcWTwiq6WrRYJPdybs7g==$iTgxlr0NRA6ZwfqbNTcKqQ==\r\ntiming-allow-origin: https://environmentsa.wpenginepowered.com\r\nset-cookie: cf_clearance=yST7eo0QQqpcXWZuFP3QGjKHPQOVJzJVe5eQx5qGdxM-1777906240-1.2.1.1-BWKcNeLqx.ljXokcrRkmA0EtykoRa1VzdIGpFZZVSviVJRf0XyF5R12lruDv4XQAspf9AMVDaAqktd4rvcLX5R8FHDpo6nJ_ZDHfOWLUC7Zw5q3QncFKZkJaHEurBsFnwB39Ly3t3Z2Uj3vK4uxwAkwplmtVALSaSNytd.J4wYfxiArTk1VP5grhbHyRwBZopxVXjg7kr6arIgDhtP5IaqAzfZETwHsUWgTmGnuGQEvZURYlyQmc71w5wGaiygp7f8byr6K6kxZXcnbYAso4LzhP1Cs8vyb5xjeinS0L0esyI9BFIM5XqV8EvtaniebmT7qiqwRJ53Fbn_acCg912g; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=environmentsa.wpenginepowered.com; Expires=Tue, 04 May 2027 14:50:40 GMT\n__cf_bm=vLof.gHkyhN17oPdvbBsavP7VIbpZrsMzIlkhApHsjw-1777906240.0262349-1.0.1.1-xdcW3s229z2.7XAx9eXCCbwN989ImKdvGB6QvL.aboTQldjUE0AnXjwsBkkeG4spIJIlvZ5YJ0Ji54UHluj8UbGMeS1DsrMMEJS9OMciiMW37BRKJ5JGE4rxU_0J4ZP5; HttpOnly; Secure; Path=/; Domain=wpenginepowered.com; Expires=Mon, 04 May 2026 15:20:40 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f6851b02ba0568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T08:24:09.399753Z","times_seen":17542373,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"environmentsa.wpenginepowered.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"environmentsa.wpenginepowered.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"environmentsa.wpenginepowered.com/Gjensidige/welcome.html","fqdn":"environmentsa.wpenginepowered.com","domain":"environmentsa.wpenginepowered.com","tld":"wpenginepowered.com"},"ip":{"addr":"141.193.213.10","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-04T14:50:38.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpenginepowered.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:59:24 GMT","end":"Thu, 30 Jul 2026 07:59:23 GMT"},"fingerprint":{"sha1":"EC:5E:DD:BC:B8:6D:FD:F9:44:07:3B:00:E7:93:14:07:53:0F:B1:92","sha256":"45:18:70:58:26:BB:FA:01:C0:65:C8:D7:A1:E3:3D:90:FF:E9:6B:72:CC:E9:6F:DB:CA:DA:8C:D8:46:43:40:28"}}},"request":{"raw":"GET /Gjensidige/welcome.html HTTP/1.1\r\nHost: environmentsa.wpenginepowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 May 2026 14:50:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding,Cookie\r\nlast-modified: Mon, 20 May 2024 20:30:48 GMT\r\nx-cacheable: SHORT\r\ncache-control: max-age=600, must-revalidate\r\nx-cache: HIT: 37\r\nx-cache-group: normal\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=dgDbTRQYKfGojnx4YuPWPlBqYmMSp.nsq3cUQ3GRLzs-1777906238.913616-1.0.1.1-hmoERIUVVfwY6UUvI4waLceNK0WxgDfN3k9EJe6Q3SK0CzbQguzDmDttg5yBIZ58m291yqJ4ny8ihs187zuS442Ba9Yp.QcHJ6DBrflzQbgjudVda7sp146YKtF4tAAw; HttpOnly; Secure; Path=/; Domain=wpenginepowered.com; Expires=Mon, 04 May 2026 15:20:39 GMT\r\nx-orig-cache-control: max-age=600, must-revalidate\r\ncontent-encoding: br\r\ncf-ray: 9f6851a93e450b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8905,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (928), with CRLF line terminators","md5":"0f737bd7db79981ce4ed6d737262a6f3","sha1":"cf34f035ec11b06cf3ddaba1161face684ca07ba","sha256":"a1ccb78a0e3f03be6b412c8ef2796f9c326ca1e43207750c22d869e6a86ce670","sha512":"392019aacf2c4b43be32039c536b2d18aa15ba64252d619b77b74b4c5b6662fe73d6c7651f630ea20427ba29fb5d2386dd0001700a1f1a6161fc65d0c1931c35","ssdeep":"96:MP8QKnDop65RLPA3i101aNtuMOMJPLJR7nP3uSD6AMN/hnx/Im:MJuXfkS1ftuMlp7nm1Pnx//","tlshash":"2802642152c0862280b6c29dabba978dfea5c113d519d140b7ed1f97cfbecd0c85ba85","first_seen":"2026-05-04T14:51:08.779132Z","last_seen":"2026-05-04T14:51:08.779132Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":16,"dns":1,"connect":2,"send":0,"wait":181,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"environmentsa.wpenginepowered.