{"report_id":"2d29e5fb-c47f-4ef1-bf20-8e7a27872b15","version":0,"status":"done","tags":["malicious","clickfix"],"date":"2026-06-19T08:45:03Z","url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"172.67.190.129","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"title":"LGODEWA : Website Slot Resmi Platform LGO Bet 10K Claim Bonus 100%","dom":{"size":627667,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (61370)","md5":"d9788afb6aaaedda53531bf01191176f","sha1":"5a4096fb5893c91028cdc3710ea587a424ca5812","sha256":"2818cf405036e839d9937ab89a7e93e27a527dbca29482db02c8d576c0aa3d05","sha512":"9099591ec3ba5561188993edc268bbd6a5161fc49eebd3182628b632ee480102f02182381925d8f9eec6d627f8318b0a4b3fd8563368700638629f55abaf7f6e","ssdeep":"12288:v+e/UGvxTfP5D2TgBIKpCdy/GYffvkzQCHc2VS:PZjx2CVpCdy/GYffMzQt2VS","tlshash":"3cd4a6e2e4a410e9b727c55fe6817bbc3939f212d2420da5f01fab2c8fc56d505a2b5c","dom_hash":"domhashdd2074a0ff169b3a4b86df11b986ed7b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"172.67.190.129","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-24T08:45:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null},{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"summary":[{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-06-14T22:55:30.147967Z","alert_count":0,"request_count":2,"received_data":162350,"sent_data":954,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mautaudewa.com","ip":{"addr":"198.252.100.226","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"domain_registered":"2025-05-06","domain_rank":0,"first_seen":"2025-06-10T12:04:47.575581Z","last_seen":"2026-05-16T04:00:25.613399Z","alert_count":0,"request_count":9,"received_data":354682,"sent_data":4922,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"d3ulwu8fab47va.cloudfront.net","ip":{"addr":"108.157.232.126","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2017-03-05T17:41:01Z","last_seen":"2026-06-13T18:30:53.677472Z","alert_count":0,"request_count":5,"received_data":88033,"sent_data":2660,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"d24epxax9d77vm.cloudfront.net","ip":{"addr":"108.157.232.180","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2025-04-08T22:41:08.235395Z","last_seen":"2026-06-13T18:30:53.879138Z","alert_count":0,"request_count":7,"received_data":477346,"sent_data":4040,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"veldrive.com","ip":{"addr":"172.67.192.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-24","domain_rank":898361,"first_seen":"2025-05-27T11:40:26.824591Z","last_seen":"2026-06-18T08:59:16.431922Z","alert_count":0,"request_count":2,"received_data":2929243,"sent_data":1107,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-06-14T22:40:52.388947Z","alert_count":0,"request_count":1,"received_data":174062,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.ubuy.com.kh","ip":{"addr":"13.249.8.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":2721383,"first_seen":"2025-11-01T00:20:34.741649Z","last_seen":"2026-06-18T11:02:05.520155Z","alert_count":1,"request_count":1,"received_data":25718,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-14T22:45:09.968061Z","alert_count":0,"request_count":1,"received_data":544104,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"d2ati23fc66y9j.cloudfront.net","ip":{"addr":"3.164.230.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2021-03-14T20:00:24Z","last_seen":"2026-06-14T20:45:29.442686Z","alert_count":0,"request_count":6,"received_data":198133,"sent_data":3506,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"ubuyanalytics.ubuy.com","ip":{"addr":"104.18.8.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1995-10-16","domain_rank":934628,"first_seen":"2021-07-22T05:55:55Z","last_seen":"2026-06-16T11:02:55.10823Z","alert_count":0,"request_count":1,"received_data":1016,"sent_data":503,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"imgstore.io","ip":{"addr":"172.67.186.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-05-26","domain_rank":181169,"first_seen":"2021-02-06T14:06:23Z","last_seen":"2026-06-12T09:39:36.038635Z","alert_count":0,"request_count":4,"received_data":11414,"sent_data":2204,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rspelvicpt.com","ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-03-05","domain_rank":0,"first_seen":"2026-06-19T08:45:06.911661Z","last_seen":"2026-06-19T08:45:06.911662Z","alert_count":0,"request_count":1,"received_data":621921,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Chart.js:2.9.4","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Magento:1 (enterprise)","description":"Magento is an open-source ecommerce platform written in PHP.","website":"https://magento.com","common_platform_enumeration":"cpe:2.3:a:magento:magento:*:*:*:*:*:*:*:*","icon":"Magento.svg","categories":["Ecommerce","CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Firebase:9.0.0","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce6d50561adb377430b0197147cfc949","sha1":"68c21f9929c74966096e53b4ca0ec56a0fec5fab","sha256":"e0739266fa29a08d9900cb913688d6f8cf6663c62aa420dd26d86c63acd5a78b","sha512":"98cc573c237376e54b1bb6133dd4ebedf7d16eb08ccc4ea958e9b3035afba82d55f3dc4a46c82672fe7036927333a3c58c883a07dffba212c294f93b2830ae72","ssdeep":"192:ttF36vSwa3cDkiF9t6CDzs8hUCiSc7kHyP0H68+CwlFycJYVAKVHcGDFkAjkqYYQ:ttF3eaMQ6XHz7hU0H684lFyOYHCGxkAu","tlshash":"56326f2964e344fadd333865faff092872e26043b500ee11ba4d129c5f49674a3b67f9","size":11610,"data":"","first_seen":"2026-06-19T08:45:13.472901Z","last_seen":"2026-06-19T08:45:27.744157Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd056c985fb63f803de87803b78edf08","sha1":"6bf6fecca451e59cf3763685abb378b38bb36b86","sha256":"82078e9062d04bde98d7f778c113de87034a1b598755c71c3b168ab2bbc8246f","sha512":"05a8783b478c6fd1dc5af0b84bb7d3a955f2fdda4c1b0a30e6b754c96afd7727cd3130fa8244f894eb6f459eba0307a43e07535c0c3b862203c008be4cad4325","ssdeep":"","tlshash":"ccf0127561b6198890f72d38ffbf92f464937523ea489245792d513b0f0b1a2314313f","size":629,"data":"","first_seen":"2026-05-25T23:49:42.383537Z","last_seen":"2026-06-28T21:28:53.8406Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e49214a2ad0cb0e27330368dc5a65f58","sha1":"bc334eec9f25cf59ec0e37f5455d11ddacc1e50b","sha256":"752a5d46cefd178d30ad3e170d0ed05c02e57ea6a13474e00b47a2c62b357f47","sha512":"7e31f5730c4f0ef91f2902a98b8e0b2eb219df303df0e91a16432fffac40afaee6d7a417e969a32ffba7f9e1cdf6e9252b33662fc8362dd76fe1f072f32a3550","ssdeep":"","tlshash":"9221ad7ae5f5519206bf39387a3f978031723023b089dd807c5d66d12f96c7405667ca","size":1436,"data":"","first_seen":"2026-06-19T08:45:13.476039Z","last_seen":"2026-06-19T08:45:27.746847Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b53ade6cc653dd7be1f784d6b3efcb8","sha1":"0a6b313430ba5c4a642076abc5e515c5158baf06","sha256":"f4ebd381dd3380ef46aed9c1559c6a20851ad8dd00231a81c5cf69f104c41c09","sha512":"ecae503b13b07fc854d627b0feb68db10febc18254317a7335810b8e35ff49793c56e7a18a10aea585ea3c5a8869b97da2ab151e5d7c823209180559a1804a7b","ssdeep":"","tlshash":"9a21ef7db8b10470807778aa96bf7a05617ab95738416a52354d25048f0e52d607deec","size":1368,"data":"","first_seen":"2026-06-19T08:45:13.478847Z","last_seen":"2026-06-19T08:45:27.748242Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6738340566d64d0d3ebbc5a0e9a82e95","sha1":"0124250d2c6739f38e6d1b94a3ee5da1bab33633","sha256":"4e4d1930a55e7d7b42050b2f3372bb94c330397713a8def82e951a597349a64a","sha512":"796e89ec1e4d795ab624c662675328e76172c87eac8f2265eb852e4afdb3721a25dde2d613caf89e7722e075201ea47f004910cff1ae4f77029ddf5b809679c7","ssdeep":"","tlshash":"fac0926aaba228b04277f629062ef6002aaa54c31046cc023f0c81985fe871c5066969","size":133,"data":"","first_seen":"2026-05-25T23:49:42.387121Z","last_seen":"2026-06-28T21:28:53.844226Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd6db8071b7abc8afe46f0dcb3b0c43c","sha1":"272485979abe33d0ba701d69a703d3dd1df81af9","sha256":"2b1ae1c32daf03507d71b60115d4d6dba142c22886a0c1b245ed2779c0ac75f7","sha512":"eb3a95f2dcc8ae90d1fa7ba7a099bd1820234d4b728df862eb131cdcc123649f21c8c0d01a8b3f6e978d1a440c380202a33a424d9bbbb08aea8ca75135ba6edd","ssdeep":"","tlshash":"6bb0112c08ea008000b3a0200a3bba002023b822228b88823a0ca2200f88a380202a2e","size":92,"data":"","first_seen":"2026-05-25T23:49:42.389487Z","last_seen":"2026-06-28T21:28:53.844872Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"41269c5722653600a0f6933196a75fd1","sha1":"864accb448359a9b34b694350ef5f1d5ba889b1c","sha256":"13c06eb8246b508cf54e285cf7433b923333498bc75576fb404a42a5892d574f","sha512":"c70c1fbd9907d268f7db1e52828f14b373f3e5104011fb631af53bbe6b4cbda998c3d53011b9ec06864f571e5b3de8b2bce53cf9724695a25ce6967b211ee812","ssdeep":"","tlshash":"f18000e080f2b02228082802228b232ee00ac83b0030202f80000020088cec80ca20e2","size":29,"data":"","first_seen":"2026-03-08T15:49:31.655642Z","last_seen":"2026-06-28T23:49:58.686158Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3578307b011ca67cf8d7ab3490a5fb33","sha1":"47ad0df0fcead11a3312441692d18ca76d345e0b","sha256":"f0243e2923311e7aac973ca39dcd759f02d00941a71ae1f1014caac26654a56c","sha512":"ee7f6f117e61627e145bc51a366330ee411244ca02cd0baf9962818e9b8e60693f9be503c48875c6ebd1c4cd941f37a9c2dd321218f83ad15938f44fe274c4ba","ssdeep":"","tlshash":"c621c15036e2001c40f3919e4fab215138b9204f5a33d807ba5dc99d9fe3f4878ab6bd","size":1399,"data":"","first_seen":"2026-06-19T00:50:06.871081Z","last_seen":"2026-06-25T21:01:22.382162Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9e5abd2e70fa4b3416ec4996f7d4fbd","sha1":"a40b7df1aebbb8065fc04ed7c487c1e03dded722","sha256":"dca931e325e957bf0bfc517cf6810cc60c1730191fa1124e2275a48e33264a6a","sha512":"af761e4881cd4f9367cf696fdcf9c72f1aa87a9bf744b244a0170259522357162e3079b52ff93c81e4fdc1b8b22b14f3aa0982fd445f1340a0f8fae344803b37","ssdeep":"","tlshash":"c2c0229b22720a309ce7436f3ee7620038b100067c02ea001e1c10430da1ec14cb728a","size":190,"data":"","first_seen":"2026-06-07T14:28:51.373038Z","last_seen":"2026-06-25T21:01:22.382625Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3ulwu8fab47va.cloudfront.net/skin/frontend/default/ubuycom-v1/js/lazy.min.js","fqdn":"d3ulwu8fab47va.cloudfront.net","domain":"d3ulwu8fab47va.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.232.126","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4e69ada334a1263febd73f43dc29427","sha1":"a3b97ac87b375dbfc6fe20b5bdd56b43f5920625","sha256":"f7f1f00c13514a32e4338a1c3d416cdf1d45599341d5b11d257da413b2722d2c","sha512":"7b415b6e849c5a992cc8086a8ccba2b9f99407b69d6c70f22dda806b770fb5357f1e7f7615e20fa4f88efa80cc74889382f647c009a60d1930aea622905a6864","ssdeep":"","tlshash":"507160e932d2763bbd631073923bb246b73f21497a060421123d66c52cbc859c777cae","size":3502,"data":"","first_seen":"2023-03-13T16:31:40Z","last_seen":"2026-06-28T23:49:58.635064Z","times_seen":677,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce6d50561adb377430b0197147cfc949","sha1":"68c21f9929c74966096e53b4ca0ec56a0fec5fab","sha256":"e0739266fa29a08d9900cb913688d6f8cf6663c62aa420dd26d86c63acd5a78b","sha512":"98cc573c237376e54b1bb6133dd4ebedf7d16eb08ccc4ea958e9b3035afba82d55f3dc4a46c82672fe7036927333a3c58c883a07dffba212c294f93b2830ae72","ssdeep":"192:ttF36vSwa3cDkiF9t6CDzs8hUCiSc7kHyP0H68+CwlFycJYVAKVHcGDFkAjkqYYQ:ttF3eaMQ6XHz7hU0H684lFyOYHCGxkAu","tlshash":"56326f2964e344fadd333865faff092872e26043b500ee11ba4d129c5f49674a3b67f9","size":11610,"data":"","first_seen":"2026-06-19T08:45:13.472901Z","last_seen":"2026-06-19T08:45:27.744157Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd056c985fb63f803de87803b78edf08","sha1":"6bf6fecca451e59cf3763685abb378b38bb36b86","sha256":"82078e9062d04bde98d7f778c113de87034a1b598755c71c3b168ab2bbc8246f","sha512":"05a8783b478c6fd1dc5af0b84bb7d3a955f2fdda4c1b0a30e6b754c96afd7727cd3130fa8244f894eb6f459eba0307a43e07535c0c3b862203c008be4cad4325","ssdeep":"","tlshash":"ccf0127561b6198890f72d38ffbf92f464937523ea489245792d513b0f0b1a2314313f","size":629,"data":"","first_seen":"2026-05-25T23:49:42.383537Z","last_seen":"2026-06-28T21:28:53.8406Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e49214a2ad0cb0e27330368dc5a65f58","sha1":"bc334eec9f25cf59ec0e37f5455d11ddacc1e50b","sha256":"752a5d46cefd178d30ad3e170d0ed05c02e57ea6a13474e00b47a2c62b357f47","sha512":"7e31f5730c4f0ef91f2902a98b8e0b2eb219df303df0e91a16432fffac40afaee6d7a417e969a32ffba7f9e1cdf6e9252b33662fc8362dd76fe1f072f32a3550","ssdeep":"","tlshash":"9221ad7ae5f5519206bf39387a3f978031723023b089dd807c5d66d12f96c7405667ca","size":1436,"data":"","first_seen":"2026-06-19T08:45:13.476039Z","last_seen":"2026-06-19T08:45:27.746847Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b53ade6cc653dd7be1f784d6b3efcb8","sha1":"0a6b313430ba5c4a642076abc5e515c5158baf06","sha256":"f4ebd381dd3380ef46aed9c1559c6a20851ad8dd00231a81c5cf69f104c41c09","sha512":"ecae503b13b07fc854d627b0feb68db10febc18254317a7335810b8e35ff49793c56e7a18a10aea585ea3c5a8869b97da2ab151e5d7c823209180559a1804a7b","ssdeep":"","tlshash":"9a21ef7db8b10470807778aa96bf7a05617ab95738416a52354d25048f0e52d607deec","size":1368,"data":"","first_seen":"2026-06-19T08:45:13.478847Z","last_seen":"2026-06-19T08:45:27.748242Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6738340566d64d0d3ebbc5a0e9a82e95","sha1":"0124250d2c6739f38e6d1b94a3ee5da1bab33633","sha256":"4e4d1930a55e7d7b42050b2f3372bb94c330397713a8def82e951a597349a64a","sha512":"796e89ec1e4d795ab624c662675328e76172c87eac8f2265eb852e4afdb3721a25dde2d613caf89e7722e075201ea47f004910cff1ae4f77029ddf5b809679c7","ssdeep":"","tlshash":"fac0926aaba228b04277f629062ef6002aaa54c31046cc023f0c81985fe871c5066969","size":133,"data":"","first_seen":"2026-05-25T23:49:42.387121Z","last_seen":"2026-06-28T21:28:53.844226Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd6db8071b7abc8afe46f0dcb3b0c43c","sha1":"272485979abe33d0ba701d69a703d3dd1df81af9","sha256":"2b1ae1c32daf03507d71b60115d4d6dba142c22886a0c1b245ed2779c0ac75f7","sha512":"eb3a95f2dcc8ae90d1fa7ba7a099bd1820234d4b728df862eb131cdcc123649f21c8c0d01a8b3f6e978d1a440c380202a33a424d9bbbb08aea8ca75135ba6edd","ssdeep":"","tlshash":"6bb0112c08ea008000b3a0200a3bba002023b822228b88823a0ca2200f88a380202a2e","size":92,"data":"","first_seen":"2026-05-25T23:49:42.389487Z","last_seen":"2026-06-28T21:28:53.844872Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"41269c5722653600a0f6933196a75fd1","sha1":"864accb448359a9b34b694350ef5f1d5ba889b1c","sha256":"13c06eb8246b508cf54e285cf7433b923333498bc75576fb404a42a5892d574f","sha512":"c70c1fbd9907d268f7db1e52828f14b373f3e5104011fb631af53bbe6b4cbda998c3d53011b9ec06864f571e5b3de8b2bce53cf9724695a25ce6967b211ee812","ssdeep":"","tlshash":"f18000e080f2b02228082802228b232ee00ac83b0030202f80000020088cec80ca20e2","size":29,"data":"","first_seen":"2026-03-08T15:49:31.655642Z","last_seen":"2026-06-28T23:49:58.686158Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3578307b011ca67cf8d7ab3490a5fb33","sha1":"47ad0df0fcead11a3312441692d18ca76d345e0b","sha256":"f0243e2923311e7aac973ca39dcd759f02d00941a71ae1f1014caac26654a56c","sha512":"ee7f6f117e61627e145bc51a366330ee411244ca02cd0baf9962818e9b8e60693f9be503c48875c6ebd1c4cd941f37a9c2dd321218f83ad15938f44fe274c4ba","ssdeep":"","tlshash":"c621c15036e2001c40f3919e4fab215138b9204f5a33d807ba5dc99d9fe3f4878ab6bd","size":1399,"data":"","first_seen":"2026-06-19T00:50:06.871081Z","last_seen":"2026-06-25T21:01:22.382162Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9e5abd2e70fa4b3416ec4996f7d4fbd","sha1":"a40b7df1aebbb8065fc04ed7c487c1e03dded722","sha256":"dca931e325e957bf0bfc517cf6810cc60c1730191fa1124e2275a48e33264a6a","sha512":"af761e4881cd4f9367cf696fdcf9c72f1aa87a9bf744b244a0170259522357162e3079b52ff93c81e4fdc1b8b22b14f3aa0982fd445f1340a0f8fae344803b37","ssdeep":"","tlshash":"c2c0229b22720a309ce7436f3ee7620038b100067c02ea001e1c10430da1ec14cb728a","size":190,"data":"","first_seen":"2026-06-07T14:28:51.373038Z","last_seen":"2026-06-25T21:01:22.382625Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce6d50561adb377430b0197147cfc949","sha1":"68c21f9929c74966096e53b4ca0ec56a0fec5fab","sha256":"e0739266fa29a08d9900cb913688d6f8cf6663c62aa420dd26d86c63acd5a78b","sha512":"98cc573c237376e54b1bb6133dd4ebedf7d16eb08ccc4ea958e9b3035afba82d55f3dc4a46c82672fe7036927333a3c58c883a07dffba212c294f93b2830ae72","ssdeep":"192:ttF36vSwa3cDkiF9t6CDzs8hUCiSc7kHyP0H68+CwlFycJYVAKVHcGDFkAjkqYYQ:ttF3eaMQ6XHz7hU0H684lFyOYHCGxkAu","tlshash":"56326f2964e344fadd333865faff092872e26043b500ee11ba4d129c5f49674a3b67f9","size":11610,"data":"","first_seen":