{"report_id":"054ad463-c5e4-4870-a962-d79eca4fed07","version":6,"status":"done","tags":[],"date":"2026-03-31T16:12:14Z","url":{"schema":"https","addr":"accounts.binance-ads.com/","fqdn":"accounts.binance-ads.com","domain":"binance-ads.com","tld":"com"},"ip":{"addr":"172.67.199.99","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"accounts.binance-ads.com/","fqdn":"accounts.binance-ads.com","domain":"binance-ads.com","tld":"com"},"title":"accounts.binance-ads.com/","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"accounts.binance-ads.com/","fqdn":"accounts.binance-ads.com","domain":"binance-ads.com","tld":"com"},"ip":{"addr":"172.67.199.99","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-05T16:12:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"accounts.binance-ads.com","ip":{"addr":"104.21.92.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-02","domain_rank":0,"first_seen":"2026-03-31T16:11:15.701737Z","last_seen":"2026-03-31T16:11:15.701737Z","alert_count":0,"request_count":6,"received_data":1098821,"sent_data":2908,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-29T22:20:07.848058Z","alert_count":0,"request_count":2,"received_data":38741,"sent_data":1146,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-29T22:16:18.281815Z","alert_count":0,"request_count":2,"received_data":78478,"sent_data":1128,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"accounts.binance-ads.com/assets/index-w2OOirVR.js","fqdn":"accounts.binance-ads.com","domain":"binance-ads.com","tld":"com"},"ip":{"addr":"104.21.92.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ec439321a94335a59f04e8dd5a15c79","sha1":"67b7dac0f3039348a11e41e9f637746ae9bce418","sha256":"55fe69c263d7b8fbcf402f378045487e97cce0bce0f1281da3094bb1f8f6173a","sha512":"83f24389cbe87bfb57d641bcbc443ca989d03f35f33091b1092fae5f5e33200816f83cbd6076dce24eda1f3937c636d6b8358db0db537e11e6a4ce511167e0c9","ssdeep":"6144:eHwoJEvCeBXQyswdVO4SEx7SvCHw51/crFNyw1NQur79MIXyVr:eHDydVthx7SvSM1/SNOm8r","tlshash":"52c46cc4b261b565dba345e440bf0306b23e1955740c88a4b37cecea2ab454a727bffd","size":551650,"data":"","first_seen":"2026-03-31T16:11:20.270324Z","last_seen":"2026-03-31T16:12:16.976252Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"accounts.binance-ads.com/","fqdn":"accounts.binance-ads.com","domain":"binance-ads.com","tld":"com"},"ip":{"addr":"104.21.92.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-31T16:11:51.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-ads.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 11:48:49 GMT","end":"Sun, 28 Jun 2026 11:48:48 GMT"},"fingerprint":{"sha1":"43:48:A8:68:68:0C:A4:5A:07:A6:CF:CA:62:F6:FB:1D:85:5C:9D:DC","sha256":"9E:97:91:68:95:A1:2C:49:5C:B5:BD:09:80:83:BD:B8:A3:71:E6:DD:0F:88:BB:0F:A0:22:A5:43:2C:F4:F6:28"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: accounts.binance-ads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 16:11:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 31 Mar 2026 11:15:33 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8cwPDOBWt9G9CslAz9pAfo%2FllMqauk4xFrjOv0vXPGbfsPK5sfqA9FPoZ%2FSHcmhtzAi52z0EGAuErTGL%2BBXQo3VBs0g%2BJdoe%2Bz4iZNg1vkueNp%2FthkDN7I6m9L4FQUS463Q8H6uk1ElRnUI%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e50a1df2eebb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":69881,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (2969)","md5":"7cf10456321b9ff171cf8706ecf216ff","sha1":"05267424094b949442350c1aab4441de90bb748f","sha256":"73149d97a8b5407f7d4c9d07cc4a8a3b3efbaf809bb0a128650cd09ac8366772","sha512":"4e0d3714459789967a3161c85a0c09da93e4c473ebb36c5afdd8208bd7c279f67f2642b03392145cc0b81f7d38503bf554b3c97d145e0207bfaaef17a48ff785","ssdeep":"768:AMOLeVHvHk//TsnddiRHc2SDSouaC/rkLK7WDywZ5wi7OvV50L9UYCEgdhOqXNpF:3vVPNKHcX1uaYrkOKDJ61+kWqzB","tlshash":"f263c7f1a6f4a3e0a00bd7bcce2965a5753b34ff37858645326c9e942f540a9c48ef90","first_seen":"2026-03-31T16:11:20.243309Z","last_seen":"2026-03-31T16:12:16.960329Z","times_seen":2,"resource_available":true,"data":null}},"time_used":410,"timings":{"blocked":10,"dns":3,"connect":1,"send":0,"wait":380,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.binance-ads.com/assets/index-w2OOirVR.js","fqdn":"accounts.binance-ads.com","domain":"binance-ads.com","tld":"com"},"ip":{"addr":"104.21.92.