{"report_id":"040e3968-bd81-47b5-9ab9-75dcc4f1718c","version":6,"status":"done","tags":[],"date":"2025-12-29T23:51:03Z","url":{"schema":"http","addr":"sndortho-login.pages.dev/","fqdn":"sndortho-login.pages.dev","domain":"sndortho-login.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.145","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"sndortho-login.pages.dev/","fqdn":"sndortho-login.pages.dev","domain":"sndortho-login.pages.dev","tld":"pages.dev"},"title":"RAMBOTOTO \u003e AKSES LINK LOGIN MUDAH DENGAN SERVER DARI LUAR NEGERI","dom":{"size":47096,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17365)","md5":"90849fc79592e388f4f65494308169a3","sha1":"a77984f4214c1bbce8fa2aefcfac2e84f5ae67f8","sha256":"98ef19a4fb079f170090306257935d30329d76b681cc231a6b4ffab39e6578a6","sha512":"93e4b6d0ae57692d1a79ff97f4c0cab2d72a02e3caa03477890f8b0f5f59146ca2d3314927b29d8083e0b85aefa3c541c017d08dd9a1f4b8ef51bfaa91047bb0","ssdeep":"768:VWk5F4g5A4WR2vU8OaWbwJP8FmyOEO7fjkFSPxh:VZ5F4g5A4WR2vV+ORfjlph","tlshash":"8123b52e6698715a5033c292a4d2ff6b3e35c507ca33157af45d2f98cf8ae41293364e","dom_hash":"domhash3fe1f08eefdfb56c219891e716b8fdff","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sndortho-login.pages.dev/","fqdn":"sndortho-login.pages.dev","domain":"sndortho-login.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.145","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-02T23:51:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-29T23:50:40Z","timestamp":1767052240,"ip_dst":{"addr":"172.66.47.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.19","port":52442,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2025-12-29T23:50:40.321259+0000\",\"flow_id\":1697326310671074,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":52442,\"dest_ip\":\"172.66.47.145\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"sndortho-login.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":926,\"bytes_toclient\":3553,\"start\":\"2025-12-29T23:50:40.312034+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"gfit.b-cdn.net","ip":{"addr":"138.199.46.65","port":443,"asn":60068,"as":"Datacamp Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2024-07-21T23:50:24Z","last_seen":"2025-12-13T12:24:51.680115Z","alert_count":0,"request_count":1,"received_data":107297,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"cdn.ampproject.org","ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2015-08-31","domain_rank":3289,"first_seen":"2015-10-09T04:27:01Z","last_seen":"2025-12-29T04:06:58.325492Z","alert_count":0,"request_count":4,"received_data":596021,"sent_data":1839,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"res.cloudinary.com","ip":{"addr":"96.6.16.40","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2011-05-24","domain_rank":21175,"first_seen":"2012-10-03T08:31:44Z","last_seen":"2025-12-29T03:14:33.987423Z","alert_count":0,"request_count":4,"received_data":270927,"sent_data":1986,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sndortho-login.pages.dev","ip":{"addr":"172.66.47.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":32598,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-28T22:17:10.032556Z","alert_count":0,"request_count":4,"received_data":34589,"sent_data":1911,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"m-g.io","ip":{"addr":"35.186.229.178","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2019-08-17","domain_rank":393602,"first_seen":"2017-07-26T04:18:53Z","last_seen":"2025-12-25T03:23:29.198842Z","alert_count":0,"request_count":2,"received_data":88904,"sent_data":1047,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012510081644000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"36e68547fd31649fcac8856096da5e94","sha1":"cfa28bfde148c37cd6b94329ab7f8c1140625d5c","sha256":"5b870594007123f179856f463a72e0a31eb2e005acbb719cf9d56c242927547e","sha512":"3ce62d0c066399122ce7defb585fc4de3c39a02daba060cc9c03a9326e5ee8ef0f4a8d46f14e5f1f7b319944cee0d1c7c3ef2dcc08091a517f3c10b12bf46486","ssdeep":"96:+KoAosPGpz3pMDc0jxAMhG0