"2026-06-19T08:45:13.472901Z","last_seen":"2026-06-19T08:45:27.744157Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd056c985fb63f803de87803b78edf08","sha1":"6bf6fecca451e59cf3763685abb378b38bb36b86","sha256":"82078e9062d04bde98d7f778c113de87034a1b598755c71c3b168ab2bbc8246f","sha512":"05a8783b478c6fd1dc5af0b84bb7d3a955f2fdda4c1b0a30e6b754c96afd7727cd3130fa8244f894eb6f459eba0307a43e07535c0c3b862203c008be4cad4325","ssdeep":"","tlshash":"ccf0127561b6198890f72d38ffbf92f464937523ea489245792d513b0f0b1a2314313f","size":629,"data":"","first_seen":"2026-05-25T23:49:42.383537Z","last_seen":"2026-06-28T21:28:53.8406Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e49214a2ad0cb0e27330368dc5a65f58","sha1":"bc334eec9f25cf59ec0e37f5455d11ddacc1e50b","sha256":"752a5d46cefd178d30ad3e170d0ed05c02e57ea6a13474e00b47a2c62b357f47","sha512":"7e31f5730c4f0ef91f2902a98b8e0b2eb219df303df0e91a16432fffac40afaee6d7a417e969a32ffba7f9e1cdf6e9252b33662fc8362dd76fe1f072f32a3550","ssdeep":"","tlshash":"9221ad7ae5f5519206bf39387a3f978031723023b089dd807c5d66d12f96c7405667ca","size":1436,"data":"","first_seen":"2026-06-19T08:45:13.476039Z","last_seen":"2026-06-19T08:45:27.746847Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b53ade6cc653dd7be1f784d6b3efcb8","sha1":"0a6b313430ba5c4a642076abc5e515c5158baf06","sha256":"f4ebd381dd3380ef46aed9c1559c6a20851ad8dd00231a81c5cf69f104c41c09","sha512":"ecae503b13b07fc854d627b0feb68db10febc18254317a7335810b8e35ff49793c56e7a18a10aea585ea3c5a8869b97da2ab151e5d7c823209180559a1804a7b","ssdeep":"","tlshash":"9a21ef7db8b10470807778aa96bf7a05617ab95738416a52354d25048f0e52d607deec","size":1368,"data":"","first_seen":"2026-06-19T08:45:13.478847Z","last_seen":"2026-06-19T08:45:27.748242Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6738340566d64d0d3ebbc5a0e9a82e95","sha1":"0124250d2c6739f38e6d1b94a3ee5da1bab33633","sha256":"4e4d1930a55e7d7b42050b2f3372bb94c330397713a8def82e951a597349a64a","sha512":"796e89ec1e4d795ab624c662675328e76172c87eac8f2265eb852e4afdb3721a25dde2d613caf89e7722e075201ea47f004910cff1ae4f77029ddf5b809679c7","ssdeep":"","tlshash":"fac0926aaba228b04277f629062ef6002aaa54c31046cc023f0c81985fe871c5066969","size":133,"data":"","first_seen":"2026-05-25T23:49:42.387121Z","last_seen":"2026-06-28T21:28:53.844226Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd6db8071b7abc8afe46f0dcb3b0c43c","sha1":"272485979abe33d0ba701d69a703d3dd1df81af9","sha256":"2b1ae1c32daf03507d71b60115d4d6dba142c22886a0c1b245ed2779c0ac75f7","sha512":"eb3a95f2dcc8ae90d1fa7ba7a099bd1820234d4b728df862eb131cdcc123649f21c8c0d01a8b3f6e978d1a440c380202a33a424d9bbbb08aea8ca75135ba6edd","ssdeep":"","tlshash":"6bb0112c08ea008000b3a0200a3bba002023b822228b88823a0ca2200f88a380202a2e","size":92,"data":"","first_seen":"2026-05-25T23:49:42.389487Z","last_seen":"2026-06-28T21:28:53.844872Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"41269c5722653600a0f6933196a75fd1","sha1":"864accb448359a9b34b694350ef5f1d5ba889b1c","sha256":"13c06eb8246b508cf54e285cf7433b923333498bc75576fb404a42a5892d574f","sha512":"c70c1fbd9907d268f7db1e52828f14b373f3e5104011fb631af53bbe6b4cbda998c3d53011b9ec06864f571e5b3de8b2bce53cf9724695a25ce6967b211ee812","ssdeep":"","tlshash":"f18000e080f2b02228082802228b232ee00ac83b0030202f80000020088cec80ca20e2","size":29,"data":"","first_seen":"2026-03-08T15:49:31.655642Z","last_seen":"2026-06-28T23:49:58.686158Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3578307b011ca67cf8d7ab3490a5fb33","sha1":"47ad0df0fcead11a3312441692d18ca76d345e0b","sha256":"f0243e2923311e7aac973ca39dcd759f02d00941a71ae1f1014caac26654a56c","sha512":"ee7f6f117e61627e145bc51a366330ee411244ca02cd0baf9962818e9b8e60693f9be503c48875c6ebd1c4cd941f37a9c2dd321218f83ad15938f44fe274c4ba","ssdeep":"","tlshash":"c621c15036e2001c40f3919e4fab215138b9204f5a33d807ba5dc99d9fe3f4878ab6bd","size":1399,"data":"","first_seen":"2026-06-19T00:50:06.871081Z","last_seen":"2026-06-25T21:01:22.382162Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9e5abd2e70fa4b3416ec4996f7d4fbd","sha1":"a40b7df1aebbb8065fc04ed7c487c1e03dded722","sha256":"dca931e325e957bf0bfc517cf6810cc60c1730191fa1124e2275a48e33264a6a","sha512":"af761e4881cd4f9367cf696fdcf9c72f1aa87a9bf744b244a0170259522357162e3079b52ff93c81e4fdc1b8b22b14f3aa0982fd445f1340a0f8fae344803b37","ssdeep":"","tlshash":"c2c0229b22720a309ce7436f3ee7620038b100067c02ea001e1c10430da1ec14cb728a","size":190,"data":"","first_seen":"2026-06-07T14:28:51.373038Z","last_seen":"2026-06-25T21:01:22.382625Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce6d50561adb377430b0197147cfc949","sha1":"68c21f9929c74966096e53b4ca0ec56a0fec5fab","sha256":"e0739266fa29a08d9900cb913688d6f8cf6663c62aa420dd26d86c63acd5a78b","sha512":"98cc573c237376e54b1bb6133dd4ebedf7d16eb08ccc4ea958e9b3035afba82d55f3dc4a46c82672fe7036927333a3c58c883a07dffba212c294f93b2830ae72","ssdeep":"192:ttF36vSwa3cDkiF9t6CDzs8hUCiSc7kHyP0H68+CwlFycJYVAKVHcGDFkAjkqYYQ:ttF3eaMQ6XHz7hU0H684lFyOYHCGxkAu","tlshash":"56326f2964e344fadd333865faff092872e26043b500ee11ba4d129c5f49674a3b67f9","size":11610,"data":"","first_seen":"2026-06-19T08:45:13.472901Z","last_seen":"2026-06-19T08:45:27.744157Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd056c985fb63f803de87803b78edf08","sha1":"6bf6fecca451e59cf3763685abb378b38bb36b86","sha256":"82078e9062d04bde98d7f778c113de87034a1b598755c71c3b168ab2bbc8246f","sha512":"05a8783b478c6fd1dc5af0b84bb7d3a955f2fdda4c1b0a30e6b754c96afd7727cd3130fa8244f894eb6f459eba0307a43e07535c0c3b862203c008be4cad4325","ssdeep":"","tlshash":"ccf0127561b6198890f72d38ffbf92f464937523ea489245792d513b0f0b1a2314313f","size":629,"data":"","first_seen":"2026-05-25T23:49:42.383537Z","last_seen":"2026-06-28T21:28:53.8406Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e49214a2ad0cb0e27330368dc5a65f58","sha1":"bc334eec9f25cf59ec0e37f5455d11ddacc1e50b","sha256":"752a5d46cefd178d30ad3e170d0ed05c02e57ea6a13474e00b47a2c62b357f47","sha512":"7e31f5730c4f0ef91f2902a98b8e0b2eb219df303df0e91a16432fffac40afaee6d7a417e969a32ffba7f9e1cdf6e9252b33662fc8362dd76fe1f072f32a3550","ssdeep":"","tlshash":"9221ad7ae5f5519206bf39387a3f978031723023b089dd807c5d66d12f96c7405667ca","size":1436,"data":"","first_seen":"2026-06-19T08:45:13.476039Z","last_seen":"2026-06-19T08:45:27.746847Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b53ade6cc653dd7be1f784d6b3efcb8","sha1":"0a6b313430ba5c4a642076abc5e515c5158baf06","sha256":"f4ebd381dd3380ef46aed9c1559c6a20851ad8dd00231a81c5cf69f104c41c09","sha512":"ecae503b13b07fc854d627b0feb68db10febc18254317a7335810b8e35ff49793c56e7a18a10aea585ea3c5a8869b97da2ab151e5d7c823209180559a1804a7b","ssdeep":"","tlshash":"9a21ef7db8b10470807778aa96bf7a05617ab95738416a52354d25048f0e52d607deec","size":1368,"data":"","first_seen":"2026-06-19T08:45:13.478847Z","last_seen":"2026-06-19T08:45:27.748242Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6738340566d64d0d3ebbc5a0e9a82e95","sha1":"0124250d2c6739f38e6d1b94a3ee5da1bab33633","sha256":"4e4d1930a55e7d7b42050b2f3372bb94c330397713a8def82e951a597349a64a","sha512":"796e89ec1e4d795ab624c662675328e76172c87eac8f2265eb852e4afdb3721a25dde2d613caf89e7722e075201ea47f004910cff1ae4f77029ddf5b809679c7","ssdeep":"","tlshash":"fac0926aaba228b04277f629062ef6002aaa54c31046cc023f0c81985fe871c5066969","size":133,"data":"","first_seen":"2026-05-25T23:49:42.387121Z","last_seen":"2026-06-28T21:28:53.844226Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd6db8071b7abc8afe46f0dcb3b0c43c","sha1":"272485979abe33d0ba701d69a703d3dd1df81af9","sha256":"2b1ae1c32daf03507d71b60115d4d6dba142c22886a0c1b245ed2779c0ac75f7","sha512":"eb3a95f2dcc8ae90d1fa7ba7a099bd1820234d4b728df862eb131cdcc123649f21c8c0d01a8b3f6e978d1a440c380202a33a424d9bbbb08aea8ca75135ba6edd","ssdeep":"","tlshash":"6bb0112c08ea008000b3a0200a3bba002023b822228b88823a0ca2200f88a380202a2e","size":92,"data":"","first_seen":"2026-05-25T23:49:42.389487Z","last_seen":"2026-06-28T21:28:53.844872Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"41269c5722653600a0f6933196a75fd1","sha1":"864accb448359a9b34b694350ef5f1d5ba889b1c","sha256":"13c06eb8246b508cf54e285cf7433b923333498bc75576fb404a42a5892d574f","sha512":"c70c1fbd9907d268f7db1e52828f14b373f3e5104011fb631af53bbe6b4cbda998c3d53011b9ec06864f571e5b3de8b2bce53cf9724695a25ce6967b211ee812","ssdeep":"","tlshash":"f18000e080f2b02228082802228b232ee00ac83b0030202f80000020088cec80ca20e2","size":29,"data":"","first_seen":"2026-03-08T15:49:31.655642Z","last_seen":"2026-06-28T23:49:58.686158Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3578307b011ca67cf8d7ab3490a5fb33","sha1":"47ad0df0fcead11a3312441692d18ca76d345e0b","sha256":"f0243e2923311e7aac973ca39dcd759f02d00941a71ae1f1014caac26654a56c","sha512":"ee7f6f117e61627e145bc51a366330ee411244ca02cd0baf9962818e9b8e60693f9be503c48875c6ebd1c4cd941f37a9c2dd321218f83ad15938f44fe274c4ba","ssdeep":"","tlshash":"c621c15036e2001c40f3919e4fab215138b9204f5a33d807ba5dc99d9fe3f4878ab6bd","size":1399,"data":"","first_seen":"2026-06-19T00:50:06.871081Z","last_seen":"2026-06-25T21:01:22.382162Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9e5abd2e70fa4b3416ec4996f7d4fbd","sha1":"a40b7df1aebbb8065fc04ed7c487c1e03dded722","sha256":"dca931e325e957bf0bfc517cf6810cc60c1730191fa1124e2275a48e33264a6a","sha512":"af761e4881cd4f9367cf696fdcf9c72f1aa87a9bf744b244a0170259522357162e3079b52ff93c81e4fdc1b8b22b14f3aa0982fd445f1340a0f8fae344803b37","ssdeep":"","tlshash":"c2c0229b22720a309ce7436f3ee7620038b100067c02ea001e1c10430da1ec14cb728a","size":190,"data":"","first_seen":"2026-06-07T14:28:51.373038Z","last_seen":"2026-06-25T21:01:22.382625Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/hls.js@latest","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ae7f59caba3da06050e340e3bc6eabe","sha1":"6630916bd20d19139af544fb02f83deb8f21172e","sha256":"442f599c34f103c3355b375a23bdff560592d7117d09a8c847242ea3de2d40e0","sha512":"cc03837752ccfbfe7c49acd7e5f72de69b1e8428a363ad32e6b1b4058233c535e8b7ba2f128d8585f5935749a9e28a8879fdb1ae2ca0e3396b3e59854c370f5e","ssdeep":"6144:ak52zYCo5VplapnQn4RzVt2tFP21Szfmm6faVqKxh7U4StP1BxTFIOMAt2TMQxI4:a259ax7RzT2tFjlVqKxKJd24O9","tlshash":"a6b42aee3695a01683c2b169903f5507633a7d0a284cc12cfa2be9d72d7994db13bf74","size":543002,"data":"","first_seen":"2026-04-14T01:38:26.423115Z","last_seen":"2026-06-28T23:49:58.663538Z","times_seen":1078,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/9.0.0/firebase-messaging.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"014b9c2c350dfc5e0d31e93c6b60f565","sha1":"eb867c93ce7c85c01c5b779f5a79531bb80ca06c","sha256":"032df504250456bb0daf6e720f10364d8cf4d4c6df1acae1c5a8a20f4c94ceb5","sha512":"658d8f5640d933b459686e3ec8272262db631467e281b4c730e93f898aa741a163a8ee27ef4158c1a2bc9275a9f63cfd17ba84cffed0abb5c84743faa6178c8c","ssdeep":"3072:VUYDnOcL9K2dKOv39iSc6UeQyaInH/8FPHeOEyqb7n26+ijxpqUNNnsIqiHCk1+U:VUYDnOcL9K2dKOv3Lc6UeWInf8FP+OEF","tlshash":"71a3c7a97ea16b3307b257beff1bd446f129d11b250a925439acc2c41f3901683e7ee4","size":99953,"data":"","first_seen":"2023-09-23T19:00:17Z","last_seen":"2026-06-28T23:49:58.65434Z","times_seen":597,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3ulwu8fab47va.cloudfront.net/skin/frontend/default/ubuycom-v1/js/lazy.min.js","fqdn":"d3ulwu8fab47va.cloudfront.net","domain":"d3ulwu8fab47va.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.232.126","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4e69ada334a1263febd73f43dc29427","sha1":"a3b97ac87b375dbfc6fe20b5bdd56b43f5920625","sha256":"f7f1f00c13514a32e4338a1c3d416cdf1d45599341d5b11d257da413b2722d2c","sha512":"7b415b6e849c5a992cc8086a8ccba2b9f99407b69d6c70f22dda806b770fb5357f1e7f7615e20fa4f88efa80cc74889382f647c009a60d1930aea622905a6864","ssdeep":"","tlshash":"507160e932d2763bbd631073923bb246b73f21497a060421123d66c52cbc859c777cae","size":3502,"data":"","first_seen":"2023-03-13T16:31:40Z","last_seen":"2026-06-28T23:49:58.635064Z","times_seen":677,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce6d50561adb377430b0197147cfc949","sha1":"68c21f9929c74966096e53b4ca0ec56a0fec5fab","sha256":"e0739266fa29a08d9900cb913688d6f8cf6663c62aa420dd26d86c63acd5a78b","sha512":"98cc573c237376e54b1bb6133dd4ebedf7d16eb08ccc4ea958e9b3035afba82d55f3dc4a46c82672fe7036927333a3c58c883a07dffba212c294f93b2830ae72","ssdeep":"192:ttF36vSwa3cDkiF9t6CDzs8hUCiSc7kHyP0H68+CwlFycJYVAKVHcGDFkAjkqYYQ:ttF3eaMQ6XHz7hU0H684lFyOYHCGxkAu","tlshash":"56326f2964e344fadd333865faff092872e26043b500ee11ba4d129c5f49674a3b67f9","size":11610,"data":"","first_seen":"2026-06-19T08:45:13.472901Z","last_seen":"2026-06-19T08:45:27.744157Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd056c985fb63f803de87803b78edf08","sha1":"6bf6fecca451e59cf3763685abb378b38bb36b86","sha256":"82078e9062d04bde98d7f778c113de87034a1b598755c71c3b168ab2bbc8246f","sha512":"05a8783b478c6fd1dc5af0b84bb7d3a955f2fdda4c1b0a30e6b754c96afd7727cd3130fa8244f894eb6f459eba0307a43e07535c0c3b862203c008be4cad4325","ssdeep":"","tlshash":"ccf0127561b6198890f72d38ffbf92f464937523ea489245792d513b0f0b1a2314313f","size":629,"data":"","first_seen":"2026-05-25T23:49:42.383537Z","last_seen":"2026-06-28T21:28:53.8406Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e49214a2ad0cb0e27330368dc5a65f58","sha1":"bc334eec9f25cf59ec0e37f5455d11ddacc1e50b","sha256":"752a5d46cefd178d30ad3e170d0ed05c02e57ea6a13474e00b47a2c62b357f47","sha512":"7e31f5730c4f0ef91f2902a98b8e0b2eb219df303df0e91a16432fffac40afaee6d7a417e969a32ffba7f9e1cdf6e9252b33662fc8362dd76fe1f072f32a3550","ssdeep":"","tlshash":"9221ad7ae5f5519206bf39387a3f978031723023b089dd807c5d66d12f96c7405667ca","size":1436,"data":"","first_seen":"2026-06-19T08:45:13.476039Z","last_seen":"2026-06-19T08:45:27.746847Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b53ade6cc653dd7be1f784d6b3efcb8","sha1":"0a6b313430ba5c4a642076abc5e515c5158baf06","sha256":"f4ebd381dd3380ef46aed9c1559c6a20851ad8dd00231a81c5cf69f104c41c09","sha512":"ecae503b13b07fc854d627b0feb68db10febc18254317a7335810b8e35ff49793c56e7a18a10aea585ea3c5a8869b97da2ab151e5d7c823209180559a1804a7b","ssdeep":"","tlshash":"9a21ef7db8b10470807778aa96bf7a05617ab95738416a52354d25048f0e52d607deec","size":1368,"data":"","first_seen":"2026-06-19T08:45:13.478847Z","last_seen":"2026-06-19T08:45:27.748242Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6738340566d64d0d3ebbc5a0e9a82e95","sha1":"0124250d2c6739f38e6d1b94a3ee5da1bab33633","sha256":"4e4d1930a55e7d7b42050b2f3372bb94c330397713a8def82e951a597349a64a","sha512":"796e89ec1e4d795ab624c662675328e76172c87eac8f2265eb852e4afdb3721a25dde2d613caf89e7722e075201ea47f004910cff1ae4f77029ddf5b809679c7","ssdeep":"","tlshash":"fac0926aaba228b04277f629062ef6002aaa54c31046cc023f0c81985fe871c5066969","size":133,"data":"","first_seen":"2026-05-25T23:49:42.387121Z","last_seen":"2026-06-28T21:28:53.844226Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd6db8071b7abc8afe46f0dcb3b0c43c","sha1":"272485979abe33d0ba701d69a703d3dd1df81af9","sha256":"2b1ae1c32daf03507d71b60115d4d6dba142c22886a0c1b245ed2779c0ac75f7","sha512":"eb3a95f2dcc8ae90d1fa7ba7a099bd1820234d4b728df862eb131cdcc123649f21c8c0d01a8b3f6e978d1a440c380202a33a424d9bbbb08aea8ca75135ba6edd","ssdeep":"","tlshash":"6bb0112c08ea008000b3a0200a3bba002023b822228b88823a0ca2200f88a380202a2e","size":92,"data":"","first_seen":"2026-05-25T23:49:42.389487Z","last_seen":"2026-06-28T21:28:53.844872Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"41269c5722653600a0f6933196a75fd1","sha1":"864accb448359a9b34b694350ef5f1d5ba889b1c","sha256":"13c06eb8246b508cf54e285cf7433b923333498bc75576fb404a42a5892d574f","sha512":"c70c1fbd9907d268f7db1e52828f14b373f3e5104011fb631af53bbe6b4cbda998c3d53011b9ec06864f571e5b3de8b2bce53cf9724695a25ce6967b211ee812","ssdeep":"","tlshash":"f18000e080f2b02228082802228b232ee00ac83b0030202f80000020088cec80ca20e2","size":29,"data":"","first_seen":"2026-03-08T15:49:31.655642Z","last_seen":"2026-06-28T23:49:58.686158Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3578307b011ca67cf8d7ab3490a5fb33","sha1":"47ad0df0fcead11a3312441692d18ca76d345e0b","sha256":"f0243e2923311e7aac973ca39dcd759f02d00941a71ae1f1014caac26654a56c","sha512":"ee7f6f117e61627e145bc51a366330ee411244ca02cd0baf9962818e9b8e60693f9be503c48875c6ebd1c4cd941f37a9c2dd321218f83ad15938f44fe274c4ba","ssdeep":"","tlshash":"c621c15036e2001c40f3919e4fab215138b9204f5a33d807ba5dc99d9fe3f4878ab6bd","size":1399,"data":"","first_seen":"2026-06-19T00:50:06.871081Z","last_seen":"2026-06-25T21:01:22.382162Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9e5abd2e70fa4b3416ec4996f7d4fbd","sha1":"a40b7df1aebbb8065