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"environmentsa.wpenginepowered.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"environmentsa.wpenginepowered.com/Gjensidige/logo.svg","fqdn":"environmentsa.wpenginepowered.com","domain":"environmentsa.wpenginepowered.com","tld":"wpenginepowered.com"},"ip":{"addr":"141.193.213.10","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://environmentsa.wpenginepowered.com/Gjensidige/welcome.html","date":"2026-05-04T14:50:39.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpenginepowered.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:59:24 GMT","end":"Thu, 30 Jul 2026 07:59:23 GMT"},"fingerprint":{"sha1":"EC:5E:DD:BC:B8:6D:FD:F9:44:07:3B:00:E7:93:14:07:53:0F:B1:92","sha256":"45:18:70:58:26:BB:FA:01:C0:65:C8:D7:A1:E3:3D:90:FF:E9:6B:72:CC:E9:6F:DB:CA:DA:8C:D8:46:43:40:28"}}},"request":{"raw":"GET /Gjensidige/logo.svg HTTP/1.1\r\nHost: environmentsa.wpenginepowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://environmentsa.wpenginepowered.com/Gjensidige/welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 14:50:39 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nlast-modified: Mon, 20 May 2024 20:30:48 GMT\r\netag: W/\"664bb2f8-19e6\"\r\nage: 250309\r\nset-cookie: __cf_bm=gLvrBG_GT1avRRQ5aHNm04ZYrKM_fGEe1F3qKeMkHbk-1777906239.2220998-1.0.1.1-uwwIXPUu3_DJQWBu9VnAJ7TFHiDhujGaBFM96cMA1KE6GN870ouf_G.HA.wQq4GJPmNAcTW4LO9IC6uhVErmhoPLE3A.0186UsJUu9ZXRwQ_r_f9CY3a0ThcraYAC9wz; HttpOnly; Secure; Path=/; Domain=wpenginepowered.com; Expires=Mon, 04 May 2026 15:20:39 GMT\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\ncf-ray: 9f6851ab1e5f568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":6630,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5bd7adf8792e7cf88ddee8035847074f","sha1":"38b238cdf5635dbcb333d13aaa73e2d08fbb204c","sha256":"ecb0e38b4c2be3cb2ea228f88118824735de98ce8fa38167be92faa84a744931","sha512":"0a79e36365e0bab3d72ca7f41fdf7c7f80145c59b3faf0dcb7eb74c440ea25e62944797733666183750915a510b79ed4391d187569b6405416b8d24e5d8eac05","ssdeep":"192:Ie2htPmOyKr3B6uEbMZzEbMPQW6y87ON5:IXHmLKguPzhQXV7ON5","tlshash":"c8d1bc270305d7dabeed066c9928144975d4eedbb430e1c0fb6b2426d88c8d6b95c7e8","first_seen":"2025-09-10T09:09:19.005915Z","last_seen":"2026-05-12T09:11:47.48958Z","times_seen":99,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"environmentsa.wpenginepowered.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"environmentsa.wpenginepowered.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"environmentsa.wpenginepowered.com/favicon.ico","fqdn":"environmentsa.wpenginepowered.com","domain":"environmentsa.wpenginepowered.com","tld":"wpenginepowered.com"},"ip":{"addr":"141.193.213.10","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://environmentsa.wpenginepowered.com/Gjensidige/welcome.html","date":"2026-05-04T14:50:39.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpenginepowered.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:59:24 GMT","end":"Thu, 30 Jul 2026 07:59:23 GMT"},"fingerprint":{"sha1":"EC:5E:DD:BC:B8:6D:FD:F9:44:07:3B:00:E7:93:14:07:53:0F:B1:92","sha256":"45:18:70:58:26:BB:FA:01:C0:65:C8:D7:A1:E3:3D:90:FF:E9:6B:72:CC:E9:6F:DB:CA:DA:8C:D8:46:43:40:28"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: environmentsa.wpenginepowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://environmentsa.wpenginepowered.com/Gjensidige/welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 14:50:39 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nlast-modified: Fri, 01 May 2026 17:04:07 GMT\r\netag: \"69f4dd07-0\"\r\nset-cookie: __cf_bm=NwZAHuEjddsySJc0Zd5WVuJE3IwJiX7eCO2pLn.dczk-1777906239.8928623-1.0.1.1-lmeo6ddMtcI8XaMb2A_3QvNlAcgHegcBkqRKfZj7AUub.imwChLVo5nrQtYrc9wwEK8L6CRlDpEEHPCwfaOdf_YrkKeXjzZmDCifWSl3XjIurO.q4_y7AmVoM5Fv9Zh2; HttpOnly; Secure; Path=/; Domain=wpenginepowered.com; Expires=Mon, 04 May 2026 15:20:39 GMT\r\ncache-control: public, max-age=31536000\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 249432\r\naccept-ranges: bytes\r\ncf-ray: 9f6851af5ab1568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T08:24:09.399753Z","times_seen":17542373,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"environmentsa.wpenginepowered.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"environmentsa.wpenginepowered.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"environmentsa.wpenginepowered.com/static/bifrost/js/oidc-client.min.js?1.3.3+1f3089e9","fqdn":"environmentsa.wpenginepowered.com","domain":"environmentsa.wpenginepowered.com","tld":"wpenginepowered.com"},"ip":{"addr":"141.193.213.10","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://environmentsa.wpenginepowered.com/Gjensidige/welcome.html","date":"2026-05-04T14:50:39.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpenginepowered.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:59:24 GMT","end":"Thu, 30 Jul 2026 07:59:23 GMT"},"fingerprint":{"sha1":"EC:5E:DD:BC:B8:6D:FD:F9:44:07:3B:00:E7:93:14:07:53:0F:B1:92","sha256":"45:18:70:58:26:BB:FA:01:C0:65:C8:D7:A1:E3:3D:90:FF:E9:6B:72:CC:E9:6F:DB:CA:DA:8C:D8:46:43:40:28"}}},"request":{"raw":"GET /static/bifrost/js/oidc-client.min.js?1.3.3+1f3089e9 HTTP/1.1\r\nHost: environmentsa.wpenginepowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://environmentsa.wpenginepowered.com/Gjensidige/welcome.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 04 May 2026 14:50:39 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nset-cookie: __cf_bm=qPxUwMCxlMiKGKKM89MIWnIF5IA.G1BUblVZQMxT4rM-1777906239.2209303-1.0.1.1-auLm2PRboEc1kdUopnElDUXHXCuvtzeAbmQF0Lndyvmnhl_S8kJZotkj6wFDCQ0F1xasMKYDPdlmAlY5IBzATyHLsJ3LDQs.BWU0QK88ZhTX4eT7ofuNXnZgGWDMwUbO; HttpOnly; Secure; Path=/; Domain=wpenginepowered.com; Expires=Mon, 04 May 2026 15:20:39 GMT\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\ncf-ray: 9f6851ab1e5a568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-26T08:16:10.311827Z","times_seen":543904,"resource_available":true,"data":null}},"time_used":666,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":666,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"environmentsa.wpenginepowered.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"environmentsa.wpenginepowered.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}