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:+Kqswz3pv0jxAyCPX/tqKyWp4M0rDTI","tlshash":"9ef196dc7ac2f83a5757b4b780af414fa23bb94624ad9120d120f4d83cb995ed623e5c","size":7812,"data":"","first_seen":"2025-10-21T18:06:54.954761Z","last_seen":"2026-01-17T06:31:39.884543Z","times_seen":1718,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012510081644000/v0/amp-loader-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a87e2cce7117be00fc8129abfc72b1a1","sha1":"26d9bc2bbbd56217163ec1ccf05a4b4698e5c11a","sha256":"f65efecffe50465d1ffa59d289200cb42ae6115fac8232946635cedf4dd241ef","sha512":"d9232a321d406c6d15a92fcfb3266ab1a049fee6099c19fb010ee7913e2d6c1a65868a2f529ffca06dfb96b312a78429b07c3a5bd56b14f53199ce88af09a458","ssdeep":"192:8fQHMOgzKBbnnRrVGjoPGlxrO2tHxg7HzMb5F4g5A4WR2vN:20g2BbnnHUgTzMb5F4g5A4WR2vN","tlshash":"d042a424a54be2ac530341b484fab94a757ecd4fb8104035f0118ededf99e48bd7ba6e","size":12729,"data":"","first_seen":"2025-10-21T18:07:40.626035Z","last_seen":"2026-01-17T06:31:39.878615Z","times_seen":1395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8059fb84783c3f43b7b5b66a3883bcb6","sha1":"335cfb79c7c772225bc9a0a0d17d5d435e30a247","sha256":"977e140b62a9228c0815a6ce26e63df7def2817315581cb3e29c52a9d5959754","sha512":"2a0c05b24ac683756cc15e857c5445e62aa1f00134e8fa0f0c966510b1ec778a4570ab2c09dd2791a8a769f36c64a304fc816228fb54367af99657f3c49bb385","ssdeep":"3072:j4UQbNOu6mF8g8aLymSt85Li48lnQYxQEnswf2l3sVsmgQ:j4UQbNOu6mFTLs8f8lnQebsw+l3sVsg","tlshash":"db54839db296b0764793b074803f150aa33ba855240a812cf56de9d67cbcd8ea137f7c","size":284545,"data":"","first_seen":"2025-10-21T18:06:54.94219Z","last_seen":"2026-01-06T14:38:02.926695Z","times_seen":1886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"gfit.b-cdn.net/images/jackpot_slot.gif","fqdn":"gfit.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"138.199.46.65","port":443,"asn":60068,"as":"Datacamp Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sndortho-login.pages.dev/","date":"2025-12-29T23:50:40.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /images/jackpot_slot.gif HTTP/1.1\r\nHost: gfit.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sndortho-login.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 23:50:41 GMT\r\ncontent-type: image/gif\r\ncontent-length: 106703\r\nserver: BunnyCDN-SG1-1274\r\ncdn-pullzone: 2209484\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 10 May 2024 20:29:35 GMT\r\ncdn-storageserver: SG-631\r\ncdn-fileserver: 783\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 12/28/2025 02:16:28\r\ncdn-edgestorageid: 868\r\ncdn-requestid: 42607501bd7853a4171d5c3cceb55010\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":106703,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1280 x 223","md5":"a4d91ec363975cef0fa57a04722e9494","sha1":"e4ada560e4fa7a1f41e9a0162b419dcbb13a5862","sha256":"7ac19707372943c4e3f30c1fad8523bfc78142e5ce8feb1f7e7b24db82bb950e","sha512":"21350f6ce4d90dea5ad38eedf65e73d25b6bc95b833b776e7aa511706511c320ace6c09042577204872f3152da50d3c23e95879467f4c38f2f9294fe2a5629f2","ssdeep":"1536:yMJdQU9lhSClWa+m1kaNdcvIZPRy7P3SuTGRa04rzJwoMVx/gxEAMwHM0Y0WT8x4:pCU9hlRZrevCqf6ZSwoKhwHgL8x0tm7y","tlshash":"b6a31255aa593b1f3e4204bb0834c50d9d1a175abdb3dff7ad689fa5310bc90380c18b","first_seen":"2025-07-12T13:56:46.209234Z","last_seen":"2026-02-24T02:05:44.287741Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1669,"timings":{"blocked":508,"dns":32,"connect":170,"send":0,"wait":171,"receive":474,"ssl":311},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012510081644000/v0/amp-loader-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sndortho-login.pages.dev/","date":"2025-12-29T23:50:41.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:51:58 GMT","end":"Wed, 25 Feb 2026 15:51:57 GMT"},"fingerprint":{"sha1":"A6:E2:0F:FD:DB:D5:79:15:DB:03:17:B1:87:6D:6F:C0:EB:2D:6D:66","sha256":"BA:31:F8:9D:3F:78:C8:EE:37:67:8A:D7:B5:BC:FF:EF:1D:90:DE:A3:25:9C:F0:9C:47:C8:B8:DE:95:8C:2B:39"}}},"request":{"raw":"GET /rtv/012510081644000/v0/amp-loader-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sndortho-login.pages.dev/\r\nOrigin: https://sndortho-login.