fc04ed7c487c1e03dded722","sha256":"dca931e325e957bf0bfc517cf6810cc60c1730191fa1124e2275a48e33264a6a","sha512":"af761e4881cd4f9367cf696fdcf9c72f1aa87a9bf744b244a0170259522357162e3079b52ff93c81e4fdc1b8b22b14f3aa0982fd445f1340a0f8fae344803b37","ssdeep":"","tlshash":"c2c0229b22720a309ce7436f3ee7620038b100067c02ea001e1c10430da1ec14cb728a","size":190,"data":"","first_seen":"2026-06-07T14:28:51.373038Z","last_seen":"2026-06-25T21:01:22.382625Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce6d50561adb377430b0197147cfc949","sha1":"68c21f9929c74966096e53b4ca0ec56a0fec5fab","sha256":"e0739266fa29a08d9900cb913688d6f8cf6663c62aa420dd26d86c63acd5a78b","sha512":"98cc573c237376e54b1bb6133dd4ebedf7d16eb08ccc4ea958e9b3035afba82d55f3dc4a46c82672fe7036927333a3c58c883a07dffba212c294f93b2830ae72","ssdeep":"192:ttF36vSwa3cDkiF9t6CDzs8hUCiSc7kHyP0H68+CwlFycJYVAKVHcGDFkAjkqYYQ:ttF3eaMQ6XHz7hU0H684lFyOYHCGxkAu","tlshash":"56326f2964e344fadd333865faff092872e26043b500ee11ba4d129c5f49674a3b67f9","size":11610,"data":"","first_seen":"2026-06-19T08:45:13.472901Z","last_seen":"2026-06-19T08:45:27.744157Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd056c985fb63f803de87803b78edf08","sha1":"6bf6fecca451e59cf3763685abb378b38bb36b86","sha256":"82078e9062d04bde98d7f778c113de87034a1b598755c71c3b168ab2bbc8246f","sha512":"05a8783b478c6fd1dc5af0b84bb7d3a955f2fdda4c1b0a30e6b754c96afd7727cd3130fa8244f894eb6f459eba0307a43e07535c0c3b862203c008be4cad4325","ssdeep":"","tlshash":"ccf0127561b6198890f72d38ffbf92f464937523ea489245792d513b0f0b1a2314313f","size":629,"data":"","first_seen":"2026-05-25T23:49:42.383537Z","last_seen":"2026-06-28T21:28:53.8406Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e49214a2ad0cb0e27330368dc5a65f58","sha1":"bc334eec9f25cf59ec0e37f5455d11ddacc1e50b","sha256":"752a5d46cefd178d30ad3e170d0ed05c02e57ea6a13474e00b47a2c62b357f47","sha512":"7e31f5730c4f0ef91f2902a98b8e0b2eb219df303df0e91a16432fffac40afaee6d7a417e969a32ffba7f9e1cdf6e9252b33662fc8362dd76fe1f072f32a3550","ssdeep":"","tlshash":"9221ad7ae5f5519206bf39387a3f978031723023b089dd807c5d66d12f96c7405667ca","size":1436,"data":"","first_seen":"2026-06-19T08:45:13.476039Z","last_seen":"2026-06-19T08:45:27.746847Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b53ade6cc653dd7be1f784d6b3efcb8","sha1":"0a6b313430ba5c4a642076abc5e515c5158baf06","sha256":"f4ebd381dd3380ef46aed9c1559c6a20851ad8dd00231a81c5cf69f104c41c09","sha512":"ecae503b13b07fc854d627b0feb68db10febc18254317a7335810b8e35ff49793c56e7a18a10aea585ea3c5a8869b97da2ab151e5d7c823209180559a1804a7b","ssdeep":"","tlshash":"9a21ef7db8b10470807778aa96bf7a05617ab95738416a52354d25048f0e52d607deec","size":1368,"data":"","first_seen":"2026-06-19T08:45:13.478847Z","last_seen":"2026-06-19T08:45:27.748242Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6738340566d64d0d3ebbc5a0e9a82e95","sha1":"0124250d2c6739f38e6d1b94a3ee5da1bab33633","sha256":"4e4d1930a55e7d7b42050b2f3372bb94c330397713a8def82e951a597349a64a","sha512":"796e89ec1e4d795ab624c662675328e76172c87eac8f2265eb852e4afdb3721a25dde2d613caf89e7722e075201ea47f004910cff1ae4f77029ddf5b809679c7","ssdeep":"","tlshash":"fac0926aaba228b04277f629062ef6002aaa54c31046cc023f0c81985fe871c5066969","size":133,"data":"","first_seen":"2026-05-25T23:49:42.387121Z","last_seen":"2026-06-28T21:28:53.844226Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd6db8071b7abc8afe46f0dcb3b0c43c","sha1":"272485979abe33d0ba701d69a703d3dd1df81af9","sha256":"2b1ae1c32daf03507d71b60115d4d6dba142c22886a0c1b245ed2779c0ac75f7","sha512":"eb3a95f2dcc8ae90d1fa7ba7a099bd1820234d4b728df862eb131cdcc123649f21c8c0d01a8b3f6e978d1a440c380202a33a424d9bbbb08aea8ca75135ba6edd","ssdeep":"","tlshash":"6bb0112c08ea008000b3a0200a3bba002023b822228b88823a0ca2200f88a380202a2e","size":92,"data":"","first_seen":"2026-05-25T23:49:42.389487Z","last_seen":"2026-06-28T21:28:53.844872Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"41269c5722653600a0f6933196a75fd1","sha1":"864accb448359a9b34b694350ef5f1d5ba889b1c","sha256":"13c06eb8246b508cf54e285cf7433b923333498bc75576fb404a42a5892d574f","sha512":"c70c1fbd9907d268f7db1e52828f14b373f3e5104011fb631af53bbe6b4cbda998c3d53011b9ec06864f571e5b3de8b2bce53cf9724695a25ce6967b211ee812","ssdeep":"","tlshash":"f18000e080f2b02228082802228b232ee00ac83b0030202f80000020088cec80ca20e2","size":29,"data":"","first_seen":"2026-03-08T15:49:31.655642Z","last_seen":"2026-06-28T23:49:58.686158Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3578307b011ca67cf8d7ab3490a5fb33","sha1":"47ad0df0fcead11a3312441692d18ca76d345e0b","sha256":"f0243e2923311e7aac973ca39dcd759f02d00941a71ae1f1014caac26654a56c","sha512":"ee7f6f117e61627e145bc51a366330ee411244ca02cd0baf9962818e9b8e60693f9be503c48875c6ebd1c4cd941f37a9c2dd321218f83ad15938f44fe274c4ba","ssdeep":"","tlshash":"c621c15036e2001c40f3919e4fab215138b9204f5a33d807ba5dc99d9fe3f4878ab6bd","size":1399,"data":"","first_seen":"2026-06-19T00:50:06.871081Z","last_seen":"2026-06-25T21:01:22.382162Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9e5abd2e70fa4b3416ec4996f7d4fbd","sha1":"a40b7df1aebbb8065fc04ed7c487c1e03dded722","sha256":"dca931e325e957bf0bfc517cf6810cc60c1730191fa1124e2275a48e33264a6a","sha512":"af761e4881cd4f9367cf696fdcf9c72f1aa87a9bf744b244a0170259522357162e3079b52ff93c81e4fdc1b8b22b14f3aa0982fd445f1340a0f8fae344803b37","ssdeep":"","tlshash":"c2c0229b22720a309ce7436f3ee7620038b100067c02ea001e1c10430da1ec14cb728a","size":190,"data":"","first_seen":"2026-06-07T14:28:51.373038Z","last_seen":"2026-06-25T21:01:22.382625Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3ulwu8fab47va.cloudfront.net/skin/frontend/default/ubuycom-v1/js/jquery.fancybox.min.js","fqdn":"d3ulwu8fab47va.cloudfront.net","domain":"d3ulwu8fab47va.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.232.126","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"49a6b4d019a934bcf83f0c397eba82d8","sha1":"6181412e73966696d08e1e5b1243a572d0f22ba6","sha256":"cadda460ccb4c3c01bb45f3d5976f63f5adf8dc3ff1d31cb4fbd3ded4f18e5bf","sha512":"b94465f995cc06b17803019a5a611eb73addf89e7ff0d464580bc9c79b1b3d24ae39bd1b64ba9ffad3b39e239b3b4d018c76bf743ee0b9bf6808630b3d01ed40","ssdeep":"1536:HVzfGevmRzMMdZfupgfjJ3kNEO261NyYMk5Sl5BSENlfmqxGcTJ7PBTf:hfGevmRzMMdZfupgbJ3klNyYMZlvIqxH","tlshash":"5863089eb710742582bb15a4a30f610ed1377526f10285f378add4951ae4fc822ebffa","size":68253,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-06-29T00:07:18.350387Z","times_seen":26564,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/9.0.0/firebase-app.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c99c874f74e637d140a84766df57cd10","sha1":"3329babafc2111b33c8b4890c3e2af41ec60851a","sha256":"5e9cdd32964e163a820836651c676894629b25cbfb7d07d0e8f03e9e0eba28b5","sha512":"6affcb687c409db332b10e35d5593e27bcb9645e8a91bb99e01606278e34e8349f7d297854a50f3479848967c2a6e690e3a2ef2f3e9d3e0f7e0c0ea16cdf5b87","ssdeep":"1536:kU6r7C/855dRXLJ7kik5kv7XvrzPVIfakRrW:kUn855dRX9Xvrz9IfZRrW","tlshash":"9a43b93d6bd5257206b223bdaf2be88af27d412b564691c03cacd2d04f7641942e6fe4","size":60620,"data":"","first_seen":"2023-09-23T19:00:17Z","last_seen":"2026-06-28T23:49:58.633698Z","times_seen":1209,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3ulwu8fab47va.cloudfront.net/skin/frontend/default/ubuycom-v1/js/script-menu-min.js?v=4.4.74","fqdn":"d3ulwu8fab47va.cloudfront.net","domain":"d3ulwu8fab47va.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.232.126","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6233c54d8c15f0e3321b029d7cd00664","sha1":"cf06b29b92c75aab4f568ea4a15cfa7f3dad2007","sha256":"d38601dcfca426f1912d66190913458d06981089b77dc21eb17e184bb0cc27a7","sha512":"6cde4a28b8e9a8980ed63bbd945d263cf0ec05e333f0d6485e793af7fbe57ae5fc95ad55a0603d84b79d7b8fdf38edf8619a3216ba4d3655791c0643474ea2f6","ssdeep":"48:kMoTf0RARv0RARQXkicWc1S/xXxOfLEVX9EYzEQW0WCEuB01u7BxmpMfz8uU8pnb:GTf+yv+ygES/7Cuv","tlshash":"c991c086660098f814f2c1e1f977b7b1301f8526bf694440f16aa1713d2ecdd16b76a9","size":4506,"data":"","first_seen":"2023-03-13T07:21:17Z","last_seen":"2026-06-28T23:49:58.646406Z","times_seen":619,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce6d50561adb377430b0197147cfc949","sha1":"68c21f9929c74966096e53b4ca0ec56a0fec5fab","sha256":"e0739266fa29a08d9900cb913688d6f8cf6663c62aa420dd26d86c63acd5a78b","sha512":"98cc573c237376e54b1bb6133dd4ebedf7d16eb08ccc4ea958e9b3035afba82d55f3dc4a46c82672fe7036927333a3c58c883a07dffba212c294f93b2830ae72","ssdeep":"192:ttF36vSwa3cDkiF9t6CDzs8hUCiSc7kHyP0H68+CwlFycJYVAKVHcGDFkAjkqYYQ:ttF3eaMQ6XHz7hU0H684lFyOYHCGxkAu","tlshash":"56326f2964e344fadd333865faff092872e26043b500ee11ba4d129c5f49674a3b67f9","size":11610,"data":"","first_seen":"2026-06-19T08:45:13.472901Z","last_seen":"2026-06-19T08:45:27.744157Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd056c985fb63f803de87803b78edf08","sha1":"6bf6fecca451e59cf3763685abb378b38bb36b86","sha256":"82078e9062d04bde98d7f778c113de87034a1b598755c71c3b168ab2bbc8246f","sha512":"05a8783b478c6fd1dc5af0b84bb7d3a955f2fdda4c1b0a30e6b754c96afd7727cd3130fa8244f894eb6f459eba0307a43e07535c0c3b862203c008be4cad4325","ssdeep":"","tlshash":"ccf0127561b6198890f72d38ffbf92f464937523ea489245792d513b0f0b1a2314313f","size":629,"data":"","first_seen":"2026-05-25T23:49:42.383537Z","last_seen":"2026-06-28T21:28:53.8406Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e49214a2ad0cb0e27330368dc5a65f58","sha1":"bc334eec9f25cf59ec0e37f5455d11ddacc1e50b","sha256":"752a5d46cefd178d30ad3e170d0ed05c02e57ea6a13474e00b47a2c62b357f47","sha512":"7e31f5730c4f0ef91f2902a98b8e0b2eb219df303df0e91a16432fffac40afaee6d7a417e969a32ffba7f9e1cdf6e9252b33662fc8362dd76fe1f072f32a3550","ssdeep":"","tlshash":"9221ad7ae5f5519206bf39387a3f978031723023b089dd807c5d66d12f96c7405667ca","size":1436,"data":"","first_seen":"2026-06-19T08:45:13.476039Z","last_seen":"2026-06-19T08:45:27.746847Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b53ade6cc653dd7be1f784d6b3efcb8","sha1":"0a6b313430ba5c4a642076abc5e515c5158baf06","sha256":"f4ebd381dd3380ef46aed9c1559c6a20851ad8dd00231a81c5cf69f104c41c09","sha512":"ecae503b13b07fc854d627b0feb68db10febc18254317a7335810b8e35ff49793c56e7a18a10aea585ea3c5a8869b97da2ab151e5d7c823209180559a1804a7b","ssdeep":"","tlshash":"9a21ef7db8b10470807778aa96bf7a05617ab95738416a52354d25048f0e52d607deec","size":1368,"data":"","first_seen":"2026-06-19T08:45:13.478847Z","last_seen":"2026-06-19T08:45:27.748242Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6738340566d64d0d3ebbc5a0e9a82e95","sha1":"0124250d2c6739f38e6d1b94a3ee5da1bab33633","sha256":"4e4d1930a55e7d7b42050b2f3372bb94c330397713a8def82e951a597349a64a","sha512":"796e89ec1e4d795ab624c662675328e76172c87eac8f2265eb852e4afdb3721a25dde2d613caf89e7722e075201ea47f004910cff1ae4f77029ddf5b809679c7","ssdeep":"","tlshash":"fac0926aaba228b04277f629062ef6002aaa54c31046cc023f0c81985fe871c5066969","size":133,"data":"","first_seen":"2026-05-25T23:49:42.387121Z","last_seen":"2026-06-28T21:28:53.844226Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd6db8071b7abc8afe46f0dcb3b0c43c","sha1":"272485979abe33d0ba701d69a703d3dd1df81af9","sha256":"2b1ae1c32daf03507d71b60115d4d6dba142c22886a0c1b245ed2779c0ac75f7","sha512":"eb3a95f2dcc8ae90d1fa7ba7a099bd1820234d4b728df862eb131cdcc123649f21c8c0d01a8b3f6e978d1a440c380202a33a424d9bbbb08aea8ca75135ba6edd","ssdeep":"","tlshash":"6bb0112c08ea008000b3a0200a3bba002023b822228b88823a0ca2200f88a380202a2e","size":92,"data":"","first_seen":"2026-05-25T23:49:42.389487Z","last_seen":"2026-06-28T21:28:53.844872Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"41269c5722653600a0f6933196a75fd1","sha1":"864accb448359a9b34b694350ef5f1d5ba889b1c","sha256":"13c06eb8246b508cf54e285cf7433b923333498bc75576fb404a42a5892d574f","sha512":"c70c1fbd9907d268f7db1e52828f14b373f3e5104011fb631af53bbe6b4cbda998c3d53011b9ec06864f571e5b3de8b2bce53cf9724695a25ce6967b211ee812","ssdeep":"","tlshash":"f18000e080f2b02228082802228b232ee00ac83b0030202f80000020088cec80ca20e2","size":29,"data":"","first_seen":"2026-03-08T15:49:31.655642Z","last_seen":"2026-06-28T23:49:58.686158Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3578307b011ca67cf8d7ab3490a5fb33","sha1":"47ad0df0fcead11a3312441692d18ca76d345e0b","sha256":"f0243e2923311e7aac973ca39dcd759f02d00941a71ae1f1014caac26654a56c","sha512":"ee7f6f117e61627e145bc51a366330ee411244ca02cd0baf9962818e9b8e60693f9be503c48875c6ebd1c4cd941f37a9c2dd321218f83ad15938f44fe274c4ba","ssdeep":"","tlshash":"c621c15036e2001c40f3919e4fab215138b9204f5a33d807ba5dc99d9fe3f4878ab6bd","size":1399,"data":"","first_seen":"2026-06-19T00:50:06.871081Z","last_seen":"2026-06-25T21:01:22.382162Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9e5abd2e70fa4b3416ec4996f7d4fbd","sha1":"a40b7df1aebbb8065fc04ed7c487c1e03dded722","sha256":"dca931e325e957bf0bfc517cf6810cc60c1730191fa1124e2275a48e33264a6a","sha512":"af761e4881cd4f9367cf696fdcf9c72f1aa87a9bf744b244a0170259522357162e3079b52ff93c81e4fdc1b8b22b14f3aa0982fd445f1340a0f8fae344803b37","ssdeep":"","tlshash":"c2c0229b22720a309ce7436f3ee7620038b100067c02ea001e1c10430da1ec14cb728a","size":190,"data":"","first_seen":"2026-06-07T14:28:51.373038Z","last_seen":"2026-06-25T21:01:22.382625Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce6d50561adb377430b0197147cfc949","sha1":"68c21f9929c74966096e53b4ca0ec56a0fec5fab","sha256":"e0739266fa29a08d9900cb913688d6f8cf6663c62aa420dd26d86c63acd5a78b","sha512":"98cc573c237376e54b1bb6133dd4ebedf7d16eb08ccc4ea958e9b3035afba82d55f3dc4a46c82672fe7036927333a3c58c883a07dffba212c294f93b2830ae72","ssdeep":"192:ttF36vSwa3cDkiF9t6CDzs8hUCiSc7kHyP0H68+CwlFycJYVAKVHcGDFkAjkqYYQ:ttF3eaMQ6XHz7hU0H684lFyOYHCGxkAu","tlshash":"56326f2964e344fadd333865faff092872e26043b500ee11ba4d129c5f49674a3b67f9","size":11610,"data":"","first_seen":"2026-06-19T08:45:13.472901Z","last_seen":"2026-06-19T08:45:27.744157Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd056c985fb63f803de87803b78edf08","sha1":"6bf6fecca451e59cf3763685abb378b38bb36b86","sha256":"82078e9062d04bde98d7f778c113de87034a1b598755c71c3b168ab2bbc8246f","sha512":"05a8783b478c6fd1dc5af0b84bb7d3a955f2fdda4c1b0a30e6b754c96afd7727cd3130fa8244f894eb6f459eba0307a43e07535c0c3b862203c008be4cad4325","ssdeep":"","tlshash":"ccf0127561b6198890f72d38ffbf92f464937523ea489245792d513b0f0b1a2314313f","size":629,"data":"","first_seen":"2026-05-25T23:49:42.383537Z","last_seen":"2026-06-28T21:28:53.8406Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e49214a2ad0cb0e27330368dc5a65f58","sha1":"bc334eec9f25cf59ec0e37f5455d11ddacc1e50b","sha256":"752a5d46cefd178d30ad3e170d0ed05c02e57ea6a13474e00b47a2c62b357f47","sha512":"7e31f5730c4f0ef91f2902a98b8e0b2eb219df303df0e91a16432fffac40afaee6d7a417e969a32ffba7f9e1cdf6e9252b33662fc8362dd76fe1f072f32a3550","ssdeep":"","tlshash":"9221ad7ae5f5519206bf39387a3f978031723023b089dd807c5d66d12f96c7405667ca","size":1436,"data":"","first_seen":"2026-06-19T08:45:13.476039Z","last_seen":"2026-06-19T08:45:27.746847Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b53ade6cc653dd7be1f784d6b3efcb8","sha1":"0a6b313430ba5c4a642076abc5e515c5158baf06","sha256":"f4ebd381dd3380ef46aed9c1559c6a20851ad8dd00231a81c5cf69f104c41c09","sha512":"ecae503b13b07fc854d627b0feb68db10febc18254317a7335810b8e35ff49793c56e7a18a10aea585ea3c5a8869b97da2ab151e5d7c823209180559a1804a7b","ssdeep":"","tlshash":"9a21ef7db8b10470807778aa96bf7a05617ab95738416a52354d25048f0e52d607deec","size":1368,"data":"","first_seen":"2026-06-19T08:45:13.478847Z","last_seen":"2026-06-19T08:45:27.748242Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6738340566d64d0d3ebbc5a0e9a82e95","sha1":"0124250d2c6739f38e6d1b94a3ee5da1bab33633","sha256":"4e4d1930a55e7d7b42050b2f3372bb94c330397713a8def82e951a597349a64a","sha512":"796e89ec1e4d795ab624c662675328e76172c87eac8f2265eb852e4afdb3721a25dde2d613caf89e7722e075201ea47f004910cff1ae4f77029ddf5b809679c7","ssdeep":"","tlshash":"fac0926aaba228b04277f629062ef6002aaa54c31046cc023f0c81985fe871c5066969","size":133,"data":"","first_seen":"2026-05-25T23:49:42.387121Z","last_seen":"2026-06-28T21:28:53.844226Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd6db8071b7abc8afe46f0dcb3b0c43c","sha1":"272485979abe33d0ba701d69a703d3dd1df81af9","sha256":"2b1ae1c32daf03507d71b60115d4d6dba142c22886a0c1b245ed2779c0ac75f7","sha512":"eb3a95f2dcc8ae90d1fa7ba7a099bd1820234d4b728df862eb131cdcc123649f21c8c0d01a8b3f6e978d1a440c380202a33a424d9bbbb08aea8ca75135ba6edd","ssdeep":"","tlshash":"6bb0112c08ea008000b3a0200a3bba002023b822228b88823a0ca2200f88a380202a2e","size":92,"data":"","first_seen":"2026-05-25T23:49:42.389487Z","last_seen":"2026-06-28T21:28:53.844872Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"41269c5722653600a0f6933196a75fd1","sha1":"864accb448359a9b34b694350ef5f1d5ba889b1c","sha256":"13c06eb8246b508cf54e285cf7433b923333498bc75576fb404a42a5892d574f","sha512":"c70c1fbd9907d268f7db1e52828f14b373f3e5104011fb631af53bbe6b4cbda998c3d53011b9ec06864f571e5b3de8b2bce53cf9724695a25ce6967b211ee812","ssdeep":"","tlshash":"f18000e080f2b02228082802228b232ee00ac83b0030202f80000020088cec80ca20e2","size":29,"data":"","first_seen":"2026-03-08T15:49:31.655642Z","last_seen":"2026-06-28T23:49:58.686158Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3578307b011ca67cf8d7ab3490a5fb33","sha1":"47ad0df0fcead11a3312441692d18ca76d345e0b","sha256":"f0243e2923311e7aac973ca39dcd759f02d00941a71ae1f1014caac26654a56c","sha512":"ee7f6f117e61627e145bc51a366330ee411244ca02cd0baf9962818e9b8e60693f9be503c48875c6ebd1c4cd941f37a9c2dd321218f83ad15938f44fe274c4ba","ssdeep":"","tlshash":"c621c15036e2001c40f3919e4fab215138b9204f5a33d807ba5dc99d9fe3f4878ab6bd","size":1399,"data":"","first_seen":"2026-06-19T00:50:06.871081Z","last_seen":"2026-06-25T21:01:22.382162Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9e5abd2e70fa4b3416ec4996f7d4fbd","sha1":"a40b7df1aebbb8065fc04ed7c487c1e03dded722","sha256":"dca931e325e957bf0bfc517cf6810cc60c1730191fa1124e2275a48e33264a6a","sha512":"af761e4881cd4f9367cf696fdcf9c72f1aa87a9bf744b244a0170259522357162e3079b52ff93c81e4fdc1b8b22b14f3aa0982fd445f1340a0f8fae344803b37","ssdeep":"","tlshash":"c2c0229b22720a309ce7436f3ee7620038b100067c02ea001e1c10430da1ec14cb728a","size":190,"data":"","first_seen":"2026-06-07T14:28:51.373038Z","last_seen":"2026-06-25T21:01:22.382625Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ubuy.com.kh/ubuycom/assets/v5/custom_js/custom.js?v=4.4.74","fqdn":"www.ubuy.com.kh","domain":"ubuy.com.kh","tld":"com.kh"},"ip":{"addr":"13.249.8.