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://accounts.binance-ads.com/","date":"2026-03-31T16:11:52.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-ads.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 11:48:49 GMT","end":"Sun, 28 Jun 2026 11:48:48 GMT"},"fingerprint":{"sha1":"43:48:A8:68:68:0C:A4:5A:07:A6:CF:CA:62:F6:FB:1D:85:5C:9D:DC","sha256":"9E:97:91:68:95:A1:2C:49:5C:B5:BD:09:80:83:BD:B8:A3:71:E6:DD:0F:88:BB:0F:A0:22:A5:43:2C:F4:F6:28"}}},"request":{"raw":"GET /assets/index-w2OOirVR.js HTTP/1.1\r\nHost: accounts.binance-ads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://accounts.binance-ads.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 16:11:52 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 31 Mar 2026 11:15:33 GMT\r\netag: W/\"86ae2-19d439b218a\"\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BN19WMzxQyVEeiCWrJTlFhoAD5sxtz5jSv5PzXmeO6vf%2F4k756856XEsBGk60pQUHBg4Q5Ykil2y0SgTdu2S4Wt8PKHBdboksZibGlJQ%2Bp%2Fow8JUmmiIzyQDChqW%2BAtVnDRt0cxJTAFYXXk%3D\"}]}\r\ncf-ray: 9e50a1e2ff3876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":551650,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (37653)","md5":"3ec439321a94335a59f04e8dd5a15c79","sha1":"67b7dac0f3039348a11e41e9f637746ae9bce418","sha256":"55fe69c263d7b8fbcf402f378045487e97cce0bce0f1281da3094bb1f8f6173a","sha512":"83f24389cbe87bfb57d641bcbc443ca989d03f35f33091b1092fae5f5e33200816f83cbd6076dce24eda1f3937c636d6b8358db0db537e11e6a4ce511167e0c9","ssdeep":"6144:eHwoJEvCeBXQyswdVO4SEx7SvCHw51/crFNyw1NQur79MIXyVr:eHDydVthx7SvSM1/SNOm8r","tlshash":"52c46cc4b261b565dba345e440bf0306b23e1955740c88a4b37cecea2ab454a727bffd","first_seen":"2026-03-31T16:11:20.270324Z","last_seen":"2026-03-31T16:12:16.976252Z","times_seen":2,"resource_available":true,"data":null}},"time_used":742,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":362,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://accounts.binance-ads.com/","date":"2026-03-31T16:11:52.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://accounts.binance-ads.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 31 Mar 2026 16:11:52 GMT\r\ndate: Tue, 31 Mar 2026 16:11:52 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21659,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"17ded04af7b0636d4f8c934291f09ac8","sha1":"d7766b8a83cf1d92c52f7a94654999e4b033365e","sha256":"54985fb48cc0470e63eaaf30034b348ed6bd73cac3f6a759bc1a1c19387af7e7","sha512":"ce25e5ca2afca5d262b17c8d5c5667cccaebce41eacc6afb16f5cd89a838bfd3192564f9a28b450646f2a2fd76414c462f095065c3a45ca72ce31df9c257748d","ssdeep":"384:H3w3s3VR9xqWSUq+DnLami0A0BNBOi/mkX:XEA3mkX","tlshash":"5fa27ad1087be114ab871cc122cf6d36ee0ea254b850e9786bfd1cd8ad97c654371b2d","first_seen":"2025-09-17T03:38:53.893526Z","last_seen":"2026-05-14T04:12:26.38666Z","times_seen":40581,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":107,"dns":0,"connect":20,"send":0,"wait":34,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.binance-ads.com/favicon.ico","fqdn":"accounts.binance-ads.com","domain":"binance-ads.com","tld":"com"},"ip":{"addr":"104.21.92.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://accounts.binance-ads.com/","date":"2026-03-31T16:11:53.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-ads.