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 3937\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 23 Dec 2025 09:32:41 GMT\r\nexpires: Wed, 23 Dec 2026 09:32:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 569880\r\netag: \"a1ee3895c747c6e2\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12729,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12614)","md5":"a87e2cce7117be00fc8129abfc72b1a1","sha1":"26d9bc2bbbd56217163ec1ccf05a4b4698e5c11a","sha256":"f65efecffe50465d1ffa59d289200cb42ae6115fac8232946635cedf4dd241ef","sha512":"d9232a321d406c6d15a92fcfb3266ab1a049fee6099c19fb010ee7913e2d6c1a65868a2f529ffca06dfb96b312a78429b07c3a5bd56b14f53199ce88af09a458","ssdeep":"192:8fQHMOgzKBbnnRrVGjoPGlxrO2tHxg7HzMb5F4g5A4WR2vN:20g2BbnnHUgTzMb5F4g5A4WR2vN","tlshash":"d042a424a54be2ac530341b484fab94a757ecd4fb8104035f0118ededf99e48bd7ba6e","first_seen":"2025-10-21T18:07:40.626035Z","last_seen":"2026-01-17T06:31:39.878615Z","times_seen":1395,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/du0yya4rl/image/upload/v1732728217/rmb_hwax1j.png","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"96.6.16.40","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sndortho-login.pages.dev/","date":"2025-12-29T23:50:41.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /du0yya4rl/image/upload/v1732728217/rmb_hwax1j.png HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sndortho-login.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 4410\r\netag: \"e21427f05cf93f3300b78dfbf6007436\"\r\nlast-modified: Wed, 27 Nov 2024 17:23:38 GMT\r\ndate: Mon, 29 Dec 2025 23:50:42 GMT\r\ncache-control: public, no-transform, immutable, max-age=2592000\r\nx-request-id: ad7703df813a594170e0a6f2631b9352\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=597;cpu=469;start=2025-12-29T23:50:41.510Z;desc=miss,rtt;dur=3,content-info;desc=\"width=180,height=40,bytes=4410,o=1,ef=(17)\",cloudinary;dur=20;start=2025-12-29T23:50:42.018Z\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4410,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 40, 8-bit colormap, non-interlaced","md5":"e21427f05cf93f3300b78dfbf6007436","sha1":"ea933f9d95dbba04449ed509fa95def2a458b85d","sha256":"5c05851984fac6a01905787fa7bb3d5bec7c3e9a0292406adc10db8622d5eeca","sha512":"c4b22c1ebbf26c0136a7c8ecb13e7785d7165ddfc0ec78f601583f07e66961149350236a9e658f6c521f07bf46abceae3828a7d384025e24ce63e496e305ca78","ssdeep":"96:LAvs7D24GFy8jga+gO7kIzEr6zkaCgFe1j0GWkIA+E8ptIk1DSqzYO:kE2BA86gOgIOaH41gO+EOtI+jYO","tlshash":"42917e7b00a8ef54deeda5f52eff455cc0d0082c72095146c1d16d341ae72b5396ca0c","first_seen":"2025-12-29T23:51:08.66363Z","last_seen":"2025-12-29T23:51:08.66363Z","times_seen":1,"resource_available":false,"data":null}},"time_used":723,"timings":{"blocked":61,"dns":33,"connect":1,"send":0,"wait":598,"receive":2,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/du0yya4rl/image/upload/v1732728219/amp_iqlsxx.png","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"96.6.16.40","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sndortho-login.pages.dev/","date":"2025-12-29T23:50:41.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /du0yya4rl/image/upload/v1732728219/amp_iqlsxx.png HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sndortho-login.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 192045\r\netag: \"1419a6e8a9b1176d5f08fbbee4127f44\"\r\nlast-modified: Wed, 27 Nov 2024 17:23:40 GMT\r\ndate: Mon, 29 Dec 2025 23:50:42 GMT\r\ncache-control: public, no-transform, immutable, max-age=2592000\r\nx-request-id: 289f2c387555399b48167b39b900bcc7\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=848;cpu=735;start=2025-12-29T23:50:41.512Z;desc=miss,rtt;dur=3,content-info;desc=\"width=898,height=650,bytes=192045,o=1,ef=(17)\",cloudinary;dur=25;start=2025-12-29T23:50:42.285Z\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":192045,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 898 x 650, 8-bit