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"148655c0fe385806d238efada757383b","sha1":"21b8162f2016a46ec7b588427538cf1d5b12012d","sha256":"3424533d1f8cb2a6903d2c6c2c1c81937bdee61ed70b625dc81ec694bb35878c","sha512":"33863cc093773de2b1fd6c8c2801a9f6112b7699d0404523b4d96a0941f94a57baf2044747ea128b28f8a37fd19e9080822ba524e73b64f2010db5c8f87a9141","ssdeep":"768:0GtthkATENPJE5Taux+ygtK+o9HPJAM6+MVs0GeqFOx5WJXa1aOtUO0HltK+h2aC:0GT0Gmn6iz","tlshash":"bab2a61869f314f990bf38a8fb7f669434f62403f14adf00b91d52854f42a7862766be","size":24892,"data":"","first_seen":"2026-02-28T06:50:54.91155Z","last_seen":"2026-06-28T23:49:58.650668Z","times_seen":435,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/Chart.js/2.9.4/Chart.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b1ae20c4c7048d6e4a1b2e1aee7fb31","sha1":"a8fd71abfa918872c9f06a068ab5b6dd883dcfe4","sha256":"b7d5093eb11205e1b6a2329321c14b3c617b9c78b6bc473b7f90362a91ff5015","sha512":"77dc6066b559a6699095fa2785052f4d1ee530fb4eecd9193240340013773c709b280e67ab2950ff25a5140c98ea1620745d5087a9d88ae0035b0281e02d964b","ssdeep":"1536:MVbALpXqXw2YlYHHMXnB0Zz7u1W2jnsgQgU67gppZdyS5iz3XE5nSyC9KvGUVBbh:kEttVXa67gbSenSBiRyKcpn5o","tlshash":"c80419cc73c1712686a722a4552f110ee23b7954290b8a84f276d4d66c7ca8f71bfe3d","size":173077,"data":"","first_seen":"2023-03-07T15:55:43Z","last_seen":"2026-06-28T23:49:58.631582Z","times_seen":1468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce6d50561adb377430b0197147cfc949","sha1":"68c21f9929c74966096e53b4ca0ec56a0fec5fab","sha256":"e0739266fa29a08d9900cb913688d6f8cf6663c62aa420dd26d86c63acd5a78b","sha512":"98cc573c237376e54b1bb6133dd4ebedf7d16eb08ccc4ea958e9b3035afba82d55f3dc4a46c82672fe7036927333a3c58c883a07dffba212c294f93b2830ae72","ssdeep":"192:ttF36vSwa3cDkiF9t6CDzs8hUCiSc7kHyP0H68+CwlFycJYVAKVHcGDFkAjkqYYQ:ttF3eaMQ6XHz7hU0H684lFyOYHCGxkAu","tlshash":"56326f2964e344fadd333865faff092872e26043b500ee11ba4d129c5f49674a3b67f9","size":11610,"data":"","first_seen":"2026-06-19T08:45:13.472901Z","last_seen":"2026-06-19T08:45:27.744157Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd056c985fb63f803de87803b78edf08","sha1":"6bf6fecca451e59cf3763685abb378b38bb36b86","sha256":"82078e9062d04bde98d7f778c113de87034a1b598755c71c3b168ab2bbc8246f","sha512":"05a8783b478c6fd1dc5af0b84bb7d3a955f2fdda4c1b0a30e6b754c96afd7727cd3130fa8244f894eb6f459eba0307a43e07535c0c3b862203c008be4cad4325","ssdeep":"","tlshash":"ccf0127561b6198890f72d38ffbf92f464937523ea489245792d513b0f0b1a2314313f","size":629,"data":"","first_seen":"2026-05-25T23:49:42.383537Z","last_seen":"2026-06-28T21:28:53.8406Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e49214a2ad0cb0e27330368dc5a65f58","sha1":"bc334eec9f25cf59ec0e37f5455d11ddacc1e50b","sha256":"752a5d46cefd178d30ad3e170d0ed05c02e57ea6a13474e00b47a2c62b357f47","sha512":"7e31f5730c4f0ef91f2902a98b8e0b2eb219df303df0e91a16432fffac40afaee6d7a417e969a32ffba7f9e1cdf6e9252b33662fc8362dd76fe1f072f32a3550","ssdeep":"","tlshash":"9221ad7ae5f5519206bf39387a3f978031723023b089dd807c5d66d12f96c7405667ca","size":1436,"data":"","first_seen":"2026-06-19T08:45:13.476039Z","last_seen":"2026-06-19T08:45:27.746847Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b53ade6cc653dd7be1f784d6b3efcb8","sha1":"0a6b313430ba5c4a642076abc5e515c5158baf06","sha256":"f4ebd381dd3380ef46aed9c1559c6a20851ad8dd00231a81c5cf69f104c41c09","sha512":"ecae503b13b07fc854d627b0feb68db10febc18254317a7335810b8e35ff49793c56e7a18a10aea585ea3c5a8869b97da2ab151e5d7c823209180559a1804a7b","ssdeep":"","tlshash":"9a21ef7db8b10470807778aa96bf7a05617ab95738416a52354d25048f0e52d607deec","size":1368,"data":"","first_seen":"2026-06-19T08:45:13.478847Z","last_seen":"2026-06-19T08:45:27.748242Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6738340566d64d0d3ebbc5a0e9a82e95","sha1":"0124250d2c6739f38e6d1b94a3ee5da1bab33633","sha256":"4e4d1930a55e7d7b42050b2f3372bb94c330397713a8def82e951a597349a64a","sha512":"796e89ec1e4d795ab624c662675328e76172c87eac8f2265eb852e4afdb3721a25dde2d613caf89e7722e075201ea47f004910cff1ae4f77029ddf5b809679c7","ssdeep":"","tlshash":"fac0926aaba228b04277f629062ef6002aaa54c31046cc023f0c81985fe871c5066969","size":133,"data":"","first_seen":"2026-05-25T23:49:42.387121Z","last_seen":"2026-06-28T21:28:53.844226Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd6db8071b7abc8afe46f0dcb3b0c43c","sha1":"272485979abe33d0ba701d69a703d3dd1df81af9","sha256":"2b1ae1c32daf03507d71b60115d4d6dba142c22886a0c1b245ed2779c0ac75f7","sha512":"eb3a95f2dcc8ae90d1fa7ba7a099bd1820234d4b728df862eb131cdcc123649f21c8c0d01a8b3f6e978d1a440c380202a33a424d9bbbb08aea8ca75135ba6edd","ssdeep":"","tlshash":"6bb0112c08ea008000b3a0200a3bba002023b822228b88823a0ca2200f88a380202a2e","size":92,"data":"","first_seen":"2026-05-25T23:49:42.389487Z","last_seen":"2026-06-28T21:28:53.844872Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"41269c5722653600a0f6933196a75fd1","sha1":"864accb448359a9b34b694350ef5f1d5ba889b1c","sha256":"13c06eb8246b508cf54e285cf7433b923333498bc75576fb404a42a5892d574f","sha512":"c70c1fbd9907d268f7db1e52828f14b373f3e5104011fb631af53bbe6b4cbda998c3d53011b9ec06864f571e5b3de8b2bce53cf9724695a25ce6967b211ee812","ssdeep":"","tlshash":"f18000e080f2b02228082802228b232ee00ac83b0030202f80000020088cec80ca20e2","size":29,"data":"","first_seen":"2026-03-08T15:49:31.655642Z","last_seen":"2026-06-28T23:49:58.686158Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3578307b011ca67cf8d7ab3490a5fb33","sha1":"47ad0df0fcead11a3312441692d18ca76d345e0b","sha256":"f0243e2923311e7aac973ca39dcd759f02d00941a71ae1f1014caac26654a56c","sha512":"ee7f6f117e61627e145bc51a366330ee411244ca02cd0baf9962818e9b8e60693f9be503c48875c6ebd1c4cd941f37a9c2dd321218f83ad15938f44fe274c4ba","ssdeep":"","tlshash":"c621c15036e2001c40f3919e4fab215138b9204f5a33d807ba5dc99d9fe3f4878ab6bd","size":1399,"data":"","first_seen":"2026-06-19T00:50:06.871081Z","last_seen":"2026-06-25T21:01:22.382162Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9e5abd2e70fa4b3416ec4996f7d4fbd","sha1":"a40b7df1aebbb8065fc04ed7c487c1e03dded722","sha256":"dca931e325e957bf0bfc517cf6810cc60c1730191fa1124e2275a48e33264a6a","sha512":"af761e4881cd4f9367cf696fdcf9c72f1aa87a9bf744b244a0170259522357162e3079b52ff93c81e4fdc1b8b22b14f3aa0982fd445f1340a0f8fae344803b37","ssdeep":"","tlshash":"c2c0229b22720a309ce7436f3ee7620038b100067c02ea001e1c10430da1ec14cb728a","size":190,"data":"","first_seen":"2026-06-07T14:28:51.373038Z","last_seen":"2026-06-25T21:01:22.382625Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"d2ati23fc66y9j.cloudfront.net/ubuycom-v1/images/loading.gif","fqdn":"d2ati23fc66y9j.cloudfront.net","domain":"d2ati23fc66y9j.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.164.230.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.574Z","timestamp":1781858677574,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /ubuycom-v1/images/loading.gif HTTP/1.1\r\nHost: d2ati23fc66y9j.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/gif\r\ncontent-length: 24981\r\ndate: Wed, 06 May 2026 08:14:57 GMT\r\nlast-modified: Mon, 15 Jan 2024 11:55:29 GMT\r\netag: \"561578ba8ab749a373ed5e96a608f3c4\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ab37fc2d73bd6e477f5652b6cb140162.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: lGMqehJBJ4x6293b2pfRAIKnRLi5vnlsHy5Ibp1L6EAUV_0mAIvW1Q==\r\nage: 3803383\r\ncache-control: public, max-age=3888000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":24981,"size_decoded":25531,"mime_type":"image/gif","magic":"GIF image data, version 89a, 30 x 30","md5":"561578ba8ab749a373ed5e96a608f3c4","sha1":"0905b1c1ad00b8acb0a567965194e961d52e9515","sha256":"c0b0b7afc6a894b48b1ba3e8373639b5e715af1f597ce8e54e7180761c3ebacb","sha512":"1d942edf1438a66f23cd7c8588446d526c4520de1a31bef2ece86f0d6533c9f10c1f21f2572e16ddd4a72eb8e4cace916c82b04526d4b8b970d09320a361c444","ssdeep":"768:bOhzPNgdg1tQHqf3RIk5kT7W2XWWfsPA9x:qhpgdmQw5khXKY9x","tlshash":"42b2a007554e580e69bdeb69e8b80b4ec0f4c23784c514de64c9fd1d7c592e8814e79f","first_seen":"2024-05-08T12:32:58Z","last_seen":"2026-06-28T21:28:11.947313Z","times_seen":553,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":19,"receive":0,"ssl":244},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mautaudewa.com/lgodewa/DLL/iconin.png","fqdn":"mautaudewa.com","domain":"mautaudewa.com","tld":"com"},"ip":{"addr":"198.252.100.226","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.581Z","timestamp":1781858677581,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mautaudewa.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 12:45:49 GMT","end":"Thu, 06 Aug 2026 12:45:48 GMT"},"fingerprint":{"sha1":"FB:3B:A4:23:4E:03:2F:1E:38:65:71:1F:59:0A:38:F5:E4:47:B5:8F","sha256":"8B:43:D9:1F:03:5A:11:32:3D:BE:28:4E:39:03:69:F1:64:50:68:31:48:58:89:9C:23:A4:A8:16:3B:99:FC:5C"}}},"request":{"raw":"GET /lgodewa/DLL/iconin.png HTTP/1.1\r\nHost: mautaudewa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 08:44:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 20 Jun 2024 23:58:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3665\r\ndate: Fri, 19 Jun 2026 08:44:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3665,"size_decoded":3950,"mime_type":"image/png","magic":"PNG image data, 43 x 43, 8-bit/color RGBA, non-interlaced","md5":"c0e6cd7889011625debbdb2d7a696e30","sha1":"39c0ab1297930a0a4def878e1c3c7e2078758c2f","sha256":"bb36c2a0686cb76f21c0d6e01141c85e82f9e1e2cc4ded2a2cc01cd5c433e99b","sha512":"ffd7f4d96de07bdd15f4a6e56d21a56db28ecc47c04cb7cd2cb253b7308a85087adb02c5f09368aa68d5414b306a436562334344cf282941d8742dacfc90d88d","ssdeep":"","tlshash":"11719d9076810ff9f86eae29d58956828891e21103022c3ef7e6f1b7737ff2057ca844","first_seen":"2023-11-20T23:26:46Z","last_seen":"2026-06-19T08:45:27.714321Z","times_seen":711,"resource_available":false,"data":null}},"time_used":1006,"timings":{"blocked":175,"dns":0,"connect":132,"send":0,"wait":513,"receive":44,"ssl":142},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3ulwu8fab47va.cloudfront.net/skin/frontend/default/ubuycom-v1/js/lazy.min.js","fqdn":"d3ulwu8fab47va.cloudfront.net","domain":"d3ulwu8fab47va.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.232.126","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.504Z","timestamp":1781858677504,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /skin/frontend/default/ubuycom-v1/js/lazy.min.js HTTP/1.1\r\nHost: d3ulwu8fab47va.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ndate: Sun, 31 May 2026 02:58:59 GMT\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nserver: nginx\r\nlast-modified: Wed, 24 Mar 2021 06:40:33 GMT\r\netag: W/\"605adee1-dae\"\r\nexpires: Wed, 26 May 2027 02:58:59 GMT\r\ncache-control: max-age=31104000, no-store, no-cache, must-revalidate, max-age=0, s-maxage=0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\npermissions-policy: *\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 283a3ebaefd33728d45267e54657c3e2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: CsFvVKankv_FIWNWD9uIXWEYC3deqUDh6AVo7CrqnCVG-lQBOddmtQ==\r\nage: 1662338\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":3502,"size_decoded":2065,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3501)","md5":"b4e69ada334a1263febd73f43dc29427","sha1":"a3b97ac87b375dbfc6fe20b5bdd56b43f5920625","sha256":"f7f1f00c13514a32e4338a1c3d416cdf1d45599341d5b11d257da413b2722d2c","sha512":"7b415b6e849c5a992cc8086a8ccba2b9f99407b69d6c70f22dda806b770fb5357f1e7f7615e20fa4f88efa80cc74889382f647c009a60d1930aea622905a6864","ssdeep":"","tlshash":"507160e932d2763bbd631073923bb246b73f21497a060421123d66c52cbc859c777cae","first_seen":"2023-03-13T16:31:40Z","last_seen":"2026-06-28T23:49:58.635064Z","times_seen":677,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":24,"connect":8,"send":0,"wait":14,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2ati23fc66y9j.cloudfront.net/ubuycom/assets/v5/images/explore-icon.svg","fqdn":"d2ati23fc66y9j.cloudfront.net","domain":"d2ati23fc66y9j.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.164.230.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.550Z","timestamp":1781858677550,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /ubuycom/assets/v5/images/explore-icon.svg HTTP/1.1\r\nHost: d2ati23fc66y9j.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 403\r\nlast-modified: Wed, 18 Jun 2025 08:56:26 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Thu, 18 Jun 2026 18:57:52 GMT\r\netag: \"0609d35bf588bc5f9a93363ae00e2e6d\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ab37fc2d73bd6e477f5652b6cb140162.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: uMT1b6qwSAE9oksRCF9wWSd9osLsNvvQBHO61tPZRYAzQ5PJ2ZA7CA==\r\nage: 115760\r\ncache-control: public, max-age=3888000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":403,"size_decoded":954,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0609d35bf588bc5f9a93363ae00e2e6d","sha1":"1fbdc100029c7edc57c9b4527d49030161b39fad","sha256":"f1ff3447b57c8efa9dd9060d763592539b5f45bbbd8457e4cb18ae8e634de720","sha512":"2c4a3bbcb745aa3c0bc973a7691d2fbb3adbe6cb074a63cb3e797283b6749e9ae0ed4de8afa70b08e4614cc8d914f49c0f2ed8a8b6caca19e39246b5abffb2a5","ssdeep":"","tlshash":"80e0681a23040c7cf8728a20c74d3abd40332543129d2a8cccb220391808acf2c3f7dc","first_seen":"2025-08-12T01:52:57.109534Z","last_seen":"2026-06-28T23:49:58.64434Z","times_seen":603,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":17,"receive":0,"ssl":243},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2ati23fc66y9j.cloudfront.net/sprite-img/homepage-sprite.webp","fqdn":"d2ati23fc66y9j.cloudfront.net","domain":"d2ati23fc66y9j.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.164.230.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.596Z","timestamp":1781858677596,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /sprite-img/homepage-sprite.webp HTTP/1.1\r\nHost: d2ati23fc66y9j.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/webp\r\ncontent-length: 159346\r\nlast-modified: Wed, 01 Apr 2026 11:13:59 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 25 May 2026 10:13:49 GMT\r\netag: \"703e181d23346c95c5b1170f97f32d04\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ab37fc2d73bd6e477f5652b6cb140162.