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 11:48:49 GMT","end":"Sun, 28 Jun 2026 11:48:48 GMT"},"fingerprint":{"sha1":"43:48:A8:68:68:0C:A4:5A:07:A6:CF:CA:62:F6:FB:1D:85:5C:9D:DC","sha256":"9E:97:91:68:95:A1:2C:49:5C:B5:BD:09:80:83:BD:B8:A3:71:E6:DD:0F:88:BB:0F:A0:22:A5:43:2C:F4:F6:28"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: accounts.binance-ads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://accounts.binance-ads.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 16:11:53 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cWAcjKfdsJbTFccCmZqEjy6nNek4a7WVBFui2x1l3utKxuL3%2Bm7GIxe7jhOhheGciGqwjtQHtUNCG%2F04Nf1TLoc%2B7zdKxmsADetW8kAxCmH3dpYiNU89WvJxhfN%2FhcjFWQVyE6lXHPZcNCg%3D\"}]}\r\npriority: u=6,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 31 Mar 2026 11:15:32 GMT\r\netag: W/\"10be-19d439b1edf\"\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e50a1e8b82f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"43365839589fc348172246e108c1297c","sha1":"007371e7d77d2e18516e6d394ff7a84a8de6d374","sha256":"8318ebbcb1cb4729eb0f78bb058dc618c3b63f9f9f0070a1a7a3265fdc79b833","sha512":"dd821bfb331c6793d1416bc80aa1f08cc460f4b8a051efeaef46004b63e1821039cabd6d9b51a1a33d208a4541fb2e16c8c6def62d59bda39ea085c7de410448","ssdeep":"48:FROrJ3rDDrv5/S5JDHvLHtfHtbHvD5JMV/TlDrXl3rbrWlY9AYy:FRONrQrT1Rrep3ClYy","tlshash":"ac919fe979d5a980cae8cdfc1cb3201942b558ea91e90bced7d724e3e43f44422f4139","first_seen":"2023-05-07T17:46:09Z","last_seen":"2026-05-14T03:58:05.890871Z","times_seen":1395,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.binance-ads.com/fonts/BinancePlex-Semibold.woff2","fqdn":"accounts.binance-ads.com","domain":"binance-ads.com","tld":"com"},"ip":{"addr":"104.21.92.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://accounts.binance-ads.com/","date":"2026-03-31T16:11:53.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-ads.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 11:48:49 GMT","end":"Sun, 28 Jun 2026 11:48:48 GMT"},"fingerprint":{"sha1":"43:48:A8:68:68:0C:A4:5A:07:A6:CF:CA:62:F6:FB:1D:85:5C:9D:DC","sha256":"9E:97:91:68:95:A1:2C:49:5C:B5:BD:09:80:83:BD:B8:A3:71:E6:DD:0F:88:BB:0F:A0:22:A5:43:2C:F4:F6:28"}}},"request":{"raw":"GET /fonts/BinancePlex-Semibold.woff2 HTTP/1.1\r\nHost: accounts.binance-ads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://accounts.binance-ads.com/assets/index-Buv_Xevk.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 16:11:53 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 31 Mar 2026 11:15:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8rIXru4XaOZAlky7mJjbIBUmdTjro3yH%2BwvWqEeEJWGYTQIRUPuT9sbENFcEmviEYp4%2BOUmGWTJHm41rBzbBTYkssOT%2BLTam3%2BYuGE6oyYc8pzHwGDpFl5sovkkG0kMuSq32fmkP88Tymqs%3D\"}]}\r\ncf-ray: 9e50a1ea588b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69881,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (2969)","md5":"7cf10456321b9ff171cf8706ecf216ff","sha1":"05267424094b949442350c1aab4441de90bb748f","sha256":"73149d97a8b5407f7d4c9d07cc4a8a3b3efbaf809bb0a128650cd09ac8366772","sha512":"4e0d3714459789967a3161c85a0c09da93e4c473ebb36c5afdd8208bd7c279f67f2642b03392145cc0b81f7d38503bf554b3c97d145e0207bfaaef17a48ff785","ssdeep":"768:AMOLeVHvHk//TsnddiRHc2SDSouaC/rkLK7WDywZ5wi7OvV50L9UYCEgdhOqXNpF:3vVPNKHcX1uaYrkOKDJ61+kWqzB","tlshash":"f263c7f1a6f4a3e0a00bd7bcce2965a5753b34ff37858645326c9e942f540a9c48ef90","first_seen":"2026-03-31T16:11:20.243309Z","last_seen":"2026-03-31T16:12:16.960329Z","times_seen":2,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":380,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.binance-ads.com/fonts/BinancePlex-Regular.woff2","fqdn":"accounts.binance-ads.com","domain":"binance-ads.com","tld":"com"},"ip":{"addr":"104.21.92.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://accounts.binance-ads.com/","date":"2026-03-31T16:11:53.