colormap, non-interlaced","md5":"1419a6e8a9b1176d5f08fbbee4127f44","sha1":"77e1f5c03c29b6a83db7dc79b62a5f82fa4f9930","sha256":"2850b9ee2501edaa590cf5bc7ff69467dacbc7a2c63da29ae0b065ff71118783","sha512":"88cc6639f49b3080a26827ab4246d9aaf01d544cf857820877d0762ddbe601f923ad83381d25fa0b7945f0584744a9b08aa0f0368932f60468f9ef9bc639c88e","ssdeep":"3072:WkWkrepZYnuqKPQpE5U2vKXEMDpERJwiutKw7qQlRLrDKJX4ohKWMl/MxClJyC5t:WkWkypSuqFETSErw5t17qQnr+JgWv0lz","tlshash":"3a141375f608f8311616dcb78af5129eebc664b53a71abb8233773d46b19020606d2c7","first_seen":"2025-12-29T23:51:08.666507Z","last_seen":"2025-12-29T23:51:08.666507Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1035,"timings":{"blocked":61,"dns":34,"connect":1,"send":0,"wait":851,"receive":59,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/du0yya4rl/image/upload/v1732286703/5ede4a3fb760540004f2c5e9_s5fmyt.png","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"96.6.16.40","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sndortho-login.pages.dev/","date":"2025-12-29T23:50:41.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /du0yya4rl/image/upload/v1732286703/5ede4a3fb760540004f2c5e9_s5fmyt.png HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sndortho-login.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 35581\r\netag: \"f01295e9af5ad45098c7c83554e09f23\"\r\nlast-modified: Fri, 22 Nov 2024 14:45:04 GMT\r\ndate: Mon, 29 Dec 2025 23:50:41 GMT\r\ncache-control: public, no-transform, immutable, max-age=2592000\r\nx-request-id: 8138b5a1f350f699b0bfc2636e3a45bb\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=50;start=2025-12-29T23:50:41.878Z;desc=hit,rtt;dur=3,content-info;desc=\"width=494,height=468,bytes=35581,o=1,ef=(17)\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35581,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 494 x 468, 8-bit colormap, non-interlaced","md5":"f01295e9af5ad45098c7c83554e09f23","sha1":"c76ce81426fb6194c0579cbbe78cd6e21387bc1f","sha256":"74f7c83b77ffc36bb078b7f32265b5717df7ea1953aa006b5f710938245ae381","sha512":"69561b6bfd727ff89c40464d503aa45c1e2503fd8e7594d93a75b94564729e889587c8b450a82d26b7ecf8f315645a3d826f8945da88fe9545a2b379ae87cacf","ssdeep":"768:tl0qiH9iZw1b38VH/jJz3BWEThKfU2hE0BudtHeLAdhcmWBl:tllidabVrJTBWETsoncmAl","tlshash":"ebf2e100fb06778f893797689789ca41e030bd9f65f3685f2274e83c5dd9aaa3463790","first_seen":"2025-06-11T12:24:15.54974Z","last_seen":"2025-12-29T23:51:08.668958Z","times_seen":3,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sndortho-login.pages.dev/","fqdn":"sndortho-login.pages.dev","domain":"sndortho-login.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-29T23:50:40.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sndortho-login.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 21:44:39 GMT","end":"Sun, 29 Mar 2026 22:42:19 GMT"},"fingerprint":{"sha1":"06:B5:45:58:DD:E7:EE:0C:A9:E1:8B:D1:BF:54:8B:04:E7:C1:EA:AF","sha256":"AD:C0:82:61:A3:0A:B0:37:C7:76:2B:C8:C4:B5:7B:84:60:F4:25:58:23:BC:C9:0F:C7:6F:C2:6A:78:CA:93:28"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sndortho-login.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 23:50:40 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2vR7nfpf9nBT6nVwFwYhd6hiCg6Kk2pmXKThSxoE4J67MYdIwcKqZKi9S7Ia%2FrQe3ipHzpmyK%2F5jHLbmFpPqL3L3I2%2Bd8k%2FUcHJ%2Fmx5g0aKcJit%2BFg%2FDdA%3D%3D\"}]}\r\netag: W/\"3f4fb252e52efbdfb260a47236c7de33\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b5d33761a8f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31828,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17365), with CRLF line terminators","md5":"ef2fcf235eac37069d8aa63312365910","sha1":"89fa49e57713a3f75bffe94312e6cfb92c649834","sha256":"fb7b3364fdda7d7b89fd26a131539d3cb7db968fe69ef346b70741486808be49","sha512":"81fe53d565385b4d4fa689fcc8af86bb6dcec50c062845fdb69310de186eaf78babf202d614455b2e86307c028d3bb89c409693d3899fb8eb4a93ef58b8ec9ed","ssdeep":"384:j/xbv/k5bwJZREhFmyOE9dm7xCkhz3RGRbN:j5vM5bwJP8FmyOEO7fj4bN","tlshash":"87e2a37e5680b1179133c0c675a7ef99ff12020bca6311b9b4ed2b979feae001533699","first_seen":"2025-12-29T23:51:08.671433Z","last_seen":"2025-12-29T23:51:08.671433Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":24,"dns":1,"connect":1,"send":0,"wait":176,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:ital,wght@0,300;0,400;0,500;0,700;0,900","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sndortho-login.pages.dev/","date":"2025-12-29T23:50:40.