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: qlDTKRBGaDrj3DSPLGEqQubWCg1bEBQXFQ9rrqBAENcxg5OUqIeV2A==\r\nage: 2187928\r\ncache-control: public, max-age=3888000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":159346,"size_decoded":159898,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"703e181d23346c95c5b1170f97f32d04","sha1":"e6e84f655bd4cb124fa1d8738da02ae779574bbf","sha256":"4af01109aeb4ce73f1ee596f5cc7cd6ce2def6c5a0249127c941654a52862468","sha512":"01d80c702500963922a94fc3cd514927919e1b22ba50858da42efc87c273b17ffa5d0617d1177125fe8ddd9b2e833761470cd63e74a6939971dec4d3d4d18d46","ssdeep":"3072:xvXiL3nmgDntcqjQ8lamg6y37dSmgLu5Gx1YC7rQhnW22BnSKluEetjm:5ynmg53QUJ64mHidMW22B36tS","tlshash":"2df3134bb98ce43a651117616792bf9a24139628df1d73d064c62f239f0368f6be7833","first_seen":"2026-04-01T13:30:10.221912Z","last_seen":"2026-06-28T23:49:58.627925Z","times_seen":311,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":11,"receive":19,"ssl":234},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ubuyanalytics.ubuy.com/ubuywebanalytics/webtrack/js/velocity.min.js?v=1.54","fqdn":"ubuyanalytics.ubuy.com","domain":"ubuy.com","tld":"com"},"ip":{"addr":"104.18.8.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.517Z","timestamp":1781858677517,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 07:30:21 GMT","end":"Sat, 22 Aug 2026 08:30:00 GMT"},"fingerprint":{"sha1":"9A:59:76:A7:BE:24:4C:C5:E8:37:A9:7D:5E:E9:33:0A:93:16:AA:67","sha256":"FE:C8:DF:D4:28:E4:D3:40:AD:48:1C:E5:81:DE:E1:7A:E7:97:42:29:5E:C7:6E:43:3E:D6:85:D7:5F:0C:38:C5"}}},"request":{"raw":"GET /ubuywebanalytics/webtrack/js/velocity.min.js?v=1.54 HTTP/1.1\r\nHost: ubuyanalytics.ubuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 08:44:37 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 0\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nlast-modified: Mon, 04 May 2026 12:35:50 GMT\r\netag: \"69f892a6-0\"\r\nexpires: Thu, 29 Apr 2027 12:40:25 GMT\r\ncache-control: max-age=31104000\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 8cada61dd7719c6c0ad123c11e1964f6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: FRA56-P15\r\nx-amz-cf-id: IjGJsJZR3it09Mmkc2XjKmlf7eXsOqfGNfG_c9Yl8pL6RVM7QH8Kgw==\r\nset-cookie: __cf_bm=CyoQLYcm29aFMPtTpRs_JdItoAQcEH78bXZgigyh9LU-1781858677.563155-1.0.1.1-cezKnBJmaZ0AFnwwlc6KQOBYgnDjaWnE1_tHU03h8xl2130nFDB62bLxn7PSPO.vETkX_CYDdxR4iexnGoOcvyYCrTF6YKoxkqUBXplzc3..ePmb8hp9Fuo0t6XWslVO; HttpOnly; SameSite=None; Secure; Path=/; Domain=ubuy.com; Expires=Fri, 19 Jun 2026 09:14:37 GMT\r\nage: 3960252\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncf-ray: a0e140becf8856c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1016,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T00:32:18.388813Z","times_seen":16809459,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":11,"connect":2,"send":0,"wait":26,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgstore.io/images/2025/03/19/ovo.webp","fqdn":"imgstore.io","domain":"imgstore.io","tld":"io"},"ip":{"addr":"172.67.186.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.560Z","timestamp":1781858677560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgstore.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 May 2026 07:28:32 GMT","end":"Mon, 03 Aug 2026 08:26:00 GMT"},"fingerprint":{"sha1":"E6:DF:B7:0C:A6:D6:1E:A7:2B:FE:02:DA:1E:F4:3F:20:6C:2A:A4:E5","sha256":"D0:43:BB:29:9D:FB:A5:AD:2F:32:9A:A2:36:F6:AD:AE:9F:DB:56:4E:5E:29:61:7F:87:3D:68:9F:CF:D2:8E:EF"}}},"request":{"raw":"GET /images/2025/03/19/ovo.webp HTTP/1.1\r\nHost: imgstore.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 19 Jun 2026 08:44:37 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 19 Mar 2025 07:02:31 GMT\r\netag: \"312-630ac9ae70f1d\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KohdPqcrJM%2FwqJx7F5pd621N02SsDcmVxBWdRK7R1yU5yoipL0quiY7KocHe6ok1vfwCFUXNTlgg5wby%2BVHEukvfc14BlFWvaJStgT1m4P54ZpeWGHiBok4kwFgyMw%3D%3D\"}]}\r\nage: 6182\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-length: 786\r\ncf-ray: a0e140bf3dfb5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":786,"size_decoded":1458,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3ca3696b554bb0d828e55b0dcb5ff4e4","sha1":"62ad0a576a11b29b487242f670022f881c20cf93","sha256":"2b12a2718379e49ed07ec90351a500f24a9d483c5ac86b983e4084f4c5ef3817","sha512":"51e304368fe938665386df116e184dd7435956d5ae60de31597521bdeee4f24eba248f0bc1402772ab0ee288b88d9cf81b4f49323cdd156a18b7620143853031","ssdeep":"","tlshash":"d001ba74d28e3013f832f11519910f4974cfaa8108f70c138bd2176855425ba65b07d1","first_seen":"2025-05-06T11:50:24.030888Z","last_seen":"2026-06-28T23:49:58.673718Z","times_seen":280,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rspelvicpt.com/","fqdn":"rspelvicpt.com","domain":"rspelvicpt.com","tld":"com"},"ip":{"addr":"104.21.19.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-19T08:44:36.800Z","timestamp":1781858676800,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rspelvicpt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Jun 2026 10:53:58 GMT","end":"Fri, 11 Sep 2026 11:52:24 GMT"},"fingerprint":{"sha1":"37:24:F9:75:21:62:5F:DF:E9:E5:FC:FB:91:B3:04:C0:6E:05:C5:E6","sha256":"07:C0:83:A2:DE:A4:56:36:F2:E2:6F:11:B6:84:B8:F5:7E:94:5B:77:F0:0E:8D:08:57:74:5F:61:A7:F8:6F:37"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rspelvicpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 08:44:37 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Jun 2026 13:35:46 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jWNFL7ZZDryIZY7LmQ%2BqrVEPOuI3C70mkE19yN6QDtdy%2BmTCdOxHVr6%2FAk0tGDpXq7UgXkXnbxze76Eq%2FLf9O5mYWgyprZBkZTS2ctwZWGLparIpvQw2mNrPzAJhZXdPOQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a0e140ba2b644c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Chart.js:2.9.4","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Magento:1 (enterprise)","description":"Magento is an open-source ecommerce platform written in PHP.","website":"https://magento.com","common_platform_enumeration":"cpe:2.3:a:magento:magento:*:*:*:*:*:*:*:*","icon":"Magento.svg","categories":["Ecommerce","CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Firebase:9.0.0","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":621253,"size_decoded":114079,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (61344)","md5":"0a79d048b73900ffb1751ec4c4d66ad5","sha1":"22d408aad272cb881f3da4b31f4cfad0d5c31633","sha256":"f62e6020b6ff8e4ca37e30345aafe9c0bd2e7f187ec2d9fde2333bd5c2880507","sha512":"47670706e6301f3859b852328c9c2a6652d2c8528220841ab4f1099dfde1c6b7027f41b8a4c7c662b5289fb48405778323b953491b0f1d41e83c240048a5c16d","ssdeep":"12288:b+e/UGvxTfP5D2TgBIKpCdy/GYffvKdrCHc285:zZjx2CVpCdy/GYffidrt285","tlshash":"5ed4a6e2e4a410e9b727c95fe6817bbc3939f112d2420da5f01fab1c8fc56d506a2b5c","first_seen":"2026-06-19T08:45:13.408323Z","last_seen":"2026-06-19T08:45:27.733195Z","times_seen":2,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":10,"connect":1,"send":0,"wait":230,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d24epxax9d77vm.cloudfront.net/ubuycom/assets/v5/fonts/poppins-webfont/poppins-regular.woff2","fqdn":"d24epxax9d77vm.cloudfront.net","domain":"d24epxax9d77vm.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.232.180","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.537Z","timestamp":1781858677537,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /ubuycom/assets/v5/fonts/poppins-webfont/poppins-regular.woff2 HTTP/1.1\r\nHost: d24epxax9d77vm.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rspelvicpt.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: font/woff2\r\ncontent-length: 52396\r\ndate: Thu, 04 Jun 2026 05:06:21 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-expose-headers: Access-Control-Allow-Origin, Access-Control-Allow-Headers\r\nlast-modified: Thu, 27 Feb 2025 11:52:12 GMT\r\netag: \"c9a238baa6cdfb5b15be66844f250158\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 41ce182e8f343263845579fafd1af6b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: 7VZOp9tcXgSRhK5o2600sb6lMU415PUti5QqXl3q7tZ6wo2QdKh5JA==\r\nage: 1309097\r\ncache-control: public, max-age=3888000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":52396,"size_decoded":53096,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 52396, version 1.0","md5":"c9a238baa6cdfb5b15be66844f250158","sha1":"4927b3c89019e9b3d2e573cb515600fe00d30c2b","sha256":"4d4b447c3b4a45dcbc496bb678eda1409f8f76f74de9216b3c40f688cf16c261","sha512":"19201a12f32c750d127430e168a227328f9d4eaf358f796ea4e58cff23e2da8571610dd4ad0eaf9a30ac0a3bfa7cac27e319befbcb5934143f9a1bc26726fbcb","ssdeep":"1536:vHWe0zY4oNgm0DCSWFvmHHD4XFUIpauf+uK:vHW7oGDhceH0FdYuml","tlshash":"ac33020b2bc2249da9d1de5c05ee86816526a7bd40405ecdb96ecf3ea7bb40b334d7c1","first_seen":"2025-05-15T20:10:07.371762Z","last_seen":"2026-06-28T23:49:58.657422Z","times_seen":677,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":12,"connect":8,"send":0,"wait":11,"receive":7,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d24epxax9d77vm.cloudfront.net/ubuycom/assets/v5/fonts/poppins-webfont/poppins-extraBold.woff2","fqdn":"d24epxax9d77vm.cloudfront.net","domain":"d24epxax9d77vm.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.232.180","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.543Z","timestamp":1781858677543,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /ubuycom/assets/v5/fonts/poppins-webfont/poppins-extraBold.woff2 HTTP/1.1\r\nHost: d24epxax9d77vm.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rspelvicpt.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: font/woff2\r\ncontent-length: 50492\r\ndate: Mon, 25 May 2026 06:11:57 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-expose-headers: Access-Control-Allow-Origin, Access-Control-Allow-Headers\r\nlast-modified: Thu, 27 Feb 2025 11:52:10 GMT\r\netag: \"b92666266bd48f47de66cbdae881b1d2\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 41ce182e8f343263845579fafd1af6b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: mu1eUtvbQ16EESsBNQy4Lnj3EX-OZL-ULpE3i8shtY2VojgDRyqgPg==\r\nage: 2169161\r\ncache-control: public, max-age=3888000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":50492,"size_decoded":51192,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50492, version 1.0","md5":"b92666266bd48f47de66cbdae881b1d2","sha1":"2c937346606dcf7a5224fa6eef50e18fc3dceb82","sha256":"7c7fd857ca3716d26140f5d92d13cea81fbe9661c7d51caff16f0935e6ce3713","sha512":"e8aca34b83e159d6fd6a777cb8e87e42f62d7bd89a9d4ab5e6881afafddeeb625dc633c5dc76266fe4331e491208c5ef373cdeeff966cf4dc7ea116469404b06","ssdeep":"1536:CRfdDlRNNle7rCHlPvmsgXJV0E9hDmL/Cahuan:ChTLFAFiE9hDmL6ahLn","tlshash":"f23302297681245fd6c5bff1b2302a190e3a552bde5b3506e8313f2c35f9da06468f36","first_seen":"2023-04-11T01:32:27Z","last_seen":"2026-06-28T23:49:58.671974Z","times_seen":830,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":7,"connect":9,"send":0,"wait":10,"receive":5,"ssl":241},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgstore.io/images/2025/03/19/qris.webp","fqdn":"imgstore.io","domain":"imgstore.io","tld":"io"},"ip":{"addr":"172.67.186.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.557Z","timestamp":1781858677557,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgstore.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 May 2026 07:28:32 GMT","end":"Mon, 03 Aug 2026 08:26:00 GMT"},"fingerprint":{"sha1":"E6:DF:B7:0C:A6:D6:1E:A7:2B:FE:02:DA:1E:F4:3F:20:6C:2A:A4:E5","sha256":"D0:43:BB:29:9D:FB:A5:AD:2F:32:9A:A2:36:F6:AD:AE:9F:DB:56:4E:5E:29:61:7F:87:3D:68:9F:CF:D2:8E:EF"}}},"request":{"raw":"GET /images/2025/03/19/qris.webp HTTP/1.1\r\nHost: imgstore.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 19 Jun 2026 08:44:37 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 19 Mar 2025 07:02:31 GMT\r\netag: \"28e-630ac9adf4ec1\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rl8EpMloGU0wxz6mson%2B%2F%2BVhKccPtoHwu5GGQx%2B4QeQ3xluxqBIf3M%2FYFAe%2BIGd%2Fti%2FM8kVBgUSL52Cc110gGrTDCyKoq3Bs3xG2Q60DxYE6bH2%2FEvltJ5IJzgLZOg%3D%3D\"}]}\r\nage: 6181\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-length: 654\r\ncf-ray: a0e140bf3df85a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":654,"size_decoded":1340,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c6b96f19e11eae750408b390bab36e0f","sha1":"64b182942717036329e5671009a138eaffbf8259","sha256":"d24bff547a8b87e585e5766c3162c50942db73b20da413fa96013a81f669b273","sha512":"d1589a9b17b65392d5b37ebe3e94d3f262aa426d67136e9f7baec12b80a336d96a26750c8beaf74183394f823c1c7ab20179f8f85e8e302d7dd85927053c0259","ssdeep":"","tlshash":"37f083e28b944801f41338fe1163088a30ea2a22e640b40eabe2c0866db8e0db184829","first_seen":"2025-05-06T11:50:24.036388Z","last_seen":"2026-06-28T23:49:58.670083Z","times_seen":290,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":11,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgstore.io/images/2025/12/20/mandiri.png","fqdn":"imgstore.io","domain":"imgstore.io","tld":"io"},"ip":{"addr":"172.67.186.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.562Z","timestamp":1781858677562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgstore.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 May 2026 07:28:32 GMT","end":"Mon, 03 Aug 2026 08:26:00 GMT"},"fingerprint":{"sha1":"E6:DF:B7:0C:A6:D6:1E:A7:2B:FE:02:DA:1E:F4:3F:20:6C:2A:A4:E5","sha256":"D0:43:BB:29:9D:FB:A5:AD:2F:32:9A:A2:36:F6:AD:AE:9F:DB:56:4E:5E:29:61:7F:87:3D:68:9F:CF:D2:8E:EF"}}},"request":{"raw":"GET /images/2025/12/20/mandiri.png HTTP/1.1\r\nHost: imgstore.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 19 Jun 2026 08:44:37 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 20 Dec 2025 13:07:20 GMT\r\netag: \"194b-64661dfc4e0dc\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mjI4TXmwQC7GB98mxqoC3jnxXjM2KVwshkavbVDyKzE27l4MNfKCqI%2FinTSgvDMLIksSoBhQ0rQgw6FnxJRN0RILT%2FvcOQHimBzlBzJQNkQXZemJe5DFib4KT1wUHg%3D%3D\"}]}\r\ncontent-type: image/png\r\nage: 6181\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-length: 6475\r\ncf-ray: a0e140bf3dfa5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6475,"size_decoded":7174,"mime_type":"image/png","magic":"PNG image data, 138 x 40, 8-bit/color RGBA, interlaced","md5":"facc62fec030c26029feafecd5bc05d2","sha1":"0e0c185cf54d86f7a12d099e239d2a976a21174d","sha256":"1fb2859e054d0780a970f2fba01bc914944bafea1d04556e97e8487beeda78b4","sha512":"1e0c98f5cd66570ed76ca78b1d4c8914d5d6a994e9efc9410581c6be0e4564fcee32d37be70b85e3b9c641bb5af0bd7f87ebaedf98f5c446fe70c8e5141aa277","ssdeep":"192:n1aXOoJyAd213E9SIJ6w4nc138gPQUT4h534m0oaK:IXnJE1UMDTct8gRMhim00","tlshash":"a2d18d2b16e223318022895759dc6f12b73a40a4e7971b28904de689078fc25763ebbe","first_seen":"2025-11-01T00:20:45.252823Z","last_seen":"2026-06-28T23:49:58.620588Z","times_seen":284,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"veldrive.com/eDXbB5kB/LGODEWA/olimpyus.webp","fqdn":"veldrive.com","domain":"veldrive.com","tld":"com"},"ip":{"addr":"172.67.192.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.590Z","timestamp":1781858677590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"veldrive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 19:52:35 GMT","end":"Wed, 09 Sep 2026 20:52:14 GMT"},"fingerprint":{"sha1":"00:04:56:75:5F:34:FE:C0:C8:D5:FA:B1:07:C3:F6:17:A4:2A:7C:E6","sha256":"F4:3F:85:2E:5D:50:4B:FB:6A:FA:6F:F3:FC:20:8E:B7:7C:70:72:84:9F:91:B4:3A:10:2F:DC:9E:24:E2:6E:6F"}}},"request":{"raw":"GET /eDXbB5kB/LGODEWA/olimpyus.webp HTTP/1.1\r\nHost: veldrive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 08:44:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1657400\r\nserver: cloudflare\r\nx-powered-by: PHP/8.3.31, PleskLin\r\nvary: Sec-Fetch-Mode,Sec-Fetch-Dest,Accept\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: public, max-age=14400, immutable\r\ncontent-disposition: inline; filename=\"olimpyus.webp\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 19 Jun 2026 08:44:37 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wUojcLKB7NgzpEELW5ucz2w3Dc8PTRZ9s3c4TAGlYWO8%2F91ZOTaqld%2FT6Qs2L0q5Yflwn0eJmh6n72%2Flw1TRn5fLXKoxWySR61XPfqyLHPJvWt2Ec3kXBE4TViZ0%2FmU%3D\"}]}\r\ncf-ray: a0e140bf7dcfb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1657400,"size_decoded":1658324,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e6f0c76144c2938961b0aa4a552783af","sha1":"854a12185cec79bf679cf8ef5add816c5a96c181","sha256":"9f989f7e534a24db46ba66272e23eb6364d2476c65b6193285278559ceefdcb0","sha512":"018246aedf8f1107d07ddba2e6a8f4744f38d7828bdaecab92fc0b57e858368758850f2fb1d632404b27bc5309a771075b88b83148777fa361fdba308887d935","ssdeep":"24576:y+PM3mmLWW1QKDITb2t94/Tt1YiJxUInITwQi3bnh639T0zQkw:ytmylWKDyjrt1YibUIw2rh6tT0z3w","tlshash":"132533111fc7c796efde5874054e2ba40c6ed639d4cef94b2d2ae642af3b600ed42624","first_seen":"2026-03-24T20:30:41.907066Z","last_seen":"2026-06-28T23:49:58.648608Z","times_seen":38,"resource_available":false,"data":null}},"time_used":1306,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":211,"receive":1077,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mautaudewa.com/lgodewa/dede.jpg","fqdn":"mautaudewa.com","domain":"mautaudewa.com","tld":"com"},"ip":{"addr":"198.252.100.226","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.489Z","timestamp":1781858677489,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mautaudewa.