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-ads.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 11:48:49 GMT","end":"Sun, 28 Jun 2026 11:48:48 GMT"},"fingerprint":{"sha1":"43:48:A8:68:68:0C:A4:5A:07:A6:CF:CA:62:F6:FB:1D:85:5C:9D:DC","sha256":"9E:97:91:68:95:A1:2C:49:5C:B5:BD:09:80:83:BD:B8:A3:71:E6:DD:0F:88:BB:0F:A0:22:A5:43:2C:F4:F6:28"}}},"request":{"raw":"GET /fonts/BinancePlex-Regular.woff2 HTTP/1.1\r\nHost: accounts.binance-ads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://accounts.binance-ads.com/assets/index-Buv_Xevk.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 16:11:53 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26076\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 31 Mar 2026 11:15:32 GMT\r\netag: W/\"65dc-19d439b1edf\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OAThjzsnTSW9AU3WR7fDwci4IGANFpNgTWvBS5q8HITm%2FHeoa4QIfDbXxt7Wi%2FsUBwqdVBMLJOH8e9ndyzCFZy8V32LWRFnh7XY1y62neFbzHLlGGKwq2WoLBF5u7LGAJnwfnCGuJha2UYQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e50a1ea688d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":26076,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26076, version 1.0","md5":"52da8a3659dbec455e0cd9cc00a518a8","sha1":"f969c3ed17bae6e9d432a6aeb80d557ce2814a86","sha256":"4675a3d0b6e29f17dc8c2c7cc8fa0269bdb1a5838f43784d130480494114f84e","sha512":"3cf2429c9ab2f732bfd4d108a58396e53fcbc1b50b010d5d3fd4a6f9fae53e19de6692fd343453880511c9d23580a7cb2f8bb4d7efd8658af38584eb1253018b","ssdeep":"384:7aJuBO6IVwcgUCLKPxDOK/elCQdGVKAoMGIWAE89SDopkmr1G3s/C4kA635VF:WJucTxCLKPx6vlCG2ZoMGISDofg3smVF","tlshash":"6dc2f1ee52eab227ef004648ff067adfd6fc246c1a0056a2421a77d300a05a7b16cc5a","first_seen":"2024-07-15T22:11:14Z","last_seen":"2026-04-27T15:50:28.018228Z","times_seen":269,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":377,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://accounts.binance-ads.com/","date":"2026-03-31T16:11:53.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://accounts.binance-ads.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 02:49:14 GMT\r\nexpires: Fri, 26 Mar 2027 02:49:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:48:54 GMT\r\ncontent-type: font/woff2\r\nage: 480159\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38404,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38404, version 1.0","md5":"ef05b30d6e5ca86ef9deda8c5bfa599a","sha1":"daeff530b773fd9ef9c50a803021a2cfba76083a","sha256":"e0c764a8e9e1cce92163c55bac4b2ad6cd4cf8c696ce2289ab5c41565e65b7e2","sha512":"0d5b2444bfe9e47a0665b6f25bf8bb161346888f8e5c49f2b8b4a6c4baacf3cde37a95aa8c3d5800d545fb5e684e3833df41582671073df12b60a42bf8ebb331","ssdeep":"768:FwI4wBedSjX1mVXUjvqnWIiYvffoRgF4vY7Ooy263B1kzEj9SSJxE:aIYdSjX+rWIiYXQRS4iTy2637ky0ExE","tlshash":"0603f1cb9b682138e95f513b0b8b13dd56ad112e9591d9a1821d8c0c96f033e5fff31a","first_seen":"2025-09-11T16:59:11.155785Z","last_seen":"2026-05-14T04:42:22.76203Z","times_seen":43602,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":92,"dns":1,"connect":15,"send":0,"wait":17,"receive":19,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://accounts.binance-ads.com/","date":"2026-03-31T16:11:53.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://accounts.binance-ads.