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Roboto:ital,wght@0,300;0,400;0,500;0,700;0,900 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sndortho-login.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 29 Dec 2025 23:50:40 GMT\r\ndate: Mon, 29 Dec 2025 23:50:40 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26935,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"15600e0834d359382fd43eacc11123c3","sha1":"2910097d6c549fb122533b8de881a598fd0d148a","sha256":"ebabec580af33f84a8e28ed6b7ae687a704d42fcbc07703c2dbfdeb9f86d7b7c","sha512":"bc3a1153f0873e1247e6c7115eb61ab75d1a51d4b823b8f227feb7923c3b010b5f8b02f630f5fb54ad1c45bda705a402f6302243758778a93e6d0a6cfbcbafec","ssdeep":"768:38XguBSivFRa1KRzBfiiMgFK1GIBEiNnr7gr8yBOijh1puZy8BAiBD/X:MJiWE1","tlshash":"52c20fa1041b500057834ce223cebf34fe1f52507142d0b5abfdab6badcbc6652693ad","first_seen":"2025-11-19T02:27:35.635854Z","last_seen":"2026-02-19T18:16:49.8225Z","times_seen":996,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":113,"dns":0,"connect":7,"send":0,"wait":21,"receive":0,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sndortho-login.pages.dev/","date":"2025-12-29T23:50:40.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:51:58 GMT","end":"Wed, 25 Feb 2026 15:51:57 GMT"},"fingerprint":{"sha1":"A6:E2:0F:FD:DB:D5:79:15:DB:03:17:B1:87:6D:6F:C0:EB:2D:6D:66","sha256":"BA:31:F8:9D:3F:78:C8:EE:37:67:8A:D7:B5:BC:FF:EF:1D:90:DE:A3:25:9C:F0:9C:47:C8:B8:DE:95:8C:2B:39"}}},"request":{"raw":"GET /v0.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sndortho-login.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 73132\r\ndate: Mon, 29 Dec 2025 23:50:40 GMT\r\nexpires: Mon, 29 Dec 2025 23:50:40 GMT\r\ncache-control: private, max-age=3000, stale-while-revalidate=1206600\r\netag: \"b52f38ef99ad402e\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":284545,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64627)","md5":"8059fb84783c3f43b7b5b66a3883bcb6","sha1":"335cfb79c7c772225bc9a0a0d17d5d435e30a247","sha256":"977e140b62a9228c0815a6ce26e63df7def2817315581cb3e29c52a9d5959754","sha512":"2a0c05b24ac683756cc15e857c5445e62aa1f00134e8fa0f0c966510b1ec778a4570ab2c09dd2791a8a769f36c64a304fc816228fb54367af99657f3c49bb385","ssdeep":"3072:j4UQbNOu6mF8g8aLymSt85Li48lnQYxQEnswf2l3sVsmgQ:j4UQbNOu6mFTLs8f8lnQebsw+l3sVsg","tlshash":"db54839db296b0764793b074803f150aa33ba855240a812cf56de9d67cbcd8ea137f7c","first_seen":"2025-10-21T18:06:54.94219Z","last_seen":"2026-01-06T14:38:02.926695Z","times_seen":1886,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":1,"connect":18,"send":0,"wait":29,"receive":27,"ssl":166},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m-g.io/istanaslot.com/07bed153.woff2","fqdn":"m-g.io","domain":"m-g.io","tld":"io"},"ip":{"addr":"35.186.229.178","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sndortho-login.pages.dev/","date":"2025-12-29T23:50:41.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-g.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 09:52:00 GMT","end":"Wed, 11 Feb 2026 10:46:54 GMT"},"fingerprint":{"sha1":"99:4B:54:7F:C9:75:59:D3:72:95:F2:5E:C7:7E:17:84:4D:49:BE:0E","sha256":"A7:18:25:66:52:89:9B:65:6E:86:DC:3B:22:80:D1:04:C6:3E:0C:03:6C:A1:5C:62:29:1B:D2:94:7A:9F:5B:19"}}},"request":{"raw":"GET /istanaslot.com/07bed153.woff2 HTTP/1.1\r\nHost: m-g.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://sndortho-login.pages.dev/\r\nOrigin: https://sndortho-login.