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 12:45:49 GMT","end":"Thu, 06 Aug 2026 12:45:48 GMT"},"fingerprint":{"sha1":"FB:3B:A4:23:4E:03:2F:1E:38:65:71:1F:59:0A:38:F5:E4:47:B5:8F","sha256":"8B:43:D9:1F:03:5A:11:32:3D:BE:28:4E:39:03:69:F1:64:50:68:31:48:58:89:9C:23:A4:A8:16:3B:99:FC:5C"}}},"request":{"raw":"GET /lgodewa/dede.jpg HTTP/1.1\r\nHost: mautaudewa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 08:44:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 17 Feb 2025 23:43:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 115986\r\ndate: Fri, 19 Jun 2026 08:44:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":115986,"size_decoded":116452,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1080, components 3","md5":"d217374be13efcc53d1d9920e036f535","sha1":"5ab595085ff20915cfd7d83998125ed7b5e95353","sha256":"78b214824c3a1bab8d0179d4a55b2ab8655213741df8a3e4cf42d1321150b09b","sha512":"5c881066eaf9c3aaa642e931b71a05d790bd34369d6b7bc801b2118315fa8d66b0062f15e66e4e236ac4f6017fee0bd774ac515abab2222aded6ed0e7deacf28","ssdeep":"3072:LtJ+dPW1/A76JQD8zBbxXA+OOuE9DG/c/Z0DwpoCs:JJ+qykBJRfX9Sion","tlshash":"44b312e30f00cb55ce2adb75449a0fb254674ee7cde2be671812ea6491121b43af4ef1","first_seen":"2026-05-11T07:31:37.084912Z","last_seen":"2026-06-19T08:45:27.734757Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1141,"timings":{"blocked":-1,"dns":218,"connect":131,"send":0,"wait":262,"receive":262,"ssl":267},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3ulwu8fab47va.cloudfront.net/skin/frontend/default/ubuycom-v1/js/script-menu-min.js?v=4.4.74","fqdn":"d3ulwu8fab47va.cloudfront.net","domain":"d3ulwu8fab47va.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.232.126","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.502Z","timestamp":1781858677502,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /skin/frontend/default/ubuycom-v1/js/script-menu-min.js?v=4.4.74 HTTP/1.1\r\nHost: d3ulwu8fab47va.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ndate: Sat, 30 May 2026 13:35:45 GMT\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nserver: nginx\r\nlast-modified: Sat, 26 Nov 2022 09:26:00 GMT\r\netag: W/\"6381dba8-119a\"\r\nexpires: Tue, 25 May 2027 13:35:45 GMT\r\ncache-control: max-age=31104000, no-store, no-cache, must-revalidate, max-age=0, s-maxage=0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\npermissions-policy: *\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 283a3ebaefd33728d45267e54657c3e2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: u5C6s-aEbaftVm6kSU9NbmbBYM2CZROTD3jHvGhw3TMESvOshAyBsQ==\r\nage: 1710533\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4506,"size_decoded":1854,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4506), with no line terminators","md5":"6233c54d8c15f0e3321b029d7cd00664","sha1":"cf06b29b92c75aab4f568ea4a15cfa7f3dad2007","sha256":"d38601dcfca426f1912d66190913458d06981089b77dc21eb17e184bb0cc27a7","sha512":"6cde4a28b8e9a8980ed63bbd945d263cf0ec05e333f0d6485e793af7fbe57ae5fc95ad55a0603d84b79d7b8fdf38edf8619a3216ba4d3655791c0643474ea2f6","ssdeep":"48:kMoTf0RARv0RARQXkicWc1S/xXxOfLEVX9EYzEQW0WCEuB01u7BxmpMfz8uU8pnb:GTf+yv+ygES/7Cuv","tlshash":"c991c086660098f814f2c1e1f977b7b1301f8526bf694440f16aa1713d2ecdd16b76a9","first_seen":"2023-03-13T07:21:17Z","last_seen":"2026-06-28T23:49:58.646406Z","times_seen":619,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3ulwu8fab47va.cloudfront.net/skin/frontend/default/ubuycom-v1/js/jquery.fancybox.min.js","fqdn":"d3ulwu8fab47va.cloudfront.net","domain":"d3ulwu8fab47va.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.232.126","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.509Z","timestamp":1781858677509,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /skin/frontend/default/ubuycom-v1/js/jquery.fancybox.min.js HTTP/1.1\r\nHost: d3ulwu8fab47va.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ndate: Sat, 06 Jun 2026 15:02:07 GMT\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nserver: nginx\r\nlast-modified: Mon, 26 Apr 2021 09:09:23 GMT\r\netag: W/\"60868343-10a9d\"\r\nexpires: Tue, 01 Jun 2027 15:02:07 GMT\r\ncache-control: max-age=31104000, no-store, no-cache, must-revalidate, max-age=0, s-maxage=0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\npermissions-policy: *\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 283a3ebaefd33728d45267e54657c3e2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: pVtuS6x9sOCtF0cltEu0omv45EOqVChbELpRLn44U9YM-v7lT4gENQ==\r\nage: 1100549\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68253,"size_decoded":22807,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31972)","md5":"49a6b4d019a934bcf83f0c397eba82d8","sha1":"6181412e73966696d08e1e5b1243a572d0f22ba6","sha256":"cadda460ccb4c3c01bb45f3d5976f63f5adf8dc3ff1d31cb4fbd3ded4f18e5bf","sha512":"b94465f995cc06b17803019a5a611eb73addf89e7ff0d464580bc9c79b1b3d24ae39bd1b64ba9ffad3b39e239b3b4d018c76bf743ee0b9bf6808630b3d01ed40","ssdeep":"1536:HVzfGevmRzMMdZfupgfjJ3kNEO261NyYMk5Sl5BSENlfmqxGcTJ7PBTf:hfGevmRzMMdZfupgbJ3klNyYMZlvIqxH","tlshash":"5863089eb710742582bb15a4a30f610ed1377526f10285f378add4951ae4fc822ebffa","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-06-29T00:07:18.350387Z","times_seen":26564,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":19,"connect":8,"send":0,"wait":11,"receive":0,"ssl":231},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/9.0.0/firebase-app.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.521Z","timestamp":1781858677521,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /firebasejs/9.0.0/firebase-app.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rspelvicpt.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 13090\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 06:41:48 GMT\r\nexpires: Fri, 18 Jun 2027 06:41:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 93769\r\nlast-modified: Wed, 25 Aug 2021 16:18:01 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":60620,"size_decoded":13978,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF, LF line terminators","md5":"c99c874f74e637d140a84766df57cd10","sha1":"3329babafc2111b33c8b4890c3e2af41ec60851a","sha256":"5e9cdd32964e163a820836651c676894629b25cbfb7d07d0e8f03e9e0eba28b5","sha512":"6affcb687c409db332b10e35d5593e27bcb9645e8a91bb99e01606278e34e8349f7d297854a50f3479848967c2a6e690e3a2ef2f3e9d3e0f7e0c0ea16cdf5b87","ssdeep":"1536:kU6r7C/855dRXLJ7kik5kv7XvrzPVIfakRrW:kUn855dRX9Xvrz9IfZRrW","tlshash":"9a43b93d6bd5257206b223bdaf2be88af27d412b564691c03cacd2d04f7641942e6fe4","first_seen":"2023-09-23T19:00:17Z","last_seen":"2026-06-28T23:49:58.633698Z","times_seen":1209,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":1,"connect":18,"send":0,"wait":17,"receive":3,"ssl":262},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d24epxax9d77vm.cloudfront.net/ubuycom/assets/v5/fonts/poppins-webfont/fa-brands-400.woff2","fqdn":"d24epxax9d77vm.cloudfront.net","domain":"d24epxax9d77vm.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.232.180","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.547Z","timestamp":1781858677547,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /ubuycom/assets/v5/fonts/poppins-webfont/fa-brands-400.woff2 HTTP/1.1\r\nHost: d24epxax9d77vm.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rspelvicpt.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: font/woff2\r\ncontent-length: 101088\r\ndate: Fri, 29 May 2026 08:28:43 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-expose-headers: Access-Control-Allow-Origin, Access-Control-Allow-Headers\r\nlast-modified: Fri, 25 Jul 2025 09:51:34 GMT\r\netag: \"ed1903192eade544e6c2205902b678e4\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 41ce182e8f343263845579fafd1af6b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: 9qTjosgS3RlX3DldxQuKE449ajrBJHsFZRHFEnwqQrXXRVr5wIojHg==\r\nage: 1815355\r\ncache-control: public, max-age=3888000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":101088,"size_decoded":101789,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 101088, version 896.256","md5":"ed1903192eade544e6c2205902b678e4","sha1":"a225a588336ef6110e541a64cefcb16cd4118a97","sha256":"a288b58f2364e3b318277c20f4aa96889b875bf2595776ba3a0c1adc800c2d3c","sha512":"dec95e648960ae8e8108b5a605c022f307cfb3d006bcd6e8651b2bdc1afc9fcf13b670201c125d2e148a2116ed3500eefbca0ca967cdd3b4174fdb9e135d2ff3","ssdeep":"1536:OqmYmByrpkJ72NfJbIFo+ExGG5uFrIZplaRfGjI18sKzeirkRzVRrPpRVC:lpkN2cfETZplaZuC8dDryVRY","tlshash":"daa312f248760156ebf1f3bc11072628ab971f745561a3db6e4927ea3a3280c6c725cf","first_seen":"2025-08-01T08:46:10.916889Z","last_seen":"2026-06-28T23:49:58.659444Z","times_seen":1009,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mautaudewa.com/lgodewa/DLL/iconpromo.png","fqdn":"mautaudewa.com","domain":"mautaudewa.com","tld":"com"},"ip":{"addr":"198.252.100.226","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.579Z","timestamp":1781858677579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mautaudewa.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 12:45:49 GMT","end":"Thu, 06 Aug 2026 12:45:48 GMT"},"fingerprint":{"sha1":"FB:3B:A4:23:4E:03:2F:1E:38:65:71:1F:59:0A:38:F5:E4:47:B5:8F","sha256":"8B:43:D9:1F:03:5A:11:32:3D:BE:28:4E:39:03:69:F1:64:50:68:31:48:58:89:9C:23:A4:A8:16:3B:99:FC:5C"}}},"request":{"raw":"GET /lgodewa/DLL/iconpromo.png HTTP/1.1\r\nHost: mautaudewa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 08:44:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 20 Jun 2024 23:58:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5383\r\ndate: Fri, 19 Jun 2026 08:44:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5383,"size_decoded":5826,"mime_type":"image/png","magic":"PNG image data, 70 x 73, 8-bit/color RGBA, non-interlaced","md5":"e0b626196df5705a0765d47d7d8ee65a","sha1":"daae031e23f8eb757f56cd2dce4f7d38eaa4e2d2","sha256":"52ab983bca1d88d81648bde076f8e92b6c01fa832b07e4ccc7d549731626e080","sha512":"16ecb3ba8c4a0c7423bd4c40ed7c0a4ac483e64f50e9cba99ca63666040a6f25b8b2265cf971e52d1b0a5a90d7a81c0a8bb22df7c82399a588092ac19764e2ba","ssdeep":"96:u5XZGd99Yzfls1Ni71HFrpfChVqdAkg9pgoNP6wcYEEVfLJYT:GG79Yz8wTp6hc3g9pgEP6wcYEkT0","tlshash":"54b1aec3b5c80bf9c072ad0ad80a4193d842e3d082930729dbf4bab67377b6041c7598","first_seen":"2023-11-20T23:26:46Z","last_seen":"2026-06-20T21:32:36.359087Z","times_seen":499,"resource_available":false,"data":null}},"time_used":1088,"timings":{"blocked":-1,"dns":126,"connect":132,"send":0,"wait":132,"receive":0,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mautaudewa.com/lgodewa/favicon.png","fqdn":"mautaudewa.com","domain":"mautaudewa.com","tld":"com"},"ip":{"addr":"198.252.100.226","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:38.888Z","timestamp":1781858678888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mautaudewa.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 12:45:49 GMT","end":"Thu, 06 Aug 2026 12:45:48 GMT"},"fingerprint":{"sha1":"FB:3B:A4:23:4E:03:2F:1E:38:65:71:1F:59:0A:38:F5:E4:47:B5:8F","sha256":"8B:43:D9:1F:03:5A:11:32:3D:BE:28:4E:39:03:69:F1:64:50:68:31:48:58:89:9C:23:A4:A8:16:3B:99:FC:5C"}}},"request":{"raw":"GET /lgodewa/favicon.png HTTP/1.1\r\nHost: mautaudewa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 08:44:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 Apr 2024 10:02:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 772\r\ndate: Fri, 19 Jun 2026 08:44:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":772,"size_decoded":1036,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"878a9ee1c24c11a1b3f4f25e80c15982","sha1":"bd4e157124ff3a964b35a17ca33bfd632fa0d70a","sha256":"67ebb58bae86b0aee67406d228c76c8225c87e9aabc6a1ff7b5753f5836a82bf","sha512":"008ce5b2faf7496cbf3db58be41952d2a1c026ba2536b5bd1bcbfb1c70f34872401e2ec3da418a1c086328cb20e4d050abe74fc9a3236f2aa63ecb55073d6f01","ssdeep":"","tlshash":"48017580455e635d4a29f8f34f21a7d2213c724cb3608670f60a960e3bd08ab926917a","first_seen":"2025-02-08T02:10:34.29135Z","last_seen":"2026-06-19T08:45:27.666491Z","times_seen":11,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d24epxax9d77vm.cloudfront.net/ubuycom/assets/v5/fonts/poppins-webfont/poppins-semibold.woff2","fqdn":"d24epxax9d77vm.cloudfront.net","domain":"d24epxax9d77vm.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.232.180","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.533Z","timestamp":1781858677533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /ubuycom/assets/v5/fonts/poppins-webfont/poppins-semibold.woff2 HTTP/1.1\r\nHost: d24epxax9d77vm.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rspelvicpt.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: font/woff2\r\ncontent-length: 52184\r\ndate: Mon, 25 May 2026 06:15:46 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-expose-headers: Access-Control-Allow-Origin, Access-Control-Allow-Headers\r\nlast-modified: Thu, 27 Feb 2025 11:52:14 GMT\r\netag: \"298bda2b1a275a5206f852b1326ef976\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 41ce182e8f343263845579fafd1af6b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: OX6VXCPLT4YfpnOF-PrZOG9Aq64JCAIgFzbVYAda4xKIcKu96qx1cw==\r\nage: 2168932\r\ncache-control: public, max-age=3888000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":52184,"size_decoded":52884,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 52184, version 1.0","md5":"298bda2b1a275a5206f852b1326ef976","sha1":"44bcbf667ce575ce95f18331461ae9327819c858","sha256":"4bd0925efb7c7cf94942e1d74eb36e5c75e4cc84cfe9a0dfc950abc065f4ee92","sha512":"f227d945e4a2eff9159b7c1153a25d89dcce938f603ec5bd07e08719e4d30b2260f7e4e2de2e8dc71cdd417620d9eab2d6540c97946375309998366ca96b0826","ssdeep":"768:r0LO8NBuNSsPFze/kvhZbj6P5Orp88Ok6hg7SVV8HBHqXzPeR+9:IzuwEFzrvhiOckAMf6t","tlshash":"b23302c2c875d23cd973382272e1beba59e869af98fa1000e32fd85cc53be5941ce545","first_seen":"2025-05-15T20:10:07.320019Z","last_seen":"2026-06-28T23:49:58.665469Z","times_seen":677,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":14,"connect":10,"send":0,"wait":16,"receive":1,"ssl":238},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d24epxax9d77vm.cloudfront.net/ubuycom/assets/v5/fonts/poppins-webfont/fa-solid-900.woff2","fqdn":"d24epxax9d77vm.cloudfront.net","domain":"d24epxax9d77vm.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.232.180","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.539Z","timestamp":1781858677539,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /ubuycom/assets/v5/fonts/poppins-webfont/fa-solid-900.woff2 HTTP/1.1\r\nHost: d24epxax9d77vm.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rspelvicpt.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: font/woff2\r\ncontent-length: 113108\r\ndate: Mon, 25 May 2026 06:12:10 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-expose-headers: Access-Control-Allow-Origin, Access-Control-Allow-Headers\r\nlast-modified: Fri, 25 Jul 2025 08:34:37 GMT\r\netag: \"18dd0b25bda3d372b262b08edeed525a\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 41ce182e8f343263845579fafd1af6b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: pcRlLfCid7T8kowTZRexbhoUs2xkkqu1JF7wXvJ8ZCl5G8BgaIISrw==\r\nage: 2169148\r\ncache-control: public, max-age=3888000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":113108,"size_decoded":113809,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 113108, version 896.256","md5":"18dd0b25bda3d372b262b08edeed525a","sha1":"f5f3d18d4b9d3e7f339fbdcc8ad1975657665f91","sha256":"2a84ae47aa8183257edf08360986803a809a2ea0c34c3c7229562c62c15c9ff2","sha512":"c92b6b02a92617dafd6d97878606701c164ab493bd69c4471ec3fa988a9ae91844ce2811652760e6f374609033b90c53a5296694b5f0e8c878feac3fecc5a8ed","ssdeep":"3072:hKMlWEYViOUZ1aqsOq1AZkM/nDZ+JpQIn:hKOcaZ0qC1AZzV+JpN","tlshash":"d0b302f00e53a712f3ee8f96c9d9ccf86109aa3384179995b7b151cd580e7cb9092b86","first_seen":"2025-08-01T08:46:11.041732Z","last_seen":"2026-06-28T23:49:58.652575Z","times_seen":1578,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":10,"connect":9,"send":0,"wait":11,"receive":3,"ssl":239},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d24epxax9d77vm.cloudfront.net/ubuycom/assets/v5/fonts/poppins-webfont/poppins-medium.woff2","fqdn":"d24epxax9d77vm.cloudfront.net","domain":"d24epxax9d77vm.