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 02:49:14 GMT\r\nexpires: Fri, 26 Mar 2027 02:49:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:48:54 GMT\r\ncontent-type: font/woff2\r\nage: 480159\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38404,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38404, version 1.0","md5":"ef05b30d6e5ca86ef9deda8c5bfa599a","sha1":"daeff530b773fd9ef9c50a803021a2cfba76083a","sha256":"e0c764a8e9e1cce92163c55bac4b2ad6cd4cf8c696ce2289ab5c41565e65b7e2","sha512":"0d5b2444bfe9e47a0665b6f25bf8bb161346888f8e5c49f2b8b4a6c4baacf3cde37a95aa8c3d5800d545fb5e684e3833df41582671073df12b60a42bf8ebb331","ssdeep":"768:FwI4wBedSjX1mVXUjvqnWIiYvffoRgF4vY7Ooy263B1kzEj9SSJxE:aIYdSjX+rWIiYXQRS4iTy2637ky0ExE","tlshash":"0603f1cb9b682138e95f513b0b8b13dd56ad112e9591d9a1821d8c0c96f033e5fff31a","first_seen":"2025-09-11T16:59:11.155785Z","last_seen":"2026-05-14T04:42:22.76203Z","times_seen":43602,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":178,"dns":1,"connect":15,"send":0,"wait":16,"receive":8,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.binance-ads.com/assets/index-Buv_Xevk.css","fqdn":"accounts.binance-ads.com","domain":"binance-ads.com","tld":"com"},"ip":{"addr":"104.21.92.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://accounts.binance-ads.com/","date":"2026-03-31T16:11:52.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"binance-ads.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 11:48:49 GMT","end":"Sun, 28 Jun 2026 11:48:48 GMT"},"fingerprint":{"sha1":"43:48:A8:68:68:0C:A4:5A:07:A6:CF:CA:62:F6:FB:1D:85:5C:9D:DC","sha256":"9E:97:91:68:95:A1:2C:49:5C:B5:BD:09:80:83:BD:B8:A3:71:E6:DD:0F:88:BB:0F:A0:22:A5:43:2C:F4:F6:28"}}},"request":{"raw":"GET /assets/index-Buv_Xevk.css HTTP/1.1\r\nHost: accounts.binance-ads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://accounts.binance-ads.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 31 Mar 2026 16:11:52 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 31 Mar 2026 11:15:33 GMT\r\netag: W/\"5aec3-19d439b2185\"\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2BKMXVx74eFlHCEedbjjeTWgCmpDDFkKuc1zo1e5XuTzc0h%2Fp%2Fp7vIRLj2z1ZM8vBl2TVYYYgCvm%2FAreDs3Da25vSPFuD0JF4315ZnsHfDSkteb7JdD5H%2FCaoSvYyAK9SpSlwOHX2hrpfzA%3D\"}]}\r\ncf-ray: 9e50a1e2ff3976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":372419,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1899916d6b980762bf0964b5247d47bc","sha1":"a4e08f6ea571ac57310febd9e1d0f3292ccad324","sha256":"6b755ff653b860c331dc7d311b62956ea11c1ef11788ab62251e284d7714eaa3","sha512":"384b8dbbd3c1d08b4f08161947054c4a0e4c337f3b650d9df16b4816f363551d25450dc95566799a23d85da00103bdf4b9fae767f3a285f60b7a792b852f7a27","ssdeep":"6144:gThA8PlO6tePVxGhBBQjF3pyAUWY6WE1DtnQH:g","tlshash":"ef84a7a5b222723abd7f84b3da85d98c3308e542a9135be5f761951cc2c6bf3265330d","first_seen":"2026-03-31T16:11:20.263942Z","last_seen":"2026-03-31T16:12:16.988299Z","times_seen":2,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Playfair+Display:ital,wght@0,400;0,600;0,700;0,800;0,900;1,400;1,700\u0026family=Outfit:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://accounts.binance-ads.com/","date":"2026-03-31T16:11:53.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /css2?family=Playfair+Display:ital,wght@0,400;0,600;0,700;0,800;0,900;1,400;1,700\u0026family=Outfit:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://accounts.binance-ads.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 31 Mar 2026 16:11:53 GMT\r\ndate: Tue, 31 Mar 2026 16:11:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15730,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"868e2f722d81222d2be93762018f642d","sha1":"7b6423d82abbb5bb743dcf604c5b071245973838","sha256":"c526eaf50c1a612a2a8953cf33bf78f1fb368ca5ce74cf477ccf0ae0e0686c18","sha512":"06b6618e15dd0cec2ac25573787bb7ea8cc9f611d1381128e5e86aa6a436c2e15e2aad188bd785fca3c2882d3c58c61d1d7974105a76f95e8a18a02223ead68f","ssdeep":"384:iJq2SMq2qq2+q2cJp2SMp2qp2+p2cL2R/W2v/2bv26F2R/Y2v52bp26E2R/J2vIl:RXaKBcZJJaOw/0vxaww50pAahwI047aY","tlshash":"0462cea20567a2109b870cc223cf7f329e5f61507081963daffe1dd86c9bd6a9265b0d","first_seen":"2026-03-31T16:11:20.274606Z","last_seen":"2026-03-31T16:12:16.992278Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}