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AHVrFxMBoGsMkH2MyO4au4vgJcm5Jh4MRIipgmLxQDenhkK8iVsmxpB_hdVJrfs5UCInv-2p\r\nx-goog-generation: 1644129444944921\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 75440\r\nx-goog-meta-originalurl: https://istanaslot.com/assets/fonts/fa-solid-900.woff2\r\nx-goog-hash: crc32c=BHRImA==, md5=tc+K4mdIVw2PuVpH9Gtp4Q==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 75440\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ndate: Mon, 29 Dec 2025 23:50:41 GMT\r\nexpires: Tue, 30 Dec 2025 00:50:41 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Sun, 06 Feb 2022 06:37:24 GMT\r\netag: \"b5cf8ae26748570d8fb95a47f46b69e1\"\r\ncontent-type: font/woff2\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":75440,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 75440, version 329.-1049","md5":"b5cf8ae26748570d8fb95a47f46b69e1","sha1":"07bed153d47f9129a944ee54dd72952deed074c8","sha256":"cd398be1a91817126cef10224738e624358edf6f08043abad7e60c1aaeccc8d0","sha512":"f08b9289695cf530094f076b2df4d2b0e1a1daedd00190d123b4179b2c1a1b5e8b2bb988d86fc6dc9eee117d88a58dd5b6dfe7689586c17068f5d2da01904d76","ssdeep":"1536:1Zq/f5ldhNurIqp+jqNT5Fm653lqWppat1Wa4W8TeodjxNrqM:1kvdS7ppFm6JhpgkrW6bGM","tlshash":"6f73028e1719f192f5d6cd177edc20be38f1a7121008f839e2eda6dd5085ab639a3825","first_seen":"2023-04-05T08:48:24Z","last_seen":"2026-04-04T05:25:43.697344Z","times_seen":19660,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":259,"dns":3,"connect":24,"send":0,"wait":40,"receive":20,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m-g.io/istanaslot.com/75c41c48.woff","fqdn":"m-g.io","domain":"m-g.io","tld":"io"},"ip":{"addr":"35.186.229.178","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sndortho-login.pages.dev/","date":"2025-12-29T23:50:41.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-g.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 09:52:00 GMT","end":"Wed, 11 Feb 2026 10:46:54 GMT"},"fingerprint":{"sha1":"99:4B:54:7F:C9:75:59:D3:72:95:F2:5E:C7:7E:17:84:4D:49:BE:0E","sha256":"A7:18:25:66:52:89:9B:65:6E:86:DC:3B:22:80:D1:04:C6:3E:0C:03:6C:A1:5C:62:29:1B:D2:94:7A:9F:5B:19"}}},"request":{"raw":"GET /istanaslot.com/75c41c48.woff HTTP/1.1\r\nHost: m-g.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://sndortho-login.pages.dev/\r\nOrigin: https://sndortho-login.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AHVrFxM1Ji2rsD9ZJsLaRO7_fJnUS-Juc7KJyLUKIaCWmc_h0D0PsbHf27G2UEfelQZMkvfN\r\nx-goog-generation: 1644129444880412\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 11528\r\nx-goog-meta-originalurl: https://istanaslot.com/assets/fonts/custom.woff\r\nx-goog-hash: crc32c=8mWT8Q==, md5=BxldUbwMUqqt3mkDKpI26w==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 11528\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ndate: Mon, 29 Dec 2025 23:50:41 GMT\r\nexpires: Tue, 30 Dec 2025 00:50:41 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Sun, 06 Feb 2022 06:37:24 GMT\r\netag: \"07195d51bc0c52aaadde69032a9236eb\"\r\ncontent-type: font/woff\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":11528,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 11528, version 0.0","md5":"07195d51bc0c52aaadde69032a9236eb","sha1":"75c41c4807627e06dfe84ffc1ba7200558307b49","sha256":"7ce6ee224e96c177a1483168fbc0e897ac1a90a934584e57aa9e5c36602dda0c","sha512":"d55b15d9c1a45743c5d1b786173c3276af2ecbb657db0c2a0986832f7031ac882e54cdbec8b96826a7f764fe3754056d3b8fc0aba02938b1af528bbc1e92c3bf","ssdeep":"192:sYxxLKkuCjFMwZBEcY3ktO2TJrpbf/40jkzZki2CWkmy8gyo0b3d3T8lPV2K:nEkuO2cLboFFL8Losed5","tlshash":"77322a06d72fdf5fc12266ba4c1193335fcaf11067bab3ba52c9de045429aa44c307ab","first_seen":"2023-10-28T11:34:10Z","last_seen":"2026-04-04T02:01:57.504064Z","times_seen":722,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":231,"dns":4,"connect":14,"send":0,"wait":48,"receive":2,"ssl":214},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/du0yya4rl/image/upload/v1732286703/5ede4a3fb760540004f2c5e9_s5fmyt.png","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"96.6.16.40","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sndortho-login.pages.dev/","date":"2025-12-29T23:50:41.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /du0yya4rl/image/upload/v1732286703/5ede4a3fb760540004f2c5e9_s5fmyt.png HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sndortho-login.