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.232.180","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.542Z","timestamp":1781858677542,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /ubuycom/assets/v5/fonts/poppins-webfont/poppins-medium.woff2 HTTP/1.1\r\nHost: d24epxax9d77vm.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rspelvicpt.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: font/woff2\r\ncontent-length: 51560\r\ndate: Mon, 25 May 2026 06:12:10 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-expose-headers: Access-Control-Allow-Origin, Access-Control-Allow-Headers\r\nlast-modified: Thu, 27 Feb 2025 11:52:12 GMT\r\netag: \"294cf3e633c24313a4e78f799fd30d49\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 41ce182e8f343263845579fafd1af6b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: pUyBOMkz9wDhxiACkIgmgQecVsmtePDAYIdI5zio37u9no8gIO-Chw==\r\nage: 2169148\r\ncache-control: public, max-age=3888000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":51560,"size_decoded":52260,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51560, version 1.0","md5":"294cf3e633c24313a4e78f799fd30d49","sha1":"bf725e62bf1faa14eaa513e772ab2ca9cc386a87","sha256":"a7415a2d91793d8fc95e2109a53bac7c95d462b02b4114b64f7ad792148eabc3","sha512":"14d3bd089ca53f89fe95969d1e4f14ea2936beeb57d40dc14b8652268447146a61a4a7ec586fa6a545b917211daf7552bfa8ac855a596cdef506e5fdaaa39e63","ssdeep":"1536:7ppNASYxJG1aqh1e/tx8AwdlO7A9pLeLjSVIC:7nYxJGd7e/t7X294Sr","tlshash":"e533f29b8c7e76193416b1b1ca4b8eb267c81ea9e81d226f4546f6dcd89093f0d10dcf","first_seen":"2025-05-15T20:10:07.337017Z","last_seen":"2026-06-28T23:49:58.671075Z","times_seen":676,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":8,"connect":9,"send":0,"wait":10,"receive":1,"ssl":233},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/Chart.js/2.9.4/Chart.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.511Z","timestamp":1781858677511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/Chart.js/2.9.4/Chart.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 19 Jun 2026 08:44:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Sun, 18 Oct 2020 18:57:15 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 46552\r\nexpires: Wed, 09 Jun 2027 08:44:37 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ysdeb%2BH2F72oKyfbHGWkYzTiKWXpfmjMJMw8aTYuWMrVUyhMOEJ4MUzYuXSTw7K%2B8y0ssMRrU84b4zVIGl2P6xDFEctlzqYlZAmH7Nbk4URYZQLwrplgzYWPULmSsn9OFLLkQkRT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0e140be9fb456a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173077,"size_decoded":47220,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65414)","md5":"9b1ae20c4c7048d6e4a1b2e1aee7fb31","sha1":"a8fd71abfa918872c9f06a068ab5b6dd883dcfe4","sha256":"b7d5093eb11205e1b6a2329321c14b3c617b9c78b6bc473b7f90362a91ff5015","sha512":"77dc6066b559a6699095fa2785052f4d1ee530fb4eecd9193240340013773c709b280e67ab2950ff25a5140c98ea1620745d5087a9d88ae0035b0281e02d964b","ssdeep":"1536:MVbALpXqXw2YlYHHMXnB0Zz7u1W2jnsgQgU67gppZdyS5iz3XE5nSyC9KvGUVBbh:kEttVXa67gbSenSBiRyKcpn5o","tlshash":"c80419cc73c1712686a722a4552f110ee23b7954290b8a84f276d4d66c7ca8f71bfe3d","first_seen":"2023-03-07T15:55:43Z","last_seen":"2026-06-28T23:49:58.631582Z","times_seen":1468,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":3,"connect":21,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mautaudewa.com/lgodewa/favicon.png","fqdn":"mautaudewa.com","domain":"mautaudewa.com","tld":"com"},"ip":{"addr":"198.252.100.226","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.555Z","timestamp":1781858677555,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mautaudewa.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 12:45:49 GMT","end":"Thu, 06 Aug 2026 12:45:48 GMT"},"fingerprint":{"sha1":"FB:3B:A4:23:4E:03:2F:1E:38:65:71:1F:59:0A:38:F5:E4:47:B5:8F","sha256":"8B:43:D9:1F:03:5A:11:32:3D:BE:28:4E:39:03:69:F1:64:50:68:31:48:58:89:9C:23:A4:A8:16:3B:99:FC:5C"}}},"request":{"raw":"GET /lgodewa/favicon.png HTTP/1.1\r\nHost: mautaudewa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 08:44:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 Apr 2024 10:02:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 772\r\ndate: Fri, 19 Jun 2026 08:44:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":772,"size_decoded":1056,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"878a9ee1c24c11a1b3f4f25e80c15982","sha1":"bd4e157124ff3a964b35a17ca33bfd632fa0d70a","sha256":"67ebb58bae86b0aee67406d228c76c8225c87e9aabc6a1ff7b5753f5836a82bf","sha512":"008ce5b2faf7496cbf3db58be41952d2a1c026ba2536b5bd1bcbfb1c70f34872401e2ec3da418a1c086328cb20e4d050abe74fc9a3236f2aa63ecb55073d6f01","ssdeep":"","tlshash":"48017580455e635d4a29f8f34f21a7d2213c724cb3608670f60a960e3bd08ab926917a","first_seen":"2025-02-08T02:10:34.29135Z","last_seen":"2026-06-19T08:45:27.666491Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1032,"timings":{"blocked":200,"dns":0,"connect":131,"send":0,"wait":514,"receive":44,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2ati23fc66y9j.cloudfront.net/ubuycom/homebanner/payment_methods-175368114244.png","fqdn":"d2ati23fc66y9j.cloudfront.net","domain":"d2ati23fc66y9j.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.164.230.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.565Z","timestamp":1781858677565,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /ubuycom/homebanner/payment_methods-175368114244.png HTTP/1.1\r\nHost: d2ati23fc66y9j.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 4034\r\nlast-modified: Mon, 28 Jul 2025 05:39:03 GMT\r\nx-amz-storage-class: REDUCED_REDUNDANCY\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 01 Jun 2026 11:39:39 GMT\r\ncache-control: public, max-age=3888000\r\netag: \"0c5a4522492d4b7a04f12064ba740e6c\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ab37fc2d73bd6e477f5652b6cb140162.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: zzTQtACEqvGLqFDnftdQJOzFudKjtnw92GrJP7TxOvrbnR0KHXzzhw==\r\nage: 3118918\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4034,"size_decoded":4624,"mime_type":"image/png","magic":"PNG image data, 61 x 40, 8-bit/color RGBA, non-interlaced","md5":"0c5a4522492d4b7a04f12064ba740e6c","sha1":"69d504088a6a5323cad7060b7b9d4261e171fc4d","sha256":"c37d9916c146dbd96933d70c9fbbea62d94838bf86b77d0b7548e5b6d6606508","sha512":"3a2f6d2eef802409d2068821f805b77375397212ca19b93b5b482fb2554f4aceb92db356aeb09828615e051ca49f0af9542b2a77d982dab4f99518c515c57d93","ssdeep":"","tlshash":"a1815b8868504197644a53ba2a7feb00073f779943d82d1cdaf9834dd260d292c2ab99","first_seen":"2025-08-12T01:52:57.091138Z","last_seen":"2026-06-28T23:49:58.636513Z","times_seen":556,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":19,"receive":0,"ssl":242},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mautaudewa.com/lgodewa/DLL/iconlink.png","fqdn":"mautaudewa.com","domain":"mautaudewa.com","tld":"com"},"ip":{"addr":"198.252.100.226","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.583Z","timestamp":1781858677583,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mautaudewa.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 12:45:49 GMT","end":"Thu, 06 Aug 2026 12:45:48 GMT"},"fingerprint":{"sha1":"FB:3B:A4:23:4E:03:2F:1E:38:65:71:1F:59:0A:38:F5:E4:47:B5:8F","sha256":"8B:43:D9:1F:03:5A:11:32:3D:BE:28:4E:39:03:69:F1:64:50:68:31:48:58:89:9C:23:A4:A8:16:3B:99:FC:5C"}}},"request":{"raw":"GET /lgodewa/DLL/iconlink.png HTTP/1.1\r\nHost: mautaudewa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 08:44:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 06 Mar 2025 18:48:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 66508\r\ndate: Fri, 19 Jun 2026 08:44:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":66508,"size_decoded":66794,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ac6b07e530253059011a7e3ce0fdc474","sha1":"88219858518db3151499cd880d42072c73f66f5f","sha256":"0ce2232dc6ccd49510382d367d20a6defe0ba756452b6dd61898560901fe963e","sha512":"a44ca3d700904a8eb8ddedf2b5231d09390104e594c690bac8adae680b4fce349b9eda7c447074264566f7106ed69127f7a92ce277c2c4fad375aa00fa63f525","ssdeep":"1536:/hsCmjeazJSJsncw0WBBSE9/DKwvBJCOi5VMRVA3N4wzZ:/lmje7JvWtxbWOi5VMHaKwZ","tlshash":"a653027a1384f3bbcbc5cab25f5e3b76febc4216e226c77021bd87008f445a0544524a","first_seen":"2025-05-28T14:18:23.299859Z","last_seen":"2026-06-19T08:45:27.704776Z","times_seen":82,"resource_available":false,"data":null}},"time_used":1006,"timings":{"blocked":251,"dns":1,"connect":131,"send":0,"wait":442,"receive":44,"ssl":136},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mautaudewa.com/lgodewa/DLL/iconchat.png","fqdn":"mautaudewa.com","domain":"mautaudewa.com","tld":"com"},"ip":{"addr":"198.252.100.226","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.587Z","timestamp":1781858677587,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mautaudewa.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 12:45:49 GMT","end":"Thu, 06 Aug 2026 12:45:48 GMT"},"fingerprint":{"sha1":"FB:3B:A4:23:4E:03:2F:1E:38:65:71:1F:59:0A:38:F5:E4:47:B5:8F","sha256":"8B:43:D9:1F:03:5A:11:32:3D:BE:28:4E:39:03:69:F1:64:50:68:31:48:58:89:9C:23:A4:A8:16:3B:99:FC:5C"}}},"request":{"raw":"GET /lgodewa/DLL/iconchat.png HTTP/1.1\r\nHost: mautaudewa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 08:44:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 20 Jun 2024 23:58:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3930\r\ndate: Fri, 19 Jun 2026 08:44:38 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3930,"size_decoded":4215,"mime_type":"image/png","magic":"PNG image data, 51 x 40, 8-bit/color RGBA, non-interlaced","md5":"a848309e4bce861b9010faba3b7a4dc8","sha1":"7123134067716598635d34838c4846258058f60c","sha256":"7d8383b91d4c05868ed0fb23c2dd5598218db9946cdb1562a1a4ba4051798466","sha512":"0bdca8206a775d171ef6c7ca225d6775af0a3c7780d0018f8371734a2418bf461c695ab0445549970dfc545e9a4da0dfecc1901196f526125a1fb36614f30095","ssdeep":"","tlshash":"a7818d41f9590fe9fc63be25e0092a82cca2c71056901d76f9f2d2f674adfb085c3485","first_seen":"2023-11-20T23:26:46Z","last_seen":"2026-06-19T08:45:27.738243Z","times_seen":620,"resource_available":false,"data":null}},"time_used":965,"timings":{"blocked":397,"dns":0,"connect":0,"send":0,"wait":524,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"veldrive.com/eDXbB5kB/LGODEWA/petir.webp","fqdn":"veldrive.com","domain":"veldrive.com","tld":"com"},"ip":{"addr":"172.67.192.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.589Z","timestamp":1781858677589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"veldrive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 19:52:35 GMT","end":"Wed, 09 Sep 2026 20:52:14 GMT"},"fingerprint":{"sha1":"00:04:56:75:5F:34:FE:C0:C8:D5:FA:B1:07:C3:F6:17:A4:2A:7C:E6","sha256":"F4:3F:85:2E:5D:50:4B:FB:6A:FA:6F:F3:FC:20:8E:B7:7C:70:72:84:9F:91:B4:3A:10:2F:DC:9E:24:E2:6E:6F"}}},"request":{"raw":"GET /eDXbB5kB/LGODEWA/petir.webp HTTP/1.1\r\nHost: veldrive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 08:44:37 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/8.3.31, PleskLin\r\nvary: Sec-Fetch-Mode,Sec-Fetch-Dest,Accept\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: public, max-age=14400, immutable\r\ncontent-disposition: inline; filename=\"petir.webp\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\npriority: u=5,i\r\nlast-modified: Fri, 19 Jun 2026 08:44:37 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lRBNMVQhTgedvPd1UlPPq84zKWEN280KDdvexLkGpNzwg7lxRMVXANVjH2NmGAiV%2FEovgIpqWbfP1kARP%2Fahc4EzI%2Bhg%2BR2YkaAXWBgXZrXE6%2BBJWR3nsSbvdVbmPwg%3D\"}]}\r\ncontent-length: 1269974\r\ncf-ray: a0e140bf9c3f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1269974,"size_decoded":1270919,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d8c2f6350ecc246fa65e97165c1ea6e5","sha1":"714e6b16091faf28fdd812d2efc59111f43893d4","sha256":"f0d30b24c1ad57b9222cf66e27bff3554bb3a09c4067348aea96f6cfd643eaba","sha512":"4710ae9a014621bcc39087c13fa146ecb4753708edea674d306ebc668e2a1ee323c66de2b5d79b475410f300b354926519eab15649e344d096fc01fa52121371","ssdeep":"24576:KlHqX88Ta3TaxXL8gtleJWmitSf+CeCpRgsj0Pml7RFmXPgly2qaX:kKXejahLVtleJTp8Cb10PmlqfOqk","tlshash":"8e25333eb093da4de3982639c074a09599a744105548d6fb13ef79734e87bf1af2be02","first_seen":"2026-04-01T02:45:37.430845Z","last_seen":"2026-06-28T23:49:58.63023Z","times_seen":44,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":206,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3ulwu8fab47va.cloudfront.net/skin/frontend/default/ubuycom-v1/js/lazy.min.js","fqdn":"d3ulwu8fab47va.cloudfront.net","domain":"d3ulwu8fab47va.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.232.126","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.902Z","timestamp":1781858677902,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /skin/frontend/default/ubuycom-v1/js/lazy.min.js HTTP/1.1\r\nHost: d3ulwu8fab47va.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ndate: Sun, 31 May 2026 02:58:59 GMT\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nserver: nginx\r\nlast-modified: Wed, 24 Mar 2021 06:40:33 GMT\r\netag: W/\"605adee1-dae\"\r\nexpires: Wed, 26 May 2027 02:58:59 GMT\r\ncache-control: max-age=31104000, no-store, no-cache, must-revalidate, max-age=0, s-maxage=0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\npermissions-policy: *\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 283a3ebaefd33728d45267e54657c3e2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: cu4m1YqKDNI5yuNZdXduiFRP9I8GdGMmgpcv6daLvv3qyHnhvyYLhg==\r\nage: 1662339\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3502,"size_decoded":2065,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3501)","md5":"b4e69ada334a1263febd73f43dc29427","sha1":"a3b97ac87b375dbfc6fe20b5bdd56b43f5920625","sha256":"f7f1f00c13514a32e4338a1c3d416cdf1d45599341d5b11d257da413b2722d2c","sha512":"7b415b6e849c5a992cc8086a8ccba2b9f99407b69d6c70f22dda806b770fb5357f1e7f7615e20fa4f88efa80cc74889382f647c009a60d1930aea622905a6864","ssdeep":"","tlshash":"507160e932d2763bbd631073923bb246b73f21497a060421123d66c52cbc859c777cae","first_seen":"2023-03-13T16:31:40Z","last_seen":"2026-06-28T23:49:58.635064Z","times_seen":677,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ubuy.com.kh/ubuycom/assets/v5/custom_js/custom.js?v=4.4.74","fqdn":"www.ubuy.com.kh","domain":"ubuy.com.kh","tld":"com.kh"},"ip":{"addr":"13.249.8.