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 35581\r\netag: \"f01295e9af5ad45098c7c83554e09f23\"\r\nlast-modified: Fri, 22 Nov 2024 14:45:04 GMT\r\ndate: Mon, 29 Dec 2025 23:50:41 GMT\r\ncache-control: public, no-transform, immutable, max-age=2592000\r\nx-request-id: 8138b5a1f350f699b0bfc2636e3a45bb\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=48;start=2025-12-29T23:50:41.880Z;desc=hit-near,rtt;dur=3,content-info;desc=\"width=494,height=468,bytes=35581,o=1,ef=(17)\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35581,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 494 x 468, 8-bit colormap, non-interlaced","md5":"f01295e9af5ad45098c7c83554e09f23","sha1":"c76ce81426fb6194c0579cbbe78cd6e21387bc1f","sha256":"74f7c83b77ffc36bb078b7f32265b5717df7ea1953aa006b5f710938245ae381","sha512":"69561b6bfd727ff89c40464d503aa45c1e2503fd8e7594d93a75b94564729e889587c8b450a82d26b7ecf8f315645a3d826f8945da88fe9545a2b379ae87cacf","ssdeep":"768:tl0qiH9iZw1b38VH/jJz3BWEThKfU2hE0BudtHeLAdhcmWBl:tllidabVrJTBWETsoncmAl","tlshash":"ebf2e100fb06778f893797689789ca41e030bd9f65f3685f2274e83c5dd9aaa3463790","first_seen":"2025-06-11T12:24:15.54974Z","last_seen":"2025-12-29T23:51:08.668958Z","times_seen":3,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sndortho-login.pages.dev/","date":"2025-12-29T23:50:40.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:51:58 GMT","end":"Wed, 25 Feb 2026 15:51:57 GMT"},"fingerprint":{"sha1":"A6:E2:0F:FD:DB:D5:79:15:DB:03:17:B1:87:6D:6F:C0:EB:2D:6D:66","sha256":"BA:31:F8:9D:3F:78:C8:EE:37:67:8A:D7:B5:BC:FF:EF:1D:90:DE:A3:25:9C:F0:9C:47:C8:B8:DE:95:8C:2B:39"}}},"request":{"raw":"GET /v0.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sndortho-login.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 73132\r\ndate: Mon, 29 Dec 2025 23:50:41 GMT\r\nexpires: Mon, 29 Dec 2025 23:50:41 GMT\r\ncache-control: private, max-age=3000, stale-while-revalidate=1206600\r\netag: \"b52f38ef99ad402e\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":284545,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64627)","md5":"8059fb84783c3f43b7b5b66a3883bcb6","sha1":"335cfb79c7c772225bc9a0a0d17d5d435e30a247","sha256":"977e140b62a9228c0815a6ce26e63df7def2817315581cb3e29c52a9d5959754","sha512":"2a0c05b24ac683756cc15e857c5445e62aa1f00134e8fa0f0c966510b1ec778a4570ab2c09dd2791a8a769f36c64a304fc816228fb54367af99657f3c49bb385","ssdeep":"3072:j4UQbNOu6mF8g8aLymSt85Li48lnQYxQEnswf2l3sVsmgQ:j4UQbNOu6mFTLs8f8lnQebsw+l3sVsg","tlshash":"db54839db296b0764793b074803f150aa33ba855240a812cf56de9d67cbcd8ea137f7c","first_seen":"2025-10-21T18:06:54.94219Z","last_seen":"2026-01-06T14:38:02.926695Z","times_seen":1886,"resource_available":true,"data":null}},"time_used":1005,"timings":{"blocked":477,"dns":3,"connect":34,"send":0,"wait":26,"receive":16,"ssl":441},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Material%20Icons:ital,wght@0,400","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sndortho-login.pages.dev/","date":"2025-12-29T23:50:40.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Material%20Icons:ital,wght@0,400 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sndortho-login.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 29 Dec 2025 23:50:40 GMT\r\ndate: Mon, 29 Dec 2025 23:50:40 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":565,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2b7a8d84952a9183b106df19f711324e","sha1":"a92c5e12b422bba9ebb447e1852d9681487361bc","sha256":"282801a0d182035440d5ef6d429d227126d2e6720a52b91d31a7d746c758154e","sha512":"d7ef3f86fe9fa5730a118c688b8f779e82ec3695df5ec48953905ed078ef4d78a3c8005021574d936f69ff0467968b6e68fbcb0680894470abf8f26200af2e0c","ssdeep":"","tlshash":"c0f0c064be0a988566110c42370f3f164d1d401fa80ac8fe8b911d4c8cff1bb134670f","first_seen":"2025-09-17T21:11:07.996842Z","last_seen":"2026-04-04T05:37:02.806621Z","times_seen":30564,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":188,"dns":0,"connect":22,"send":0,"wait":17,"receive":0,"ssl":172},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012510081644000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sndortho-login.pages.dev/","date":"2025-12-29T23:50:41.