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.507Z","timestamp":1781858677507,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ubuy.co.it","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 03 Mar 2026 00:00:00 GMT","end":"Wed, 16 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F0:27:D5:56:86:35:42:48:45:3D:FE:F1:C1:DA:0A:08:CD:7E:75:DE","sha256":"F9:52:49:DC:84:F3:CC:B0:1E:F6:84:49:88:5D:62:D6:7A:09:85:DE:CF:18:4F:17:00:96:DB:B8:04:A4:B5:28"}}},"request":{"raw":"GET /ubuycom/assets/v5/custom_js/custom.js?v=4.4.74 HTTP/1.1\r\nHost: www.ubuy.com.kh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nserver: nginx\r\nlast-modified: Fri, 27 Feb 2026 09:03:38 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 1; mode=block\r\npermissions-policy: *\r\ndate: Tue, 16 Jun 2026 01:36:16 GMT\r\nexpires: Fri, 11 Jun 2027 01:34:09 GMT\r\ncache-control: max-age=31104000, no-store, no-cache, must-revalidate, max-age=0, s-maxage=0\r\netag: W/\"69a15dea-613c\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: 9SGoJp3yMXs1cDygV-vsAoAQ-dPK1xc_Wmkrvqx-8IO0HWqWq7vSfA==\r\nage: 285028\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":24892,"size_decoded":6959,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (326)","md5":"148655c0fe385806d238efada757383b","sha1":"21b8162f2016a46ec7b588427538cf1d5b12012d","sha256":"3424533d1f8cb2a6903d2c6c2c1c81937bdee61ed70b625dc81ec694bb35878c","sha512":"33863cc093773de2b1fd6c8c2801a9f6112b7699d0404523b4d96a0941f94a57baf2044747ea128b28f8a37fd19e9080822ba524e73b64f2010db5c8f87a9141","ssdeep":"768:0GtthkATENPJE5Taux+ygtK+o9HPJAM6+MVs0GeqFOx5WJXa1aOtUO0HltK+h2aC:0GT0Gmn6iz","tlshash":"bab2a61869f314f990bf38a8fb7f669434f62403f14adf00b91d52854f42a7862766be","first_seen":"2026-02-28T06:50:54.91155Z","last_seen":"2026-06-28T23:49:58.650668Z","times_seen":435,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":173,"connect":8,"send":0,"wait":12,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/hls.js@latest","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.514Z","timestamp":1781858677514,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/hls.js@latest HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 08:44:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 163218\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.6.16\r\nx-jsd-version-type: version\r\netag: W/\"8491a-ZjCRa9INGROa9UT7Avg9648hFy4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220105-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 30546\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lsgAPIQL0F91M5f9W7bjLDzB3JsnX1dUSUqU8vHlfEyZqNEo931t5DtSyOR9ghlXGHS%2BOJ0GDBwigVgEUG8r2%2F6sX%2BZtL%2FGf2DkYkqOW7wrtv0VK87CtOirKFoNREmnNSyU%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a0e140be9f33b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":543002,"size_decoded":164320,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1ae7f59caba3da06050e340e3bc6eabe","sha1":"6630916bd20d19139af544fb02f83deb8f21172e","sha256":"442f599c34f103c3355b375a23bdff560592d7117d09a8c847242ea3de2d40e0","sha512":"cc03837752ccfbfe7c49acd7e5f72de69b1e8428a363ad32e6b1b4058233c535e8b7ba2f128d8585f5935749a9e28a8879fdb1ae2ca0e3396b3e59854c370f5e","ssdeep":"6144:ak52zYCo5VplapnQn4RzVt2tFP21Szfmm6faVqKxh7U4StP1BxTFIOMAt2TMQxI4:a259ax7RzT2tFjlVqKxKJd24O9","tlshash":"a6b42aee3695a01683c2b169903f5507633a7d0a284cc12cfa2be9d72d7994db13bf74","first_seen":"2026-04-14T01:38:26.423115Z","last_seen":"2026-06-28T23:49:58.663538Z","times_seen":1078,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":5,"receive":6,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d24epxax9d77vm.cloudfront.net/ubuycom/assets/v5/fonts/poppins-webfont/poppins-bold.woff2","fqdn":"d24epxax9d77vm.cloudfront.net","domain":"d24epxax9d77vm.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.232.180","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.545Z","timestamp":1781858677545,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /ubuycom/assets/v5/fonts/poppins-webfont/poppins-bold.woff2 HTTP/1.1\r\nHost: d24epxax9d77vm.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rspelvicpt.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: font/woff2\r\ncontent-length: 51616\r\ndate: Sun, 07 Jun 2026 12:59:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-expose-headers: Access-Control-Allow-Origin, Access-Control-Allow-Headers\r\nlast-modified: Thu, 27 Feb 2025 11:52:10 GMT\r\netag: \"32b147b48af58b67e4c5fe1546765439\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 41ce182e8f343263845579fafd1af6b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: RBluCdtRzbwxS0CATI1HMC3FcgKKTGxDmZ-UI3c-UsLM6WFKYJ6dSQ==\r\nage: 1021518\r\ncache-control: public, max-age=3888000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":51616,"size_decoded":52316,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51616, version 1.0","md5":"32b147b48af58b67e4c5fe1546765439","sha1":"6be9237a4febb1f034e9d35815dfd7da8e0bd055","sha256":"56c67de04f49e052842e54a80af3a0499773be148cae5008ae141529324e2ac9","sha512":"59e8815dbb8840e73bfcfbabc8514677bf4d9271dda4bd86c603677d443414d69008f271debfda626a5cbc872d1678732a5804faf671f6a2a57c614431fa94f4","ssdeep":"768:G3Fndf2UUuO94aPnvqVZF4kpFLXnyeIlfS1AA/7QwcPVIuTxmUMIo7B7LYZ:sHQuO9DXqHmk7jylfGAAFcPH4I6B7LYZ","tlshash":"3d33018c3ab5748d256666a28ecfb51c2e79e69cc3832c577f48cfe0603d599746cc42","first_seen":"2025-08-12T01:52:57.058809Z","last_seen":"2026-06-28T23:49:58.66463Z","times_seen":649,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":5,"connect":9,"send":0,"wait":11,"receive":1,"ssl":236},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgstore.io/images/2025/03/19/bca.webp","fqdn":"imgstore.io","domain":"imgstore.io","tld":"io"},"ip":{"addr":"172.67.186.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.558Z","timestamp":1781858677558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgstore.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 May 2026 07:28:32 GMT","end":"Mon, 03 Aug 2026 08:26:00 GMT"},"fingerprint":{"sha1":"E6:DF:B7:0C:A6:D6:1E:A7:2B:FE:02:DA:1E:F4:3F:20:6C:2A:A4:E5","sha256":"D0:43:BB:29:9D:FB:A5:AD:2F:32:9A:A2:36:F6:AD:AE:9F:DB:56:4E:5E:29:61:7F:87:3D:68:9F:CF:D2:8E:EF"}}},"request":{"raw":"GET /images/2025/03/19/bca.webp HTTP/1.1\r\nHost: imgstore.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 19 Jun 2026 08:44:37 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 19 Mar 2025 07:01:45 GMT\r\netag: \"300-630ac9826894c\"\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IpYgjUbC7KWFZI3FmFvlWB1YPG6lek7xa1KDB0O18ZzepNB%2FRk57%2BDhYGzSRZ5sH80OEFmz1MK6CeG6RYJXOaM5vxNd9KbeNq3d8wXSKeA0%2BQXob1vQgVvb77883yg%3D%3D\"}]}\r\nage: 6182\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-length: 768\r\ncf-ray: a0e140bf3df95a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":768,"size_decoded":1442,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"405458972fc701b858e7bc3971469270","sha1":"af344433be6e49635145bab8e8711331172dd63b","sha256":"f8b83fa1e35d2a2810cd48975ce3126b917ae9bada8b18ca7def5c10f23bde7b","sha512":"fe25e2739b84dbe056bb64a7f1ddbf7118773b01be3067c33142c6d5d75d1e902fa785781d21d83483fdbd7c0d282865be643399cb83c419b1f412893cfb7268","ssdeep":"","tlshash":"140175180c5440e94c6965251505f796b162effcad8a68a3649f64a21844a0274f2d5f","first_seen":"2025-05-06T11:50:24.024443Z","last_seen":"2026-06-28T23:49:58.625126Z","times_seen":279,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2ati23fc66y9j.cloudfront.net/ubuycom/homebanner/payment_methods-175369014491.png","fqdn":"d2ati23fc66y9j.cloudfront.net","domain":"d2ati23fc66y9j.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.164.230.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.563Z","timestamp":1781858677563,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /ubuycom/homebanner/payment_methods-175369014491.png HTTP/1.1\r\nHost: d2ati23fc66y9j.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1607\r\nlast-modified: Mon, 28 Jul 2025 08:09:05 GMT\r\nx-amz-storage-class: REDUCED_REDUNDANCY\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Thu, 11 Jun 2026 09:21:58 GMT\r\ncache-control: public, max-age=3888000\r\netag: \"89ee412143ff5a518509bb908333d050\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ab37fc2d73bd6e477f5652b6cb140162.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: Q1uA9jUQzNaAtve4YILYddLBkxLfWLxFvHcwmWzYur-bfuAWKLZpKg==\r\nage: 946007\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1607,"size_decoded":2196,"mime_type":"image/png","magic":"PNG image data, 61 x 40, 8-bit/color RGBA, non-interlaced","md5":"89ee412143ff5a518509bb908333d050","sha1":"7641b35b87ea685f41af6152fe8264800f4121aa","sha256":"41d5d03ceeb170744c16898a12efa43067d84d40dd76104a11e22e712134d715","sha512":"34f4889aa0e8bc1b35660ad56fe1afc4375bfff164a1ce81cc82a802b82a81b1c678c4974e845036055922188b210a5a5050e2e31b5b5392a8953419f7943193","ssdeep":"","tlshash":"0b31b5653e4aed3ddb2e3a3bc9c0e8d40e6361e5488085425157b9ad287a4702de31c9","first_seen":"2025-08-12T01:52:57.081853Z","last_seen":"2026-06-28T23:49:58.672846Z","times_seen":556,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":3,"connect":8,"send":0,"wait":9,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2ati23fc66y9j.cloudfront.net/ubuycom/homebanner/payment_methods-175368113152.png","fqdn":"d2ati23fc66y9j.cloudfront.net","domain":"d2ati23fc66y9j.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.164.230.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.564Z","timestamp":1781858677564,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /ubuycom/homebanner/payment_methods-175368113152.png HTTP/1.1\r\nHost: d2ati23fc66y9j.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 4340\r\nlast-modified: Mon, 28 Jul 2025 05:38:52 GMT\r\nx-amz-storage-class: REDUCED_REDUNDANCY\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 08 Jun 2026 03:02:16 GMT\r\ncache-control: public, max-age=3888000\r\netag: \"28b2178b1557fde2a77f33f96bd2bc0a\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ab37fc2d73bd6e477f5652b6cb140162.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: JGzjp_aC8ZY4jn_0uxLOSEWRJbY-1E-ZIzQHS7NvpYxBsQLoVDH7Vg==\r\nage: 2013106\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4340,"size_decoded":4930,"mime_type":"image/png","magic":"PNG image data, 61 x 40, 8-bit/color RGBA, non-interlaced","md5":"28b2178b1557fde2a77f33f96bd2bc0a","sha1":"ae1de6ee9478fb41dbb34fc091aa8f57b5ae2310","sha256":"fa785d18889e3276385e6b987178c247d07bd699bc29da9cda2f6bf33628ad1e","sha512":"1e4ef0f7c1ce7bce5aaa61c470103574db9ac2b7a54acc8d51ca2733b7baa822a9fc485c50c88231e92e7ab55d35653b5f3b8fe9685735cf95e0b4caa1d27d0f","ssdeep":"96:fllcHitlIxv9vk7C1+I4wWHLihk/xiSFjYQD5hDlzV:EIIHUCD4wakSFjTzpJ","tlshash":"ee919e9ca1d1406f208a47f4255fda419b3eebd493856f4cdaeb430ac6209603d7ebb7","first_seen":"2025-08-12T01:52:57.082747Z","last_seen":"2026-06-28T23:49:58.637696Z","times_seen":560,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":18,"receive":0,"ssl":242},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mautaudewa.com/lgodewa/DLL/iconwa.png","fqdn":"mautaudewa.com","domain":"mautaudewa.com","tld":"com"},"ip":{"addr":"198.252.100.226","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.585Z","timestamp":1781858677585,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mautaudewa.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 12:45:49 GMT","end":"Thu, 06 Aug 2026 12:45:48 GMT"},"fingerprint":{"sha1":"FB:3B:A4:23:4E:03:2F:1E:38:65:71:1F:59:0A:38:F5:E4:47:B5:8F","sha256":"8B:43:D9:1F:03:5A:11:32:3D:BE:28:4E:39:03:69:F1:64:50:68:31:48:58:89:9C:23:A4:A8:16:3B:99:FC:5C"}}},"request":{"raw":"GET /lgodewa/DLL/iconwa.png HTTP/1.1\r\nHost: mautaudewa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 08:44:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 21 Mar 2025 19:29:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5734\r\ndate: Fri, 19 Jun 2026 08:44:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5734,"size_decoded":6197,"mime_type":"image/png","magic":"PNG image data, 58 x 58, 8-bit/color RGBA, non-interlaced","md5":"8ddbf7cbe238d0a602b25e538c70ddc3","sha1":"54ee4b067b8158130857797db5aa7aef642226c0","sha256":"9030f97cd3b0d21db00acd2f3a830fbd846cd5ff018b26dc980f933c09ebb12f","sha512":"9ab80731de7b36d777d33278d36b52f166e1b021a1888c0a29dd7133102f6417706a0f0cc519bf663ffa6a299abb5d76208e35e4175900fc493623d837909558","ssdeep":"96:oT5XZGd99Yzfls1Ni71HFrpfChVq5SWLA+pE4eacMnk07TSirRmCYo6UlMG:oPG79Yz8wTp6hcYGY4eLMD7TSitPYo6e","tlshash":"c1c19fc4b49105aa30277c2bd30ad3990a64661013fb8a71d51ca6b2b5e8db8ccc7847","first_seen":"2023-11-30T06:33:31Z","last_seen":"2026-06-19T08:45:27.729459Z","times_seen":253,"resource_available":false,"data":null}},"time_used":699,"timings":{"blocked":437,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/9.0.0/firebase-messaging.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.523Z","timestamp":1781858677523,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /firebasejs/9.0.0/firebase-messaging.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rspelvicpt.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 18310\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 14 Jun 2026 11:49:03 GMT\r\nexpires: Mon, 14 Jun 2027 11:49:03 GMT\r\ncache-control: public, max-age=31536000\r\nage: 420934\r\nlast-modified: Wed, 25 Aug 2021 16:17:58 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":99953,"size_decoded":19199,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF, LF line terminators","md5":"014b9c2c350dfc5e0d31e93c6b60f565","sha1":"eb867c93ce7c85c01c5b779f5a79531bb80ca06c","sha256":"032df504250456bb0daf6e720f10364d8cf4d4c6df1acae1c5a8a20f4c94ceb5","sha512":"658d8f5640d933b459686e3ec8272262db631467e281b4c730e93f898aa741a163a8ee27ef4158c1a2bc9275a9f63cfd17ba84cffed0abb5c84743faa6178c8c","ssdeep":"3072:VUYDnOcL9K2dKOv39iSc6UeQyaInH/8FPHeOEyqb7n26+ijxpqUNNnsIqiHCk1+U:VUYDnOcL9K2dKOv3Lc6UeWInf8FP+OEF","tlshash":"71a3c7a97ea16b3307b257beff1bd446f129d11b250a925439acc2c41f3901683e7ee4","first_seen":"2023-09-23T19:00:17Z","last_seen":"2026-06-28T23:49:58.65434Z","times_seen":597,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":1,"connect":18,"send":0,"wait":19,"receive":4,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mautaudewa.com/lgodewa/logo.gif","fqdn":"mautaudewa.com","domain":"mautaudewa.com","tld":"com"},"ip":{"addr":"198.252.100.226","port":443,"asn":20068,"as":"HAWKHOST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.552Z","timestamp":1781858677552,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mautaudewa.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 12:45:49 GMT","end":"Thu, 06 Aug 2026 12:45:48 GMT"},"fingerprint":{"sha1":"FB:3B:A4:23:4E:03:2F:1E:38:65:71:1F:59:0A:38:F5:E4:47:B5:8F","sha256":"8B:43:D9:1F:03:5A:11:32:3D:BE:28:4E:39:03:69:F1:64:50:68:31:48:58:89:9C:23:A4:A8:16:3B:99:FC:5C"}}},"request":{"raw":"GET /lgodewa/logo.gif HTTP/1.1\r\nHost: mautaudewa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 08:44:38 GMT\r\ncontent-type: image/gif\r\nlast-modified: Sun, 14 Dec 2025 23:00:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 148889\r\ndate: Fri, 19 Jun 2026 08:44:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":148889,"size_decoded":149156,"mime_type":"image/gif","magic":"GIF image data, version 89a, 250 x 65","md5":"34aaa591577eddd8cd98a694c9b9a61b","sha1":"a7bb28c0d64e0ae1668a68b19477f29aeb60102d","sha256":"38c8d86da386e8f7f409ab75274e3683b4640ceea665aa7f90e2e9d4f01fda39","sha512":"38da09fa1ee1249e8fc9278bf0cdcee6aacdb20f2345bb0cbb86159e0c556600beae6096cdbead46019ea3514b25a6a657c9faf29580a97be1e16f31045f9ec4","ssdeep":"3072:02wGLVSVKlq6HNb44PZhhaOm2YXfoslZj+h5v/b22qKp:021VOmNbVPZhhaOVYBDj+hZy2rp","tlshash":"e7e3e0ab8aa4c99efa3338f6f82a16ed49a300dca4f567337551fcd4639522010948f7","first_seen":"2026-06-19T08:45:13.461554Z","last_seen":"2026-06-19T08:45:27.71241Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1365,"timings":{"blocked":-1,"dns":115,"connect":132,"send":0,"wait":131,"receive":288,"ssl":697},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3ulwu8fab47va.cloudfront.net/skin/frontend/default/ubuycom-v1/images/countries-flag/us-store.svg","fqdn":"d3ulwu8fab47va.cloudfront.net","domain":"d3ulwu8fab47va.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.232.126","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rspelvicpt.com/","date":"2026-06-19T08:44:37.553Z","timestamp":1781858677553,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /skin/frontend/default/ubuycom-v1/images/countries-flag/us-store.svg HTTP/1.1\r\nHost: d3ulwu8fab47va.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rspelvicpt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ndate: Mon, 04 May 2026 05:24:56 GMT\r\ncontent-encoding: gzip\r\netag: W/\"61fcbbe1-1127\"\r\nserver: nginx\r\nlast-modified: Fri, 04 Feb 2022 05:38:41 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, no-transform\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 283a3ebaefd33728d45267e54657c3e2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: tH8KP1_0f8tsoEh7qmTkxdwqszTtHsj48yNpfq8XjIDzz0eQbdzAbQ==\r\nage: 3986382\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4391,"size_decoded":3837,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"279007f228939b8c82e14879f033bb21","sha1":"bb799a49e1a4281cf603ffa7d414a67451579c57","sha256":"0e4beba3497ffc66a454afe5cced6332afd1725082520b219e1c240215dfc2b5","sha512":"dacf4620f5468fc7e1e60668d1085217ecdc266c1a7880aad940a7f661516399beec2e7dfa42fcc380c7f6ba89b85a235085521d17b69604dd39ec1a6ba7a694","ssdeep":"96:IH6Gx6bTkXiYTQgXqf403f9q9J4vQeqg37DP3rOP7:vb/GQQqfpf9qrFgrDPaj","tlshash":"60918ed6b38508cda1851f57ef8ac05e58035edbd8aae007f118febc18dd91062f522e","first_seen":"2025-05-15T20:10:07.290888Z","last_seen":"2026-06-28T23:49:58.655932Z","times_seen":525,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}