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:51:58 GMT","end":"Wed, 25 Feb 2026 15:51:57 GMT"},"fingerprint":{"sha1":"A6:E2:0F:FD:DB:D5:79:15:DB:03:17:B1:87:6D:6F:C0:EB:2D:6D:66","sha256":"BA:31:F8:9D:3F:78:C8:EE:37:67:8A:D7:B5:BC:FF:EF:1D:90:DE:A3:25:9C:F0:9C:47:C8:B8:DE:95:8C:2B:39"}}},"request":{"raw":"GET /rtv/012510081644000/v0/amp-auto-lightbox-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sndortho-login.pages.dev/\r\nOrigin: https://sndortho-login.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 2976\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 23 Dec 2025 17:13:49 GMT\r\nexpires: Wed, 23 Dec 2026 17:13:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 542212\r\netag: \"9215b9e0dcad338a\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7812,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7690)","md5":"36e68547fd31649fcac8856096da5e94","sha1":"cfa28bfde148c37cd6b94329ab7f8c1140625d5c","sha256":"5b870594007123f179856f463a72e0a31eb2e005acbb719cf9d56c242927547e","sha512":"3ce62d0c066399122ce7defb585fc4de3c39a02daba060cc9c03a9326e5ee8ef0f4a8d46f14e5f1f7b319944cee0d1c7c3ef2dcc08091a517f3c10b12bf46486","ssdeep":"96:+KoAosPGpz3pMDc0jxAMhG0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:+Kqswz3pv0jxAyCPX/tqKyWp4M0rDTI","tlshash":"9ef196dc7ac2f83a5757b4b780af414fa23bb94624ad9120d120f4d83cb995ed623e5c","first_seen":"2025-10-21T18:06:54.954761Z","last_seen":"2026-01-17T06:31:39.884543Z","times_seen":1718,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Exo%202:ital,wght@0,400","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sndortho-login.pages.dev/","date":"2025-12-29T23:50:40.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Exo%202:ital,wght@0,400 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sndortho-login.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 29 Dec 2025 23:50:40 GMT\r\ndate: Mon, 29 Dec 2025 23:50:40 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1776,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d83c94ac5def29b3fe847e2b9ade38ea","sha1":"9b89d5a96b392b7ace6463409ebfd93afe5b06d8","sha256":"cb801edfb6b06ddca1976da9044d389b098e3d616b0bab83ac51488aa96d9ffb","sha512":"86b5f2ee521123d24e2e1416aa3fe493b582460e339435f335ba83d8738a9e98f7d811b65cc38a57033bbb5cf2756babb945c0aa20179809d015ba27b35d554d","ssdeep":"","tlshash":"c531eea10626e400a3970dca73ce3d3acd9f2216b085d4b69ffe1c69ace1da55354b1d","first_seen":"2025-09-02T18:33:32.278082Z","last_seen":"2026-04-04T02:58:21.805351Z","times_seen":437,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":183,"dns":0,"connect":20,"send":0,"wait":18,"receive":0,"ssl":171},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto%20Condensed:ital,wght@0,400","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sndortho-login.pages.dev/","date":"2025-12-29T23:50:40.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Roboto%20Condensed:ital,wght@0,400 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sndortho-login.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 29 Dec 2025 23:50:40 GMT\r\ndate: Mon, 29 Dec 2025 23:50:40 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2569,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6a0bfbbf8651a075090814eff8daa1fb","sha1":"a2ae502dadb6c85601853968d82b51053dd13d2e","sha256":"8d2b5e49aeea8ccfceb2d4c081f03a6e144298e6b0f7c34b0e7ad2cb7231c2a2","sha512":"ebc6881b2df31c22ae5446c16b6be0b03e57e704ce47ec69daaa89007931d15ad676e9554d9bbee619134bc0eee8cd5aecb5c914376cb754bfe8da542a548c6b","ssdeep":"","tlshash":"5151bb51082aa804e7d31cc62bcf3e3adc4e12046449d5a6dbfd1c69acf6e76236834f","first_seen":"2025-09-11T19:46:12.750574Z","last_seen":"2026-04-04T00:42:18.145501Z","times_seen":923,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":189,"dns":0,"connect":24,"send":0,"wait":19,"receive":0,"ssl":171},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
